0xb100db1ade

I assume you know this, but just in case:

Note that they may have gotten the password from a hacked website--not from your webcam/microphone.

Check out https://haveibeenpwned.com/

Also PSA: if you ever decide to make said repo public, `git push --force` does not make the old commits unaccessible; doing so is not a secure way to remove secrets from a git remote before making it public

I assume you have seen the xkcd illustrating this issue:

https://www.xkcd.com/988/

How do you tell the occupancy level of each room via WiFi signal?

More info at: https://g.co/morse

What I love about Signal is their philosophy of "if it's not user friendly, nobody will use it, therefore it won't help anybody."

It's kind of like how Apple will combine security updates with stuff like new emojis: to increase the incentive for the general populus to update.

I sometimes compare Signal to iMessage, except it's cross-platform and private.

The way I see it, centralization has the more favorable best case scenario while decentralization has the most favorable worst case scenario.

Centralization allows for extreme optimization, but decentralization allows a system to keep on chugging along no matter what the conditions (within reason)

Beautiful graphics.

The article measures repetition via compression ratios, an interesting idea.

How about the threat of a 3rd party _adding_ information to a device? That sounds like another threat if someone wants to frame a suspect (i.e. another reason why devices should be placed in Faraday bags)

> An attacker could pretty easily obtain a valid Let's Encrypt certificate using a BGP hijack.

Whoah, I have never realized this.

Is there some way to include some key in the DNS entry or something to mitigate IP hijacking?

Does HSTS protect against this?

I have gotten it to work on NixOS with it. I've read that it also works with Arch.

Make sure kdeconnectd is running, that your appindicator tray bar is working, and that your devices are on the same network

ProtonMail requires JavaScript for client-side encryption. You can use a non-web client, though.

This sounds interesting, but I don't completely understand.

Does this mean that only that specific implementation may be used without a 3rd party infringing copyright?

I have gone to several hackathons at 42. It is quite a nice campus, really well maintained.

It's much bigger than you'd think and the supervisors are happy to let visitors explore

On the other hand, https://en.wikipedia.org/wiki/Length_extension_attack

Although Meow Hash is described as non-cryptographic, so the described attack is likely not applicable

Relevant section of EULA: http://archive.is/n7wCB#selection-645.1-651.45

> In return for free usage of Hola Free VPN Proxy, Hola Fake GPS location and Hola Video Accelerator, you may be a peer on the Luminati network. By doing so you agree to have read and accepted the terms of service of the Luminati SDK SLA. You may opt out by becoming a premium user.

I was previously running into https://github.com/NixOS/nix/issues/2244 but it looks like the problem is now fixed :tada:

I'm excited to see this on Hacker News again.

I've tried it on my MacBook Pro and found it to be a pleasant experience once configured.

On the other hand, the temptation to endlessly configure exhausted me and led me back to macOS.

I'm running macOS Mojave now, and hopefully this will fix some bugs so that I'll be able to use Nix as my package manager until I take another shot at a full NixOS.

> "Maybe I should have been more apprehensive, but everyone has your information at this point anyway," she said. "To give out my name and email and what I study does not seem so risky to me."

I hear this a lot. As a privacy advocate myself, what is the best response to this?

Take a look at ungoogled chromium

https://github.com/Eloston/ungoogled-chromium

I'm switching to protonmail because of this. It has a nice UI and as a bonus I'll get encryption.

Zero knowledge proofs come to mind. You could prove you voted for one of a set of people without saying which one

Although I'm always worried that one isn't really getting actual sleep if they are half-awake and thinking during it

Cloudflare's 1.1.1.1 DNS blocks https://archive.is

would it be difficult/possible to use this as a smart card with the proper code?

I assume you meant to add a /s to that

that "shady" domain is the official pastebin for freenode's Arch Linux IRC channel

https://github.com/aaronduino/jay -- an encrypted replacement for jrnl.sh

I mean no disrespect, but I find it bitter-sweetly amusing that, of all days, he died on Pi Day

https://en.wikipedia.org/wiki/Pi_Day