Viewing profile — infokiller

Are you using alternatives to Qubes tools such as the secure clipboard (qvm-copy-to-vm), or just using a lower security setup?

Web Search Navigator is a Chrome/Firefox extension that adds keyboard shortcuts to Google, YouTube, Github, Amazon, Startpage, and Google Scholar. Note that this extension focuses …

Do you mean sharding them using something like Shamir Secret Sharing, splitting in order to be able to transfer/store a large blob, or something else?

Thanks for mentioning the octocouplers implementation, it looks very interesting and I'll look it. Other options I'm aware of to avoid USB and complex drivers/protocols: - Scanning…

> You could do the same thing with the application binary itself and have them compare hashes. This is not scalable to software updates, which happen much more frequently than (lon…

> Right. If you already have a secure channel to receive the signing key over, you can just use it to receive the software to begin with. Note that the secure channel sometimes has…

If you define untrusted software as anything not coming from your distro's official package manager, many people run lots of untrusted software on their Linux systems. Think of PPA…

> And where it matters more, hardware compartmentalization. With the caveat that you need to use secure air-gapped communication, and you probably want to use Qubes on each of the …

While I can appreciate your vision, that seems too detached from the current reality. Software development is a highly distributed system with many human participants with differen…

> Xorg already provides a full suite of security protocols that allow fine grained control over every aspect of any application down to the single pixmap via access control hooks. …

I agree that Android app security model is much better than desktop Linux (of course, they had the privilege of designing a new system without backward compatibility concerns and a…

Signatures are meaningful when the keys are more secure than the servers hosting the data. If you download software from a hacked server that serves you malware, the signature chec…

I think it's unlikely that pip will be able to easily install something like Sage anytime soon, but one could use conda [1] which is pretty popular in the scientific community, or …

Even if the security is not significantly enhanced over a content blocker, tracking using JS will be much harder (assuming the cloud device is randomized in some way).

May I suggest adding an options page to configure the keybindings (and store them in browser.storage.sync)? Happy to send a PR.