Forbo

joined 1 year ago
[–] [email protected] 5 points 3 months ago* (last edited 3 months ago) (1 children)

I wouldn't rely on the size of the address space to provide security. It's possible to find hosts through methods other than brute force scanning. I remember seeing a talk from a conference (CCC? DEF CON? I can't remember) where they were able to find hosts in government IPv6 address space (might have been DOD?) through stuff like certificate transparency logs and other DNS side channels.

Man, I need to go find that talk now....

Edit: I don't think this is the one I saw previously but is in a similar vein: https://www.youtube.com/watch?v=AayifEqLbhI

[–] [email protected] 2 points 3 months ago (6 children)

Scenario time: A loved one has recently passed away, and I want to find all the photos I have of them. I would love to be able to have a local AI perform facial recognition to help me find these photos. The classification and tagging info doesn't get fed into surveillance capitalist garbage, and I'm still able to benefit.

[–] [email protected] 0 points 3 months ago

"What is this level of grand security..." Enumerated here: https://grapheneos.org/faq#future-devices

Once manufacturers can implement those things, then you will have an alternative to Google hardware for running Graphene. I'm not telling people to trust anything, don't put words in my mouth.

Who is PrivacyPhones and why should I believe they are in any way affiliated with Graphene?

[–] [email protected] 8 points 3 months ago (5 children)

GrapheneOS has defined a set of security standards for their operating system which have hardware requirements. These standards have been published and there have been efforts to engage with hardware manufacturers to adopt the required hardware. Blame the manufacturers for skimping on security, rather than Graphene being unwilling to compromising their values.

[–] [email protected] 4 points 4 months ago (1 children)

The security of your key is determined by the strength of your passphrase. Am I missing something?

[–] [email protected] 10 points 6 months ago (2 children)

So something changed between then and now. Wish the picture had absolute timestamps instead of the relative ones. I'm on mobile so I'm not about to try to dive into EXIF to find out when that was happening.

[–] [email protected] 4 points 11 months ago

Buy a domain, set up a catch-all and use servicename@yourdomain. Boom.

[–] [email protected] 1 points 11 months ago (1 children)

Can we not with the "basement dweller" bullshit? Developers of free, open source software are volunteers putting forth a lot of time, energy, and effort only to get derided for it.

[–] [email protected] 2 points 11 months ago

RIP Wesley Willis.

[–] [email protected] 2 points 1 year ago

If I remember correctly F-Droid supports reproducible builds, but it's a matter of the app developer supporting them. So there is light at the end of the tunnel, we're just not there yet.

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (2 children)

Is there some signing in place to ensure it's not a malicious repo? I don't really trust unofficial F-Droid repos.

view more: next ›