aborsy

36 ms·

721.
by aborsy 3y ago
People talking about problems in US often fail to objectively compare with the more significant problems that exist in alternative societies. The US system is not flawless (no system is), but show me the results achieved in alternative syst
722.
by aborsy 3y ago
I don’t think so. There are only the above two options. The system mounts the volumes automatically after boot (so nothing needs to be user).
723.
by aborsy 3y ago
DSM 7.2 provides two options for key management: 1. The key is stored locally on the same device as the encrypted data. Synology does not reveal the exact location and format of that key. 2. The key is managed by a remote KMIP server on ano
724.
Volume Encryption in Synology DSM 7.2: LUKS with Questionable Key Management(blog.elcomsoft.com)
17 points by aborsy 3y ago|6 comments
725.
by aborsy 3y ago
Your fingerprint and faceid are in public domain (registered on surfaces, cameras etc). I don’t think they are very secure. It’s only a matter of time that retinas can be scanned too with precision cameras.
726.
by aborsy 3y ago
There is limited support and small community online for Gnuplot. You may find it difficult to fine tune your plot.
727.
by aborsy 3y ago
Tikz and Pgfplots are the highest quality that I’ve seen.
728.
by aborsy 3y ago
Fastmail is the opposite of the ProtonMail and Tutanota in terms of privacy and security. I wonder if it’s much different from the paid version of the Google’s email (where, I suppose, users’ data is not commercialized either). Protonmail u
729.
by aborsy 3y ago
With so many SBCs and mini PCs, what’s the advantage of PI, I wonder. The support for X86 is better and we are talking about 10W power consumption.
730.
by aborsy 3y ago
This phenomenon is just multiplication of the sample size (scale) times a probability (rare).
731.
by aborsy 3y ago
I backup around 2TB with Restic, also tried locally with Borg. The size is nearly the same. Sadly, I can’t even test with Tarsnap! (absurd pricing for 2TB).
732.
by aborsy 3y ago
Tarsnap is undoubtedly expensive, but it also donates to various efforts! Neglecting the pricing, does Tarsnap have any advantage over Restic? Restic also deduplicates, using little data.
733.
by aborsy 3y ago
A mini PC would also give you 64GB and 12 cores. It consumes a lot less power. Other than ECC RAM, any benefit? The mini PC may not be as reliable, but this is not for production use.
734.
by aborsy 3y ago
Protonmail is an app that uses OpenPGP protocol, like signal uses signal protocol. It works out of box. In both cases, both sides need to use the same app.
735.
by aborsy 3y ago
Ubuntu, Fedora and Arch.
736.
by aborsy 3y ago
If you use a hardware key, forward secrecy doesn’t matter.
737.
by aborsy 3y ago
One issue is uptime. Sometimes the power goes off and you need a ups. If you have LUKS enabled, you need to be physically near the server to restart it. If you use VMs, you have to update and maintain the hypervisor. You update it and it ma
738.
by aborsy 3y ago
Don’t forget that, the VMs in Qubes should still be secure. Running ChromeOS Flex (or Android?) or kicksecure is good. Whonix is good too, but it seems it’s for privacy.
739.
by aborsy 3y ago
Snap uses AppArmor, while flatpak uses bubblewrap. You need to have a zero day in these sandboxes, in addition to in the browser. Not so easy! But definitely VMs provide a much better boundary.
740.
by aborsy 3y ago
Browsers have built-in sandboxes, plus sometimes wrapped around stuff like snap.
741.
by aborsy 3y ago
It’s meant to be used in a single-user laptop or desktop.
742.
by aborsy 3y ago
Is QubesOS used in the security companies or community? I know it’s used in Mullvad, and recommended by Snowden (but he isn’t a security specialist). I have been playing with it, and it might work as a daily driver.
743.
by aborsy 3y ago
I don’t hear good comments on the quality of firejail sandbox, compared to flatpak or snap.
744.
by aborsy 3y ago
Median 105k CHF seems low compared to the high cost of living in Switzerland.
745.
by aborsy 3y ago
Yeah, I don’t understand the hate in HN. Both snap and LXD are good container technologies. Snap is better than flatpak in several ways, for example, system programs could be confined too.
746.
by aborsy 3y ago
Wouldn’t AWS collect the same metadata on your traffic “to deliver a better service, fight abuse and etc”? Genuine question, I don’t know. I feel like they are better than any ISP, but still monitor traffic on their networks.
747.
by aborsy 3y ago
ChromeOS takes the Gentoo Linux, and improves its sandboxing and verified boot. Those exist in Linux distributions too, but are not as complete. On the other hand, chromeOS is cloud based, and collects tons of telemetry. ChromeOS is not as
748.
by aborsy 3y ago
But you probably need to use email, and other providers may not be any better. Phone messengers are not a replacement for email. What do cybersec people that you know use?
749.
by aborsy 3y ago
How do you guys deal with deduplication? Say, I back up the home directory in my computer to a NAS. The computer dies at some point. I get a new computer and recover home from a backup (or part of data in the home directory). New data is ad
750.
by aborsy 3y ago
Apple collects less (and has better privacy settings).

More ›