Leace

6 ms·

1.
by Leace 6y ago
> Which is why most distributions and other projects has moved to WKDs for key discovery. Yeah, WKD is a first-class citizen in GnuPG. Creating signatures with "--sender $EMAIL" embeds e-mail in the signature and then gpg --aut
2.
by Leace 6y ago
You may be interested in https://indieauth.com/pgp
3.
by Leace 6y ago
On first sight this looks interesting but Keybase is years ahead in the UX polish. E.g. on Keybase it's easy to see and add new proofs without a CS degree.
4.
by Leace 6y ago
Allow self-signed certs and build reputation as usual. This would still require effort from indie devs to build reputation but as soon as more people start using your app the dialogs disappear. You don't need domain name, anyone can ge
5.
Microsoft's Safe Systems Programming Languages Effort (Rust)(mybuild.microsoft.com)
53 points by Leace 6y ago|17 comments
6.
by Leace 6y ago
Germany already experimented with a couple of hosted open services: https://www.golem.de/news/whatsapp-matrix-oder-xmpp-bmi-such... The Conversations.im team also leaves in Germany so I wonder why won't they just
7.
by Leace 6y ago
For the record there are quite a few new algos in GPG, most notably ed25519. While RSA 7680 offers 192 bits of security [0] ed25519 on the other hand is offering 128 bits of security. GnuPG 2.3 will have ed448/goldilocks available [2]
8.
by Leace 6y ago
> In general I'm not sure how the YubiKey stores keys and till now I had no idea you can backup YubiKey Well, actually you can't. You can backup keys if you create them in software and then just copy then to YubiKeys instead of
9.
by Leace 6y ago
Err, nope, this is a work-in-progress. What are you especially interested in? Then I can provide you with details. Some random links I used: - https://btrfs.wiki.kernel.org/index.php/Incremental_Backup - https:/&
10.
by Leace 6y ago
> Maybe write down my master password and put it in a safe? Isn't this just moving the goalpost because what if you forget safe combination?
11.
by Leace 6y ago
> Without compromising your security - I'd love to know how others approach their personal IT security challenges? Most of my security is based on OpenPGP keys stored on a Yubikey. In case the first one is broken/lost I've
12.
by Leace 6y ago
There is no separation of "us" vs "them" and if for your own benefit everyone should be satisfied. See also "Think win-win" from 7 habits: https://en.wikipedia.org/wiki/The_7_Habits_of_High
13.
by Leace 6y ago
It's still a thing for people that started using it when it was the latest Google chat product. It may be surprising but people just want stable chat experience not chasing whatever next product Google releases or kills next year. (I d
14.
by Leace 6y ago
> We do not allow anonymous users (i.e., without a Google Account) to join meetings created by individual accounts. This quote from the linked post would suggest otherwise.
15.
by Leace 6y ago
Yeah... I guess a little bit it does. Keybase offers an alternative to Web of Trust that kernel.org itself uses ( https://www.kernel.org/doc/wot/ ). Keybase solution is having multiple social-proofs instead of the W
16.
by Leace 6y ago
> It was a fun little giveaway experiment funded by someone else, in the spirit of the company's focus on cryptography. It was not "someone else". Keybase is directly funded by Stellar (source: https://keybase.i
17.
by Leace 6y ago
To be honest even PGP signing has some issues: it's not clear what does it mean to sign a commit and there is plenty of misuse of that (see [0], `git push --signed` solves some of these issues). Git patch workflow doesn't support
18.
by Leace 6y ago
> Personally keybase is the only project that may provide some form of alternative, but they do so by supporting pgp. Why keybase? Reading their crypto page ( https://keybase.io/blog/crypto ) leaves the impression tha
19.
by Leace 6y ago
Interesting pattern, first time I saw this: switch (true) { case cellA > cellB: return 1; case cellA < cellB: return -1; case cellA === cellB: return 0; } Source: https:/&
20.
by Leace 6y ago
> I still use RSA mainly because Yubikey doesn't support them yet with OpenPGP keys.. I felt the increase in security usage was a worthy compromise to using RSA with a key length that's not yet broken. It does, but you need a m
21.
by Leace 6y ago
This is nice if you don't have a GitHub account. Otherwise you can watch the repository with "releases only" option and it will send you e-mail notifications.
22.
by Leace 7y ago
What jurgemaister said. If you don't have another trust mechanism (like Web of Trust) to validate if this is a correct key then HTTPS gives at least some assurance that no intermediaries between you and avast changed the key material.
23.
by Leace 7y ago
Very nice writeup! It contains a link to Avast's Coordinated Vuln Disclosure site: https://www.avast.com/coordinated-vulnerability-disclosure and this has a link to Avast PGP key that's served via unencrypted HTTP
24.
Bots on Keybase(keybase.io)
10 points by Leace 7y ago|1 comments
25.
by Leace 7y ago
I'm using Dino daily and it works well and looks modern. It still has minor issues here and there but it's finally a desktop client I can recommend to my non-technical friends. One question though: is Windows version planned?
26.
by Leace 7y ago
IMO this is a limited view on what students need to learn to be valuable on the market. Delphi teaches you the value of experimentation through small feedback loops. For novices that just start programming this is critically important.
27.
by Leace 7y ago
Totally agreed. I was fortunate enough to start real programming with Delphi 5 (and then 7). Nowadays I know dozens of languages and frameworks but nothing comes close to the experience of quickly prototyping apps that at the end looked goo
28.
by Leace 7y ago
Not only that but Delphi has tremendous educational potential due to fast feedback loops. There was a blog post once on HN where one of Delphi authors discussed how they designed IDE and the language to be friendly for newcomers. One could
29.
by Leace 7y ago
> I honestly don't understand how a YubiKey is supposed to help me secure my accounts if I get locked out of my accounts when I lose it. The same way physical keys protect your home even when you lose them - you have spare keys for
30.
by Leace 7y ago
From your linked source: > To me this is almost equally offensive as a swastika Sigh.

More ›