moviuro

8 ms·

1.
by moviuro 6mo ago
That sounds like a lot of extra steps. How do I validate the authenticity of a signing request? Should my signing machine be able to challenge the requester? (This means that the CA key is on a machine with network access!!) Replacing the d
2.
by moviuro 6mo ago
All those articles about SSH certificates fall short of explaining how the revocation list can/should be published. Is that yet another problem that I need to solve with syncthing? https://man.openbsd.org/ssh-keygen.1#K
3.
A Shared Vision of Software Bill of Materials (SBoM) for Cybersecurity [pdf](cisa.gov)
2 points by moviuro 1y ago|0 comments
4.
Remote code execution in CentOS Web Panel – CVE-2025-48703(fenrisk.com)
1 points by moviuro 1y ago|0 comments
5.
by moviuro 2y ago
Search forums local to your country and write documentation on how to use Linux or BSD as a modem. For OpenBSD on Orange France FTTH: https://lafibre.info/remplacer-livebox/remplacer-sa-livebox-... or https:/&#x2
6.
by moviuro 3y ago
OpenBSD's team has already reacted and added Word to OpenBSD * https://marc.info/?l=openbsd-tech&m=170742832804260&w=2 * https://news.ycombinator.com/item?id=39309638
7.
by moviuro 3y ago
Unbound with tags? * https://unbound.docs.nlnetlabs.nl/en/latest/topics/filtering... * https://try.popho.be/securing-home3.html * https://git.sr.ht/~moviuro/moviuro.bin&#
8.
The Performance Inequality Gap, 2024(infrequently.org)
39 points by moviuro 3y ago|14 comments
9.
by moviuro 3y ago
It's a very rare race condition, odds are very low that you were impacted. If you were, you would have noticed (heavy builds with files being moved around where suddenly files are zero). [0] https://bugs.gentoo.org/9172
10.
A data corruption bug in OpenZFS?(despairlabs.com)
220 points by moviuro 3y ago|111 comments
11.
by moviuro 3y ago
See the explanation on the blog itself [0] [0] https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...
12.
Pixel 8 and Pixel 8 Pro(blog.google)
25 points by moviuro 3y ago|4 comments
13.
Mashing Enter to bypass [FDE] with TPM, Clevis, dracut and systemd(pulsesecurity.co.nz)
3 points by moviuro 3y ago|0 comments
14.
by moviuro 3y ago
> The signals required a lot of patience to learn and I'm not entirely sure I still understand them. Chain signals before an intersection; regular signals after those, and on the track to split the track for multiple trains simultan
15.
by moviuro 3y ago
> they lose the master password The threat model for every lambda user having a password manager does not cover breaking and entering[0]: they should write down their master password and keep it at home in their bedroom drawer. Use biome
16.
Usable systemd Timers for Mortals(try.popho.be)
4 points by moviuro 4y ago|0 comments
17.
by moviuro 4y ago
It's only now added as an interactive step in the install script. It has ~always been possible to create a crypto device with the install medium by dropping to a shell: https://www.openbsd.org/faq/faq14.html#softra
18.
by moviuro 4y ago
> You can stack storage to your heart's content Unless you actually hit the maximum your building can sustain (heat, volume). Building datacenters is incredibly expensive, so reusing existing infrastructure and packing it with more
19.
by moviuro 4y ago
As specified when activating MFA, did you download (and print) your backup codes? If so, use them to re-enroll a new device into MFA. If not, you can try reaching out to customer service after you get a new SIM card. For banking and everyth
20.
by moviuro 4y ago
To make use of one different key per host, you can use some ssh_config(5) magic[0]: IdentityFile ~/.ssh/keys/%h See also https://try.popho.be/ssh-keys.html , discussed: https://news.ycombi
21.
Setting Up a Gaslighting DNS(try.popho.be)
1 points by moviuro 4y ago|1 comments
22.
“MasquerAds” – Google’s Ad-Words Abused by Threat Actors(labs.guard.io)
25 points by moviuro 4y ago|4 comments
23.
by moviuro 4y ago
Which cannot be automated, AFAICT. I'm syncing pictures of 4 GooglePhoto accounts twice a week each on a machine at home. Fire and forget. But yeah, Google takeout can be done once a month if you have time to spare for that task.
24.
by moviuro 4y ago
Before this happens to you too: rclone[0] can be used to sync (or pull) data from Google's services to a local machine. It's pretty slow, but it "just works"^TM [0] https://rclone.org , https://rclo
25.
by moviuro 4y ago
With the disappearance of the "verified" badge, that sounds like an awesome way to do phishing. > Sorry @poorsod you're encountering issues with your Atom Bank account! Please reach out in DM to us ^mm > @AtomHelp, some
26.
by moviuro 4y ago
Usually, the upgrades are seamless (freebsd-update(8)[0]); system files that change between releases are looped through with some help of sdiff(1)[1] with relatively few surprises jumping dot releases (12.3 -> 12.4). However, major pkg u
27.
by moviuro 4y ago
You "just" need the key to the encrypted traffic. You don't have to change the handshake/negotiation, you just want a copy of the key so you can decrypt the traffic. In TLS, the client authenticates server, then they bot
28.
by moviuro 4y ago
> transparent browser previously: Brave’s browser has been autocompleting websites with referral codes [2y ago, 57 point, 32 comments] https://news.ycombinator.com/item?id=23441605
29.
by moviuro 4y ago
No forms = no consent = unbroken Web.
30.
by moviuro 4y ago
Write more filters for uBlock Origin and unbreak the web? e.g. https://github.com/AdguardTeam/AdguardFilters/tree/master/An...

More ›