𝒍𝒆𝒎𝒂𝒏𝒏
Hey 👋 I’m Lemann
I like tech, bicycles, and nature.
- 1 Post
- 223 Comments
Flash drive hidden under the carpet and connected via a USB extension, holding the decryption keys - threat model is a robber making off with the hard drives and gear, where the data just needs to be useless or inaccessible to others.
There’s a script in the initramfs which looks for the flash drive, and passes the decryption key on it to cryptsetup, which then kicks off the rest of the boot mounting the filesystems underneath the luks
I could technically remove the flash drive after boot as the system is on a UPS, but I like the ability to reboot remotely without too much hassle.
What I’d like to do in future would be to implement something more robust with a hardware device requiring 2FA. I’m not familiar with low level hardware security at all though, so the current setup will do fine for the time being!
I think so, assuming these malicious packages are all primitive enough to just look for the single file in a user’s home folder lol. The only downside here is needing to provide the keyfile location to ssh every time you want to connect… Although a system search would pretty much defeat that instantly as you mention
SSH keyfiles can be encrypted, which requires a password entry each time you connect to a SSH server. Most linux distros that I’ve used automatically decrypt the SSH keyfile for you when you log in to a remote machine (using the user keyring db), or ask you for the keyfile password once and remember it for the next hour or so (using the ssh-agent program in the background).
On Windows you can do something similar with Cygwin and ssh-agent, however it is a little bit of a hassle to set up. If you use WSL i’d expect the auto keyfile decryption to work comparably to Linux, without needing to configure anything
For me it’s the ability to set up a shared instance with the base request URL, and set headers for things like the user’s token, allowing all requests made with that shared Axios instance to be sent to the right path with the token without needing to define them for each individual request.
To be honest though something similar can be done with spread syntax in the Fetch API’s options parameter
A lot of jQuery’s features are now available in native JS - would also suggest just using native JS anyway because jQuery won’t throw any errors into the console if a selector matches no elements etc.
The only additional library I’ve needed recently for (personal work) is Axios for requests - easier than working with the Fetch API in some cases
Because it’s from china doesn’t mean anything though lol. So are our phones, clothes, bikes, car electronics, batteries, practically all electronics except hard drives etc.
Don’t forget that there are talented individuals everywhere, regardless of whatever perceptions exist about their country of origin.
In this case, OP wants access to what they consider to be a good show, and that’s that 🤷♂️🏴☠️
Edit: sorry, I may have misunderstood your post - free email != email masking.
My original post below…
Curious why you consider email address masking services as for those with “drastic anonymity” requirements?
I personally don’t think so: they are pretty much just a digital P.O. box, and are typically not anonymous in any way (subpoena/court order to the provider). They are built-in to Firefox too, it will automatically create new ones OOTB as you sign up on websites, if you click the autofill.
They are however IMO one effective tool out of many to restrict the ability of data brokers and hacking groups (aggregated breach datasets) alike from making money from your online presence without your consent.
In almost all cases this data is freely searchable for law enforcement and private investigators, allowing them to avoid going through the legal system to investigate and possibly detain you for things you’re not guilty of
It was all getting spoiled for me in social media anyway.
I thankfully haven’t seen any spoilers for anything since moving to Lemmy… on other sites it’s silly easy to accidentally run into a spoilers for anything remotely popular 😭
Unless you follow ST communities here… then oops I guess spoilers are in your feed for each episode 😳
That is why I pay for open subtitles
Lost me right here. Personally I’m not ever going to pay for a service where the work done by volunteer users, for free, is filling some random person’s pockets. An argument can’t even be made a la RedHat here - there’s literally no value being added to the volunteers’ work by OpenSubtitles…
OpenSubtitles literally has pulled a shXtter here IMO
I even took the time to find way to backup my games so I can get legal ROMs too.
I have a FHDB PS2 and soooo many games to back up 😭 ughhh.
I have a few titles that I “backed up” 🏴☠️ already, but i’m not looking forward to ripping my physical disks… my PS1 library took the entire day and two cd drives, sadly most of those disks were partially unreadable
Seconded. I like having all my games in one place, on all my devices, with Linux support out-of-the-box thanks to Proton. Also, Steam DRM is easy to bypass with code available on GitHub if you really wanted to.
Epic does none of this for me, and I won’t support a company that called all gamers “shmucks” or whatever that C suite said
Mic drop