Boulth

20 ms·

181.
by Boulth 8y ago
I've seen this episode and can confirm it's excellent (as well as the rest of the series that will resume in March 2019).
182.
by Boulth 8y ago
I must say I am impressed by their level of professionalism and I did setup my own GPG decrypted (with Yubikey) and TPM decrypted LUKS scripts on Arch.
183.
by Boulth 8y ago
The point is anyone can encrypt to your public key, thus, anyone could create a "backup". They won't be able to decrypt it, only you, but still having a backup that you think was created by you but wasn't can be problema
184.
by Boulth 8y ago
Maybe to ensure that it was you that created the backup? It may be nice when restoring the backup.
185.
by Boulth 8y ago
Proofs are still stored on Keybase servers so if Keybase goes bust tomorrow it's all gone. For the record there is a way to encode Keybase-like proofs in plain OpenPGP: https://tools.ietf.org/html/draft-vb-openpgp-
186.
by Boulth 8y ago
> Are there any examples of using yubikeys to store your libsodium keys? I doubt it. Yubikey doesn't just store private keys in flash memory, they are using tamper resistant element. And only a couple of algorithms are supported.
187.
by Boulth 8y ago
OpenPGP is actually adding stuff. Quite a lot of people use Curve 25519 PGP keys already (e.g. GnuPG and ProtonMail support it).
188.
by Boulth 8y ago
I'm also interested in it. For the record there is GpgOL plugin installed with gpg4win.
189.
by Boulth 8y ago
Yes, WKD works well for people in control of their own domain (e.g. kernel.org uses it). For other people there is also https://autocrypt.org/
190.
by Boulth 8y ago
Not only backtracking but also other control flow structures: https://curiosity-driven.org/continuations#flow-structures
191.
by Boulth 8y ago
aTalk on Android (XMPP client) works well for voice/video chat. It looks ugly though :)
192.
by Boulth 8y ago
Pasting the cert here https://lapo.it/asn1js/ can give a lot of pointers to what is in there.
193.
Sr.ht becomes Sourcehut(sourcehut.org)
289 points by Boulth 8y ago|79 comments
194.
by Boulth 8y ago
Maybe the parent uses jmps for coroutine style programming?
195.
by Boulth 8y ago
Haha, I was just going to ask about Bluetooth. I've got 9350 and while single device Bluetooth works quite well (okay, today it broke but it usually works) connecting Bluetooth headphones and a Bluetooth mouse at the same time makes th
196.
by Boulth 8y ago
CT monitors are primarily for site operators not end users. When site operators spot a rouge cert issuance they can clarify that and ultimately get the cert revoked.
197.
by Boulth 8y ago
Or, an alternative approach that also works in Chrome: use DuckDuckGo. Actually early AMP, that was extremely broken, pushed me out of Google completely.
198.
by Boulth 8y ago
I was just going to ask the same question about WKD support. Having control over key distribution in an organization is a very important factor for me.
199.
by Boulth 8y ago
>> Google doesnt care about it, they are totally OK with it > Google hasn't said they don't care about it, where did you see any of that ? Check this out: > The Recaptcha team is aware of this attack vector, and have c
200.
by Boulth 8y ago
I'm also running PeP-free mode and I'm satisfied with it. I'm thinking that maybe after initial configuration it just works so the problem is largely setup. As for keyservers even GnuPG is diminishing their role. Web Key Dire
201.
by Boulth 8y ago
Actually Enigmail couldn't generate user's key (I wanted to do a clean install and see the provisioning process for normal users) and later got stuck on some silly, completely unnecessary step (generating revocation certificate).
202.
by Boulth 8y ago
Agreed. I used Mailpile for a while, a lot of interesting ideas there. As for PGP Thunderbird could use one nice idea that the browser extension Mailvelope uses: have bundled OpenPGP implementation in JavaScript (OpenPGP.js) for most users
203.
by Boulth 8y ago
Not the OP but help pages seem to suggest Maildir support in TB is not necessarily production quality: > Maildir is disabled by default because there are still many bugs. It is not 100% ready for users. Source: https://support
204.
by Boulth 8y ago
Native PGP is something I'd be very happy to see. Enigmail is needlessly complex with long setup wizards that frequently fail and a lot of legacy code supported for old distros. Services such as ProtonMail show that focusing on modern
205.
by Boulth 8y ago
I agree. I got the first Sorcery game for free when it was available and frankly I didn't imagine me playing it (text only game didn't look good) but after 15 minutes I was completely immersed. I bought the rest of the series and
206.
by Boulth 8y ago
"Must-staple"
207.
by Boulth 8y ago
Excellent post and comparison with Arch, thank you!
208.
by Boulth 8y ago
Macaroons have their own issues, see my previous comment here: https://news.ycombinator.com/item?id=17879403 If you've got questions about them I'm happy to answer.
209.
by Boulth 8y ago
And because it's using GPG one can easily have secrets unlocked with a Yubikey and only when the blinking button is touched. On a PC and Android both using the same Yubikey token. For me the combination of features in pass is just perf
210.
by Boulth 8y ago
Search for TOTP or HOTP, basically one time passwords, usually shown to end users as QR codes stored in an authenticator on a mobile phone.

More ›