exfil
Re:Apple fixes bug that cops used to extract deleted chat messages fro...
on Thursday April 23, 2026 @02:14AM (#47872715)
Agree. Peoples are trusting App with unknown source code & delivery path, infrastructure controlled by 3rd party. Application cannot protect against OS and OS cannot protect against HW. Too many known unknowns. Seek the arguments how and why OTF got re-funded last time.
Re:A privacy VPN you can verify
on Saturday August 16, 2025 @08:52PM (#44928055)
Where you connect to your "cash obtained" VPN? That IP has your name on it.
Re:A privacy VPN you can verify
on Saturday August 16, 2025 @05:49AM (#44921822)
You cannot offer service for money with user anonymity. Your legal knows that.
Re:A privacy VPN you can verify
on Saturday August 16, 2025 @05:47AM (#44921810)
Yes. But your cash gets attributed by your origin IP address. Which you pay with your identity available.
Re:A privacy VPN you can verify
on Friday August 15, 2025 @09:14PM (#44919118)
These VPN's for privacy are so bad. You give your credit card (verified identity), default gateway and payload to foreign soil and feel safe. On top of that your packets clear text metadata verifies you with cryptographic accuracy.
In today's internet you just cannot have exit IP which is not tied either into your identity, payment information or physical location. And don't even mention TOR, pls.
Re:Ask HN: What are you working on? (July 2025)
on Sunday July 27, 2025 @08:01PM (#44705850)
Add backup and out-of-band communication into your portfolio and you're good.
Re:GitHub Is Down
on Wednesday August 14, 2024 @07:26PM (#41251674)
I am happy that my project is pushed also to codeberg.
Re:Considerations for a long-running Raspberry Pi
on Saturday February 17, 2024 @08:15AM (#39409146)
Yes. They use them like that.
Re:Considerations for a long-running Raspberry Pi
on Saturday February 17, 2024 @07:57AM (#39409034)
I run my RPi's 24/7 from initramfs. I can even remove card after boot.
Re:Signal: The Pqxdh Key Agreement Protocol
on Friday September 22, 2023 @09:52AM (#37612068)
"Don't roll your own crypto..."
Re:Linux Phones (2022)
on Thursday September 14, 2023 @09:42AM (#37508928)
It's not 'Linux Phone' problem.
Problem is that Cellular is most surveilled domain in the world.
Re:A fully open-source and end-to-end encrypted note taking alternativ...
on Sunday September 04, 2022 @07:22AM (#32711885)
You're right. Probably pricing is justified. Just hate to give email details for login.
Re:A fully open-source and end-to-end encrypted note taking alternativ...
on Sunday September 04, 2022 @12:37AM (#32709879)
When I see 'pricing' on top of page and sign on requiring email & password, it's better to close tab.
Re:PGPP (Pretty Good Phone Privacy) Beta Launch
on Friday August 12, 2022 @12:12AM (#32434640)
Part of the 3GPP standardization process is to ensure law enforcement stays efficient. So this IMSI change is totally futile. Sorry guys. If that 'co-founder' wants to speak, dm.
Re:Assume your devices are compromised
on Monday April 18, 2022 @05:52AM (#31068927)
I have macsec (L2) separation for my dev hosts and out-of-band keying with Nitrokeys. So lateral movement in my LAN cannot reach my dev station on IP level. Don't trust my router (zyxel) Chinese firmware.
Re:Random number generator enhancements for Linux 5.17 and 5.18
on Friday March 18, 2022 @10:51AM (#30723006)
What would be best way to evaluate randomness quality? This is something I've been thinking a lot. Yes, there are 'ent' and others, but I am more after trend of randomness quality over weeks and months.
Re:Computers as I used to love them
on Friday January 07, 2022 @08:36AM (#29838916)
I really would like to see Syncthing which is not built using Go. Plain C implementation would be more usable in various environments.
Re:Ask HN: Intercepting HTTPS – How can we trust anything?
on Saturday December 25, 2021 @06:38AM (#29682434)
Most of the nations have global TLS transparency solution in place. And CA's sign those intercept certificates by law.