rekoil

23 ms·

271.
by rekoil 3y ago
I'll give you that E2EE arrived late and is off by default. But: > For Find My, since they can even locate switched off phones They can't. Find My is actually truly end-to-end encrypted, at least the version used for when a dev
272.
by rekoil 3y ago
Yeah. I don't think this is done out of malice though, Apple has literally hundreds of millions of customers, not being able to restore access to the majority of these due to lost passwords would risk losing customers which they can&#x
273.
by rekoil 3y ago
Yeah I wasn't sure how they claim iCloud Photos is E2EE, on your side there, but the iMessage thing is obvious, if information is leaving me it's going to someone and becomes that persons information. Not much you can do about tha
274.
by rekoil 3y ago
Everything except specifically iCloud Mail, Contacts, and Calendar is E2EE when Advanced Data Protection is enabled. See this for what is and isn't encrypted: https://support.apple.com/en-us/HT202303
275.
by rekoil 3y ago
You can finally have your entire iCloud account end-to-end encrypted using Advanced Data Protection since earlier this year. iCloud Backups, iCloud drive, passwords, health data, basically everything except specifically iCloud Mail, Contact
276.
by rekoil 3y ago
> That’s true of everything you haven’t compiled yourself, using a compiler you wrote and bootstrapped yourself. Don't forget the hardware you built yourself. [1] 1: https://en.wikipedia.org/wiki/Intel_Managemen
277.
by rekoil 3y ago
It can not. The master private key used by the system is generated locally and never leaves your Apple devices in a state that anyone except your devices can read it. The master key is used to derive an AirTag specific private key which is
278.
by rekoil 3y ago
Yeah, the GPS location (of the finder device) is encrypted using the ID as encryption key before uploading to Apples servers, so unless the owner of the device actually looks for it, Apple doesn't even know who the encrypted blob they
279.
by rekoil 3y ago
> The greatest info leak is “there is a find my device near me”. Which is anonymous and the identity changes every 30 minutes or an hour, I forget which.
280.
by rekoil 3y ago
If someone is allowed to make .xlsm a TLD I'm 100% quitting the internet.
281.
by rekoil 3y ago
Yes, they do, huge mistake ...but a lot of fun!
282.
by rekoil 3y ago
I honestly think that might be more damaging. Third-party alternatives must be allowed, the problem is Microsoft changing the rules long after shipping the console, in a way that not all perfectly fine controllers could be updated to handle
283.
by rekoil 3y ago
Possibly hot take; everyone wants to be a manager because managers make more, but you can't have a bunch of managers unless you hire a bunch of people, and hiring a bunch of people that are all competent is hard.
284.
by rekoil 3y ago
Saw that too. Insane, predatory almost. The Swiss or Netherlands based shops seemed to be the most reasonable way if you wanted to buy the HAT.
285.
by rekoil 3y ago
The problem is really that this wasn't how it worked initially. To make a meaningful dent on cheating controllers it won't be possible for most controllers to be updated to be compliant as they don't have the hardware require
286.
by rekoil 3y ago
But that's a bit of a fallacy, as Proton just makes it possible to start Windows-targeting games on Linux. So you're still benefiting from a Microsoft-dominated gaming industry whether you like it or not.
287.
by rekoil 3y ago
It's such a frustrating missing feature.
288.
by rekoil 3y ago
Just strange to use HTTP for comparison when the actual problem works just fine. If I'm connecting to WiFi normally, and expecting that I can be tracked, there isn't a vulnerability. If I'm connecting to WiFi using this priva
289.
by rekoil 3y ago
> they would save a few pennies for not needing to ship a USB cable Very few printers I've unboxed actually shipped with a USB-cable... They always use USB-B ports which nobody has cables for and seldom include a cable in the packag
290.
by rekoil 3y ago
My homelab has better certificate management.
291.
by rekoil 3y ago
Hahaha you know I didn't even actually load the site once I was done checking what the hell it was doing. I saw the common name on the cert and the redirect and was like, oh ok so they wanna move away from this domain then, makes sense
292.
by rekoil 3y ago
If you accept the invalid cert (which is apparently a wildcard cert for *.twimg.com of all things) then it redirects to https://status.twitterstat.us/ , so I guess that's the new one? Super unprofessional to leave the o
293.
by rekoil 3y ago
Forgive my ignorance, but what is "WEI"?
294.
by rekoil 3y ago
And then a PoE+ jacket to go with the active cooling hat and M.2 shoe.
295.
by rekoil 3y ago
They were not entirely wrong about the certifications to be honest, there are a lot of useless certifications. In general they were very wrong though.
296.
by rekoil 3y ago
A repair business doing that wouldn't be in business for long though. There are APIs available for verifying whether FindMy is disabled for the device in question, that might be a better proof that the device is honestly sold to a repa
297.
by rekoil 3y ago
Tell me more about these "pizza teams".
298.
by rekoil 3y ago
Said large percentage of users will be installing through a package manager anyway, where you can make sure that Caddy has a path the user it runs as can write to. If you're correct that I'm overestimating users then what are yo
299.
by rekoil 3y ago
Then you throw an error in the log, you have to leave something for the admin to do to set their system up correctly. It's better that Caddy fails to enable the admin endpoint than that it enables it in an insecure manner.
300.
by rekoil 3y ago
So detect the OS and choose the more secure default where possible? I know it's less elegant, but having a much more secure model is worth some sacrifices.

More ›