etherael

64 ms·

511.
by etherael 13y ago
Nothing particularly about Visual Studio, and I know msysgit does work, but it worked absolutely terribly back when I tried it. That wasn't intended to be a mark against Visual Studio in any way, I agree completely it's a very nic
512.
by etherael 13y ago
2 SP3's from OVH would be both cheaper (89*2) and have way, way more bang for the buck than a single weak amazon instance. (E3 1245v2 8 ht cores @ 3.4ghz , 2 x 120GB SSD in soft raid and 32gb memory) If you wanted to run windows on tho
513.
by etherael 13y ago
I hope I'm not the first to break it to you, but it's not just America. That's the nature of the beast, I am constantly confused as to why people are surprised when they centralise all power under the control of a small group
514.
by etherael 13y ago
You don't get BIOS access to low cost dedicated servers on OVH, even though they're dedicated, you can't KVM them. mid to high range ones you can though so that might be a workable solution there. Also, they can still rip the
515.
by etherael 13y ago
Interesting stuff. TRESOR might not be overkill after all.
516.
by etherael 13y ago
got a hash of the boot partition, validate when it comes back up.
517.
by etherael 13y ago
My original statement said "dedicated server". The response said; "virtual server attack, also works with pure hardware machines". The only version of this attack that is relevant to the original statement is one that wo
518.
by etherael 13y ago
small boot partition (basically enough to boot, get network, start ssh), all the actual data and /tmp on encrypted stores.
519.
by etherael 13y ago
I used to be Australian, too. I think of it like trusting gangs in the thieves guild, there might be some gangs that are ethically more admirable than others, but at the end of the day if it comes down to it, the administrative board of the
520.
by etherael 13y ago
That said, even with a dedicated server, I still use gmail, because https://github.com/etherael/phoneme
521.
by etherael 13y ago
> Do you think ovh is any less beholden to GCHQ than Google et al are to the NSA? OVH maybe a little more, because at least they're not under the direct auspice of the most megalomaniacal state in the world and will act according to
522.
by etherael 13y ago
Isn't the pure hardware method for memory snapshots some ridiculously complex mechanism with freezing the memory and quickly transferring it to a reading device? If you're going to pull this, you need to know in advance that it&#x
523.
by etherael 13y ago
I have a dedicated server with encrypted partitions and admin backdoors turned off at ovh. So theoretically they shouldn't be able to access the running system, and if they take it down to access the partitions directly, they're
524.
by etherael 13y ago
http://en.wikipedia.org/wiki/Phoneme
525.
by etherael 13y ago
once again on the "most likely" front, it's possible, sure, but according to their own statements, they do actually delete it when you delete it; http://www.smartplanet.com/blog/thinking-tech/does-82
526.
by etherael 13y ago
We don't know for certain that several governments have archived stored copies of all cloud based email in existence, it's hazy as to what they do and do not have access to, what isn't hazy is that they have the right to dema
527.
by etherael 13y ago
That's why I did this; https://github.com/etherael/phoneme It's not perfect, but I think the first step to widespread crypto adoption is getting people accustomed to the workflow of fully encrypted email. Pho
528.
by etherael 13y ago
Thanks to Mannkind, I figured it out and it's in now in case you were specifically after this.
529.
by etherael 13y ago
Hey just wanted to give my thanks to you on this, using your code as a guide I was able to add the imap append level functionality I had been holding out on due to not wanting to mess with the nightmare of MIME encoding and walking through
530.
by etherael 13y ago
I had a brief look at the GMVault source to see if there were any obvious msg constructing bits, but nothing is jumping out at me, do you happen to know where the message construction is done here?
531.
by etherael 13y ago
Because I haven't yet messed around with parsing just the message body out for encryption to then do an imaplib append with it. That said, I think this is worth doing, so it's currently in progress. I just don't have a ton of
532.
by etherael 13y ago
True, it doesn't protect from every threat model in existence, I've been considering setting up some kind of third party reflector model, but the problem there is that the termination point for the plaintext recipients still requi
533.
by etherael 13y ago
I think I've run into this exact same problem with the delete, it reports that the flag has been set, but post expunge, nothing has happened to the message in question. I'm still looking into it.
534.
by etherael 13y ago
That's exactly what this does, except it puts them back, too.
535.
by etherael 13y ago
That I guess would depend on the algo for the PGP key in question. The default these days is RSA 2048 for gpg, which as far as I know is not vulnerable to known plaintext attacks.
536.
Automatically encrypt your Gmail account(github.com)
90 points by etherael 13y ago|55 comments
537.
by etherael 13y ago
The annoying thing about this defeatist attitude is that people don't realise it's the same thing as being afraid of their massive resources being employed to purchase enormous kettle elements to boil the ocean. As a foreigner wit
538.
by etherael 13y ago
Which might be relevant if recent revelations hadn't reclassified this from noble ideal to hilarious parody and/or epitome of hypocrisy.
539.
by etherael 13y ago
Ansible can do the zeromq stuff anyway, that's what fireball is for.
540.
by etherael 13y ago
If they can compel them to do anything they like, does the technicality of ownership really matter? I used to trust Google but I don't trust any government, sure as hell not the most megalomaniacal and power hungry one on the entire pl

More ›