News for hackers. Stuff that matters.

asstonian

Re:DNSimple DDOS Attack on Monday December 01, 2014 @05:35PM (#8684419)
exactly my thought. the year is 2014 and DNS is least of my problems, since 1999 or something...
Re:DNSimple DDOS Attack on Monday December 01, 2014 @05:19PM (#8684318)
have multiple providers? VPSs aren't expensive and setting up bind9 or bind10 or whatever authoritative name serving daemon isn't rocket science (well, you CAN do it wrong).

my experience shows, that at least 3 servers with 3 different providers is good enough. and "providers" I mean different company, city, datacenter, transit provider...

trusting single entity with anything (even if they say that they have many servers blabla... geologically blabla...)... well, you have situation like this right now :)

Re:Become Estonia’s e-resident on Monday October 06, 2014 @02:47PM (#8417444)
well, lets hope then that Edgar doesn't get along with FSB too well and profit from hacking estonian e-voting stays lower than price of exploit :)

and no matter how big is your budget, kidnapping/blackmailing sysadmins is cheaper :P

Re:Become Estonia’s e-resident on Monday October 06, 2014 @02:31PM (#8417349)
sigh, not this again.

only found this not-very-good response in english to those "experts": http://www.vvk.ee/valimiste-korraldamine/vvk-uudised/vabarii...

but saying "terribly insecure" is more than wrong. yeah, thare are many procedural things which could be better, but technologically estonian e-voting is secure. only serious threat is propaganda.

Re:Become Estonia’s e-resident on Monday October 06, 2014 @02:14PM (#8417248)
EstEID specification - covers all ID-card application versions issued in Estonia: http://www.id.ee/public/TB-SPEC-EstEID-Chip-App-v3_5-2014032...

The Estonian ID-card and Digital Signature Concept: http://www.id.ee/public/The_Estonian_ID_Card_and_Digital_Sig...