Jenda_

7 ms·

1.
by Jenda_ 2y ago
For a cool example (deanonymization), see https://words.filippo.io/dispatches/whoami-updated/ (discussed at time: https://news.ycombinator.com/item?id=34301768 ). Someone has crawled public keys fr
2.
by Jenda_ 2y ago
+ making you empty your water bottle, and then on some airports there is no option to fill it afterwards (e.g. only hot water available in the toilets and no drinking fountain)
3.
by Jenda_ 3y ago
And some others. https://en.wikipedia.org/wiki/Quotation_mark#Summary_table
4.
by Jenda_ 3y ago
Besides an open military invasion (hopefully improbable), I'm afraid of slowly tilting and influencing border states (Slovakia, Hungary) to lean towards Russia, with maybe some future economic extortion, or in the very extreme case, st
5.
by Jenda_ 3y ago
Oh, OK, I didn't think about lockdown mode, just a regular rootfs encryption. I still use X, as Wayland does not seem to implement all the features I'm using (but it's improving, so I expect I can go to Wayland in a few years
6.
by Jenda_ 3y ago
Some window managers, such as Fluxbox, support "tabbed windows". You can group windows into one "superwindow" and then switch these in a titlebar. Maybe this is what the GP meant? Screenshot: https://www.reddi
7.
by Jenda_ 3y ago
> The lack of hibernation with an encrypted system is an annoying problem, though. I don't understand. Hibernation to an encrypted swap partition (and even to a swap file on an encrypted rootfs) works normally. > Not buying hardw
8.
by Jenda_ 3y ago
> They killed at least 561 people I don't know anything about this case, but "561 deaths have been reported in connection to" does not mean they were all indeed "caused by". They may have reports of anyone who di
9.
by Jenda_ 3y ago
The GP talked about nose tape (I guess nasal strips), not mouth tape. I personally use: - better breath strips from aliexpress - a 3D print similar to https://noson.eu/
10.
by Jenda_ 3y ago
> But in czech language word for Bohemia region is "Czechia" (there is no Bohemia). No. Bohemia is Čechy, Czechia is Česko. Yes, they are sometimes confused, and maybe people are unhappy with Česko because it's just too si
11.
by Jenda_ 3y ago
"habanero eardrum" is actually less than 4 bytes -- let's say 12 bits for a common word (eardrum) + 16 bits for an uncommon word (habanero). If it were 16 bytes, the other options from the same 16-bytes space would be, for ex
12.
by Jenda_ 3y ago
Why is there AFAIK no tutorial on how to steal the "app token" (sorry, I don't know the proper term) from Thunderbird or other mail clients?
13.
by Jenda_ 3y ago
Because the old algorithm only endangers the communication and the remote device (and this may even not be the case, as such an old device should not be exposed to the world), while the old client may compromise security of the local comput
14.
by Jenda_ 3y ago
> That screwdriver? It used to work when it was first invented and it will still work a thousand years from now. Maybe it did not and will not -- old screwdriver is probably flat blade, now people use Philips or Pozidriv screws and in so
15.
by Jenda_ 3y ago
> That kind of attitude is why Windows continues to dominate the desktop market. On the other hand, macOS is also pretty common on desktops and they don't honor backwards compatibility very much.
16.
by Jenda_ 3y ago
Maybe try to have a look at it as permutations: the mapping "hex of the hash" → "its actual hash" is a (presumably random) permutation. And it's quite probable that such permutation has a fixed point: http:/&#
17.
by Jenda_ 3y ago
> because optical attenuation rises exponentially with length I believe the attenuation is stated in dB/km, therefore rises linearly (or even logarithmically if you look at it from the uncommon energy-wise point of view) with distan
18.
by Jenda_ 3y ago
If I understand this correctly, the paper only shows a particular attack of complexity 2^102. Someone may find a different attack with much lower complexity. That's the usual way how cryptography gets broken -- people find better and b
19.
by Jenda_ 3y ago
I think Ubuntu has some kind of notifier in "tray". For me, I am subscribed to debian-security mailing list and update when something that is running on systems that I manage seems to be affected. > versus the more automated up
20.
by Jenda_ 3y ago
> Syscall hooking kernel root kits largely only vary in how exactly they hook the syscalls I don't understand how this survives major kernel upgrades. I have problems keeping out-of-tree modules working, intentionally. Do rootkits s
21.
by Jenda_ 3y ago
The malicious weblink can be an advertisement, or a legit webpage that got compromised/XSS'd, or a formerly legit webpage whose domain has expired. (AFAIK this is pretty common) The email attachment may come from your friend/
22.
by Jenda_ 3y ago
The GP was talking about Linux desktop, you seem to be talking about Linux server.
23.
by Jenda_ 3y ago
There are many more files that will need this protection: - autorun and keyboard shortcuts of your window manager -- one can hook an evil command to Ctrl+C - ~/.mozilla -- you can add arbitrary javascript to your profile or extensions
24.
by Jenda_ 3y ago
Of course - the point is not to get the home folder owned. There is no reason why Evince/Okular or mpv (to name a few apps which handle files with complex formats from untrusted sources) should have the right to access anything beside
25.
by Jenda_ 3y ago
> attaching a compromised PDF This means either: - a 0day, which would require the AV to have a PDF parser better than the standard document viewer, and the ability to sense that this PDF is "weird" -- I would expect AV compani
26.
by Jenda_ 3y ago
> Two, because a genome is > 700MB, so it won't fit on a single disc. I would hope it compresses well (lots of repeating stuff), though I have no practical experience.
27.
by Jenda_ 3y ago
> I'm not so sure. I mean obviously this is very complicated and we still know very little of the brain. At least, there are people who have lost most of their gut due to disease or trauma, and their human intelligence is still work
28.
by Jenda_ 3y ago
> Pretty much most and Thinkpad or Dell works out of the box. …except for AMD ones with AMD GPU :( https://www.wezm.net/v2/posts/2020/linux-amdgpu-pixel-format... or Intel ones with a particular wifi card
29.
by Jenda_ 3y ago
So, what should they do? No certificate without DNS record? Would this really help the overall state of affairs, or would most sites just not use HTTPS at all because it's "too complicated"?
30.
by Jenda_ 3y ago
The Hetzner one is a physical server. You would need to stage a "power outage" and backdoor it, which is probably not that easy - e.g. planting a kernel module which survives kernel upgrades and is pretty advanced at hiding itself

More ›