afarah1

8 ms·

61.
by afarah1 1y ago
The author writes that the encrypted private key (DEK) is susceptible to decryption if the server is compromised because then there are no more limits on incorrect attempts, allowing an attacker to walk the whole key space (of the KEK). But
62.
by afarah1 1y ago
Interesting read, more so than the OP. Thank you.
63.
by afarah1 1y ago
In Brazil it is not uncommon for fans to organize protests, sometimes violent, when a club starts performing poorly due to perceived slack on the players. At the same time, seemingly more pressing political issues often go unnoticed. It&#x2
64.
by afarah1 1y ago
This seems about not being able to sue the company doing extortion (in your words), not Google...
65.
Focus Is Relaxing(afarah.info)
4 points by afarah1 1y ago|0 comments
66.
by afarah1 2y ago
Honest question, why is rate limiting insufficient? Can be done in two lines in nginx which is not just a common web server but also used as an API gateway or proxy. You can rate limit by IP pretty aggressively without affecting human traff
67.
by afarah1 2y ago
Some Brazil government websites/apps have a "virtual queue" system. During traffic surges, such as when government allows people to withdraw part of their unemployment fund for one reason or another, the site/app loads n
68.
by afarah1 2y ago
It's an interesting topic for study. Being the first to launch wasn't the only factor, but certainly an important one - WhatsApp Pay is available today, but it's nowhere near as popular as Pix. That's why I mentioned it.
69.
by afarah1 2y ago
In this case, maybe. But it's not the only option. The old payment system was a bit more private, as payments went through commercial banks and one needed a court order to access transaction history. According to The Economists' a
70.
by afarah1 2y ago
So do most Brazilians, as today that choice is available. It's interesting how being the first to launch contributed to that preference, regardless of the widespread usage of WhatsApp. There are other interesting factors to consider. F
71.
by afarah1 2y ago
WhatsApp Pay is available today in Brazil. The official reason for blocking the launch was missing paperwork, but word on the street at the time was that it was to favor Pix. This is all mentioned in the Retuers article. The reasons for fav
72.
by afarah1 2y ago
WhatsApp is omnipresent for communication in Brazil, and WhatsApp Pay was ready before Pix, but the government blocked the launch to launch Pix first.[1] I rarely see this mentioned. [1] https://www.reuters.com/article/
73.
by afarah1 2y ago
>AI is supposed to be able to [...] make extremely labor intensive things much easier ... as showcased by the cited examples? More so, this derivative work would otherwise be unreachable for regular folk with no artistic talent (maybe fo
74.
by afarah1 2y ago
The cameras are central to the privacy aspect, not the cars. A car can be identified by its plates, while a pedestrian can be identified by their face or other features. Perhaps not today by some legal or technical difficulty, but the infra
75.
by afarah1 2y ago
Yes, web crypto requires trust on the server and is not secure if your threat model includes its compromise (or that of the CA). ProtonMail recognizes this[1] and offers native open source clients. They also try to somewhat reduce the issue
76.
A look at Proton Mail's end-to-end encryption(afarah.info)
5 points by afarah1 2y ago|0 comments
77.
by afarah1 2y ago
See also the "arena allocator", which has been discussed here before: https://nullprogram.com/blog/2023/09/27/ I haven't used it personally yet, but it addresses the same issue with a diff
78.
by afarah1 2y ago
I can see its usefulness as a screening tool, though I can also see downsides similar to what maintainers face with AI vulnerability reporting. It's an imperfect tool attempting to tackle a difficult and important problem. I suppose i
79.
Verifying Firefox Sync privacy claims(afarah.info)
29 points by afarah1 2y ago|2 comments
80.
by afarah1 2y ago
Gentoo offers firefox built from source with various privacy defaults such as disabling telemetry: https://gitweb.gentoo.org/repo/gentoo.git/tree/www-client/fi... It's regularly updated. It also off
81.
by afarah1 2y ago
Reminds me of NetGuard, which uses Android's VPN service (instead of raw TUN) for packet filtering. https://github.com/M66B/NetGuard
82.
by afarah1 2y ago
NetGuard with DROP OUTBOUND policy once again proves helpful. The only app that shows ads that I have on my phone is a PDF scanner, and I don't allow it internet access.
83.
by afarah1 2y ago
I do mostly the same, .md and pandoc, but also mo for templating: https://github.com/tests-always-included/mo . Took just a few minutes to setup. E.g. https://afarah.info/public/blog/awsv3&#x2F
84.
by afarah1 2y ago
>I want software that doesn't send anything to the Internet without some explicit intent first. I too want exactly that, which got me thinking, that's what firewalls are for! DROP OUTBOUND by default, explicit allow per-app. On