cmhe

joined 1 year ago
[–] [email protected] 43 points 3 days ago

One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”

It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.

In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.

While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.

[–] [email protected] 3 points 4 days ago

I have nothing against any meta search engine, they are very useful, and I use them primarily as well.

However, they are not a true alternative, because they depend on third-party services. The same as Invidious is a very useful, but also not an alternative to YouTube itself, just a different user interface.

[–] [email protected] 9 points 6 days ago (1 children)

Tesla's CEO; The Inspiration For Tony Spark

Elon "Baby-Brain" Musk as the inspiration of "Tony Spark" the cheap knock-off Tony Stark.

[–] [email protected] 4 points 6 days ago

Well, you and I just have a different understanding of "search engine" then. For me a search engine is something that doesn't forward queries to third parties.

[–] [email protected] 4 points 6 days ago (5 children)

Which other trustworthy search engines are there? And I don't mean some different frontend or a meta search engine like ddg, sp, kagi, searx(ng), etc... that mostly just use googles, bings or even yandex and beidu results?

Ages ago I configured and hosted yacy for myself, but that was a different time... Are there any real alternatives? With mayor internet companies like cloudflare, social media sites and many others restricting the access to the net and information, searching becomes more and more impossible if you aren't a huge corporation...

[–] [email protected] 2 points 1 week ago

Together with secure boot and your own signing keys, it could be a good way to en/decrypt the a dm-verity secured read-only rootfs. But for the home partition I would probably still want to enter my own decryption key, maybe via systemd-homed. From there you can update the kernel/initramfs and read-only rootfs image and sign them for the next boot.

This is complicated to set up. Otherwise maybe use TPM as a 2FA, so you still have to enter a pin?

[–] [email protected] 18 points 3 weeks ago* (last edited 3 weeks ago) (5 children)

So that means they are just supporting it as long as it is easy to do, and that they are not brave enough to fork chromium.

[–] [email protected] 10 points 3 weeks ago (2 children)

The only way I ever used passkeys is with bitwarden, and there you are sharing them between all bitwarden clients.

From my very limited experience, pass key allows to login faster and more reliable compared to letting bitwarden enter passwords and 2fa keys into the forms, but I still have the password and 2fa key stored in bitwarden as a backup in case passkey breaks.

To me, hardware tokens or passkeys are not there to replace passwords, but to offer a faster and more convenient login alternative. I do not want to rely on specific hardware (hardware token, mobile phone, etc.), because those can get stolen or lost.

[–] [email protected] 3 points 1 month ago

You where talking about "system wide AdGuard", which is not the browser addon, but an app that uses DNS blocking, be it by either letting people set DNS servers manually, or automatically through VPN. Their VPN does not break TLS connection by inserting custom certificates and MITM proxies, so they cannot read/modifiy content.

It might be possible to use TLS breaking proxies for systemwide ad blocking, but even that wouldn't help, because nowadays a lot of content and ads are loaded dynamically via javascript. So a browser is required to filter ads.

[–] [email protected] 22 points 1 month ago (5 children)

DNS ad blockers are not sufficient to block all ads and often overly broad. So they have much higher rate of false positives and negatives compared to in-browser ad blockers. Differentiating between ads and useful content based on domain names will become more and more difficult. Both might use some url from the same cloud provider, and blocking those breaks a lot of stuff.

[–] [email protected] 5 points 1 month ago* (last edited 1 month ago)

That might make it even more dangerous, because you get used to flash to usb sticks on "/dev/sda". And when you then use a device with a built-in sata drive, you might forget checking in a hurry.

Happened to me a once or twice. I am now only using bmap tools for this.

[–] [email protected] 5 points 1 month ago (1 children)

An interesting concept would be if all hand on the 12 clocks would work, but the hands of the clock in the middle are stuck at 12 position, this way the hands in the middle would point to the clock showing the correct time.

view more: next ›