Skip Navigation

observantTrapezium

@ observantTrapezium @lemmy.ca

Posts
2
Comments
62
Joined
3 yr. ago

  • Storing encryption keys for backup drives

    Jump

  • Personally I don't go with full disk encryption for backups. I use Borg that encrypts its repositories on a plain ext4 partition, and the key is saved in the config file (wrapped in passphrase of course). Obviously it just moved the problem of what to do with the passphrase... I also have Vaultwarden (with a separate backup mechanism).

  • And that would early

    Jump

  • I'm from English speaking Canada and I'm doubling down on 24h and metric.

  • Alternative to Gmail? I currently use my own domain for email, but i miss the priority inbox

    Jump

  • I have elaborate Procmail rules that sort out the mail. It's not a very modern solution and the syntax is quite horrible, but it works quite well.

  • Indian Government developed UPI app not allowing me to use the app w/o turning off Adguard.

    Jump

  • It could also be that the app is looking at parameters other than the hash (which would probably be that of the certificate authority rather than the domain's certificate), like the CN, which is potentially fakeble. You can also try to mess with the APK file, maybe find the strings associated with the certificate check and replace them. I won't fault the app's authors for making such a check though, MITM is so easy to do without certificate validation.

  • Removed

    How do you deal with LUKS?

    Jump

  • I don’t really need the encryption

    In this case I'd say, LUKS is an overkill and just complicates your life. Try to think of a worst case scenario and what you are trying to protect against. Full disk encryption protects you against someone physically and clandestinely tampering with your server to compromise you by altering your OS, I'd say most selfhosters aren't at risk of this (I do use LUKS on my laptop, because if I'm not available to decrypt the drive then there's no reason for it to get decrypted). My approach to the server is to have encrypted directories as needed. For example the SFTP directory, the logic being that some of what's there may be sensitive, so encryption at rest prevents leakage after the drive is eventually disposed of. But my Git repos (including private ones) and calendar aren't encrypted at rest. Other services (e.g. Matrix, Borg, Vaultwarden) provide E2E so don't really need further encryption.

  • Using Fail2ban to protect exposed services

    Jump

  • Exposing stuff to the internet shouldn't be that scary... I haven't had any incident so far in 8 years. Yes, you see plenty of illegitimate access attempts in the logs, but if everything is properly patched, it should be OK.

  • Seems a great many of you need this.

    Jump

  • This post is quite profound

  • "Sixty trillion years, seventy at the most."

    Jump

  • "The uploader has not made this video available in your country" -- fuck you Paramount, but OK, I have VPN.

    I'll give it a shot. I just pray that other than a few characters in common, it won't have anything to do with Discovery.

  • Cloudflare Tunnel?

    Jump

  • Vaultwarden isn't actually susceptible to man-in-the-middle attacks, since the passwords are encrypted and decrypted on the end device. But some relevant metadata do go over the connection so it'd better have TLS.

  • Would you drive an extra 20 minutes (10 miles) to get the blizzard on the right?

    Jump

  • Right? 😂

  • Five-star-ratings everywhere

    Jump

  • Absolutely right! To somehow make sense of the current system, I tried to do statistics of reviews and see how a product or a business fairs in comparison to equivalent products or nearby businesses. The problem is that now there are so many fake reviews in addition to unhelpful human review.

  • Wikipedia loses challenge against UK Online Safety Act rules

    Jump

  • No, I think they should ignore it and let the British government do what they will. Again, they are not bound by UK legislation. Similarly they don't block Chinese IPs because of censorship laws over there.

  • Wikipedia loses challenge against UK Online Safety Act rules

    Jump

  • I'm not an expert but I feel like organizations like Wikipedia that are not based in the UK and do not do business in the UK shouldn't fight or comply with this nonsense. If the British government instructs ISPs to block access to Wikipedia, let them, and see the uproar it generates.

  • Peak security

    Jump

  • Does it actually happen to people? All servers I worked with both had a back door (or two), and someone at the data centre (during work hours at least) you could contact in an emergency.

  • For people running a family chat in their #selfhosted #homelab: What is the system with the best mobile experience (both Android and iOS)? I've been using mattermost, but my family is not super

    Jump

  • Matrix, with the Element app on phones.

  • How to cook a chicken

    Jump

  • I confirm this as a physics PhD. I also understand exactly this thinking of assuming a system is in thermal equilibrium where it is far from it (like a chicken in am oven).

  • How to cook a chicken

    Jump

  • 205°C 😂😂😂

  • NSFW Deleted

    Permanently Deleted

    Jump

  • Full disk encryption with LUKS. Don't really see much point in a TPM for booting my personal device, although it definitely has use cases and I don't know what's backdoorsy about it.

  • Pdf to odt/docx conversion has me weeping!

    Jump

  • Interesting, I'll keep it in mind next time I have to deal with this problem (hopefully never but who knows).

    A few years ago I was in contact with researchers that were developing an AI tool to parse PDFs (I think they didn't care about converting to editable formats, but extracting data), from their material I got the impression that it's extremely difficult to do right using traditional algorithms.