JackGreyhat
Joined 5 years ago
Karma
140
Submissions
82
Member since
May 20
Security by Design.
View on Hacker NewsRecent submissions
Comment · 5 months ago
Valid concern, yet a potentially solved problem. For code signing at least. Chexk out Time Stamping.
More info: https://sslinsights.com/code-signing-time-stamping/
Comment · 5 months ago
They have a solution for that, called privacy pass. It uses tokens to show the system you are a paid user, but supposedly does not reveal who you are.
I haven't tried it myself, so I have no idea if it works as it should. I'm still deciding to subscribe or not.
More info: https://help.kagi.com/kagi/privacy/privacy-pass.html
Comment · 5 months ago
Machine Head - Struck A Nerve
The more things change, the more they stay the same.
Wise words, lovely song.
Comment · 9 months ago
Thats why some PIN screen implementations have PIN screen scrambling. It can defeat shoulder surfing.
Comment · 2 years ago
It's the attack path.
Comment · 2 years ago
How did you know f-droid's certificate was about to expire? Do you keep track?
Comment · 2 years ago
"Autoruns" is the sysinternals tool you're talking about ;)
Comment · 2 years ago
An AP or wlan router that supports vlan to ssid mapping.
Comment · 2 years ago
At least GrapheneOS devs are transparant about it, as it should:
Comment · 2 years ago
Would you be willing to share your full list?
Comment · 3 years ago
So you mean an alternative such as Mastodon?
Comment · 3 years ago
Ah yes...the beauty of Android.
Facebook: https://f-droid.org/packages/com.pitchedapps.frost/
Instagram: https://f-droid.org/packages/me.austinhuang.instagrabber/
Comment · 3 years ago
Easy-rsa to the rescue. Been using it for a while, works great and makes life easier :)
Link: https://github.com/OpenVPN/easy-rsa
Summary from that page:
easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's terms, this means to create a root certificate authority, and request and sign certificates, including intermediate CAs and certificate revocation lists (CRL).
Comment · 3 years ago
Do you use this approach?
If so, are you willing to share an example robots.txt file? What bots would be allowed? Google, Bing, ...? Those?