> virtually none of this stuff is possible with technology any normal citizen has access to So far, it looks like open-weight models are lagging less than a year behind frontier capabilities. And I think one year…
For a cool example (deanonymization), see https://words.filippo.io/dispatches/whoami-updated/ (discussed at time: https://news.ycombinator.com/item?id=34301768). Someone has crawled public keys from GitHub (tbh I was…
+ making you empty your water bottle, and then on some airports there is no option to fill it afterwards (e.g. only hot water available in the toilets and no drinking fountain)
Oh, OK, I didn't think about lockdown mode, just a regular rootfs encryption. I still use X, as Wayland does not seem to implement all the features I'm using (but it's improving, so I expect I can go to Wayland in a few…
Some window managers, such as Fluxbox, support "tabbed windows". You can group windows into one "superwindow" and then switch these in a titlebar. Maybe this is what the GP meant? Screenshot:…
> The lack of hibernation with an encrypted system is an annoying problem, though. I don't understand. Hibernation to an encrypted swap partition (and even to a swap file on an encrypted rootfs) works normally. > Not…
The GP talked about nose tape (I guess nasal strips), not mouth tape. I personally use: - better breath strips from aliexpress - a 3D print similar to https://noson.eu/
> But in czech language word for Bohemia region is "Czechia" (there is no Bohemia). No. Bohemia is Čechy, Czechia is Česko. Yes, they are sometimes confused, and maybe people are unhappy with Česko because it's just too…
Why is there AFAIK no tutorial on how to steal the "app token" (sorry, I don't know the proper term) from Thunderbird or other mail clients?
Because the old algorithm only endangers the communication and the remote device (and this may even not be the case, as such an old device should not be exposed to the world), while the old client may compromise…
> That screwdriver? It used to work when it was first invented and it will still work a thousand years from now. Maybe it did not and will not -- old screwdriver is probably flat blade, now people use Philips or…
> That kind of attitude is why Windows continues to dominate the desktop market. On the other hand, macOS is also pretty common on desktops and they don't honor backwards compatibility very much.
> because optical attenuation rises exponentially with length I believe the attenuation is stated in dB/km, therefore rises linearly (or even logarithmically if you look at it from the uncommon energy-wise point of…
If I understand this correctly, the paper only shows a particular attack of complexity 2^102. Someone may find a different attack with much lower complexity. That's the usual way how cryptography gets broken -- people…
I think Ubuntu has some kind of notifier in "tray". For me, I am subscribed to debian-security mailing list and update when something that is running on systems that I manage seems to be affected. > versus the more…
The GP was talking about Linux desktop, you seem to be talking about Linux server.
There are many more files that will need this protection: - autorun and keyboard shortcuts of your window manager -- one can hook an evil command to Ctrl+C - ~/.mozilla -- you can add arbitrary javascript to your…
Of course - the point is not to get the home folder owned. There is no reason why Evince/Okular or mpv (to name a few apps which handle files with complex formats from untrusted sources) should have the right to access…
> attaching a compromised PDF This means either: - a 0day, which would require the AV to have a PDF parser better than the standard document viewer, and the ability to sense that this PDF is "weird" -- I would expect AV…
> Two, because a genome is > 700MB, so it won't fit on a single disc. I would hope it compresses well (lots of repeating stuff), though I have no practical experience.
> I'm not so sure. I mean obviously this is very complicated and we still know very little of the brain. At least, there are people who have lost most of their gut due to disease or trauma, and their human intelligence…
So, what should they do? No certificate without DNS record? Would this really help the overall state of affairs, or would most sites just not use HTTPS at all because it's "too complicated"?
The Hetzner one is a physical server. You would need to stage a "power outage" and backdoor it, which is probably not that easy - e.g. planting a kernel module which survives kernel upgrades and is pretty advanced at…
It's not about "other peoples computers" (there is no evidence of the system itself to be backdoored). If you are running on your own hardware in your own house, you still need an ISP that can do exactly this time of…
The provider having access to system memory can copy the private key and use your original key+cert for MITM, unless you are using some fancy HSM.
> virtually none of this stuff is possible with technology any normal citizen has access to So far, it looks like open-weight models are lagging less than a year behind frontier capabilities. And I think one year…
For a cool example (deanonymization), see https://words.filippo.io/dispatches/whoami-updated/ (discussed at time: https://news.ycombinator.com/item?id=34301768). Someone has crawled public keys from GitHub (tbh I was…
+ making you empty your water bottle, and then on some airports there is no option to fill it afterwards (e.g. only hot water available in the toilets and no drinking fountain)
Oh, OK, I didn't think about lockdown mode, just a regular rootfs encryption. I still use X, as Wayland does not seem to implement all the features I'm using (but it's improving, so I expect I can go to Wayland in a few…
Some window managers, such as Fluxbox, support "tabbed windows". You can group windows into one "superwindow" and then switch these in a titlebar. Maybe this is what the GP meant? Screenshot:…
> The lack of hibernation with an encrypted system is an annoying problem, though. I don't understand. Hibernation to an encrypted swap partition (and even to a swap file on an encrypted rootfs) works normally. > Not…
The GP talked about nose tape (I guess nasal strips), not mouth tape. I personally use: - better breath strips from aliexpress - a 3D print similar to https://noson.eu/
> But in czech language word for Bohemia region is "Czechia" (there is no Bohemia). No. Bohemia is Čechy, Czechia is Česko. Yes, they are sometimes confused, and maybe people are unhappy with Česko because it's just too…
Why is there AFAIK no tutorial on how to steal the "app token" (sorry, I don't know the proper term) from Thunderbird or other mail clients?
Because the old algorithm only endangers the communication and the remote device (and this may even not be the case, as such an old device should not be exposed to the world), while the old client may compromise…
> That screwdriver? It used to work when it was first invented and it will still work a thousand years from now. Maybe it did not and will not -- old screwdriver is probably flat blade, now people use Philips or…
> That kind of attitude is why Windows continues to dominate the desktop market. On the other hand, macOS is also pretty common on desktops and they don't honor backwards compatibility very much.
> because optical attenuation rises exponentially with length I believe the attenuation is stated in dB/km, therefore rises linearly (or even logarithmically if you look at it from the uncommon energy-wise point of…
If I understand this correctly, the paper only shows a particular attack of complexity 2^102. Someone may find a different attack with much lower complexity. That's the usual way how cryptography gets broken -- people…
I think Ubuntu has some kind of notifier in "tray". For me, I am subscribed to debian-security mailing list and update when something that is running on systems that I manage seems to be affected. > versus the more…
The GP was talking about Linux desktop, you seem to be talking about Linux server.
There are many more files that will need this protection: - autorun and keyboard shortcuts of your window manager -- one can hook an evil command to Ctrl+C - ~/.mozilla -- you can add arbitrary javascript to your…
Of course - the point is not to get the home folder owned. There is no reason why Evince/Okular or mpv (to name a few apps which handle files with complex formats from untrusted sources) should have the right to access…
> attaching a compromised PDF This means either: - a 0day, which would require the AV to have a PDF parser better than the standard document viewer, and the ability to sense that this PDF is "weird" -- I would expect AV…
> Two, because a genome is > 700MB, so it won't fit on a single disc. I would hope it compresses well (lots of repeating stuff), though I have no practical experience.
> I'm not so sure. I mean obviously this is very complicated and we still know very little of the brain. At least, there are people who have lost most of their gut due to disease or trauma, and their human intelligence…
So, what should they do? No certificate without DNS record? Would this really help the overall state of affairs, or would most sites just not use HTTPS at all because it's "too complicated"?
The Hetzner one is a physical server. You would need to stage a "power outage" and backdoor it, which is probably not that easy - e.g. planting a kernel module which survives kernel upgrades and is pretty advanced at…
It's not about "other peoples computers" (there is no evidence of the system itself to be backdoored). If you are running on your own hardware in your own house, you still need an ISP that can do exactly this time of…
The provider having access to system memory can copy the private key and use your original key+cert for MITM, unless you are using some fancy HSM.