Leace

24 ms·

181.
by Leace 8y ago
> package manager is probably one of the most attractive features it has over other operating systems. I agree with this and I'm using Linux only for several months, the update experience + software discovery is really something min
182.
by Leace 8y ago
There is a uservoice request for WireGuard: https://protonmail.uservoice.com/forums/284483-feedback/sugg... (but I don't know if Proton looks at these requests, the last response from administrators was in 20
183.
by Leace 8y ago
Wow, I never thought about this but strangely it makes sense. It seems ProtonMail frontend is open-source: https://github.com/ProtonMail/WebClient
184.
by Leace 8y ago
> I almost always struggle with Google's login thing. It's always chosen the wrong person. I'm always having the wrong permissions, and it's infuriating. Places like Slack do this as well. Go and try to log into your
185.
by Leace 8y ago
> I think it would be fair to say that everyone uses WhatsApp and I know what they get, and at this point only XMPP people use XMPP (explicitly) and maybe they get some kind of E2E but who knows which one and what properties that has. Th
186.
GitHub Universe 2018: Token Scanning(help.github.com)
2 points by Leace 8y ago|0 comments
187.
by Leace 8y ago
Even with repeatable builds there are some ways to exploit the system, for example sending a targetted binary to audience that does not check the binaries, or sending a malicious update that exports all your history when you won't noti
188.
by Leace 8y ago
> Could it be that Twitter folks were simply trying to be efficient? That wouldn't explain the User-Agent sniffing (curl gets a proper HTTP redirect).
189.
by Leace 8y ago
Of course for that there is also a standard-compliant way: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Re...
190.
by Leace 8y ago
The messages for offline users are stored on their servers and delivered when they connect. Interesting that you list this as a problem because this worked for ages (given server support for offline messages). Conversations can display a &q
191.
by Leace 8y ago
I think the parent referred to fiddling with OMEMO fingerprints, that a) is automated in "good clients" (Conversations) b) can't be easy and paranoid-secure at the same time. I also run XMPP server for friends and family and
192.
by Leace 8y ago
> if you want a true partner who will find and exploit issues you can get that too. Could you name such a company? This is a perfect opportunity to get to know a good auditor, actually I can't imagine how would one look for a good a
193.
by Leace 8y ago
To add to that, new protocols are designed not to rely on DNSSEC: MTA-STS for MX records (uses HTTPS), Web Key Directory for OpenPGP keys (uses HTTPS). Even old GnuPG deprecates DNS based key lookup: https://lists.gnupg.org/
194.
by Leace 8y ago
Not if "someone [who] can subvert Digicert" is government/state. In this case they have an easier task as governments directly control DNSSEC signing keys, and subverting Digicert and issuing rogue certs would be visible in C
195.
by Leace 8y ago
> As long as DNS is insecure, Security Services can intercept and reroute IP addresses (...) > (...) but who knows what secure websites are signed by Digicert or some other CA? Well, what would be that "secure DNS" in your o
196.
by Leace 8y ago
Computers are not enforcing law, I think this is just a misunderstanding on how blockchain systems work. They rely on consensus of majority of nodes, that are operated by humans. So in effect software written by small team of people is runn
197.
by Leace 8y ago
Ernst & Young also give a positive audit to Startssl/Wosign even though they had problems at the time. For that reason Mozilla "no longer accept audits carried out by Ernst & Young Hong Kong." [0]. [0]: https:/&
198.
by Leace 8y ago
Google will require Gmail add-on developers to pass a security assessment: > Your app will have the remainder of 2019 to complete the assessment. > The assessment fee is paid by the developer and may range from $15,000 to $75,000 (or
199.
Elevating user trust in our API ecosystem(developers.googleblog.com)
54 points by Leace 8y ago|29 comments
200.
by Leace 8y ago
I think the parent meant that Facebook had more features so Google+ didn't really aim at "feature parity".
201.
by Leace 8y ago
This comment made me read it fully, it didn't disappoint.
202.
by Leace 8y ago
> If Intel would just allow an owner to build and flash their own Intel ME version using their own private/public keys then no one would have an issue with that. Note that unless you manufacture the CPU yourself you still cannot be
203.
by Leace 8y ago
Here's the documentation for Kernel's EFI stub: https://www.infradead.org/~mchehab/kernel_docs/unsorted/efi-...
204.
by Leace 8y ago
That's basically what sbupdate [0] for Arch does, it allows you to set your own bitmap for boot logo (after the vendor logo, of course). Another benefit of sbupdate (besides Secure Boot) is that it allows running Linux kernel directly
205.
by Leace 8y ago
> blockchain smart contracts where code is law, more secure, trustworthy and transparent than any individual, bank, government or company. The DAO issue [0] clearly showed that "code is law" doesn't really work. It's
206.
by Leace 8y ago
Good to hear that! Just in case someone is interested in references Wikipedia has them near the text: > OpenJDK is the official reference implementation of Java SE since version 7. Source: https://en.wikipedia.org/wiki&#x
207.
by Leace 8y ago
Are there similar projects but running on DNS-over-HTTPS(/TLS)? That way one could configure only the browser to use this and it would also work on phones that are using LTE (and not adblocking when using home Wi-Fi only) [0]. [0]: ht
208.
by Leace 8y ago
Yes, exactly. Having used Java and many other languages for years Java's strongest point is tooling - there are high quality tools for any aspect of software lifecycle. A lot of them available for free. Of course new languages are quic
209.
by Leace 8y ago
And that's good that package managers ship only openjdk. When I migrated to Linux I didn't know better but as "openjdk" was easier to install than Oracle JDK I used "openjdk". It turns out it works very well, a
210.
by Leace 8y ago
I used it initially but then found out that bare gpg covers most of my needs. For example: - passwords using pass [0] decrypted with Yubikey, and with Password Store [1] on Android (the same repo, the same Yubikey), - FDE with LUKS decrypte

More ›