johnvaluk
Joined 9 years ago
Joined 9 years ago
As an administrator, I wish MediaWiki had a built-in updater (bonus points if it could be automated).
Your private keys are more likely to be compromised when you store them on untrusted systems. SSH-Agent allows you to avoid that risk.
Another mitigation is to use a dedicated agent per private key (or group of keys) to prevent forwarding keys to destinations that don't need them.
SSH agent restriction (ssh-add -h) looks promising, but support isn't widespread and it doesn't cover all use cases.
The article assumes a remote attacker, but the attacker can more easily be your boss or team. Keep this in mind whenever you forward your agent and plan accordingly.
But relying on SSHFS in production... Yeah, that's insane.
In my experience, it isn't necessary to configure ChromeOS by logging into a Google account after enabling Developer Mode, if you simply want to ditch ChromeOS and flash the UEFI firmware. Just press ctrl+alt+F2 to get a shell, login as chronos (no password), then type `sudo bash` or `sudo -s` to get a root shell.
In addition to the other recommended distros, NixOS runs well on all my converted ChromeOS devices.
It's a great way to get continued use out of hardware that no longer receives ChromeOS updates. Even underpowered devices can be appealing for some tasks because they're lightweight and fanless.
I imagine any color light or other type of distraction would provide the same results. It's not even a placebo effect, so much as the fact that a lot of these procedures are well within most people's pain tolerance and/or can be over in a minute.
I gladly went under general anaesthesia to have my wisdom teeth removed, however.