aborsy

52 ms·

901.
by aborsy 4y ago
What’s the point of replacing one corporation with another (especially if you have to maintain the server yourself)? Host it on cheap hardware at home, with plenty of RAM and CPU. If the power is off for 15min, that doesn’t matter for perso
902.
by aborsy 4y ago
These games have tens of millions of lines of code (often building on top of the older components). They are also written in memory unsafe C++, by developers focused on features and rapid sales, to users that look forward to new features n
903.
by aborsy 4y ago
The discussion in the article is poor. * Yes, symmetric encryption is better than the asymmetric encryption in terms of resistance to brute force attacks. However, as soon as you type in the password in a login page, it will be protected by
904.
by aborsy 4y ago
I assure you, even if the technology one day is fully unsupervised, with minimal involvement from the humans, no carbon emission, etc, people will still publish the exact same articles, form unions, protest, etc: we are abused, there is ine
905.
by aborsy 4y ago
It’s worth mentioning that, although Google Authenticator allows one to export two factor authentication codes, it’s only in the format of a QR code that can be scanned by another phone. It doesn’t provide the option of exporting 2FA codes
906.
by aborsy 4y ago
The bigger problem is, people casually look at the code and find such major vulnerabilities in Tailscale. It doesn’t instill confidence in the rest of the code. This is a security product, and zero days in the code should be taken more seri
907.
by aborsy 4y ago
It’s a bit like saying I don’t have access to keys in my Yubikey. Sure, but I can decrypt data with those keys. If I’m right, S3 sends encrypted data encryption keys to KMS, and KMS sends back the decrypted data encryption keys. So, althoug
908.
by aborsy 4y ago
Default keys don’t allow policies if I recall. No access control.
909.
by aborsy 4y ago
There is huge amount of data in S3 and EC2’s. Other cloud providers such as GCP hold similarly large amounts of data. The governments are no doubt very interested in these gold mines. I am curious if cloud providers such as AWS provide defa
910.
by aborsy 4y ago
AWS has access to the AWS-managed SSE-KMS keys, since AWS manages those keys on behalf of customers. I am wondering if AWS has access to data encrypted with the SSE-CMK keys as well? They state that the SSE-CMK keys reside in tamper-proof F
911.
by aborsy 4y ago
Thanks! Yes, a bit off topic, but it was the closest post in which to ask this question that I had. I have used all three. GnuPlot is clearly fastest, but the documentation and community help are limited. It seems not very flexible either.
912.
by aborsy 4y ago
How does gnuplot compare with Python’s pyplot or Matlab plots in terms of quality and versatility?
913.
by aborsy 4y ago
Quick question. For each country there are a number of servers. If you click on the link for each server, there is someone who administers that server. Should the users trust this administrator that he or she will not modify the original co
914.
by aborsy 4y ago
I wonder if it makes sense from the security perspective to access applications using ssh port forwarding, rather than opening ports for the applications?
915.
by aborsy 4y ago
OPNSense running on a mini pc, with a separate AP for WiFi. OpenWRT is good too.
916.
by aborsy 4y ago
Things don’t look good for Qualcomm. Anyone knows where the company is heading to?
917.
by aborsy 4y ago
PGP is difficult to replace. It’s very well supported, and frankly works sufficiently well (sure, it’s outdated, but so is SSH, TLS etc). There are other software that might be more secure and user friendly, but PGP is also secure. A lot of
918.
by aborsy 4y ago
Interested how it happened.
919.
by aborsy 4y ago
Reading and providing comments on a paper is secretarial work and not valuable respected scientific work. Any undergrad could do it. There are even companies in some countries that do it well. You have to contribute substantively to the act
920.
by aborsy 4y ago
How much ram does that take? I find Firefox problematic after around 10 tabs.
921.
Amazon S3 Encrypts New Objects by Default(aws.amazon.com)
10 points by aborsy 4y ago|0 comments
922.
by aborsy 4y ago
>> if X25519 falls it's unlikely to be due to something that leaves us with any confidence in the similar-but-bigger Ed448 curve. It will have to be a cryptanalysis breakthrough or progress in quantum computers, both of which are
923.
by aborsy 4y ago
Depends on the application. For an online login account, 4 might be enough (not used for anything other than login, eg, not using the same password for encrypting your data in the backend). The are rate limits and brute force blockers (thou
924.
by aborsy 4y ago
I suggest using the non-white space seperator like a -: spiny-approval-avalanche uncouth-tattoo If Bitwarden default is not safe, the software should not be used.
925.
by aborsy 4y ago
Well, the notion of bit as the unit of information, as well as digitization and digital communication, came primarily out of Shannon’s work.
926.
by aborsy 4y ago
You need outgoing 80/443 to regularly update. Blocking other ports doesn’t help much, since, they could get out through 80/443. If the incoming connection is limited to VPN, that’s as good as it gets. You have equal or less securi
927.
by aborsy 4y ago
Password Store and KeepassXC are great. Don’t use “cloud” for password management. They will always be juicy targets.
928.
by aborsy 4y ago
It seemed to me that IDSs catch automated bots or less-important attacks that don’t matter if you spend a day configuring your security. They fail to detect attacks that actually matter. Also lots of false positives and fine tuning. Is that
929.
by aborsy 4y ago
A lot of money is spent on such high profile cases at various levels. Monitoring the person 24/7 costs nothing in comparison (at least, checking that cameras function)!
930.
by aborsy 4y ago
Wireguard, Signal, ZFS.

More ›