Whatitat90
Joined 8 years ago
Karma
69
Submissions
29
Member since
Oct 12
Recent submissions
Comment · 6 years ago
Comment · 6 years ago
This only illustrates the point that centralizing server infrastructure and operations in one jurisdiction can quickly backfire.
Comment · 6 years ago
That's what I was looking for, thanks!
Comment · 6 years ago
Why do you think asciidoc is better than Markdown? Serious question as quick skim over the homepage (https://asciidoctor.org/) and it looks just like Markdown with different sigils.
Comment · 6 years ago
Arch Linux, AsciiDoc, git - sounds great! But why keybase? (Serious question, I wonder if it's for communication or sharing encrypted data or...)
Comment · 6 years ago
I'd advise checking the server at: https://compliance.conversations.im/old/
Comment · 6 years ago
It seems Santa struck back the original issue author: https://github.com/Christian-Schiffer/servicelayer.chat/issu...
Comment · 7 years ago
> only VLC player can make use of VAAPI
And mpv with "hwdec=vaapi" in ~/.config/mpv/mpv.conf
Comment · 7 years ago
If you've already signed to Google but your session is stale it automatically redirects to login screen.
In private window it just works but still I consider the design of checking login on a page that doesn't require it quite bad.
Comment · 7 years ago
The post is well-written and summarizes I think most major pain-points with PGP.
Comparison of all these tools to GnuPG is valid and it clearly shows not only implementation problems but design ones as well in gpg.
What I fear is future riddled with all these incompatible tools. Even if they're written by brilliant engineers and cryptographers they are not standards (e.g. IETF standards). Why is that important? For example rewriting libsignal from scratch (for example to publish it under permissive licenses) can be problematic [0].
Comment · 7 years ago
Having to log in to Google just to read a message on a mailing list always creeps me out. Every time I see it it looks like a phishing attempt :-/
Comment · 7 years ago
> I have my own domain, so maybe OPENPGPKEY record in my domain as well
> DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP
WKD has some benefits over OPENPGPKEY - it keeps the request confidential (as WKD uses plain HTTPS). WKD is just easier to get right, that's why it's more broadly supported. GnuPG, that supports both of them, defaults to WKD. If OPENPGPKEY request is made it seems GnuPG doesn't even validate DNSSEC signatures: https://lists.gnupg.org/pipermail/gnupg-users/2011-December/...
Comment · 7 years ago
> Part of the reason I changed my email is because I had in the past submitted a few keys to the sks network which I lost the private keys to, they were also submitted with an infinite expiry. I was a stupid kid.
That's why most recent versions of GnuPG automatically create keys with expiry set to 2 years.
Comment · 7 years ago
> She was asked by David Hilbert to work on the problem of invariants in General Relativity, came up with one of the most important theorems in physics, and then moved on to other (extremely important) mathematical work.
Interestingly I just read about this in a Lawrence M. Krauss book [0] where it was described that David Hilbert insisted on hiring Noether by the university but was overruled by the male majority that didn't like the idea that a female would teach male students. Hilbert commented that "this is university, not a bath-house!" [1].
[0]: I think it was "The Greatest Story Ever Told—So Far"
[1]: I'm writing that from memory so excuse some inaccuracies.
Here's the source: https://github.com/wiktor-k/openpgp-proofs#openpgp-proofs