h4waii

30 ms·

271.
by h4waii 8y ago
Dell XPS 13 9350. Wish it had more than 8GB on the model with the 1080 panel, but it's been great for the past few years running Fedora. Upgraded the WiFi card to an Intel 8650 and storage to a Samsung NVME 512GB. Keyboard is pretty go
272.
by h4waii 8y ago
Google's 2FA doesn't require a phone. Use a USB token, use a secondary email, or use a single recovery code and leave the account logged in in a separate browser used only for GPM.
273.
by h4waii 8y ago
I think you mean privacy, not security, which there aren't really any claims about. Google aims to provide security updates to all Android devices, but specifically targets their product lines (Nexus, Pixel, etc) and Android One device
274.
by h4waii 8y ago
Sorry, but this is just not true at all. There are thousands of open (and closed) source projects, software, and services that do not fall under this silly statement. Does it mean that if you do pay for a product, that you still can't
275.
by h4waii 8y ago
There is a hack to disable this for the FHD matte 9350. I applied it to mine, and it's successfully disabled. Your mileage might vary, there are a few different panels apparently. https://github.com/advancingu/XPS1
276.
by h4waii 8y ago
KeePass DX doesn't support syncing the database natively. With Keepass2Android, you don't need to install the Dropbox client to save the database to cloud providers.
277.
by h4waii 9y ago
QuickAuth [0] is one of the primary reasons I use a Pebble, though Android Wear and Apple Watch are good devices you can use T/HOTP generators on too. 0. https://github.com/JumpMaster/QuickAuth
278.
by h4waii 9y ago
IMHO, this is a curious way of thinking. Why put in the work of trying to secure one account, but not others? Wouldn't it be easier to simply secure ALL and not have the mental gymnastics of "how much do I care about this?" E
279.
by h4waii 9y ago
Ehh. Any password cracker worth their salt would be able to use rules to break hashes created by "The Algorithm", especially easier once the base word has been figured out or supplied by a single plain-text leak.
280.
by h4waii 9y ago
Since you're already using a phone for this, why not just use Keepass2Android USB Plugin [0] which emulates a keyboard and "types" the password. Requires Android, and probably a device with kernel modules for USB HID. You won
281.
by h4waii 9y ago
pass-rotate[0] by @Sir_Cmpwn does this, is open source (Python), and accepts pull requests to add more services. 0. https://github.com/SirCmpwn/pass-rotate
282.
by h4waii 9y ago
This should be OR. If you have FDE enabled, then the data is encrypted and it doesn't matter if your bootloader is unlocked or you have a custom recovery installed -- all caveats about the trustworthiness of the crypto and strength of
283.
by h4waii 9y ago
To clarify, he means he can both use it as a mass storage device on any platform, as well as it can be used boot an ISO if needed. An iPhone can do neither of those things.
284.
by h4waii 9y ago
If you're giving out invites, I'd sure take one. lobster at_sign laro DOT se
285.
by h4waii 9y ago
Conflating secure with up-to-date is wrong in such a broad and sweeping statement such as 'your Linux desktop is always less secure than an iPhone'. Updates software does not instantly mean more secure, which I am sure you are awa
286.
by h4waii 9y ago
Also respectfully, he stated patched daily. Generally, security updates for both iOS and Android devices happen in a monthly roll-up. If your checklist for being "secure" involves being up-to-date, there is no amount of 'gett
287.
by h4waii 9y ago
No. There are hundreds of models of Android devices. Only a handful of Samsung, HTC, Motorola, and some lesser known manufacturers used the BCM4339 chipset.
288.
by h4waii 10y ago
The author likely is used to Windows scripting before sleep was a thing. The pings are used as a delay, without pausing the entire process or thread.
289.
Thermal Attacks on Mobile-Based User Authentication [pdf](mkhamis.com)
2 points by h4waii 10y ago|0 comments
290.
by h4waii 10y ago
Snapshot your current running instance and create a new $2.50/month server using that snapshot. Works fine, I just moved a site from $5 to $2.50 without issues.
291.
by h4waii 10y ago
The Tungsten doesn't support RFMON, thus it can't do packet injection, not sure how this was achieved. The most Palm OS could do was run NetStumbler, which does discovery by active beacon probing. Maybe with a Zaurus, Libretto, or
292.
by h4waii 10y ago
Huh? Most people in North America (who can't afford phones) lease-to-own their phones. They pay for it in a monthly rolled up price, and at the end of their contract they own the device outright, obviously with all caveats surrounding
293.
by h4waii 10y ago
This is WPA-TKIP only . That doesn't mean WPA/2 is completely useless and broken.
294.
by h4waii 10y ago
SecureDrop is also in use by CBC, a publicly-funded National broadcaster in Canada, and is actually implemented and managed properly -- regardless of the quality of SecureDrop itself. https://securedrop.cbc.ca/ The gateway
295.
by h4waii 10y ago
No, no he's not. GP was questioning the implementation and OP is merely identifying a clear weakness (regardless of who you says, it is a trade-off). Not quite an appeal to authority, but it's pretty damn close. What exactly abo
296.
by h4waii 10y ago
For what it's worth -- there are frameworks that allow EXTREMELY granular permission controls. This [0] => http://imgur.com/a/XVulF is what happens when an app tries to access the clipboard and I haven't g
297.
by h4waii 10y ago
Ah yes, everything is absolutely what I was getting at. This line of thinking is what allows these problems to happen due to pure laziness or not caring. When you build a product or service, you should own it end-to-end OR simply let it b
298.
by h4waii 10y ago
This is absolutely the problem. There are high-horse developers who've made 4 webapps using PHP and don't know anything about the system they're deploying on -- but they're rockstars disrupting the world! They leave mysq
299.
by h4waii 10y ago
Ignoring the fact that this isn't tugging at emotions, it's a straight up lie and you're aware of it, since you said it was a con. This doesn't even prove that people are willing to give you "more" considering
300.
by h4waii 10y ago
This isn't a thing. You'll need to provide more information than you have. While Dell does sell "certified" hardware, they have never (AFAIK) locked down a system to only allow Ubuntu installs. I don't even see how

More ›