Borealid

20 ms·

271.
by Borealid 3y ago
2042 would be 20mm wide and 42mm long. That's unlikely to be what was meant. It's probably m.2 2242, a shortish but "normal" drive size in the embedded space.
272.
by Borealid 3y ago
If you had said GPL, I would agree with you. But you said "AGPL". AGPL SAAS running on someone else's computer that you can access requires that they provide you with the source code they're running. Barring shenanigans,
273.
by Borealid 3y ago
I don't deny that, I was just pointing out that the threat model in question is someone in control of every DNS record somehow making a change that only affects new SSH connections. Because they control the record that says which KSK i
274.
by Borealid 3y ago
First, the DNSSec keys are TOFU so only the first connection is attack-able by someone in control of DNS zone root keys, and any other connections set off alarm bells. Second, DNS lets you connect to someone else's host and get their p
275.
by Borealid 3y ago
OpenSSH has built-in support for retrieving a key fingerprint over DNSSec-secured DNS. It's disabled by default. If you enable it, the first connection to a new host will say "matching host key fingerprint found in DNS" if DN
276.
by Borealid 3y ago
A scrub can also repair data when using `ncopies` greater than one even outside any mirrors or parity.
277.
by Borealid 3y ago
If you import another module the gil could be re-enabled. Not saying that's what they will do, just what they could.
278.
by Borealid 3y ago
The applet source code I linked above can be configured to use your PIN (not stored on the device) as the keying material to AES256-encrypt all the credentials stored on the trusted element. The PIN may be up to 63 bytes long, and the deriv
279.
by Borealid 3y ago
While I think choosing an open source stack is important, can you imagine how difficult it would be to inject a remote exploit into ARBITRARY hardware your code didn't know in advance?
280.
by Borealid 3y ago
If you're worried about nation-state level attackers you are probably best off with a device that is burned in and can't be upgraded/changed.
281.
by Borealid 3y ago
I believe the Solokey meets your definition. The hardware schematics are open, as is the software running on it. The Precursor is also open hardware and software. If you trust any smartcard at all running a Javacard-compatible operating sys
282.
by Borealid 3y ago
> I would love to see passkeys extended with some sort of proof that the passkey is tied to a specific email address (or other global ID), so you can login without talking to an IdP but also get the benefits mentioned above. "Passke
283.
by Borealid 3y ago
I think you're looking at it the wrong way around. The question isn't whether you have access to the Internet; the question is whether the server on the other end is up. Products that require an Internet connection to function are
284.
by Borealid 3y ago
Perhaps missed in the discussion so far is that the Unity Personal license (the one that's free up to a certain sales volume) will now require an always-on Internet connection to use. That's a change from the past, and the FAQ doe
285.
by Borealid 3y ago
The grandparent likely means Augmented Reality; they may be imagining a strange world where you wear glasses that filter ads out of your vision, and yet those ads are on a computer screen you view rather than right there in the headset bein
286.
by Borealid 3y ago
The systems administrator can use ballooning to give more memory to a VM before launching a new application. This avoids the need to shut down the VM to give it a new role. There is still a benefit to ballooning support even if it's no
287.
by Borealid 3y ago
I think transparent memory encryption effectively defeats RowHammer attacks. The CPU has a key it uses to decrypt memory on access - and that key is never known by the operating system or any software running within it. If you use RowHammer
288.
by Borealid 3y ago
I think this is a misunderstanding of what would be necessary for an LLM to only output truth. Let's imagine there does exist a function for evaluating truth - it takes in a statement and produces whether that statement is "true&q
289.
by Borealid 3y ago
"End to end encryption" can mean either a scheme in which each device has its own key and arranges to trust others, or a scheme in which a key is shared across devices (symmetric). Just because there is only one key doesn't d
290.
by Borealid 4y ago
The parent post makes the unwise choice of using the word "copy" to mean "duplicate". They intend to say "libraries do not distribute duplicates of purchased books; they distribute the originals". Unfortunately
291.
by Borealid 4y ago
If you want to run flexible apps, I think you'd probably want a Javacard like those sold by https://www.smartcardfocus.com/shop/ilp/se~71/java-cards/p/i... , not a special "PGP Card".
292.
by Borealid 4y ago
If you get a smartcard, you can install https://github.com/BryanJacobs/FIDO2Applet on it to make it into a FIDO2 authenticator. You can install a GPG and a PIV applet too. A Yubikey is just a proprietary smartcard with
293.
by Borealid 4y ago
I think there's more to cache locality than prefetching. In an array, consecutive elements will be usually be adjacent in physical memory (excepting page boundaries ), so each cache line load where a cache line is larger than the arra
294.
by Borealid 4y ago
Firefox (only talking about Firefox here) does not use CTAP2, to the best of my knowledge. What you think is "FIDO2" is likely actually U2F/CTAP1. Backwards compatibility with that protocol is part of the FIDO2 spec, but it d
295.
by Borealid 4y ago
sudo, LUKS, and OpenSSH each dynamically link and use Yubico's `libfido2`. That supports FIDO2 well on Linux.
296.
by Borealid 4y ago
I bet you're using U2F/FIDO1. Or, more precisely, I bet you're not using CTAP2. An easy test is to set a PIN on your authenticator, which is an operation that is supported in CTAP2 and unsupported in CTAP1. Does Firefox pro
297.
by Borealid 4y ago
This appears to be an alternative to Yubico's `libfido2`. It is software which OTHER software on your computer can use to connect to a FIDO2 authenticator over Bluetooth, USB, etc. The primary benefit is that Firefox wants Rust-languag
298.
by Borealid 4y ago
Sentence verb: to be Who is being by somebody (the subject): you Who is the subject being by (the object): yourself The grammar in the original sentence is correct, you're just getting confused about which word is the verb. "Repai
299.
by Borealid 4y ago
It's not wholly logical, but I think they might be working under the assumption that IPv6 addresses are usually "more public" (when accidentally not using random privacy addresses?) than NATed IPv4, and that it's more ea
300.
by Borealid 4y ago
No, each web site has its own public/private key pair, they're just derived from the same original seed (plus scoping information like the user and site IDs). You can't determine if two different users are using the same iden

More ›