IlliteratiDomine

joined 1 year ago
[–] IlliteratiDomine@infosec.pub 15 points 9 months ago

Close, its Danny Devito smacking Nate Mooney with a 2x4.

Its a scene from It's Always Sunny in Philadelphia.

[–] IlliteratiDomine@infosec.pub 2 points 10 months ago

It could happen. In China, among many other places, same-sex hand holding isn't uncommon among friends and doesn't indicate a romantic attachment. I dont imagine Biden and Xi have that kind of relationship, though.

[–] IlliteratiDomine@infosec.pub 3 points 10 months ago* (last edited 10 months ago)

There are many ways to setups full disk encryption on Linux, but the most common all involve LUKS. Providing a password at mount (during boot, for a root partition or perhaps later for a "data" volume) is a but more secure and more frequently done, but you can also use things like smart cards (like a Yubikey) or a keyfile (basically a file as the password rather than typed in) to decrypt.

So, to actually answer your question, if you dont want to type passwords and are okay with the security implementations of storing the key with/near the system, putting a keyfile on removable storage that normally stays plugged in but can be removed to secure your disks is a common compromise. Here's an approachable article about it.

Search terms: "luks", " keyfile", "evil maid"

[–] IlliteratiDomine@infosec.pub 7 points 10 months ago

The full article is paywalled, but the abstract of this meta-analysis states "In the past 10 years, estimates of the social cost of carbon have increased from US$9 per tCO2 to US$40 per tCO2 for a high discount rate and from US$122 per tCO2 to US$525 per tCO2 for a low discount rate." Published May 15 of this year.

[–] IlliteratiDomine@infosec.pub 21 points 10 months ago (1 children)

That doesn't look like contradictory information to me.

[–] IlliteratiDomine@infosec.pub 0 points 11 months ago (1 children)

OP isn't trying to install into the downloads folder; they're trying to grant an app access to the downloads folder to read and write data.

[–] IlliteratiDomine@infosec.pub 1 points 11 months ago

That tends to be how things develop when you're talking about systems. There's not a cackling Bad Guy engineering these things, but a system of socioeconomic carrots and sticks that, right now, favor exploitation. Schools and education happen within that incentive structure so its natural that they would take on it's characteristics.

[–] IlliteratiDomine@infosec.pub 3 points 11 months ago

Often, if an rss link isn't on the page, there's still a feed available. /rss and /feed are the most common places to find it.

[–] IlliteratiDomine@infosec.pub 2 points 11 months ago

I made that move and had no issues. You can copy/paste your way through DNS setup and the rest is just configuring your proton account how you want.

You'll want to be familiar with proton and some of the tradeoffs in its privacy model, but it's most likely more feature-full than a hosting provider. Dreamhost, for one, is quite basic.

[–] IlliteratiDomine@infosec.pub 2 points 11 months ago

Most self-hosters are probably using dns services through their registrar, but you don't have to. A registrar with poor api support might still be a good choice, if that was the only negative.

[–] IlliteratiDomine@infosec.pub 12 points 11 months ago (4 children)
[–] IlliteratiDomine@infosec.pub 3 points 11 months ago

Well, I'm back and can confirm the sneaky DNS resolver. I have two roku devices and they both were making requests to 8.8.8.8.

Thanks for this post! TIL.

view more: next ›