viccuad

12 ms·

61.
by viccuad 5y ago
And later he states "Unfortunately, you are wrong there. I will explicitly and publicly list parties that are allowed distribution in the license and allow for requesting distribution requests." The "fine article" always
62.
by viccuad 5y ago
or better, transfer them to Europe and simply ban UK.
63.
by viccuad 5y ago
you give them your idea and control over it, basically. What could go wrong.
64.
by viccuad 5y ago
Woops. I may be dealing with friends & family that joined prior to that. I wonder if one could get prompted again for enabling cross-signing & backup once you open a new client (I don't think it happens right now). That would h
65.
by viccuad 5y ago
This is straight FUD. The identity server is completely optional (you can just login with username & password), and you can opt out or swap it in element -> settings -> general. Also, there's plans for getting it replaced. Th
66.
by viccuad 5y ago
Enabling by default: - cross-signing (so users verify their own devices themselves, and you verify users only once by verifying their public key, regardless of how many times they add or update devices) - and key backup (so moving between d
67.
by viccuad 5y ago
> Do the Matrix clients still phone-home to some centralized server (Vector, I think it's called) There's no centralized server. There's a server with the majority of users for now (in matrix.org), but the network is decen
68.
by viccuad 5y ago
Wohoo! Thanks to Spaces, I feel comfortable using Cactus comments for blog posts (e.g: https://viccuad.me/blog/enabling-cactus-comments ), as I could create a private space containing all the rooms for each blog post co
69.
by viccuad 5y ago
> In practice this doesn't work because each application has to be tested against the new version of the library. In practice it works: see autopkgtest and https://ci.debian.net , which reruns the tests for each reverse d
70.
by viccuad 5y ago
All of this could be avoided if you were part of a different network. One where you can connect with several open source clients to the server, and choose a client that didn't behave like this. One where you could save your history fro
71.
by viccuad 5y ago
The same way a chat system can be. See https://cactus.chat , on the Matrix network, for example.
72.
by viccuad 5y ago
Being decentralized is orthogonal with moderation. You can for example allow people to post to some rooms that represent the blog posts threads, and keep yourself as admin and moderator there. See https://cactus.chat , which is o
73.
by viccuad 6y ago
Open source is a precondition. They can promise you the world, but if you can't build it yourself and get reproducible builds, who knows what's in there.
74.
by viccuad 6y ago
That's also the case if there's an official Debian package; you can build whatever package from whatever distribution (you may be missing dependencies, but it would be the same with an upstream debian directory). If one is going t
75.
by viccuad 6y ago
Well, my intent was to roughly chart the supported timeframe and expectations of each, not the flow of code through them. That SLE gets rebased from Tumbleweed directly every 3-4 years justs showcases my second point from before: SLE bumps
76.
by viccuad 6y ago
Why would it be a better fit, because of the package management? Package managers are irrelevant. The relevant part is the quality, methodology of testing, existing written policy and technical requirements for the software. That you at the
77.
by viccuad 6y ago
Debian Unstable -> Testing -> Stable -> Oldstable -> Oldstable with LTS Fedora -> Centos Stream -> RHEL -> RHEL with LTS Opensuse Tumbleweed -> Leap -> SLES -> SLES
78.
by viccuad 11y ago
well, there's a jump from make install/wgetting/brew install and just trusting your distro's repo (eg: Debian).
79.
by viccuad 11y ago
going full ECC now will isolate you: a lot of people don't use gpg 2.1. Additionally, a lot of people are reluctant to use ECDSA, and would only use EdDSA. I honestly think RSA is a good decision for now. You can always add subkeys of
80.
by viccuad 11y ago
author here: fixed!
81.
by viccuad 11y ago
Author here: No. I'm just using the mainline Kernel with Simple Framebuffer support, and U-Boot. U-Boot does the booting, yet there is firmware on the Soc for the first stage booting.
82.
by viccuad 11y ago
Author here: oh god, nice catch. will fix it :) edit: fixed
83.
by viccuad 11y ago
author here: All of that should be on Part 2, in a week or so. Part 2 will cover emails (Thunderbird, mutt), pass as a password store, setting up OpenKeychain + a Yubikey Neo on an Android phone, K-9 Mail on Android, Yubico authenticator fo
84.
by viccuad 11y ago
author here: No, I'm using no blobs; just the mainline Kernel and U-Boot. All the software stack is leveraged on Debian.
85.
by viccuad 11y ago
author here: that's what I'm intending with this blog post series more or less; after 4 or 5 submissions I should be fairly close to that.
86.
Secure yourself, Part 1: Air-gapped computer, GPG and smartcards(viccuad.me)
171 points by viccuad 11y ago|58 comments
87.
by viccuad 11y ago
And one can argue that if an attacker can do that, they are already inside the machine. To that effect, they could just put a bogus pass binary in ~/bin and extract all your passwords. Yet if you use this solution (or keepass or whatev
88.
by viccuad 11y ago
why don't go with http://www.passwordstore.org/ (pass)? pass is just a 500 line bash GPG wrapper, and a git repo. You can audit easily the code. You shouldn't have your password manager, the most succulent softwar
89.
by viccuad 11y ago
this game is not about being safer (that's what the USA government sells to their citizens), it's about political and industrial espionage, and building a database of dissenters for the future.
90.
by viccuad 11y ago
how was the saying, "Those who do not understand UNIX are condemned to reinvent it, poorly"..

More ›