georgyo

63 ms·

661.
by georgyo 8y ago
I don't know how much more ruggerized you need it. It's already pretty dam strong. I've had a neo on my keys for years and it shows no sign of ware. They already are water proof and can be run over by a car. So unless you wan
662.
by georgyo 8y ago
Also the highest ECC is still p384 and does not support p521. However it is still really nice that it support rsa 4096 over NFC now.
663.
by georgyo 8y ago
Ipfs is very cool, but is not anonymous nor is a goal of the project.
664.
by georgyo 8y ago
I don't disagree with it limiting choice and freedom, but you are much more insecure. It doesn't matter how good your encryption or password is if I can change your bootloader to have a program steal that password or read the encr
665.
by georgyo 8y ago
I use my real name on the internet, but there are lots of good reasons not to use real names. Like someone reaching out for advise on what to do about a sensitive subject that there are not ready for the rest of the world to know. But that
666.
by georgyo 8y ago
They have a lot of power, and plugging something like a thunderbolt device in can load an option ROM that runs there [1]. It is one of the reasons linuxboot is such an important project [2]. There is a great talk on why linuxboot is require
667.
by georgyo 8y ago
There are tlds that are unsigned, and any domains that are unsigned. You can not verify the entire chain, because it is possible that the domain you are looking up is infact unsigned. You can maybe pin some of the tld keys, but you can&#x27
668.
by georgyo 8y ago
Ipns lookups take over a minute: https://github.com/ipfs/go-ipfs/issues/3860 Dnssec is just as vulnerable to mitm attacks, because you just strip the dnssec responses and the client has no way to know if it t
669.
by georgyo 8y ago
https://en.m.wikipedia.org/wiki/Coke_(fuel)
670.
by georgyo 8y ago
https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp... Which should be in ntpsec eventually. https://www.ntpsec.org/plans.html
671.
by georgyo 8y ago
The bathroom connects two rooms where you don't know or trust the other room. Without a lock you have no way to prevent them coming into your room when you are not there. Still that is some great out of the box thinking.
672.
by georgyo 8y ago
Do you have some before and after pictures?
673.
by georgyo 8y ago
People are fanatic about using tools written in a language they like. If people think that a program written in C will be faster than a program written in Python then it is a feature to them that may or may not be valid. However modern lang
674.
by georgyo 8y ago
Sure, but the major difference is that those packages are for everything on your system. Dependencies are often added very carefully. In the node case it is not uncommon for a small app to include 50 small packages, and then those packages
675.
by georgyo 8y ago
Many people here are saying that the problem had been in the code base for years, was super obvious, and that just no one looked at the code. I think that it is much more relevant that the node community does do many micro packages, that it
676.
by georgyo 8y ago
I think his point is that more than him should feel consequences, not just the slap on the wrist for the CEO.
677.
by georgyo 8y ago
I have always had to use -nn to not translate ports. If what you say is true, it must be recent.
678.
by georgyo 8y ago
I have updated that comment, a normal loop exit is not the same as a break. I can understand how it can be confusing, but the inverse would not make any sense. Another way to look at a for loop is a fancy while loop that sets a variable by
679.
by georgyo 8y ago
This is the correct place for it to do so. Break skips the check entirely. If the for loop exits normally, the condition was false.
680.
by georgyo 8y ago
The else makes perfect sense. The for loop keeps going as long as the condition is true. When the condition is false, it exits the loop without breaking. Else acts on the condition being false.
681.
by georgyo 8y ago
Finally, a company not using this attack as a way to say PGP is fully broken and you should be using their walled garden instead of PGP. I don't even understand why efail is getting so much publicity. The attack requires privileges acc
682.
by georgyo 8y ago
Still reading the comments, but is anyone actually saying passwords are more secure in general? I think most people are saying that they get locked out of their account if they lose the token. How do you validate your account is your accoun
683.
by georgyo 9y ago
I suppose we could pack hundreds of non consenting humans so they are always touching each other on a metal grates for flooring and no sunshine, no access to bathrooms, and no ability to move around. No one would complain about that. /
684.
by georgyo 9y ago
I understand the point you are trying to make, but a RSA key is a RSA key. The only benefit of gpg here is for things longer than a password. The script is encrypting the password directly with the RSA key. The performance and security will
685.
by georgyo 9y ago
echo -n "password" echo adds a new line that is likely not in your password.
686.
by georgyo 9y ago
It is unlikely that you could install Windows on anything but NTFS. That doesn't mean you can't put your home directory on some other filesystem. Still, there is a fair amount of fragmentation in the ZFS world. It's possible
687.
by georgyo 9y ago
The smallest btrfs contributer, redhat, phased out support. They were the only ones to do so.
688.
by georgyo 9y ago
HKPKP is a header in http request, there is no where to announce it early.
689.
by georgyo 9y ago
Builds have been happening in single use chroots for a very long time. The problem is if code includes the current date, or generates some randomness at build time. These issues must be identified and patched.
690.
by georgyo 9y ago
I just read it for the first time, it's actually much better written than I thought. I was prepared for it to be horrible, but he brings up some valid points. Some I don't agree with, but he is right that we have made it unaccepta

More ›