Seraphus' list with Snapcaster / Snap / Visions of Beyond

http://news.ycombinator.com/item?id=3832269

ZeroBin is a minimalist, opensource online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES. More information on the project page.

benthetenor's list with Snapcaster / Snap / Visions of Beyond

js2

Step 1) Setup OpenVPN. Step 2) Block ssh access using iptables or equivalent from all but the VPN connections and one or two trusted IPs (the latter just in case you need to do OpenVPN maintenance). Back in the day, you would have had a separate network for administration. Simulate that with OpenVPN.


ant5

It's depressing that your post hasn't received more attention. Your control systems should be on a private control network, not exposed to the wide internet.
OpenVPN is capable of providing a much, much smaller attack surface than OpenSSH (see http://news.ycombinator.com/item?id=1665773), and can be run entirely chroot'd and setuid such that even if an attacker does compromise OpenVPN, they can not necessarily gain further access.
There seems to be a prevailing lack of understanding that bad passwords are not the only concern when using SSH. The daemon itself may be vulnerable to exploit (and in the past, it has been).

http://news.ycombinator.com/item?id=3640737

Morris.js is a lightweight library that uses jQuery and Raphaël to make drawing time-series graphs easy.