Boulth

31 ms·

271.
by Boulth 8y ago
Just out of curiosity but have you tried Chat Secure? https://chatsecure.org/
272.
by Boulth 8y ago
> XMPP is pretty awful for practical communications these days. It can, with enough extensions and clients, do all the things other protocols do, but by and large weird stuff is broken. It is practical if you use modern clients. For exam
273.
by Boulth 8y ago
Actually search is the worst feature of Thunderbird in my opinion and I use Thunderbird for years and think it's great otherwise. Search constantly doesn't find something even if I use the keyword thay was in the email (verified u
274.
by Boulth 8y ago
Wow, I'm glad that this is official now. Is there a list of providers supporting MTA STS? I've seen Gmail has appropriate policy files and records but I've never seen anyone hit mta-sts subdomain on my own domain (meaning no
275.
by Boulth 8y ago
I doubt anyone in power to change this would comment in here and do something about it. Even if, the sunk costs fallacy guarantees they will stick with the new UI.
276.
by Boulth 8y ago
Wow, it's hard to believe they don't support U2F yet. Even smaller providers such as OVH have U2F for a long time.
277.
by Boulth 8y ago
Posting something on Google+ can be a reason for account suspension? Glad I never used that. By the way what an interesting atmosphere for Google on their 20th birthday.
278.
by Boulth 8y ago
It's written by a person that did not give up, survived and analyzed the experience. I read it previously and I highly recommend it, don't worry you won't be depressed after that. On the contrary.
279.
by Boulth 8y ago
Note that Linus has to deal with a lot of random people on the mailing list while Carmack doesn't have this kind of job. Also, I don't think Linus has superiority complex, although I don't know him personally. I guess it&#x27
280.
by Boulth 8y ago
Not to mention that Cloudflare will immidately issue an SSL certificate the moment you move the domain. I was quite surprised by that and although I understand the business reasons getting info from CT logs that someone issued a cert for my
281.
by Boulth 8y ago
I wonder what effect does it have on Signal's Contact Discovery [0] (is this in production yet?). [0]: https://signal.org/blog/private-contact-discovery/
282.
by Boulth 8y ago
Do you have any resources about good estimation? I have good intuition how to approach it and generally I'm close to estimated values but I'd like improve still.
283.
by Boulth 8y ago
The submission is marked as [dead] you need to change your settings to see it (enable showdead).
284.
by Boulth 8y ago
Exactly. Additionally phones can be rooted and that exposes the underlying secret but Yubikeys are tamper resistant.
285.
by Boulth 8y ago
Yes, and it's by design. If you could then one random root key would be sufficient to "restore" all keys (as they are derived from that root key). U2F explicitly doesn't allow that given that the protocol has use counter
286.
by Boulth 8y ago
> BLE solutions are going to work much better for mobile devices than NFC I think Yubico would disagree. According to their research studies BLE devices are harder to use and less robust. Source: https://www.yubico.com/20
287.
by Boulth 8y ago
Very nice. Does it support FIDO2 only or are there other applets (e.g. OpenPGP)?
288.
by Boulth 8y ago
Very cool although I'm missing the explanation of how this is done. Are you using Proxies like here: https://curiosity-driven.org/monads-in-javascript#chain ?
289.
by Boulth 8y ago
As much as I like PureScript (it's like a cleaned up Haskell!) it has some issues, e.g. with performance (as it uses instanceof a lot). There is also this minor thing that that the compiler is not written in PureScript.
290.
by Boulth 8y ago
E2E with OMEMO and HTTP Upload? Check! This looks like a real modern alternative to dated XMPP desktop apps.
291.
by Boulth 8y ago
> Cargo is top notch. I agree Cargo is good but there are some issues that bug me (e.g. no support for docker layers with cargo --dependencies-only, xargo is not merged in, is there a support for custom repositories yet?).
292.
Chrome tests hiding URLs for Google searches(androidpolice.com)
2 points by Boulth 8y ago|0 comments
293.
by Boulth 8y ago
I don't know about your particular device but Yubikeys have remote attestation feature so that you (or anyone else) can validate that a given key was generated on the card, not imported (assuming you trust Yubico). This works only in P
294.
by Boulth 8y ago
The source mentioned in that page has more information: https://www.thevintagenews.com/2018/01/10/operation-vegetari...
295.
by Boulth 8y ago
External key generation could still make sense as Estonian ID card were suspectible to the Infineon bug. One workaround to that bug would be generating the key in software and putting it on the card. (I'm not saying that's the cas
296.
by Boulth 8y ago
> It seems to me that my YubiKey setup (done following https://github.com/drduh/YubiKey-Guide ) is substantially better in almost every respect than the state-provided smartcard. Would you care to explain the differe
297.
GnuPG can now be used to perform notarial acts in the State of Washington(lists.gnupg.org)
711 points by Boulth 8y ago|175 comments
298.
by Boulth 8y ago
I've also had bad luck with ProtonMail support, such as I send them an inquiry and they never reply back. This definitely doesn't build confidence in the service.
299.
by Boulth 8y ago
Yes, but they generally have less comments and most of the comments that they have are from a small number of top users. (Source: I have lobste.rs account and used the site for some time).
300.
by Boulth 8y ago
> I made the statement about using any email client (local or web based) because the post I replied to stated that one needed to use a TUI client like mutt. Wouldn't using HTML email (default in most modern clients and webmails) be

More ›