Nextgrid

37 ms·

691.
by Nextgrid 11mo ago
Being locked into a set of a handful of vendors who offer "secure" sync (of course, this is not a true PKI and actual key material is being synced, meaning it's only as secure as the syncing protocol and your authentication t
692.
by Nextgrid 11mo ago
Keeping the certificate’s key as non-exportable in the HSM means you do not need to revoke it as it cannot be compromised (not permanently at least), once you’ve regained access to the HSM you can assume the bad guys are out. Of course the
693.
by Nextgrid 11mo ago
This is true for passkeys/webauthn/u2f, which is why it’s trash and a completely flawed and not fit for purpose standard (of course the primary purpose is vendor lock-in, not reliable and disaster-proof authentication). But SSH al
694.
by Nextgrid 11mo ago
Any malware capable of exfiltrating a file from your home folder is also capable of calling the export command and tricking you into providing biometrics.
695.
by Nextgrid 11mo ago
In this case you can maintain an offline SSH CA and trust that on the remote machines, and then sign yourself leaf certificates against a non-exportable HSM-backed key. In case of loss you just make a new key and sign a new certificate. O
696.
by Nextgrid 11mo ago
It’s possible but would not bring you any extra security. The advantage of non-exportable, HSM-backed keys is that you are guaranteed that the only way to use that key is to have online access to the HSM, and you can recover from HSM access
697.
by Nextgrid 11mo ago
If you’re operating at the scale this is too cumbersome to do manually surely you already have a configuration management system in place to automate this no?
698.
by Nextgrid 11mo ago
So it just has to wait until you’re about to do a legitimate operation requiring authentication, intercept that to export the key, and cancel the real one with a bogus error (and you’ll just try again without any second thoughts). MacOS has
699.
by Nextgrid 11mo ago
I wonder if it would ever be possible to reach that value-per-dollar in the current economy. Hetzner works because it was built a long time ago when talent was cheap, which it was because the property Ponzi wasn't at the stage where an
700.
by Nextgrid 11mo ago
I wonder if they would top it actually. The need to interact with health insurance mostly scales with age, where as the shittiness of an consumer-grade telco is constant.
701.
by Nextgrid 11mo ago
> consumer computer remains strong Besides techies I'm seeing more and more people not even having a personal computer at all, doing most of their "computing" on their phone and using their work computer for the rare task
702.
by Nextgrid 11mo ago
It's generally a symbiotic relationship though, as the workers grow their own resume while helping their boss grow theirs (and generally the boss is growing his own while helping his boss grow theirs and so on. Sometimes it goes all th
703.
by Nextgrid 11mo ago
Comparing that abomination to Windows 7 is an insult to Windows 7. Microsoft actually used to have good enough, usable/functional design back then.
704.
by Nextgrid 11mo ago
I don't believe unsolicited job ads like that are allowed on HN, you may want to wait for the monthly "Who is Hiring" thread and post there (only 7 days left to wait!). Btw, that sounds like a laughable salary considering UK&
705.
by Nextgrid 11mo ago
> Why product managers overseeing any forum platform have not implemented something easy and obvious as account location metadata is something sociologists need to study. All social platforms of the last decade rely on "engagement&q
706.
by Nextgrid 11mo ago
> What are you upgrading for? So that whoever is doing the upgrade can justify their salary and continued employment.
707.
by Nextgrid 11mo ago
I'd be very surprised if "consumer computer" will be anything but a niche thing in 25 years.
708.
by Nextgrid 11mo ago
Mostly because we're pushing the limits of long-range copper to offer currently-standard bandwidth levels, where as fiber is just getting started (you can go to 100Gbit on the same fiber by just swapping the optics at either end).
709.
by Nextgrid 11mo ago
Edited, my bad, I need to read more carefully.
710.
by Nextgrid 11mo ago
> Paint to forge official documents good enough for them to pass? That's some skill! I was thinking more about signatures on paper documents. There's been many times I had to pretend to print a PDF I just received, sign it and
711.
by Nextgrid 11mo ago
> The risk is letting criminals/politicians correlate all the information on individuals But this is already happening with the current data leaks. In fact if digital cryptographic ID was widespread it would make a lot of identity t
712.
by Nextgrid 11mo ago
I concur on the incompetence (or rather, corruption disguised as incompetence) of the UK gov (and most others for that matter) when it comes to tech, but: > only this time having all our IDs on it? But what's the actual risk? The da
713.
by Nextgrid 11mo ago
> Given all the above forms of id I currently have, what's the point of me having a digital one. The issue is that none of those can be really used online, except the passport if used on an NFC-enabled device. This means services th
714.
by Nextgrid 11mo ago
Someone will get a lot of money* *implementation and maintenance optional and may be subject to additional fees
715.
by Nextgrid 11mo ago
For all the concerns about surveillance/tracking/etc, the only saving grace is that the UK government is too dysfunctional and incompetent to demand and oversee a proper implementation. The digital ID scheme is the latest reason f
716.
by Nextgrid 11mo ago
Hosting and connectivity by itself is a really efficient cash incinerator - the only way out is to use it as a loss leader and then upsell the customers on other services, or sell them the connectivity as part of a greater package (you&#x27
717.
by Nextgrid 11mo ago
Edit: apologies, missed the "a few weeks ago" and didn't realize it was still an ongoing matter. Please disregard. --- Original comment: > then I got the fraudulent bill, and they autopaid themselves the fraudulent bill. A
718.
by Nextgrid 11mo ago
Registered mail with proof of delivery works and is scary for them because it's a legally-admissible paper trail and proof of you trying to resolve the problem in good faith, which will complicate any of their attempts to collect money
719.
by Nextgrid 11mo ago
> if you can get a message in that way, it's possible to circumvent the useless consumer-level support Another option is to simply withhold payment for services non-rendered until the issue is fixed. This is totally fine as long as
720.
by Nextgrid 11mo ago
I find it hard to think of an industry more universally hated than telcos/cable/phone companies so good luck finding a snitch.

More ›