aborsy

30 ms·

631.
by aborsy 3y ago
The largest known broken RSA key length is 829.
632.
by aborsy 3y ago
10. I’m jealous of people commenting here 4-7 hours!
633.
by aborsy 3y ago
That’s a year of their salary. The salary/debt ratio in engineering is lower.
634.
by aborsy 3y ago
Good point actually, the passwords are encrypted with official Bitwarden client apps (unless using web app).
635.
by aborsy 3y ago
There can be more schooling and training in engineering. After undergrad, master’s, PhD, a postdoc or two, one would still make low income. After that, there is a never ending path where one has to constantly chase ever changing technologie
636.
by aborsy 3y ago
Does the code in Vaultwarden mimic the code in the self hosted version of Bitwarden? Or a code audit in Bitwarden has no bearing on vaultwarden?
637.
by aborsy 3y ago
Computers have become powerful over time. Those mini PCs are desktops and computers. They draw little power, can do office tasks and serve as servers.
638.
by aborsy 3y ago
If the laptop has access to the NAS, the attacker could wait til the user logs in with MFA and piggy back that authentication session. MFA is a bummer, not a defense in this case.
639.
by aborsy 3y ago
The government could say, we will send our engineer to push a bad JavaScript code or app update , or implement a backdooor, to a select set of users that we suspect, the encryption can be selectively bypassed or the user’s password be extra
640.
by aborsy 3y ago
It’s interesting that there hasn’t been anyone since to continue developing Tom’s code. I wonder how long the situation might continue. If no one wants to take over in near future, they might have to remove the feature.
641.
by aborsy 3y ago
I use it with snapshots and ZFS send, and so far it’s been fine. Truenas users also may use it. But I’m concerned reading these comments. Anyone else experiencing issues?
642.
by aborsy 3y ago
The US academic system is focused on money, and operates like a for-profit business. Does EU produce better science, I wonder?
643.
by aborsy 3y ago
An off the shelf NAS might be better. Some of them allow installing your own operating system such as TrueNAS. These boxes come with the right form factors, CPU, RAM, number of NICs, power consumption, etc. Solutions such synology provide w
644.
by aborsy 3y ago
69 should be high up!
645.
by aborsy 3y ago
In fact, not everyone will get hacked. There are security mechanisms that could be used to significantly reduce the chance or increase the cost for the attackers, e.g., adding layers, sandboxing etc. The goal is not absolute security, rathe
646.
by aborsy 3y ago
Identity providers, password managers, VPN companies, …. should never get hacked. They make their money from security products. I won’t use them if they are breached. They probably have deeper problems.
647.
by aborsy 3y ago
Yes. The community is just much better. In the area of security, if the software is closed source, I don’t use it. The code has to be open to inspection.
648.
by aborsy 3y ago
I wouldn’t say it’s a joke, rather it’s not perfect. When papers are reviewed, there are going to be a finite number of spots in the journal or conference to be assigned competitively. In good places, the reviewers catch issues in the paper
649.
by aborsy 3y ago
The recently released RPI 5 offers PCIe connectivity I believe.
650.
by aborsy 3y ago
But the selling point of this board is IO not CPU: 2X SATA, ePCIe and 2X NIC. You can run proxmox on it with TrueNAS in RAID1 and pfsense/opnsense in a vm.
651.
by aborsy 3y ago
And 2X SATA ports, although they may not have enough power to drive 2X 3.5” hard drives. You could do 2X 4TB SSD ZFS RAID1.
652.
by aborsy 3y ago
You can’t compare used products with brand new ones. You should compare with a used zimaboard market price.
653.
by aborsy 3y ago
It’s worth mentioning that ChromeOS is one of the most secure operating systems.
654.
by aborsy 3y ago
I have done this and been there before. Dropbox syncs the deltas in LUKS and veracrypt disks. A change of a bit in plaintext changes the blocks that are involved, and only those blocks are updated. But most other sync tools don’t handle it
655.
by aborsy 3y ago
Veracrypt is a disk encryption tool, not for syncing!
656.
by aborsy 3y ago
CryptoRefresh seems to be a proposal for an update to PGP. Like its predecessor 4480BIS, it may not become effective.
657.
by aborsy 3y ago
My understanding is that, TOTP are equally vulnerable to phishing. Hetzner Cloud and Bitwarden use Yubico OTP.
658.
by aborsy 3y ago
The difference is that Bitwarden is webapp, thus serves you code in real time. The server could serve bad JavaScript to a particular user. You have to trust the server. Also, there is a chance of data breach. The 2FA and hardware keys are b
659.
by aborsy 3y ago
Synology Photos. The NAS also backs up to various clouds.
660.
by aborsy 3y ago
There was a deadly security flaw two years ago, that required a protocol breaking fix (done within a week I believe): https://redrocket.club/posts/croc/ But audits finding vulnerabilities are better than no audit

More ›