3 ms·

TDIL my homebuilt Plex media server is more strongly encrypted than a Flock Camera

by scottLobster 10d ago

bdangubic 10d ago
so is my all-passwords.txt file on my desktop
- antonvs 10d ago
  My passwords are in an encrypted block in a text file that can be unencrypted inline in an Emacs session with a keystroke sequence that looks like a cat just chased a mouse across the keyboard, and that's before entering the decryption password. To access it, an attacker would first have to learn Emacs. Pretty sure that's a post-quantum level of security.
  - dpoloncsak 10d ago
    Obligatory relevant xkcd: https://xkcd.com/538/ https://xkcd.com/538/
    - IAmBroom 10d ago
      It's a forever-fresh reminder about security versus your own government, but for malicious hackers and bots: the physical trip to visit you costs more than half their infrastructure. Encryption matters, even if I would divulge everything long before the wrench appeared.
  - syed_qutub3 10d ago
    [dead]
  - mmooss 10d ago
    They could use an LLM to lookup your HN posts and then to wrangle Emacs. Or just decrypt the text in another application - I doubt Emacs is the only platform for whatever crypto method you use. M-x rot13 ?
    - antonvs 10d ago
      Oh, did I forget to mention the encryption is implemented in Emacs Lisp? At some point, the attackers are just going to have to give up and start hitting me with a wrench. Joke's on them though - I'm an Emacs user, I like pain.
      - mmooss 9d ago
        It's interesting and fun to implement this stuff; I totally agree. Emacs is amazing. I worry people will get the wrong idea about security: The application used for decryption doesn't need to be the same as the one used for encryption, at least not for any serious attacker. That would be 'security through obscurity'. They need the encrypted text; they don't need Emacs. More importantly, no matter who you are, that you implemented the encryption yourself (?) is a major flaw - unless you have a cryptography team that has matured the implementation over a decade or so. Nobody is good enough to do that by themself. As the saying goes, anyone can create an encryption routine that they can't break.
        antonvs 9d ago
        You do realize these are all jokes?
        glaslong 9d ago
        emacs is not a joke emacs is life https://youtu.be/urcL86UpqZc https://youtu.be/urcL86UpqZc
        mmooss 8d ago
        Maybe you do or did really believe those things - lots of people do. There's nothing wrong with it. Saying 'I was joking' is maybe true, maybe it's just using a very common tactic for covering.
  - NonHyloMorph 10d ago
    Nefarious I like it

TDIL my homebuilt Plex media server is more strongly encrypted than a Flock Camera

bdangubic 10d ago

so is my all-passwords.txt file on my desktop

antonvs 10d ago
My passwords are in an encrypted block in a text file that can be unencrypted inline in an Emacs session with a keystroke sequence that looks like a cat just chased a mouse across the keyboard, and that's before entering the decryption password. To access it, an attacker would first have to learn Emacs. Pretty sure that's a post-quantum level of security.
- dpoloncsak 10d ago
  Obligatory relevant xkcd: https://xkcd.com/538/ https://xkcd.com/538/
  - IAmBroom 10d ago
    It's a forever-fresh reminder about security versus your own government, but for malicious hackers and bots: the physical trip to visit you costs more than half their infrastructure. Encryption matters, even if I would divulge everything long before the wrench appeared.
- syed_qutub3 10d ago
  [dead]
- mmooss 10d ago
  They could use an LLM to lookup your HN posts and then to wrangle Emacs. Or just decrypt the text in another application - I doubt Emacs is the only platform for whatever crypto method you use. M-x rot13 ?
  - antonvs 10d ago
    Oh, did I forget to mention the encryption is implemented in Emacs Lisp? At some point, the attackers are just going to have to give up and start hitting me with a wrench. Joke's on them though - I'm an Emacs user, I like pain.
    - mmooss 9d ago
      It's interesting and fun to implement this stuff; I totally agree. Emacs is amazing. I worry people will get the wrong idea about security: The application used for decryption doesn't need to be the same as the one used for encryption, at least not for any serious attacker. That would be 'security through obscurity'. They need the encrypted text; they don't need Emacs. More importantly, no matter who you are, that you implemented the encryption yourself (?) is a major flaw - unless you have a cryptography team that has matured the implementation over a decade or so. Nobody is good enough to do that by themself. As the saying goes, anyone can create an encryption routine that they can't break.
      - antonvs 9d ago
        You do realize these are all jokes?
        glaslong 9d ago
        emacs is not a joke emacs is life https://youtu.be/urcL86UpqZc https://youtu.be/urcL86UpqZc
        mmooss 8d ago
        Maybe you do or did really believe those things - lots of people do. There's nothing wrong with it. Saying 'I was joking' is maybe true, maybe it's just using a very common tactic for covering.
- NonHyloMorph 10d ago
  Nefarious I like it