Viewing profile — noinsight

Like the fabulous Windows UAC dialog. Perhaps the worst dialog in history.

If you’re at all serious about security and not user convenience, you deploy BitLocker with a PIN instead of TPM only. And then a whole class of vulnerabilities goes away.

> Put the phone in their pocket and it felt a press and went into edit mode and edited the lock screen. This is why I hate the flashlight and camera buttons on the lock screen - wh…

> Kate So install Kate? There's a Windows build.

It is preinstalled. Server 2025 (even Core Edition) and Windows 11 24H2 (or 25H2, not sure)...

> EDIT.COM becoming the new Notepad. edit.exe[1,2] actually. And it runs on Linux too! Linux had a real lack of good text editors. [1] https://github.com/microsoft/edit [2] https:/…

> bypasses the TPM check The caveat with this is that it will fail the check on subsequent version upgrades too and will refuse to upgrade. Non-Enterprise editions are only support…

This was probably added by/for Tuxera to increase Tuxera Fusion SMB performance.

Windows is not limited to accessing partitions through drive letters either, it's just the existing convention. You can mount partitions under directories just like you can in Linu…

> We are also entering the age of "hey AI, take this repo, reimplement the same functionality". Wouldn't you do this just against the/an API documentation? Interesting thought.

You can just use Unbound for DNS.

Bamboo isn’t even wood, it’s grass.

RIP Beefy Miracle... https://beefymiracle.org/

Amazon/AWS Registrar. They're a reseller for Gandi, but of course everything is managed through AWS and the pricing is at-cost instead of the rip-off that Gandi is now.

Orchestrate the renewal with Ansible - renew on the "master" server remotely but pull the new key material to your orchestrator and then push them to your server fleet. That's what…

> allow better network management Yeah, this would definitely block that. DNS-based (hostname) allowlisting is just starting to hit the market (see: Microsoft's "Zero Trust DNS" [1…

> non US citizens whose data is stored in the US They don't even care where it's stored... See: CLOUD Act [1] [1] https://en.wikipedia.org/wiki/CLOUD_Act

How do you make the Win7 binary run? Last I tried it doesn’t run if you just have the .exe?

No, you are right. On Linux you can look at AUID. To be fair, I have no idea about others than Linux.

> Unix was very much made for multi user environments. ... The biggest security concern was making sure that everyone who was logged in was billed correctly. I don't know about tha…

Finland did cross the old borders in parts, but we specifically didn’t participate in the Siege of Leningrad and refused all German demands for assistance.

Yeah, but what isn't ever(?) mentioned is, "other" ECC keys are (should be) impacted by this too, not just FIDO2, i.e. ECC smart card certificates if you're using those.

> UAC in practice UAC is not a security boundary by design . > It’s important to be aware that UAC elevations are conveniences and not security boundaries … - Mark Russinovich, Mic…

Fix: JoinsNamespaceOf=

Windows hiding file name extensions by default - the gift that keeps on giving. This wouldn't work (as easily) without that.