Boulth

20 ms·

151.
by Boulth 8y ago
You can write a web hook that'll be called by Github (authenticated with a shared secret) to do that job. Unless I don't understand the use case.
152.
by Boulth 8y ago
> Mostly using it on my Nexus 5. It is great, because using it by NFC with Open Keychain and k9 I do not need to place my private key on the phone. And with TermBot you can use Yubikey to login via SSH. Can come in handy in trouble.
153.
by Boulth 8y ago
> Hopefully these will be useful to others writing Yubikey-based applications. Definitely! HMAC-SHA256 is nice and I was wondering if the TOTP feature of Yubikeys can be (ab)used for anything else that also uses HMAC-SHA256 (e.g. Macaroo
154.
by Boulth 8y ago
> Since nobody can get at the ssh key thats in the Yubikey, a short pin will be fine - at least that's what the system promises. Short pin is fine because after 3 tries the token is locked. On the other hand there are no limits with
155.
by Boulth 8y ago
I think the biggest unforseen effect of these shutdowns is the consumers perception of Google's new products. Google announced gaming service? So what, it will be gone in 2 years tops. Google announced a new product? I don't wan
156.
by Boulth 8y ago
Cloudflare has a nice page for various fun ways to query DNS (via Twitter, Google Sheets, email, etc.): https://developers.cloudflare.com/1.1.1.1/fun-stuff/ It seems DoX would fit in there perfectly!
157.
by Boulth 8y ago
Because Google employees are promoted for releasing stuff not for abstract matters like having a product vision. See also: https://mtlynch.io/why-i-quit-google/
158.
by Boulth 8y ago
> Wow. One would generally not consider exceptions part of a public API Interestingly this happened with Java exception stack traces too. Joshua Bloch remarked that one needs to provide access to all info through standard API, if it&#x27
159.
by Boulth 8y ago
No problem, I've sent you an email.
160.
by Boulth 8y ago
Actually all private keys are stored in there and copied to hardware tokens when needed. No software private key is ever used in my scheme. Having backups of private subkeys is not that important with signing subkeys but is critically impor
161.
by Boulth 8y ago
Yes, that's right I don't use Tor. I could actually run Alpine but Tails has everything I need and it's clearly designed with privacy and security in mind (e.g. Tails is reproducibily built). Actually I have wifi card and har
162.
by Boulth 8y ago
I use it to manage airgapped system for some critical data, such as backup codes and OpenPGP private keys stored in encrypted LUKS volume. I don't run the system daily but definitely on a regular basis (each time GnuPG key needs its ex
163.
by Boulth 8y ago
E4X was far more powerful than JSX. JSX is just a nice syntax for object construction. E4X could additionally query XML (think XPath but different) not to mention support for XML namespaces, etc. I agree with the rest though.
164.
by Boulth 8y ago
No, each server has their own rules what and how will they present content. Usually they accept limited subset of HTML and filter out everything else.
165.
by Boulth 8y ago
> Using JSON you'd have to invent ad-hoc markup on top of JSON That's basically a description of ActivityPub that wraps HTML in JSON!
166.
by Boulth 8y ago
Ha, yes, JSON-LD is RDF in JSON but no one admits that so it doesn't look ancient.
167.
by Boulth 8y ago
Agreed. I would be interested in seeing Samsung DeX reviewed for development as DeX can run regular Ubuntu.
168.
by Boulth 8y ago
Yep. It's interesting that a paid open source app such as Conversations is available on Android and not on iOS. I thought iOS users are more likely to pay for software.
169.
by Boulth 8y ago
The only problem with XMPP is that there is no iOS app that's as good as Conversations.
170.
by Boulth 8y ago
Very nice article. I was pondering the same attack surface when using luks-tpm2 package on Arch that works just like Bitlocker in basic (non PIN) configuration.
171.
by Boulth 8y ago
Actually using Native Messaging it's not that hard. For example Mailvelope (OpenPGP browser extension) uses Native Messaging to talk to locally running GnuPG.
172.
by Boulth 8y ago
> I have more ideas that seem really compelling to me, but, based on how my previous projects have been going, I don’t think I can make any of these ideas happen within the Debian project. Interesting article. I had a chance of asking tw
173.
by Boulth 8y ago
You can start by reading bullet points here: https://publicsuffix.org/ In a nutshell adding your domain there makes the subdomains completely isolated (they can't set cookies for higher level domain). This is a good id
174.
by Boulth 8y ago
I did use DeX for some time and it's definitely good for regular office work. I didn't have a chance to use Linux on Galaxy.
175.
by Boulth 8y ago
Although I don't know the details, I agree grants should be for open source software. For the record OpenPGP.js is largely developed by ProtonMail. Their frontend is also open source.
176.
by Boulth 8y ago
Probably based on Subject name. It'd require a lot of money to verify that though (e.g. buying cert from another CA with the same name).
177.
by Boulth 8y ago
Thanks for taking the time to describe your experience. When you renewed the cert did you use the same key pair? (I'm wondering how does Microsoft correlate reputation).
178.
by Boulth 8y ago
EV code signing certs cost more because they require the private key to be stored exclusively on the hardware token so it's harder to misuse.
179.
by Boulth 8y ago
No problem. If I may suggest something if you have TPM version 2 use sha256 everywhere. And you can expand the PCRs list to cover more stuff. I'm using PCRs 0 to 8 (or 9? Can't check now) so any hardware configuration change is ap
180.
by Boulth 8y ago
Sorry for the late reply but check out https://github.com/electrickite/luks-tpm2 and scencrypt in AUR.

More ›