yegortimoshenko

6 ms·

1.
by yegortimoshenko 6y ago
It gets much worse than that on this blog: https://archive.is/RtoKS#selection-397.1-397.222 > Nitpicking is more excusable for women to do. That's ultimately because men talk to others > exchange important inform
2.
by yegortimoshenko 6y ago
Thank you, _why :3
3.
by yegortimoshenko 7y ago
https://blog.cloudflare.com/encrypted-sni/
4.
by yegortimoshenko 7y ago
I should have said "any disclosure": EFail was coordinated (6 months notice [1]) and yet GnuPG officially downplayed the risk [2], launched #effail counter-campaign and blamed researchers for bad disclosure [3]. With regards to an
5.
by yegortimoshenko 7y ago
Can confirm, I've reported a similar attack [1], along with a few other vulnerabilities, and also published exploit tools. I ended up getting legal threats from two people that I see frequently posting to sks-devel@ mailing list. Addit
6.
by yegortimoshenko 7y ago
For reference, this concern has been addressed here: https://news.ycombinator.com/item?id=20149112
7.
by yegortimoshenko 7y ago
There are not that many phone manufacturers that even allow you to change the trust anchor (which makes any of this even remotely possible). For example, Samsung uses e-fuses to burn in their signing key, rewriting recovery will permanently
8.
by yegortimoshenko 7y ago
Chain of trust does protect you from evil maid attacks. And yes, there can be bugs in application layer, but at least half of all CVEs are memory corruption bugs. These practices do offer a massive reduction in attack surface. You seem to
9.
by yegortimoshenko 7y ago
Librem 5 isn't going to be particularly security-focused: no attestation, no trusted boot, most userspace programs are written in memory unsafe languages like C, with no extra effort memory corruption mitigations. Also, Flatpak offers
10.
GrapheneOS – A privacy and security-focused mobile OS with Android compatibility(grapheneos.org)
366 points by yegortimoshenko 7y ago|179 comments
11.
by yegortimoshenko 7y ago
I saw both variants in both browsers.
12.
by yegortimoshenko 7y ago
Huh, 5 out of 15 interviewed developers referred to their desktop as "boring".
13.
by yegortimoshenko 7y ago
Relevant section of Debian upstream guide: https://wiki.debian.org/UpstreamGuide#SCons As a Linux distribution maintainer, I second that. There are not that many packages that still use SCons, but ones that do often require
14.
by yegortimoshenko 8y ago
This is not a valid DMCA claim, point one doesn't even mention copyright. I sent a counter-claim, then tried to republish the repo. GitLab said me I will only be able to republish in 10 days if I don't receive a response, and also
15.
by yegortimoshenko 8y ago
Repos have been moved to http://github.com/AndroidHardening .
16.
by yegortimoshenko 8y ago
I'm not sure what you expect from the developer, to just take it? He doesn't have power in the company because even though he's a 50% shareholder, he's not on the board of directors.
17.
by yegortimoshenko 8y ago
Mirror: https://github.com/yegortimoshenko/copperhead-takeover CEO has sent DMCA takedown request on my GitLab repo, which clearly abuses copyright law. To use the mirrored pages, replace "yegortimoshenko.gitlab.i
18.
by yegortimoshenko 8y ago
Mirror: https://github.com/yegortimoshenko/copperhead-takeover CEO has sent DMCA takedown request on my GitLab repo, which clearly abuses copyright law.
19.
by yegortimoshenko 8y ago
CEO also blocks everyone who supports Daniel on their IRC channel. I've been repeatedly asked to take down these links and documents, and CEO even told me "they would come after me" if not for the fact that I live in Russia.
20.
by yegortimoshenko 8y ago
CEO has removed all of their comments except one. Here are two archived states that should hopefully help future readers to understand the discussion: https://yegortimoshenko.gitlab.io/copperhead-takeover/hacker... ht
21.
by yegortimoshenko 8y ago
Sales is means, not a goal in and of itself. What you're suggesting is a broken economic model that doesn't honor people that add to the world (i.e. authors).
22.
by yegortimoshenko 8y ago
I'm basing my gross over-simplification off this letter: https://gitlab.com/yegortimoshenko/copperhead-takeover/blob/... It says quite clearly that you a) believe copyright belongs to the company, b) wan
23.
by yegortimoshenko 8y ago
Daniel Micay is literally the guy behind Copperhead. He is the author of overwhelming majority of commits to CopperheadOS repos and almost single-handedly maintains hardened Linux kernel. Quite literally: open any repo in https:/&#x2F
24.
by yegortimoshenko 8y ago
It's under non-free license (Creative Commons non-commercial).
25.
by yegortimoshenko 8y ago
CEO of the company, James Donaldson, wants to boot off Daniel Micay, CTO of Copperhead and the main developer behind CopperheadOS project. Both have 50% shareholder stake. As of now, Daniel Micay can't use Copperhead branding anymore,
26.
by yegortimoshenko 8y ago
I couldn't find archived links, but there are a few mentions: https://www.google.com/search?q="Copperhead+as+a+company+doe...
27.
by yegortimoshenko 9y ago
VM, inside a virtualization layer, inside an operating system, inside a VM, inside an operating system.
28.
Motherfuckers need package management (2015)(michael.orlitzky.com)
4 points by yegortimoshenko 9y ago|1 comments
29.
by yegortimoshenko 9y ago
The single most important feature of Java is reverse compatibility. It is a temporal prerequisite of "write once, run everywhere".
30.
by yegortimoshenko 10y ago
Why do you continue to post this ad when you never reply to emails sent to the address hidden in that challenge?

More ›