KAMSPioneer

8 ms·

61.
by KAMSPioneer 2y ago
A strawman??? It's _word for word_ the suggestion I was responding to in my original comment, how is that a strawman???
62.
by KAMSPioneer 2y ago
And yet syncing an encrypted private key is still easier and more secure than syncing (via the same mechanism e.g. Keepass) a 30-character random password.
63.
by KAMSPioneer 2y ago
I know that, but "public keys" is long enough on mobile without typing "public user-authentication keys." Anyway, I think it is reasonable to assume that if you're using the "escape hatch" as mentioned by
64.
by KAMSPioneer 2y ago
One difference is that MitM attacks can capture your password, thereby giving persistent access to at least that system (more, if you reuse passwords). With public keys, this is not possible. The worst case of credential theft from MitM wou
65.
by KAMSPioneer 2y ago
Well once you remove the set of users who want Windows Active Directory, then yes, I agree. :)
66.
by KAMSPioneer 2y ago
There are still advantages to public key auth. Sibling comment mentioned resource use, but also consider ease of use: are you setting a random 64-character password on every machine that has SSH server installed? Would it not be easier to g
67.
by KAMSPioneer 2y ago
I use both PKCS#11 and OpenPGP SSH keys and in my opinion, PKCS#11 is a better user experience if you don't also require PGP functionality. Especially if you're supporting MaxOS clients as you can just use Secretive[0]. As you say
68.
by KAMSPioneer 2y ago
I'm a sysadmin and I have no idea what you're referring to. Yeah there are guys in my field who are happy to overreach in terms of data access, but I'm sure we can come up with some anecdotes about devs over-harvesting data o
69.
ESO network affected by cyber incident(eso.org)
2 points by KAMSPioneer 2y ago|0 comments
70.
by KAMSPioneer 2y ago
> security is about creating speedbumps, not bullet proof vests I actually believe that bulletproof vests are a good security analogue as well: they are typically only rated for certain cartridges/projectiles, only guaranteed to sto
71.
by KAMSPioneer 2y ago
Of course not everyone understands English perfectly. Even among native speakers it's easy to misunderstand (especially on a web forum). I wasn't making a judgement. Anyway, it was pointed out that the same user that said "de
72.
by KAMSPioneer 2y ago
As an outside observer, it seems reasonable to assume asveikau missed the figurative language. The original phrase used was "dead in the water," which as noted does not imply death; however the response alleged that death was (rud
73.
by KAMSPioneer 3y ago
That...sounds like a market segment you've just discovered for Oxide.
74.
by KAMSPioneer 3y ago
I agree that it seems pretty reasonable (I've never built an ISO myself, however). And they do have programs for nonprofits, etc. I believe. Similar model to Xen Orchestra, as I understand it. (Which is another product I've never
75.
by KAMSPioneer 3y ago
Sounds exactly like VyOS, and GP said it is a fork of Vyatta, which fits the bill. I've not used VyOS in recent years, but their pricing structure does seem designed to convert users to customers.
76.
by KAMSPioneer 3y ago
I'll chime in to say that I have started deploying podman over Docker where it's frictionless at $job as well. I'd say half (or more) of my new container deploys are podman. At home I use only podman because my tinkering does
77.
by KAMSPioneer 3y ago
Absolutely capable of projecting force, yes. But the commenter above pointed out that it would be an big risk for a country with two (they said one, but it's two very small) ACs to send one of them into a war zone instead of trade ship
78.
by KAMSPioneer 3y ago
To be clear, the displacement of the aircraft carriers of the Italian navy are 30k tonnes and 14k tonnes. US carriers are about 100k tonnes, UK about 65k tonnes. I don't think they're really comparable, as US amphibious assault sh
79.
by KAMSPioneer 3y ago
Sort of a corollary to your point: if an admin sets up a website and verifies with Firefox (or Chromium, whatever), and then later the server needs to communicate with...basically any tool that speaks HTTPS but isn't a web browser, the
80.
by KAMSPioneer 3y ago
I mean, it didn't affect the _entire_ country. I am in Spain and didn't notice (neither did anyone I know) until I saw the news. Logically it should only affect Orange customers, maybe transiting traffic from other ISPs?
81.
by KAMSPioneer 3y ago
It's the same, but you disable the timer instead of the service. `sudo systemctl stop unattended-upgrades.timer`
82.
by KAMSPioneer 3y ago
Just installed Onyx yesterday on my work machine! So far so good, some niggles as always (it's my first time using Budgie), but overall fairly usable and easy.
83.
by KAMSPioneer 3y ago
I am living in Andalucía (originally US) and have had the _exact_ same experience. I have gotten used to it...except for when my upstairs neighbors decide to make a glorious racket every night at exactly midnight, right when I'm trying
84.
by KAMSPioneer 3y ago
It's already possible (and quite easy) to assign a static IPv6 for incoming traffic e.g. webserver, then configure a private and constantly rotating IPv6 for all outgoing traffic.
85.
by KAMSPioneer 3y ago
I have a homelab that is mostly pets (one or two servers that do a job, e.g. one DNS server, one VPN server), and I absolutely spend my time mucking about with Ansible to set them up. But it's awesome when I need to upgrade a server to
86.
by KAMSPioneer 3y ago
Your parent comment said he was assuming a PIN was used to seal the TPM, and the attacking the link would have failed if the TPM had a PIN set, no? I agree though that using a TPM without a PIN gives little in the way of data protection. No
87.
by KAMSPioneer 3y ago
I understand that Movistar, the largest Spanish ISP, is currently deploying IPv6 in beta at the moment. I expect that will trickle down to the various resellers of Movistar's network shortly after. Hopefully that will get that 98% down
88.
by KAMSPioneer 3y ago
Is it? My point is twofold: 1) The scenario proposed seems...outlandish. I could argue for a host of provisions in law or the Constitution based on the possibility of widespread development of bulletproof skin, but I fail to see the utility
89.
by KAMSPioneer 3y ago
Sure it would. Ohhh, ya got me. But this thread is about how the cure is often worse than the disease with prohibition. See: 18th Amendment, War on Drugs. Concocting a hypothetical scenario where the drug is Disney-villian evil and enforcem
90.
by KAMSPioneer 3y ago
Why? Shooting people is already super illegal. You could also easily just slap liability to the seller of known harmful substances (see the sibling to your comment) or enforce warning labels as on tobacco products (eg "this product mak

More ›