aborsy

57 ms·

961.
by aborsy 4y ago
I am one of those users who have asked, but how can I trust that the Tailscale coordination server will not inject hidden public keys to my network. This feature is a very good step forward in security. I will take a look and if the impleme
962.
by aborsy 4y ago
For important data, we use ZFS in our shop.
963.
by aborsy 4y ago
2.5 Admin
964.
by aborsy 4y ago
You use hardware keys and don’t care about forward secrecy. Private key never leaks. For offline file encryption ( pgp isn’t intended for messaging).
965.
by aborsy 4y ago
ZFS send receive is perfect, except there is almost no ZFS cloud storage on the received side. You have to set up a ZFS server offsite somewhere, like in a friend’s house. Restic is darn good too! It has integration with many cloud storage
966.
by aborsy 4y ago
The private keys are encrypted when synced from one device to another. The key for this encryption seems to be a short PIN or biometrics. Is that true? If yes, the platform provider can easily decrypt the encrypted keys on their servers. If
967.
Introducing passkeys in Chrome(blog.chromium.org)
120 points by aborsy 4y ago|206 comments
968.
by aborsy 4y ago
You are right. I guess I was thinking that none of the FANG provides a “desktop” client app with e2e. But Android already collects a lot data from the device before encrypting.
969.
by aborsy 4y ago
At least, data won’t be harvested for commercial use (as Google does). Apple clearly is leading in security.
970.
by aborsy 4y ago
This is major news. Companies such as Apple and Dropbox are implementing end to end encryption, at least as an option. Was client side scanning implemented finally? Perhaps E2E paves the way to client side scanning? For the hardware key, Ap
971.
by aborsy 4y ago
That $453B had been greedily seized by the real estate owners, often by inheritance. Good that a portion is being released to some of the workers, who no longer pay exorbitant fees.
972.
by aborsy 4y ago
If the computer is compromised or backdoored, it will have access to private keys for websites that I access on that computer, one per each touch, not the database of all private keys. For example, I may not connect my Yubikey to some compu
973.
by aborsy 4y ago
Hardware keys are better. Phone’s operating system is a huge code base. Also, iPhone’s operating system is a closed source proprietary black box.
974.
by aborsy 4y ago
This is true, but not enough to protect your vault. See dvzk reply.
975.
by aborsy 4y ago
No issue here. Gmail seems to have an issue with spam lately.
976.
by aborsy 4y ago
What is currently the best lightweight Linux laptop on market? I hear mixed reviews on System76 construction quality. I run Ubuntu or Fedora on my laptops and desktops. I was looking into MacBook Air, for battery life, weight and keyboard,
977.
by aborsy 4y ago
Just think about it: stork is among top causes of mortality and morbidity in the world. Billions of dollars are poured into such major medical conditions. You think you can improve a stroke patient by video games, and that’s not in the Wiki
978.
by aborsy 4y ago
It’s a bit tricky, because at your level it’s a small world, and news of you applying elsewhere will propagate and may further complicate affairs at the home university! Beginning with working in a startup might be an option. After a year o
979.
by aborsy 4y ago
Syncing with Dropbox worked well for me. When you deal with an adversarial server holding your ciphertexts, you have to be a bit careful with the encryption. But keepass is good, AFAIK. Syncthing improves the security, for instance, just in
980.
by aborsy 4y ago
If an attacker compromises your local machine, they don’t need any password: they just wait for you to enter all required credentials and read the passwords when the database is unlocked. Also, you omitted an important sentence at the end o
981.
by aborsy 4y ago
If the software is compromised, Yubikey won’t help.
982.
by aborsy 4y ago
Not exactly, because the JavaScript code can change and be delivered at ANY time. No code signature verification is involved. An offline password manager is updated a few times a year, and will go through OS repository distribution, with ve
983.
by aborsy 4y ago
The best is to use something like Keepassxc, synced peer to peer by Synchting or Resilio. Nobody will be involved with your passwords. Keepassxc supports Yubikey, so you can lock it down strongly!
984.
by aborsy 4y ago
On iOS there is strongbox and keepassium also.
985.
by aborsy 4y ago
Thank you for the clarification. Will keep that in mind, next time!
986.
by aborsy 4y ago
Another article https://techcrunch.com/2022/11/29/dropbox-acquires-boxcrypto... Dropbox announcement: https://blog.dropbox.com/topics/company/dropbox-to-acquire-b... Looks like Drop
987.
Dropbox acquires Boxcryptor assets to bring zero-knowledge encryption to storage(techcrunch.com)
108 points by aborsy 4y ago|73 comments
988.
by aborsy 4y ago
No. Life was much easier a decade ago.
989.
by aborsy 4y ago
Where do you get 1TB block storage for 3$/month? ZFS does not work with object storage.
990.
by aborsy 4y ago
The universities produced so many data science and ML graduates in the past decade that got me really worried. Swaths of people from all branches of engineering relabeled themselves as Data Scientists.

More ›