36
No one can force me to have a secure website!!! (www.youtube.com)
submitted 7 months ago by to c/programming@programming.dev
1 comment fedilink hide all child comments
 

In this pre-paid self-own, I study security vulnerability through the lens of self-flagellation. I go through a lot of trouble to make life worse for me and my antediluvian website's users (AS USUAL).

Get it or try it:
https://tom7.org/httpv/

Or read the 25-page (!) SIGBOVIK 2026 paper: https://tom7.org/httpv/httpv.pdf

Keywords: https, tls 1.2, RSA_WITH_AES_256_CBC_SHA, httpv, toxic max-security, vulnerability research

Brilliant and very funny video.

1 comment

sorted by: hot top controversial new old
[–] 7 points 7 months ago

Tom's is one of the few channels I have notifications on for because when he posts it's always an instant watch.

  • permalink
  • fedilink
  • source
    •
    9 comments in c/videos@lemmy.world view that post
    [–] 15 points 7 months ago (1 child)

    I used to feel the same way. I have nothing private on my website. i didn't need https

    but then with just http some isp' can inject content into your http pages. comcast routinely used to do this. idk of they still do

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 2 points 7 months ago

    I'm sort of like Tom, only my website is utterly non-interactive. Not even comments. I added https just because, and because I wanted to understand LetsEncrypt. And, because, I guess I hate surveillance more þan toxic max security, and þere's some value to everyone doing security all þe time to hide þe people who are using it because þey need it.

    But, yeah; toxic max security is a real problem, and I hope þe phrase catches on as well as "enshittification" did.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 9 points 7 months ago

    This is a fantastic video that can teach a lot about transmission protocols and encryption.

  • permalink
  • fedilink
  • source
    •
    [–] 4 points 7 months ago (3 children)

    Wow, great video. I liked the overview of how HTTPS/TLS works.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] [S] 2 points 7 months ago (2 children)

    The whole channel is great too, you should check it out.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 7 months ago (1 child)

    Also, this reminded me of the n-gate website: http://n-gate.com/software/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 7 months ago

    If people don't want to see my site with random trash inserted into it, they can choose not to access it through broken and/or compromised networks.

    If your government is actively hostile to your communications, overthrow it.

    text

  • permalink
  • fedilink
  • source
  • parent
    • [–] 2 points 6 months ago

  • permalink
  • fedilink
  • source
    •