kenniskrag

Which ones? I try to learn how these systems work

You can edit the url to use any number. :)

which rss reader do you use?

Generally it depends on the threat vector.

* Do you trust the hardware

* Do you trust the OS

* Do you trust the user

* Do you trust the software

On a rootkit you don't trust the OS anymore. So a safe location inside the OS space isn't an option anymore. But often you are not a root user (e.g. android, windows in a corporate environment)

If you have OS backups there is a risk it is readable by others (e.g. cloud, different IT department). There is also a risk a user uploads the config somewhere.

If you want to rotate keys you would have to search all keys compared to a centralized location.

yes because more than one process can access the file.

A "password manager" provides a defined api and schields the password away from everything. It can also ask the user if process x can access the key y.

TL;DR: Windows Defender had a bug that made certain system calls expensive on CPU cycles when Defender's Real-time Protection feature is enabled. After discovery, Mozilla reported this issue to Microsoft. Microsoft is releasing a patch that should result in lower CPU usage when using Firefox on sites like YouTube (a ~75% CPU usage reduction was noted when browsing YouTube in Firefox with the fixed version of Defender).

https://news.ycombinator.com/item?id=35458746

Is https://www.portvintages.com/ the book?

chocolate

I recently saw a green dot on the right corner during camera usage on android. Probably a (new) feature of android.

Nice idea. From the docs:

Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. The purpose is to put your real SSH server on another port and then let the script kiddies get stuck in this tarpit instead of bothering a real server.

Since the tarpit is in the banner before any cryptographic exchange occurs, this program doesn't depend on any cryptographic libraries. It's a simple, single-threaded, standalone C program. It uses poll() to trap multiple clients at a time.

https://github.com/skeeto/endlessh

Sometimes the default after creating the VM. Sometimes it is, if you start in the recovery mode (usually with a random long password)

Is there an algorithm to convince you?

I'm younger than the years he is hiding :)

A link to the official guideline would be nice. Asking for a friend.

I always wear a parachute during paragliding :)

What's about online poker. Is there also a bank advantage if you play perfectly? Is it allowed?

How is that possible? Sounds counter-intuitive.

Do you have a recommendation for reading?

DevOps should IMHO not be a job role but a company philosophy.

The developer should alao maintain their software and deploy it. Has IMHO a lot of advantages

see here: https://support.google.com/a/answer/10801691

It is encrypted by the key service and not by google: https://support.google.com/a/answer/10801691

can be self hosted.

I use hetzner storage. You can attach it as external storage and costs 4 EUR https://www.hetzner.com/storage/storage-box?country=de

because inflation is high it could be used as an investment.

I see a danger that poor countries can't pay this price and fail to develop.

And I hope someone gets the money of this carbon certs and does something to reduce the impact?

I used aerc: https://aerc-mail.org/

I use cockpit but maybe too much:

https://cockpit-project.org/running

maybe exists but i found some flashlights on amazon. But as always verify that it is not a scam and I can't right now.

here a video, where he shows some features: https://codepatterns.vercel.app/

Why should a company make a profit? It's all about managing cash flows.

Just add the good key to the ssh config file on the client:

IdentityFile ~/.ssh/some.key

and here the video: https://youtu.be/7FeqF1-Z1g0