Cybersecurity professional with an interest/background in networking. Beginning to delve into binary exploitation and reverse engineering.

  • 0 Posts
  • 26 Comments
Joined 11 months ago
cake
Cake day: March 27th, 2024

help-circle
  • I understand the inherit issues/limitations with PGP, but this would be a non-issue if services just stored messages encrypted on disk internal to prevent leaks in case of a breach, but were otherwise unencrypted, and everyone just sent messages like: -----BEGIN PGP MESSAGE-----\nVersion: GnuPG v2.2.0\nhQEMA+gAAKCRBKxZ12345678EBAAIAAAQABAoAB+P/234567890-=+QWErT\n... (a long string of seemingly random characters) ...\n=sdfsdf\n-----END PGP MESSAGE-----

    A lot of the issues with PGP would go away if applications had first party support for encryption and decryption with personally managed keys. You’d still have the issues that come along with personally managed keys though, but if the alternative is every government can compel central services to hand over managed keys, I’m fine with yelling “skill issue” at people who permanently lose access to all their messages.







  • Recommending that somebody upgrade their hardware that is currently working fine because your hardware took a dump is the literal definition of anecdotal evidence.

    I’m not saying that you did anything wrong by updating, I’m saying that you shouldn’t be implying that your experience “dodging a bullet” means other people have bullets coming at them.

    When does it stop btw? How many years old does hardware have to be for you to feel like you need to upgrade when nothings wrong? (Am I misinterpreting what you said? I thought you said you ordered new stuff before your current system threw a bsod.) Why not buy two of everything when you upgrade and just have cold spares lying around?

    To be completely fair though, a 3600 is prolly a bit long in the tooth for certain games, if that’s what you do. I mainly play the finals and I’m having to fight the urge to upgrade my 5800x. It’s good enough, but a 5800x3d isn’t enough of an uplift to justify it and the current performance isn’t bad enough to justify the price of an upgrade to a new socket. I feel like if I was still on a 3600 I’d have pulled the trigger on the upgrade already.

    Edit - Also that can absolutely be a transient error. It can be related to too high fclk and/or vsoc voltage, etc. But you’ve already replaced the parts so it doesn’t matter.









  • Yeah, I do to. We’re not talking about theoretically blocking access to a site nation wide. We’re talking about the TikTok ban, which doesn’t stipulate any sort of network blocking, it’s just a delisting from the app stores.

    The government has never required dns providers to remove records for a domain, or required ISPs to null route traffic to IPs. That’s almost certainly a First Amendment issue, and I can only imagine that such an order would be immediately challenged in court.



  • I don’t have FDE (BitLocker) enabled on my Windows 11 gaming PC. It sits in my house and has nothing on it but video games and video game related shit. I don’t even have my password manager installed for logging in to Steam, GoG or whatever other launcher. I manually type passwords in from the vault on my phone if the app doesn’t support QR code login like discord. Also I paid for this ridiculous m.2 nvme drive, I’m not going to just give up iops bc i want my game install files encrypted.

    I don’t use FDE on my NAS. Again it doesn’t leave my house. I probably should I guess, bc there is some stuff on there that would cause me to have industry certs revoked if they leaked, but idk I don’t. Everything irreplaceable is backed up off site, but the down time it would take to rebuild my pirated media libraries from scratch vs just swapping disks and rebuilding has me leery.

    I have FDE enabled on both my MacBooks. They leave the house with me, it seems to make sense.

    I don’t use FDE on Linux VMs I create on the MacBooks, the disk is already encrypted.

    My iphone doesn’t have the option to not use FDE I don’t think.

    I use encrypted rsync backups to store NAS stuff in the cloud. I use a PGP key on my yubikey to further encrypt specific files on my MacBooks as required beyond the general FDE.