closeneough

How does Windows compare to this?

This project is about reverse engineering the firmware blobs. It states that they do not want to create a distribution like postmarketOS or other projects do.

why is this story with 200 votes not on the front page?

Drew DeVault posts also regular updates on mastodon: https://fosstodon.org/@drewdevault/111738819188358936

Duplicate: https://news.ycombinator.com/item?id=38189817

If you wanted to create an ebook from scratch, how would you do this? Would you write plain html. Would you write markdown, and convert it? What tools would you use?

Nope, it just has been announced. There is no release yet.

There is one. The first link when you open the blog.

https://harelang.org/blog/index.xml

Imho as everywhere in this field there are tradeoffs to choose for improving this problem: Complexity (rust, formal proofs), runtime overhead (GC), etc.

Hare tries to be simple, so that it's easier to reason about the code and hence maybe find/avoid such bugs more easily.

It's the name of the players horse.

Isn't this true for every culture?

Ah yes, it's cloudflare of course. On of the other contesters.

Yes, send more data to big companies like cloud front and google. They need it.

Yes you need to trust the software. But unless you don't store it on your computer, you need to trust software. The hard part is to figure out which software and whom to trust.

I would definitely use the browser password manager, if I could choose where to sync the data to. I think it's possible with firefox, but it's not straight forward.

I personally trust pfp, because the creator is doing audits of browser addons and publishes them on his blog. They are very well explained.

Also the code is quite compact compared to the other password managers. LastPass, 1Password and Bitwarden have more than 100,000 lines of code, including many third party dependencies. So an audit of PfP is more feasible.

It's still in the works and unfortunately I've written it in German. If you're still interested I'll share a link as soon as it's released. Should be sometime this summer.

Pfp puts the icon in the browser bar, to counter such action. So the pop-up can only be opened this way and the pop up is in a different context than the website itself.

Yes the pop-up could be faked, but not the button.

Actually Tavis Ormandy found a lot of security breaches in password managers that loaded GUI elements into the website. Not only that you can fake it, but also they are susceptible to clickjacking.

I would NOT recommend the chrome password manager. If you sync your passwords, they will not be stored encrypted at the google side. You need to specifically set password encryption in the settings.

I've also spend a lot of time with understanding password managers in my master thesis. What I can recommend is: https://pfp.works/

The creator was auditing password managers like LastPass, found a lot of issues, and used his knowledge to create pfp, which does it right imho.

Why should I believe this site?

I'm using e.foundation for a while now on my Moto G3 (osprey) and it's working ok despite a few camera/gallery crashes here and there.

The only thing I'm not really fond of, is that the apps come from an opaque source (https://info.cleanapk.org/). I also found no information on how those apps are signed, and how this is checked. Upon asking them, someone pointed me to a git commit where an outdated public key of F-Droid was used.

I've decided for --list-kept. --invert will be supported to not break scripts.

Thanks for the input and for pointing out the typos. They are fixed now.

I will consider changing the invert flag, but I'm not that happy with something like "--list=...". There will be only two modes with discard being the default one. So imho there should be only one flag to switch to the non-default mode.

Yes, this was a starting point for me. I was referencing to borg prune in my initial readme, but I dropped it because the algorithm works differently and I wanted to avoid confusion.

I also was missing such a feature. That's why I build this.

This is also a initiative to improve this situation:

https://paragonie.com/blog/2018/01/our-ambitious-plan-make-i...

also known as the Garden of Eden Creation Kit (GECK)

For those who are looking for ways to improve on how we learn, I recommend the book "Make it stick": http://www.makeitstick.net/

It was a real eye opener for me.

Maybe a lot of people want to trade this at the same time for really currency to buy Christmas gifts.

Can you explain why?