261–268 of 268 posts
Earlier quoted context omitted.
I know. But the problem is that in reality the only way to get people to audit software reliably is to pay them to do it, so it's not really true as a general principle that open-source software is more thoroughly vetted.
I'd say it's objectively true to say that open source software is easier to audit compared to closed source software, which you can extrapolate to mean that it's less prone to malicious code injection. It's not perfect, but surely it's easier to audit for malicious code than closed source. Also, there is no shortage of volunteers looking out for code changes in established open source software. I think it's fair to e…
Earlier quoted context omitted.
I do not want my OS to tell me what i can and cannot do on the computer I bought, its as simple as that
I did not suggest that; what I suggested was that the programs should run in sandboxes.
I want a program that can delete or encypt all my files. I want a program that can 0 or encrypt any chunk of memory. Otherwise I'm just buying a useless toy not a computer.
Being reminded of this anecdote from NYMag's recent cover story (which had previously been reported in a WSJ story[0]) about a Disney engineer who downloaded an AI-gen tool from Github and "checked the code himself, it had looked legitimate": https://archive.is/yAUNy > He had no idea why the hackers had targeted him or what their plan was, whether they would drain his family’s finances or stalk his home. Eventually,…
A password manager is a single point of failure and should be avoided. I've heard other sad stories about someone who's pw manager was compromised and they lost everything.
Earlier quoted context omitted.
I did not suggest that; what I suggested was that the programs should run in sandboxes.
That's a misuse of a tool. A sandbox is for specific testing purposes, making them the default limits program usefulness. From a network/biological perspective we need reasonable ways to prevent and fight infection. Focusing soley on prevention leaves you powerless when you are inevitably infected. Infected computer can take multiple strategies the most interesting of which is to waste resources so the virus cannot s…
Earlier quoted context omitted.
I think this is true in technical terms, but I have not seen a compelling description of what that looks like without it sounding like a real pain to manage. Does anyone have a description of something manageable?
Keepass, use different db stores for passwords than for the MFA/TOTP. never store the keepass db passwords anywhere except your head. Use a different device for the totp db than the passwords.