zahllos

27 ms·

301.
by zahllos 7y ago
For what it's worth, Fedora support arm7/aarch64 images for the rpi3: https://fedoraproject.org/wiki/Architectures/ARM/Raspberry_P... The raspberry pi 4 apparently isn't supported. I'm not
302.
by zahllos 7y ago
Well, with the exception of the BSD-like systems, none of the systems being written will actually run software people want to run unless they target those kernels. By definition, none of these kernels will therefore likely see widespread us
303.
by zahllos 7y ago
There are two numbers on the cellular network that matter: international mobile equipment identifier (IMEI). This identifies the cellular radio in question, usually the phone but a dual SIM phone will have one for each slot. The second is t
304.
by zahllos 7y ago
> Generally, it's best not to run Tor relays from home as services will start to blacklist your IP as a proxy. I think this also specifically refers to exit nodes, no ? Running an intermediate relay should be fine as you'll onl
305.
US, UK, and Australia request for Facebook to stop end-to-end encryption plans(zdnet.com)
3 points by zahllos 7y ago|0 comments
306.
by zahllos 7y ago
It's worth maybe providing some detail as to why, so I will do so. Entropy is a measure of unexpectedness present in a system. It is not a property of the data you have, but the physical system that generates some signal, called inform
307.
by zahllos 7y ago
A long time ago I used to moderate on stackexchange (with a diamond) so I'd like to add some important details. That meta post covers it if you know the site well, but it might not be so obvious. Any user with sufficient reputation can
308.
by zahllos 7y ago
> It takes just 5 years on permit C This is accurate, however, you need to spend at least 5 years in Switzerland to apply for a C permit and have been resident a minimum of 10 years in Switzerland in total, including the last 5 continuou
309.
by zahllos 7y ago
It's not always easy to do (and Microsoft could always exempt themselves from surface devices) - I think the spec only requires that it is possible, not that there is a nice dialog box in the bootloader to do it (unfortunately). You ne
310.
by zahllos 7y ago
They also require the ability to change the keys. It's part of the Windows Hardware Certification Kit, previously Logo Kit. See https://docs.microsoft.com/en-us/windows-hardware/manufactur...
311.
by zahllos 7y ago
The idea was to prevent bootkits. In UEFI the last phase, the complete UEFI phase after DXE and all the parts that come before it, is to read the EFI boot options from NVRAM. If there are no configured bootloaders, EFI volumes are read from
312.
by zahllos 7y ago
There's nothing cryptographically broken about RSA as a cryptosystem per se, but implementing it correctly is difficult. There have been multiple revisions to the standards for RSA over the years in response to various attacks. The cur
313.
by zahllos 7y ago
"C++" (C++ people would argue this is not a language issue and therefore out of scope for them, hence the quotes. I'm not implying this is a bad decision to make, simply saying it's the argument I've read before) do
314.
by zahllos 7y ago
There's been a bit of a backlash against exceptions in new languages (and attempts to "ban" them in old) and I actually kind of get it, especially having been a C++ developer. You'll see stuff like the Google C++ standar
315.
by zahllos 7y ago
Of course. Hence it isn't really a flaw if you need domain admin to gain access. It's a vulnerability or major fault if an ordinary user can get access, or worse an unauthenticated user / someone with a specially crafted netw
316.
by zahllos 7y ago
This is not the first time "serious" flaws have been found with DPAPI. Here's another example: https://cqureacademy.com/blog/windows-internals/black-hat-eu... In this case, it turns out that if you
317.
by zahllos 7y ago
I'll reply. Firstly to the parent poster: I'm a native English speaker who learned French to a conversational level (~B2 in the European Language Framework) before I left my home country. That language skill helped me get a job wh
318.
by zahllos 7y ago
I've also hosted my own email for several years now, on several domains. The one thing I have that does not appear to be listed is a DMARC policy. As the comments on the blog post suggest, configuring DMARC works. I have no problem del
319.
by zahllos 7y ago
I also have an anecdotal point, i.e. myself. I'm an English-native speaker living in a French-speaking part of a country with a number of national languages. I speak fluent French, and I suspect Americans/British would call my Ger
320.
Video: First Look at Ghidra (NSA Reverse Engineering Tool)(malwaretech.com)
1 points by zahllos 8y ago|0 comments
321.
Public pentest leads to discovery of flaw in Swiss Post’s new e-voting system(bk.admin.ch)
2 points by zahllos 8y ago|0 comments
322.
Abusing Resource-Based Constrained Delegation to Attack Active Directory(shenaniganslabs.io)
1 points by zahllos 8y ago|0 comments
323.
Analyzing a malicious word document targeting MacOS users(objective-see.com)
1 points by zahllos 8y ago|0 comments
324.
UKGov Disinformation and Fake News Conclusions and Recommendations(publications.parliament.uk)
1 points by zahllos 8y ago|0 comments
325.
by zahllos 8y ago
This depends on your VPN service provider, not the WireGuard software - the software itself simply tunnels your traffic to the VPN provider, who then route it out to the internet. It doesn't matter if you use IPsec, OpenVPN, PPP, L2TP
326.
by zahllos 8y ago
I don't quite understand what you're replying to. The experimental and unreliable scheme they describe is used by WhatsApp, who have probably an order of magnitude or two more daily users. I'm not saying threema is unsuccessf
327.
by zahllos 8y ago
It does not seem so according to their whitepaper, which I downloaded today. Unless this is out of date. They also describe the prekey mechanism used in Signal, WhatsApp, Wire etc as experimental and unreliable, which is an interesting asse
328.
by zahllos 8y ago
I don't use Signal mostly because nobody I know uses it, even though I know they have it installed. By pure usage statistics the winner would be WhatsApp. I also use Wire. In terms of issues with each of these, Wire has occasional bugs
329.
by zahllos 8y ago
Crypto is sometimes about feelings and maybes, not necessarily that an actual, working exploit trivially exists. Aspects of Telegram's crypto design and the UX do not give confidence. To give a specific scenario to illustrate my point,
330.
An Analysis of the ProtonMail Cryptographic Architecture [pdf](eprint.iacr.org)
7 points by zahllos 8y ago|9 comments

More ›