mentalpagefault

3 ms·

1.
by mentalpagefault 1mo ago
Disappointing indeed. Us security folk have already earned a poor reputation for ineffective technical communication, and LLMs are even worse, not better. This is especially disappointing in this case because we know xoreaxeaxeax is one of
2.
by mentalpagefault 4mo ago
IMAC are the RISC-V extensions supported: I = Base integer instruction set, 32-bit M = Standard extension for integer multiplication and division A = Standard extension for atomic instructions C = Standard extension for compressed instructi
3.
by mentalpagefault 6mo ago
This review appears to be of the first version despite the recent date. (The rewrite filed the serial numbers off the SCP references and changed character names both for copyright reasons and to provide a degree of separation from the origi
4.
by mentalpagefault 6mo ago
The similar acronym appears to be intentional: > Note on the name: SCIP is pronounced the same way as “skip” and it’s a recursive acronym that stands for “SCIP Code Intelligence Protocol.” > SCIP is also a purposeful nod to SICP (Stru
5.
by mentalpagefault 1y ago
You don't actually have to restore the entire snapshot if you just want a single file! ZFS mounts snapshots read-only in an extra hidden .zfs/snapshot directory that doesn't even show up in ls -a unless you set snapdir=visibl
6.
by mentalpagefault 1y ago
It didn't make the cut for the article, but I do recall trying to import older uberblocks still in the label ring buffer with zpool import -T at some point, but none were before the zfs destroy. I assume that was because TrueNAS logs t
7.
by mentalpagefault 1y ago
Thanks! If you'd like to read another encryption related horror story, this one served as a bit of stylistic inspiration: https://max.levch.in/post/724289457144070144/shamir-secret-s...
8.
by mentalpagefault 1y ago
Hi, author here! I'm not sure why you're getting downvoted because you're absolutely right. Depending on if you're being optimistic or pessimistic, either 1) neither I nor ZFS did anything wrong or 2) both ZFS and I did
9.
by mentalpagefault 1y ago
Thank you! I emphatically agree, unencrypted ZFS on top of GELI or LUKS encrypted block devices is the way to go for now. Plus it also has the benefit of not leaking metadata like a sieve. My mistake was placing too much trust in ZFS's
10.
Mind the encryptionroot: How to save your data when ZFS loses its mind(sambowman.tech)
6 points by mentalpagefault 1y ago|3 comments
11.
by mentalpagefault 1y ago
While ZFS has a well-earned reputation for data integrity and reliability, ZFS native encryption has some incredibly sharp edges that will cut you if you don't know where to be careful. I learned this the hard way, and this postmortem