bruo

13 ms·

1.
by bruo 5y ago
This text is not a news report, it’s a technical one about this specific bug. It shows how the attack develops and suggest mitigations at the kernel development level. The bug itself is small and it lead to a whole system compromise, and th
2.
Signal-desktop HTML tag injection advisory (CVE-2018-10994)(ivan.barreraoro.com.ar)
3 points by bruo 8y ago|0 comments
3.
Intent to Deprecate and Remove: Public Key Pinning (in Chromium)(groups.google.com)
4 points by bruo 9y ago|0 comments
4.
by bruo 9y ago
This kind of text work is called essay, it doesn't need to follow the rules of writing an article because it's not one. The author probably knows how complicated it's to write (he is a professional writer), and still manages
5.
Sandstorm gets a security review(sandstorm.io)
107 points by bruo 10y ago|28 comments
6.
by bruo 10y ago
Subgraph is making one, for their subgraph os https://github.com/subgraph/fw-daemon it provides a very close experience to little snitch
7.
OTR version 4 draft(lists.cypherpunks.ca)
1 points by bruo 10y ago|0 comments
8.
by bruo 10y ago
The critics are valid, the solutions are not (for activists, as it's it focus) Conversations.im was (or is, haven't checked in a month) logs encrypted chats on cleartext by default, and history shows why that is a bad idea [0] Un
9.
by bruo 10y ago
While you are not lying, and mailing lists should be avoided if you want to share secrets, most of the times you need a mailing lists not to do that, but to simplify communications. At least in the global south, most of radical activists gr
10.
by bruo 10y ago
I didn't downvote you, but there are different reasons why you would like to use a wildcard certificate and even if those reasons are not aligned with your goals they shouldn't be dismissed. I know two, at least. For a small commu
11.
by bruo 10y ago
I understand the point, what I am saying is that things don't work this way, neither in my personal experience (which i told) and neither in the areas i work (i work for a human rights organization, which doesn't recommend any sof
12.
by bruo 10y ago
I haven't live in a lot of oppressive regimes, but usually this is not how it works. I lived two close examples When i was a kid a friend of my grand mother was arrested because a neighbor said he was a communist. He was tortured for a
13.
Roughtime: a protocol for secure, auditable time synchronisation(imperialviolet.org)
120 points by bruo 10y ago|16 comments
14.
by bruo 10y ago
I agree with you, there is no alternative to StartCom right now in wildcard certs. While GNOME got a free account to get those certs, the last time i checked is still the cheapest way to get wildcard certificates (60 usd for unlimited wildc
15.
by bruo 10y ago
nitrokey supports rsa4096, just be aware that it can take time on processing.
16.
by bruo 10y ago
I have used nitrokeys and FST-01, the FST-01 beats the nitrokey in speed and in freedom, i currently use two of them, one with rsa 4096 and one with 25519 (for decryption you need libgcrypt 1.7). The nitrokey beats the FST-01 in the case, i
17.
by bruo 11y ago
less battery life? i don't have an x1, but a x240 and doing the same things i get twice the battery of the last mbp i used when new. edit: but i used a different os, which could explain that too.
18.
Integer overflow vulnerability in libotr(lists.cypherpunks.ca)
1 points by bruo 11y ago|0 comments
19.
by bruo 11y ago
Oh, "Sorry, we don't ship to Chile." :(
20.
by bruo 11y ago
I tried the pro model but went back to the FST-01 as it was too slow for RSA 4096 and doesn't support curve25519 for sign/auth. But, yes, it does work with gpg-agent with ssh support.
21.
by bruo 11y ago
This is not how torture works in real life. At least, not the one made by security forces. Both of my parents were tortured, both faced it several times. My father was in prison twice and my mother was never in prison but took directly to m
22.
by bruo 11y ago
Worse for some people and better for other. My mother (58) and my grand mother (82) love how easily is to do what they usually do contrasted to the windows 8 experience. I don't know if that is a common case or not, but at least it&#x2
23.
GnuPG News for Summer 2015(gnupg.org)
3 points by bruo 11y ago|0 comments
24.
by bruo 11y ago
I think GPL is forbidden from the AppStore. That's Apple's rules to enforcing it. And yet, the whole iOS environment uses several permissive licensed software. This is a very good example how they damage user freedom, thank you.
25.
by bruo 11y ago
Black's essays are often cataloged as post-left anarchism which i guess it's one of the main reasons it can look like that. But also because in this essay it attacks something that is commonly accepted by everyone, we all work, ev
26.
by bruo 11y ago
The abolition of work is one of the most important political essays after the situationist international. It was published in 1986 and also published in over 30 languages. While what you want from Black is hard data, he wants from you to th
27.
by bruo 11y ago
I use passff a lot of times everyday. I can't complaint :)
28.
by bruo 11y ago
I didn't notice any difference in the usability of Gnuk and the Yubikey NEO. I mean, i had to do the same things for both to configure and use them as they are both are "smartcards". What issues did you found with Gnuk? I&#x2
29.
by bruo 11y ago
Maybe you will like the FST-01? It's a free hardware device that can run gnuk, which is a free software smartcard over usb implementation. While it also supports RSA 2048 by default you can upgrade it to use RSA 4096 or even Ed25519 ke
30.
by bruo 11y ago
For the record: According to NESI 2013 Working population salaries in Chile, according to NEST 2013 ( http://www.fundacionsol.cl/wp-content/uploads/2015/01/Verdad... ): * 2k/year or less: 13,8% * 2k-3

More ›