akerl_

17 ms·

451.
by akerl_ 10mo ago
So then why do a bunch of these affect Sequoia as well?
452.
by akerl_ 10mo ago
It's not like GPG solves for secure key distribution. GPG keyservers are a mess, and you can't trust their contents anyways unless you have an out of band way to validate the public key. Basically nobody is using web-of-trust for
453.
by akerl_ 10mo ago
> The keys never leave the 1Password store. So you don’t have the keys on the local file system. Keychain and 1Password are doing variants of the same thing here: both store an encrypted vault and then give you credentials by decrypting
454.
by akerl_ 10mo ago
The latest version of a bad standard is still bad. This page is a pretty direct indicator that GPG's foundation is fundamentally broken: you're not going to get to a good outcome trying to renovate the 2nd story.
455.
by akerl_ 10mo ago
> The disk is fully encrypted, and applications should be isolated from one another. For most apps on non-mobile devices, there isn't filesystem isolation between apps. Disk/device-level encryption solves for a totally differen
456.
by akerl_ 10mo ago
I think you’re missing the forest for the trees.
457.
by akerl_ 10mo ago
A huge part of GPG’s purported use case is getting a signed/encrypted/both blob from somebody and using GPG to confirm it’s authentic. This is true for packages you download and for commits with signatures. Handling untrusted inpu
458.
by akerl_ 10mo ago
> Surely IBM & co have a couple of spare developers or spare cash to contribute? A major part of the problem is that GPG’s issues aren’t cash or developer time. It’s fundamentally a bad design for cryptographic usage. It’s so busy tr
459.
by akerl_ 10mo ago
Since when are age or minisign PGP implementations?
460.
by akerl_ 10mo ago
Oh. Being rude and suggesting the devs made (in your opinion) a mistake based on your guess at their actions is not going to be an effective way to get them to elaborate on their legal strategy. Also it’s rude, which is reason enough not to
461.
by akerl_ 10mo ago
Maybe spend less time policing how other people are allowed to act, especially when you’re speculating wildly about the presence or content of communications
462.
by akerl_ 10mo ago
The amount of armchair quarterbacking here is wild.
463.
by akerl_ 10mo ago
It’s like a grizzly bar, but mostly found on the east coast.
464.
by akerl_ 10mo ago
Trying to build a secure system on top of email is a waste of time and energy. Even if you succeeded, it would only be by compromising all the things that make email useful.
465.
by akerl_ 10mo ago
Probably because there are reasonable principles to draw on about withholding access to explicit sexual content from children, but there are no similar principles about trash or propaganda. Trash and propaganda are both pretty clearly withi
466.
by akerl_ 10mo ago
The throttling is "per device", not "per type of device". If you connect 1 travel router and use it to share internet with >1 user, those users are sharing the capped capacity the plane gives to "one connected de
467.
by akerl_ 10mo ago
Can you back that up? Basically nowhere else I'm aware of do we draw that kind of expansive categorization. A gas station isn't a book store if they have one rack of books next to all the snacks. A book store isn't an electro
468.
by akerl_ 10mo ago
The world is very complex. It's effectively impossible to write laws on most topics that perfectly capture all nuance. Which is why we have a judicial system that can look at a law and a situation and say "nope, this law (or this
469.
by akerl_ 10mo ago
This is the difference between standing on a street corner shouting "shit" and taking a shit on a street corner. The court is generally pretty adept at navigating the difference between "a bookstore that has some spicy books&
470.
by akerl_ 10mo ago
What a weird nit to pick. This doesn't really seem to be an issue in any other usage of a grouped noun? Being a co-founder implies that you (and at least one other person) are both founders.
471.
by akerl_ 10mo ago
Why would this kill paid wifi? A bunch of airlines are already switching to free wifi anyways, but the ones that aren't seem unlikely to just kick back as an army of easily-identifiable tech bros attempt to defraud them. It's a bi
472.
by akerl_ 10mo ago
If your takeaway from that comment is that ‘tptacek thinks Flock’s tech is old news and he’s resigned about it, I think you’re going to be in for a treat.
473.
by akerl_ 10mo ago
Those goalposts are really agile. We've moved from "PGP supports RSA. That's enough reason to avoid it." to "We should contrast this with actively valid public keys on a PGP keyserver in 2026 and see which uses mode
474.
by akerl_ 10mo ago
Eh. You don't really get to do this sleight of hand. If you're gonna rag on RSA support as a shibboleth for bad design, it's bad for GPG and bad for age. If it's direct evidence of bad design, age shouldn't have per
475.
by akerl_ 10mo ago
I assume once it's stabilized you'd swap the `go run` for just installing and using a binary, similar to what you're already doing with age.
476.
by akerl_ 10mo ago
We can ensure stability and reliability with RTCs and NTP. The minority here is systems with no RTC that try to perform TLS operations before NTP is operational. The fix is to move NTP earlier in the dependency tree. Or just wait a minute.
477.
by akerl_ 10mo ago
The overwhelming majority of consumer laptops/desktops/etc today have a RTC so that yes, there's a battery keeping a RTC chip awake that keeps the clock reasonably correct after it's been powered off / hibernating &
478.
by akerl_ 10mo ago
This isn't something I've seen; are you running systems w/o an onboard RTC, or with ntpdate doing periodic update, etc etc? The closest I've gotten to this would be something like a Raspberry Pi, but even then NTP is pre
479.
by akerl_ 10mo ago
If you’re drifting enough in 24 hours to affect cert trust, something wonky is up with the system.
480.
by akerl_ 10mo ago
I don't want to speculate too wildly, but I think it may be possible that everybody's life and energy levels and motivation and interests are not tracked on the same fixed linear path. Though I guess it would be nice as somebody i

More ›