noinsight

21 ms·

1.
by noinsight 10d ago
> don't connect it to WiFi or Ethernet This is not sufficient (for some of these devices) - they will automatically connect to an unsecured hotspot.
2.
by noinsight 11d ago
The drives to read them (Blu-rays) will be the problem. Pioneer stopped manufacturing them in 2024, only LG drives are available now. Coincidentally I just bought one, they’ve doubled in price now recently. Also bought some M-Discs to try.
3.
by noinsight 1mo ago
It’s funny… In Finland they went with hightrust.id (Indonesia) too.
4.
by noinsight 1mo ago
Like the fabulous Windows UAC dialog. Perhaps the worst dialog in history.
5.
by noinsight 3mo ago
If you’re at all serious about security and not user convenience, you deploy BitLocker with a PIN instead of TPM only. And then a whole class of vulnerabilities goes away.
6.
by noinsight 7mo ago
> Put the phone in their pocket and it felt a press and went into edit mode and edited the lock screen. This is why I hate the flashlight and camera buttons on the lock screen - which you can activate without unlocking. When you have you
7.
by noinsight 7mo ago
> Kate So install Kate? There's a Windows build.
8.
by noinsight 7mo ago
It is preinstalled. Server 2025 (even Core Edition) and Windows 11 24H2 (or 25H2, not sure)...
9.
by noinsight 7mo ago
> EDIT.COM becoming the new Notepad. edit.exe[1,2] actually. And it runs on Linux too! Linux had a real lack of good text editors. [1] https://github.com/microsoft/edit [2] https://learn.microsoft.com&#x2
10.
by noinsight 9mo ago
> bypasses the TPM check The caveat with this is that it will fail the check on subsequent version upgrades too and will refuse to upgrade. Non-Enterprise editions are only supported for 2 years so your 25H2 (or whatever it is) installat
11.
by noinsight 9mo ago
This was probably added by/for Tuxera to increase Tuxera Fusion SMB performance.
12.
by noinsight 10mo ago
Windows is not limited to accessing partitions through drive letters either, it's just the existing convention. You can mount partitions under directories just like you can in Linux/Unix. PowerShell has Add-PartitionAccessPath for
13.
by noinsight 1y ago
> We are also entering the age of "hey AI, take this repo, reimplement the same functionality". Wouldn't you do this just against the/an API documentation? Interesting thought.
14.
by noinsight 1y ago
You can just use Unbound for DNS.
15.
by noinsight 1y ago
Bamboo isn’t even wood, it’s grass.
16.
by noinsight 1y ago
RIP Beefy Miracle... https://beefymiracle.org/
17.
by noinsight 1y ago
Amazon/AWS Registrar. They're a reseller for Gandi, but of course everything is managed through AWS and the pricing is at-cost instead of the rip-off that Gandi is now.
18.
by noinsight 1y ago
Orchestrate the renewal with Ansible - renew on the "master" server remotely but pull the new key material to your orchestrator and then push them to your server fleet. That's what I do. It's not "clean" or &qu
19.
by noinsight 1y ago
> allow better network management Yeah, this would definitely block that. DNS-based (hostname) allowlisting is just starting to hit the market (see: Microsoft's "Zero Trust DNS" [1]) and this would kill that. Even traditio
20.
by noinsight 2y ago
> non US citizens whose data is stored in the US They don't even care where it's stored... See: CLOUD Act [1] [1] https://en.wikipedia.org/wiki/CLOUD_Act
21.
by noinsight 2y ago
How do you make the Win7 binary run? Last I tried it doesn’t run if you just have the .exe?
22.
by noinsight 2y ago
No, you are right. On Linux you can look at AUID. To be fair, I have no idea about others than Linux.
23.
by noinsight 2y ago
> Unix was very much made for multi user environments. ... The biggest security concern was making sure that everyone who was logged in was billed correctly. I don't know about that... It doesn't even support multiple administr
24.
by noinsight 2y ago
Finland did cross the old borders in parts, but we specifically didn’t participate in the Siege of Leningrad and refused all German demands for assistance.
25.
by noinsight 2y ago
Yeah, but what isn't ever(?) mentioned is, "other" ECC keys are (should be) impacted by this too, not just FIDO2, i.e. ECC smart card certificates if you're using those.
26.
by noinsight 2y ago
> UAC in practice UAC is not a security boundary by design . > It’s important to be aware that UAC elevations are conveniences and not security boundaries … - Mark Russinovich, Microsoft Corporation [1] [1] https://web.a
27.
by noinsight 2y ago
Fix: JoinsNamespaceOf=
28.
by noinsight 2y ago
Windows hiding file name extensions by default - the gift that keeps on giving. This wouldn't work (as easily) without that.
29.
by noinsight 2y ago
You can already sandbox services very effectively when you run them under systemd. It’s really nice to be able to harden things solely through systemd.
30.
by noinsight 2y ago
> But almost no one needs to write a policy. But that's exactly what I would like to do! I've never seen a real guide for how to set up a policy for a custom daemon I wrote myself. Or when a specific software doesn't come

More ›