[-] astray@lemm.ee 2 points 10 months ago

Reddit is just like Digg to me now.

[-] astray@lemm.ee 2 points 10 months ago

A security module or a key fob/smart card processes the key internally using its own dedicated ram and cpu without any debugging support. This way, even something will full ram and cpu access or a compromise of your machine, there is no way to export or access the key. Data is passed to the module and it returns the scrambled or unscrambled result based on the key which no body knows or has ever seen. A key locked with no way to access can’t be hacked without physically stealing the module, which is where your pin comes in to save you. The TPM is a very important part of a secure boot chain. If you want to secure other things I wouldn’t blame you for using a separate module or fob that isn’t always connected util it’s actually needed and it should only be activated with a physical button or something so you have to be present to engage with it. This adds even more security. So you could use the TPM for boot chain security and a separate fob or data privacy for example.

[-] astray@lemm.ee 0 points 10 months ago

Why does the game mod have this much access?

[-] astray@lemm.ee 1 points 10 months ago

You’d have to pay me to look the other way and ignore security too.

[-] astray@lemm.ee 2 points 10 months ago

I wish Elon would scare away Reddit’s advertisers instead of twitter’s.

[-] astray@lemm.ee 1 points 10 months ago

You over estimate my ms painting abilities. That star would take me ages.

[-] astray@lemm.ee 22 points 11 months ago

What about GLONASS, Galilleo, or BDS? Are they all being equally jammed? Why wouldn’t they sync with all of them and use a consensus to determine accuracy? Like having multiple ntp servers.

[-] astray@lemm.ee 47 points 1 year ago

Use root to create new user, then run app as new user.

[-] astray@lemm.ee 0 points 1 year ago

Or you could use a separate key on each device.

[-] astray@lemm.ee 6 points 1 year ago

Google trough the Chrome Project are pushing certificate authorities to offer automated certificates services to customers to make their use more prolific. Certificate authorities only have value if they are included in the certificate store, so they will do whatever it takes to be in there. Certificate authorities are the organizations we trust to say if a website is secure enough to display the lock in the browser instead of an error.

[-] astray@lemm.ee 3 points 1 year ago

But just one of them. so much lack of symmetry.

[-] astray@lemm.ee 8 points 1 year ago

Anything Cisco that says FE is 10/100mbit.

view more: next ›

astray

joined 1 year ago