aborsy

6 ms·

61.
by aborsy 9mo ago
If your devices are in one network like at home, you have all those things with Wireguard too. Devices in home LAN all talk to each other, so you have a mesh network. You need keys for your laptop, phone and remote devices only. Most node
62.
by aborsy 9mo ago
What is the issue with one Wireguard port open? You vpn to home LAN and everything is there. The issue with these VPN companies is that they log data, you have to run an agent running as root, reliance on several other companies too like Id
63.
by aborsy 9mo ago
I think this is a good thing. Social media should be treated a bit like drugs, with regards to both production and consumption.
64.
by aborsy 9mo ago
Would privatizing police help? I have requested theft a number of times, even presented video footage. I was surprised they ask you fill out bureaucratic paperwork and at the end they do nothing, after all these taxes we pay in Europe.
65.
by aborsy 9mo ago
Lumo is not end to end encrypted. The model is in some kind HSM? Are those trusted? If they are, I see some people might be interested.
66.
by aborsy 10mo ago
Tailscale has tailnet lock. Do you still need to trust the coordination server?
67.
by aborsy 10mo ago
Linux desktop is amazing. Coming from Debian, I installed Windows and had to quickly purge it from my hardware! Super bloated, slow, constantly phoned some CC center, automatically connected to OneDrive, … Debian is a breath of fresh air in
68.
by aborsy 10mo ago
If I’m not wrong, a hetzner VM by default has no firewall enabled. If you are coming from providers with different default settings, that might bite you. Containers that you thought were not open to internet have been open all this time. Tw
69.
by aborsy 11mo ago
TMR and co are basically repetition codes, simplest performant least efficient ECC.
70.
by aborsy 11mo ago
I had this question a while ago. Type I hypervisors are not designed to run on laptops. Some features like battery optimization, suspension, WiFi , Bluetooth etc may not work well. And more importantly, the consoles in web interfaces seem t
71.
by aborsy 11mo ago
Linux, particularly Debian.
72.
by aborsy 11mo ago
Canada is liberal and a better option for hosting privacy projects than EU. Every few months a bad proposal comes out of somewhere in EU. The details of this case don’t matter, the tendency is big government control.
73.
by aborsy 11mo ago
No Linux configs, off the shelf NAS boxes come with their own operating systems. You learn a few concepts in initial days. The control plan is simpler than in a windows computer or phone. You configure an offsite backup in the NAS. Obviousl
74.
by aborsy 11mo ago
Sure, but you don’t need to pay a premium for end to end encryption like with proton. You would encrypt (all or part of) your NAS client side with your software of choice (I use restic) and ship it anywhere off site: could be cheapest cloud
75.
by aborsy 11mo ago
Why do you need cloud, if you don’t need public sharing? You can connect to a 2-bay NAS with 20 TB of storage at home with a VPN. Fast, private, secure, practically unlimited storage, under your control. That much storage will be very expen
76.
by aborsy 11mo ago
He was killed in maximum security custody, so an Intel operation.
77.
by aborsy 11mo ago
This guy also used gmail. He doesn’t look clever in IT.
78.
by aborsy 11mo ago
Is it technically possible to have something like Tailscale funnel but with something like Cloudflare Access authentication (at least for some options)? That would be great!!
79.
by aborsy 11mo ago
I had to deal with a malignant covert narcissist (a biological one), which I discovered towards the final stage of the relationship. OMG ! What a trauma! The article is spot on that the projection is at its core. The best advice that I can
80.
by aborsy 11mo ago
What can you prove with it? Ignoring that advertised case a few years ago, what are non-trivial theorems that you can prove with it?
81.
by aborsy 11mo ago
No, LXD’s LXCs. I use it and it’s good. The UID mappings are correctly setup in Ubuntu so the containers run non-privileged by default. I hear Incus, a fork of LXD, is better. It’s used in truenas.
82.
by aborsy 11mo ago
Incus is more comparable to LXD than proxmox. IncusOS is different though. LXD containers also are unprivileged by default.
83.
by aborsy 11mo ago
Which is what I said.
84.
by aborsy 11mo ago
It has both public key and symmetric mode. Even with public key, the file is encrypted in symmetric mode with a random key. The key is encrypted with pubkey. The file format is built around asymmetric cryptography, so maybe going to 256 bit
85.
by aborsy 11mo ago
It’s not because WoT necessarily doesn’t work, but people simply don’t need to verify digital signatures. Whatever needs to be done is done internally by apps. Dark web runs on PGP. People with no technical knowledge use it. Nobody has bro
86.
by aborsy 11mo ago
It uses key files that are 128 bits. With symmetric encryption, it’s equivalent to AES-128, so not really post quantum. It has post quantum plugins, but those are third party plugins!
87.
by aborsy 11mo ago
I’m not sure if this is good advice. The problem is that tech fashions and job market change rapidly every few years. And it takes a long time to specialize in an area. If you’re lucky and happen to be in the right place at the right time,
88.
by aborsy 11mo ago
A question. How do you know what permissions are required by an application, to write a bubblewrap script? In AppArmor, you exercise the application and aa-logprof suggests permissions requested by application. If you know AppArmor, usually
89.
by aborsy 11mo ago
Yeah, I meant the same thing! If you run it under your non-root user, and there is a vulnerability in firejail, the jailed process could run as root, right? Complexity referred to large code base and attack surface. I haven’t tried it mysel
90.
by aborsy 11mo ago
The situation with firejail is different. There are a lot of profiles, and they are easier to customize and write. But firejail needs root privilege, so there are arguments that it may actually reduce the security, because even though it sa

More ›