zauguin

7 ms·

1.
by zauguin 8mo ago
Can't that just be done by sealing to PCRs? By protecting the unsealing key with PCR which depends on the OS (I usually use the secure boot signing key PCRs since they are different between systems and stable across updates) and some P
2.
by zauguin 9mo ago
This seems highly misleading. > - Remove the data. This is much harder than it sounds. Many PDF tools won't let you change the content of a PDF, not because it isn't possible, but because you'll likely massively screw up t
3.
by zauguin 2y ago
I'm somewhat disturbed by the idea that anyone would think that you shouldn't stop when "driving in even semi-dense traffic in any bigger city" if you can't see. Of course you should slowly come to a halt and put wa
4.
by zauguin 2y ago
This is a step in that direction. What they are proposing is not so much "no bootloader" but using a small Linux as bootloader. I'm using a similar setup for some time and it gives some of these advantages. Especially you get
5.
by zauguin 3y ago
This often leads to extremely annoying codebase because languages trying to enforce styleguides without proper options just leads to inconsistency once any code in another language leads to the codebase. Just have an options file which is c
6.
by zauguin 3y ago
According to NFTStorage's Terms and Conditions: > The Service is offered for the creation and storage of NFTs. Use of the Service to store other types of data is not permitted. Do you have a special agreement with NFTStorage which o
7.
by zauguin 3y ago
Regarding 2.: Most of these objects do not directly correspond to rendered elements. Basically every page has one (typically) content stream which will contain all rendered elements. The biggest rendered thing you see outside of that are an
8.
by zauguin 3y ago
(2017) (?) (Based on referring to the Cortex A73 as "ARM's latest A-Series processor")
9.
by zauguin 3y ago
While there is a glyph like that there's no nice way to access it. There is no font feature to enable slashedzero by default and slashedzero is not mapped to U+0030 U+FE00 (Unicode's standard variant for an explicit slashed zero).
10.
by zauguin 3y ago
APCA works great, but it has a very weird and restrictive license. Before you consider it for anything you should probably take a detailed look at that and consider if it's really usable for you.
11.
by zauguin 3y ago
There's no need to appeal yet. With "punishment order" they probably refer to a german "Strafbefehl" which isn't a full sentence but a simplified system to avoid trials which only requires a bit more than proba
12.
by zauguin 3y ago
Potentially. Last I tried to boot Windows was a Windows 10 which could deal with this, it just disabled some functionalities relying in the TPM (aka. Windows Hello(?)). It might be that Windows 11 will not like it that much. Then again, if
13.
by zauguin 3y ago
On Linux with tpm2-tools installed you can run To set the owner password (mainly for Storage) ``` tpm2_changeauth -c owner file:- ``` To set the endorsement password (e.g. to verify that the TPM is authentic): ``` tpm2_changeauth -c endorse
14.
by zauguin 3y ago
The site uses [unjustifiable] together with [Hypher]. [unjustifiable]: https://www.npmjs.com/package/unjustifiable?activeTab=readme [Hypher]: https://github.com/bramstein/hypher
15.
by zauguin 3y ago
> or, even better, to prevent the HSM from being used by anything without my overt permission Can't you already do that with an existing TPM? You just set an owner authentication password and an endorsement authentication password a
16.
by zauguin 3y ago
According to the Open Source Definition of the OSI it's not: > The program must include source code [...] The source code must be the preferred form in which a programmer would modify the program. Deliberately obfuscated source code
17.
by zauguin 3y ago
If all media outlets no longer receive traffic from big tech companies there's actually a decent chance that it will not affect their traffic much. If only some news outlets would be affected the others would profit, but if all are tha
18.
by zauguin 3y ago
> OTOH if the display is already 2300EUR, I can't see how the OP can possibly make any money on this, especially with free global shipping, returns, etc, etc. I don't think they are making money out of this. The display is 2300
19.
by zauguin 3y ago
Could you give a few more details on this? While the 32'' screen is a bit too expensive for me, I would probably find interesting usecases for he 16'' version if there weren't the subscription requirement. I don&#x2
20.
by zauguin 3y ago
It's really more an acute mistake.
21.
by zauguin 3y ago
Usually systems have a KEK (key exchange key) from Microsoft installed, then Microsoft can revoke keys on their own withot involvement of the UEFI forum, board manufacturers or anyone else (Unless the KEK itself is compromised). They usuall
22.
by zauguin 3y ago
As far as I understand it Cloudflare's DNS proxy service is for it's authoritative DNS service (and therefore only transfers content of Cloudflare customers), while the parent referred to the DNS resolver (1.1.1.1) where arbitrary
23.
by zauguin 4y ago
> To dig into this traffic, the easiest option is to use an HTTP-debugging tool (such as HTTP Toolkit) to see the raw interactions, and configure Docker to use this as your HTTP proxy (docs here) and trust the CA certificate (here). Prob
24.
by zauguin 4y ago
> and {"scheme": "nin:DE", "id": "..."} for a German citizen. (This is to refer to "a legal entity that can own something and that we have an agreement with") Off-topic, but there isn&#x2
25.
by zauguin 4y ago
That's not really what we see though given that while in their late 20s / early 30s many people reconsider their view of social media, the older generation of people in their 50s / 60s use social media more and more and highl
26.
by zauguin 4y ago
> > Because MD5 is a relatively weak algorithm, it is possible to create deliberate hash "collisions". That is, take some data and manipulate it until it has the same MD5 as a different piece of data. > > First sentenc
27.
by zauguin 4y ago
Sorry, I missed your message. I'm using bird2 (and networkd for the tunnels) but sending the configs here doesn't work that great. Feel free to reach out by mail and I can send you a copy (news@2krueger.de).
28.
by zauguin 4y ago
I currently peer (via tunnels through my IPv4 connection) with securebit (aka tunnelbroker.ch), freetransit.ch and route48.org (but the list varies a bit over time), The original motivation was my frustration about my ISP not offering nativ
29.
by zauguin 4y ago
I don't know about ARIN, but I got an PI assignment from RIPE for my home lab without issues.
30.
by zauguin 4y ago
> I do wish LaTeX kernel commands (which I'm assuming these are) were more widely documented. As it stands, it's pretty hard to keep track of what already exists. Is there a nice reference for those? Not really, the traditional

More ›