aborsy

68 ms·

811.
by aborsy 4y ago
In my opinion, this is one of the most secure options. Pass is a short bash script (very little code). It passes the encryption to a dedicated utility GnuPG (out of which only the AES and cv25519 routines are used). You should use smart car
812.
by aborsy 4y ago
You should take care of yourself. If you are in a vehicle or crime accident, good luck with justice. How do you want to prove anything? I have seen it in the case of accidents. If there is no well portioned camera, you can’t say much. Even
813.
by aborsy 4y ago
I usually share telemetry with open source software that I am happy with. Log reports, crashes, usage, etc, in Linux and so on. It’s a good way to give back, and improve software that is often free. It’s presumably anonymized and safe. I do
814.
by aborsy 4y ago
Yeah, even getting that beast installed on a typical machine may not be straightforward. It has very specific hardware requirements.
815.
by aborsy 4y ago
In some sense, everyone is adjunct. People who work in industry have fixed-term renewable contracts. If job security is to be offered, extend it to other professions as well, as French do (with their CDI contracts). The main point is, profe
816.
by aborsy 4y ago
Honestly, it may not be a bad thing. Tenure was meant to protect the academic freedom, and pursuit of the long-term scientific research. Today, most academics chase money, grants, trends, citations and status. It’s a job like any other, and
817.
by aborsy 4y ago
It feels like that these two blog posts (and the one by lacorta) are the only ones that anti-PGP folks on HN could find on internet. There are far more tutorials on the use of PGP than on its problems (mostly around email encryption, which
818.
by aborsy 4y ago
You use Qubes OS? Otherwise, a lot of ram, CPU and storage might be needed.
819.
by aborsy 4y ago
What if the law enforcement, instead of saying give me your logs, rephrase it slightly and says, start logging this IP address and then give me your logs? They can do whatever they want.
820.
by aborsy 4y ago
Thanks for the info! The construction quality of Yubikeys has been good in my experience. I was just worried about the closed source proprietary firmware in a security product (including the random number generators, where issues were disco
821.
by aborsy 4y ago
Anyone has insights into how trustworthy is Yubico? Their firmware is opaque, not shared outside the company, so is their hardware (important for RNGs etc).
822.
by aborsy 4y ago
You don’t need to merely tend towards. You just can’t brute force a random 20 characters password of the type that he mentioned. Brute force is almost never used, even with half of entropy of such password. His password was intercepted, or
823.
by aborsy 4y ago
Apple does this kind of secrecy well.
824.
by aborsy 4y ago
I am a bit confused about the KMS advice. KMS makes sense for encryption of data in cloud, since the companies already have access to data. It’s usually an additional layer of access control, monitoring and compliance. But it seems a bad p
825.
by aborsy 4y ago
Good point. But what would be the security difference between running a VPN server on a cloud instance, versus running a DERP/relay/coordination server on the same cloud? Sure, the traffic is decrypted on the VPN server in the hub
826.
by aborsy 4y ago
It was very bad. It was bad that servers of a popular password manager with millions of users were compromised. The security controls were bad: a lastpass engineer had access to critical credentials in the same machine that he watches Plex
827.
by aborsy 4y ago
What’s the problem with all devices connecting to a vpn server running somewhere? I mean, the usual access VPN solution. It’s not peer to peer, but you can set up or rent a server near clients, like in the same city.
828.
by aborsy 4y ago
That’s part of the appeal. It allows for sandboxing each password to its own vault essentially (you pay a privacy cost, which I don’t mind anyways, and my disk is encrypted). Gopass does encrypt file names too.
829.
by aborsy 4y ago
It’s much easier to put in a backdoor, or actually implement a small monitoring system, in a closed source operating system. That’s much harder with open source software, not due to technical reasons, but because there is a good chance that
830.
by aborsy 4y ago
On the other hand, MacOS is closed source, so governments and Apple most likely have backdoors. Spyware counts too, when discussing malware.
831.
by aborsy 4y ago
In my opinion, this is one of the most secure options. Pass is a short bash bash script (very little code). It passes the encryption to a dedicated utility GnuPG (out of which only the AES and cv25519 routines are used). You should use smar
832.
by aborsy 4y ago
Look into models reviewed in project tinymicromini from ServeTheHome on YouTube. Is there credible evidence that products from China are not safe? If anything, they are under scrutiny at this point.
833.
by aborsy 4y ago
I thought Protectli boxes are cheaper mini PCs from AliExpress (Qotom and similar boxes). Protectli sets them up (flashes the firmware in the case of coreboot, and installs the OS), and adds support. But otherwise boxes are pretty good.
834.
by aborsy 4y ago
This is not bias. You don’t know in advance what the cause of an event is for sure. People mentioned a probable cause (violent homeless) and it happened to be a less probable one (a tech co-worker), although we still don’t know for sure yet
835.
by aborsy 4y ago
That doesn’t change the facts (some of which stated in the post you linked) about the well known problems with homeless in SF.
836.
by aborsy 4y ago
I wonder if finding a job was easier in 90s and 2000s. It feels like finding employment is getting harder and harder. There is much more specialization required nowadays (so many YOE in exactly the same field and software frameworks), rapid
837.
by aborsy 4y ago
I use like 50 different software heavily. Each of these has like tens of developers. I can donate to some and rotate each month, but how about the rest, and dependencies? There is just so much software there that seems hopeless (although th
838.
by aborsy 4y ago
I use like 50 different software heavily. Each of these has like tens of developers. I can donate to some and rotate each month, but how about the rest, and dependencies?
839.
by aborsy 4y ago
How is it different from magic wormhole?
840.
by aborsy 4y ago
Ubuntu works pretty good on laptop and desktop. I don’t recall any problems for years. The hardware support is excellent, but if occasionally something is not supported, there can be inconveniences. You should check if your distribution wor

More ›