PlexSheep

joined 1 year ago
[–] [email protected] 1 points 11 months ago (1 children)

Git LFS exists, not sure how it works technically, but it's what the AI people use for AI model VCS.

[–] [email protected] 1 points 11 months ago (1 children)

Does this do anything else than being a Fileserver? I already have SFTP and smb to choose from.

[–] [email protected] 4 points 11 months ago

A win for democracy

[–] [email protected] 5 points 11 months ago

Iirc the European commission. There are two of these bodies and the parliament is the saner one.

[–] [email protected] 1 points 11 months ago
[–] [email protected] 1 points 11 months ago

I always laugh at Java stuff, very funny meme

[–] [email protected] 4 points 11 months ago

I don't agree on hating on nextcloud, but moving that data to a luks partition could work.

[–] [email protected] 1 points 11 months ago (1 children)

I fail to see how this prevents any MITM attack where the attacker pretenta to be the server, but besides that, that just seems overly complicated.

[–] [email protected] 9 points 11 months ago

Cool, that was about time

[–] [email protected] 1 points 11 months ago (3 children)

Maybe I phrased incorrectly. It prevents attacker from getting password and using it again in future.

In what circumstances besides reusing passwords does this matter?

To make this discussion extra long: If you're creating a hash based on a local password, then share this as secret to the server, which then treats it with regular password security, this is beneficial for security as far as I can see, as it makes sure that the "password"/secret is strong and pseudo random.

[–] [email protected] 2 points 11 months ago (5 children)

How does this prevent MITM attacks? The secret you send to the server, be it called hash or password, is what's used to authenticate the user. For the purpose of client/server communication, this "password" on your host only is not relevant, as it's only used to generate the real secret.

A hypothetical MITM attacker would still gain access to that secret, without needing to care how it was generated, be it by hashing something on your host or by coming up with semi random letters yourself.

The secret sent to the server becomes the defacto password.

Now about those password managers, they are a thing but I don't have experience using them. Through a disadvantage is that if a site gets breached you have to do something weird with your password manager, so that a different password is produced with your secret key and the domain name. This can be done with a counter that needs to be manually adjusted, but that's weird from a usability point of view.

[–] [email protected] 2 points 11 months ago

I just Selfhost tailscale now days, but it's true that setting up VPNs can be a pain, especially if it's containers and/or supposed to be an overlay network.

view more: ‹ prev next ›