aborsy

52 ms·

841.
by aborsy 4y ago
Wireguard config is few lines (interface addresses, keys, AllowedIPs, post up and down). Simpler than SSH. You can run it on a cloud instance close to users. Tailscale is still simpler and provides additional features. A small team or start
842.
by aborsy 4y ago
Wireguard is one of the best pieces of software developed in recent years. I’m working hard to replace the last use case of OpenVPN: restrictive networks allowing only egress https. Anywhere else Wireguard all the way! By the way, how does
843.
by aborsy 4y ago
False news!
844.
by aborsy 4y ago
I did at some point, and worried. I VPNed out the for concerns on logging traffic. I searched a bit the cameras, I am not sure if these cameras have resolution high enough to intercept passwords or screen text from few feet. Anyone knows mo
845.
by aborsy 4y ago
Yeah, the thought that Yubikey may not require PIN in some cases is scary. It’s like a GPG key without a password in home directory. Not only it will be useless, but actually harmful. For such reasons, I have been searching for alternatives
846.
by aborsy 4y ago
Looks like there are usability problems https://forums.puri.sm/t/librem-key-practical-usage-scenario... Lacks FIDO, and curve 25519.
847.
by aborsy 4y ago
Thanks for sharing! The main limitation of the Yubikey is that the firmware is closed source and potentially even backdoored. Otherwise the construction and features of Yubikey are pretty good.
848.
by aborsy 4y ago
How do Nitro keys compare with Yubikey 5 NFC? Nitro keys are semi open source. Other than that, any advantage?
849.
by aborsy 4y ago
The industry direction has generally not been good (Covid, recession, backlash against these big companies and ad business, competition escalation etc).
850.
by aborsy 4y ago
You are right. I use KMS sometimes, but that’s server side encryption. KMS protects a master key. It doesn’t protect data encryption keys encrypted with that master key. Those keys are exposed outside HSMs, in places like S3 in RAM or somet
851.
by aborsy 4y ago
I have a question for those familiar with cloud storage. Even I, as an ordinary user, won’t put my data without strong client side encryption in the cloud (even then there is a risk). How come major international (say, European) companies s
852.
Bitwarden PINs can be brute-forced(ambiso.github.io)
441 points by aborsy 4y ago|276 comments
853.
by aborsy 4y ago
The problem with services such as Uber and Airbnb is that the providers adjust the pricing and the level of service to those of established alternatives. Uber and AirBnB are as expensive as Taxis and hotels, without some of the same benefit
854.
by aborsy 4y ago
Is there any benefit to Amazon Linux compared to Ubuntu or other Linux distributions?
855.
by aborsy 4y ago
I don’t think such war will happen. The tensions will be on technological “supremacy”, political and economic isolation, corporate sanctions, and international support, somewhat a Cold War. I also believe China is a peaking (rather than a r
856.
by aborsy 4y ago
Thanks a lot for sharing. I have been very happy with restic. It has worked flawlessly. The only thing missing from what I rather to have is error correction and asymmetric encryption. I might look into Kopia when I have time. I was a bit w
857.
by aborsy 4y ago
Since you have used several backup tools, I wonder which one you recommend.
858.
by aborsy 4y ago
Why would anyone provide their files to a random internet website? It’s a security problem. A lot of formats can be converted locally.
859.
by aborsy 4y ago
Can you mention some of these footguns? I don’t encounter footguns. Once you set up the config and write your scripts, you are good to go! Its functionality and key management are very useful. OpenPGP is also battle tested, well supported.
860.
by aborsy 4y ago
If you flip a bit in some file in a restic or Borg repository, you will lose data (the amount of which depends on the location, possibly the repository is corrupted). With error correction, that bit flip is corrected by the software from pa
861.
by aborsy 4y ago
Aaronson works on quantum complexity theory. He has almost no papers on language or AI (classical one, the one that has produced LLMs in question). He is going to go to OpenAI soon for some sort of position (perhaps PR around quantum ML, th
862.
by aborsy 4y ago
The advantage over Restic and Borg is error correction. Otherwise Restic and Borg do the same and are more tested.
863.
by aborsy 4y ago
Thanks, the post is good! But I have to admit that there is probably no way to do that properly. If Wireguard key is in Yubikey, every packet has to go to Yubikey for encryption and decryption. That doesn’t work! The usual recommendation is
864.
by aborsy 4y ago
Most security keys can’t act as GPG smart cards, other than Yubikeys. So I only buy Yubikeys. An encryption, authentication and sign keg in a Yubikey is very useful. Does anyone know if a Wireguard secret key could be transferred to Yubikey
865.
by aborsy 4y ago
What SFTP client do you use in Linux? The command line isn’t very convenient.
866.
by aborsy 4y ago
There was an issue in my previous post: https://news.ycombinator.com/item?id=35029289 There was no option to delete the post. Hence, I re-submitted with corrected post.
867.
Ask HN: Resources on the management of small teams, and people
1 points by aborsy 4y ago|1 comments
868.
by aborsy 4y ago
Good question: Is OpenBSD more secure than a mainstream Linux distribution, notably Debian, in their default configurations? The code is less, but there are fewer developers too. For example, basic support for disk encryption (an important
869.
by aborsy 4y ago
There is demand for all sorts of crime, like, taking monies from people’s accounts in the banks. Shall we reduce remand for money, or punish thieves? Mexico has a world renowned drug and crime problem. Most of it is internal. The Mexican go
870.
by aborsy 4y ago
EU is clearly worse off as well. Sure, damage to the UK is notable, but that doesn’t imply that EU has won.

More ›