Viewing profile — kenniskrag

Env variables are considered best practice (factor 3): https://developer.ibm.com/articles/creating-a-12-factor-appl... If I would avoid env then i need to put it in some kind of co…

Why should that help to have no env variables?

I just use my home router as VPN to not care if the 100 apps om my phone have a working encryption. I also use it to access my home services so that they are not exposed to the int…

Exists randomness or is it just lack of information? :)

I think compression would reduce the problem not? I think if you swap the wire format to something like jsonb you would need to parse it again anyway and pay the cpu time.

acme.sh supports multiple CAs there is even a RFC for CAs that describe the api.

I would define high as "double time needed to fix a dns issue" and account for weekends

What's the threat model. Where do you store the decryption key? E.g. if my app needs a db connection I can ask a vault service but I need creds for that. The vault service can rota…

Edit: Banking has no selfservice password reset. A lot of work for customer support due to identification. Nobody wants to do that for free and if the accounts are freenyou may get…

> But then your hardware dies A lot of services have password reset email features. If the email account has passkey you're screwed. But restore by snail mail can be possible but s…

Pull request to notify on setup (2 weeks old): https://github.com/mastodon/mastodon/pull/38548

Is that legal? Do you avoid uploading somehow?

Not if the advertise zero knowledge encryption. As far as I understand the password sharing / collaboration feature is often the problem. Second: The provider can get the passwords…

> Much like the other products we analyse, 1Password lacks authentication of public keys. This trivially enables sharing attacks similar to BW09, LP07 and DL02, something that the …

In europe you need identification to buy a sim or esim. https://www.reddit.com/r/europe/comments/9ziqfi/european_cou...

> online access is as necessary as water We have paper money and also can work and buy stuff offline. I would say online access is as necessary as a car. Possible without but less …

Driving licence is a bad argument because there is public transportation service. If you're reckless or have other issues the licence is revoked.

One reason was, that the security model wasn't enough anymore. E.g. every application was trusted and can listen to key inputs e.g. steal passwords and credit card infos. Btw there…

One of these: https://media.pearsoncmg.com/bc/abp/cs-resources/products/se...

qutebrowser does that. https://en.m.wikipedia.org/wiki/Qutebrowser

Which ones? I try to learn how these systems work

You can edit the url to use any number. :)

which rss reader do you use?

Generally it depends on the threat vector. * Do you trust the hardware * Do you trust the OS * Do you trust the user * Do you trust the software On a rootkit you don't trust the OS…