aborsy

49 ms·

931.
by aborsy 4y ago
Handwritten signatures are easy to forge. At this point, they are used mostly for cultural and historical reasons. They will be gradually replaced with digital signatures, once legal support is provided. There are already companies that do
932.
by aborsy 4y ago
Why non-critical ones? iPad and iPhone are probably more secure than desktops.
933.
by aborsy 4y ago
For mobile, there is a Pass app. It syncs from an accessible git server. Maybe they add support for Age.
934.
by aborsy 4y ago
Do you have a link to these anti cryptographic device malware floating around?
935.
by aborsy 4y ago
If you are not careful with QR codes, ios will search your secret in Google automatically!
936.
by aborsy 4y ago
Is this a joke or serious article? 280k is a regular salary of US firms, not a “top talent” salary. Also, all companies do this. Huawei seems to be more like a national insecurity for the west!
937.
by aborsy 4y ago
I guess if you comment out the delete disallowing the action on lock, you can prune the repository once in a while without reindexing? Then pruning could be done once every few months. The egress fees could be high though.
938.
by aborsy 4y ago
Some of these are like alphabets in software, eg, chmod. You need to understand permissions, a bit of bash scripting (copy from examples in their website), etc.
939.
by aborsy 4y ago
These backup software are all incremental, work similarly and take similar times (difference is in details). If you lost locally cached metadata files keeping information on what has changed, they all have to scan the whole source again.
940.
by aborsy 4y ago
Reliability. Borg has been around for a long time, and is far more mature. I wouldn’t trust my backups to Kopia (unless for experimentation).
941.
by aborsy 4y ago
Database and VM snapshot and backup can be tricky. My suggestion is using ZFS.
942.
by aborsy 4y ago
Borg is very good. The V2 repository format will bring in a lot of improvements, particularly in cryptography. Anyone knows when 2.0 will be out of beta, and stable?
943.
by aborsy 4y ago
Paris will drive you mentally insane. Aggressive, dirty (I am sorry, but people are used to outright peeing in public; lots of litter everywhere etc), very expensive (I just check pap.fr, the rental prices are Bay Area level per unit area;
944.
by aborsy 4y ago
I could suggest a small improvement: a diceware password instead of directly taking the output of /dev/urandom. That would allow you to easily and securely exchange the symmetric key by typing it. Also, /dev/urandom inst
945.
by aborsy 4y ago
KeepassXC is a thick client password manager. Password store might be even more secure. If you want “seamless sync of your secrets” by a trusted 3rd party with an online vault, well, then, Bitwarden or 1Password. But the architecture is rou
946.
by aborsy 4y ago
Probably Password store with GPG key on Yubikey.
947.
by aborsy 4y ago
Synology offers ECC in 2023 consumer modes such as 923. Still the experience that synology btrfs provides is nowhere as good as ZFS (due to a lot of limitations).
948.
by aborsy 4y ago
Because a company is not a single entity, rather hundreds or thousands of peoples. Some of them may wish to get your passwords, for instance, a disgruntled employee who might want to publish large number of passwords online (or provide acce
949.
by aborsy 4y ago
You shouldn’t use a weak password in your password manager, and rely on KDF. Even if the server is not hacked, the company could snapshot vaults and crack them offline. KDF is not a substitute for a good password.
950.
by aborsy 4y ago
That’s actually part of the appeal. Passwords are per file. Grabbing a password by a Yubikey touch doesn’t expose other passwords. Per password sandboxing. With keepass, you open the vault most of the time to expose a less important passwor
951.
by aborsy 4y ago
Thunderbird is good. The UI can be improved, but it has support for encryption, etc.
952.
by aborsy 4y ago
Read the tweets, explaining how they generated their password.
953.
by aborsy 4y ago
This claim looks strange. A 16 characters password from all character types can’t be broken. How could hackers break the vault, with end to end encryption and such password?
954.
by aborsy 4y ago
No. When you login to LastPass, your password can be taken if LastPass is compromised. You have to trust that LastPass will not do it. If you login to Dropbox, the master password to your keepass database cannot be stolen. You don’t need to
955.
by aborsy 4y ago
You don’t need any complicated mathematics to plot analytic charts or similar.
956.
by aborsy 4y ago
That’s a good solution. No third party managing your passwords, no Internet access needed, no apps from random developers, a short bash script with standard GPG, allows 2FA.
957.
by aborsy 4y ago
How were the Yahoo emails “hacked”?
958.
by aborsy 4y ago
I have a snap installation of nextcloud. It has self updated for years with no problem. The set up took almost no time. Canonical tests the package before releasing it in their OS. Compared to bare metal and docker installation that were br
959.
by aborsy 4y ago
Some of these EU governments are authoritarian, will capture captive citizens and intercept communications. In addition to surveillance, the quality of the government services has been often low.
960.
by aborsy 4y ago
Get them work for public for 10k (few months by EU standards).

More ›