News for hackers. Stuff that matters.

g3rv4

Re:Installing NixOS on Raspberry Pi 4 on Tuesday July 18, 2023 @06:11PM (#36779762)
I'm submitting this with the hope that folks share other NixOS tutorials.
Replied with this on a different thread, but I built an extension[1] so that I could choose which sites are opened in Chrome... so that whenever I need to use Google Meet, it automatically opens it on Chrome.

[1]: https://onchrome.gervas.io

I built an extension[1] so that I could choose which sites are opened in Chrome... so that whenever I need to use Google Meet, it automatically opens it on Chrome.

[1]: https://onchrome.gervas.io

Re:Assume your devices are compromised on Monday April 18, 2022 @07:01PM (#31077768)
I agree, if I lost my memory and can't remember how to access my blog or run docker then I'd be out of my digital life.

In that scenario though, I'd also be out of my digital life even if I had access to 1password.

Re:Assume your devices are compromised on Monday April 18, 2022 @12:03PM (#31072538)
I wish I found your app before I wrote mine [1] :) you seem to be way better versed in cryptography than I am. What's the advantage of having the main document and the keys separated?

[1]: https://g3rv4.com/2022/04/using-shamir-secret-sharing

Re:Assume your devices are compromised on Monday April 18, 2022 @10:19AM (#31070977)
instructions are on my blog :)
Re:Assume your devices are compromised on Monday April 18, 2022 @05:56AM (#31068946)
I trust it enough no solve my DR scenario. If I was targeted by the NSA, I don't expect this to keep me safe.

I don't think SecretSharingDotNet has had any audits, and I'm pretty sure i hasn't been checked for side-channel attacks. I couldn't find anything in GitHub [1] saying it's no longer maintained though.

I'm pretty sure a well founded attacker would be able to hack me, but I think it's orders of magnitude more likely that I'll forget my master password, I'll get stolen, my apartment will catch on fire or I'll just die. Those are the scenarios I'm preparing for.

[1]: https://github.com/shinji-san/SecretSharingDotNet

Re:Assume your devices are compromised on Sunday April 17, 2022 @07:59PM (#31065762)
here you can see how I'm using Shamir Secret Sharing, I gave clear instructions on how to use the shares and in what circumstances.

based on their dynamics, I'm feeling pretty good. I know I have some people there that are tech savvy + some that will take good care of their shares and when they should send those to whom.

Implementation is trivial (especially if you find a library) but maybe you can be inspired by my plan https://g3rv4.com/2022/04/a-plan-for-my-secrets

Re:Assume your devices are compromised on Sunday April 17, 2022 @07:15PM (#31065440)
Shamir Secret Sharing could be the answer you're looking for... I'm sleeping better at night

here's a quick blog post I wrote with my plan. The app is trivial to write if you find a library for your preferred language

https://g3rv4.com/2022/04/a-plan-for-my-secrets

Re:Assume your devices are compromised on Sunday April 17, 2022 @07:14PM (#31065434)
yeah, I've been thinking a lot about it... Shamir Secret Sharing and splitting the shares in a way that makes sense to me have me piece of mind.

I even wrote a trivial console app to let my wife restore my secrets if I were to drop dead tonight.

Re:A Conspiracy to Kill IE6 (2019) on Saturday September 11, 2021 @02:38PM (#28494578)
Re:Chrome extensions are tampering with security headers on Thursday May 27, 2021 @11:07PM (#27311312)
slack. I do so with my extension[0]. At one point they rewrote it and added CSP.

In order to inject my code before theirs, I had to come up with different approaches on FF and Chrome... and since it was starting to become a cat and mouse game, I just took the extension private.

After that, they didn't escalate their game. I'm thankful for that, so that I can keep enjoying it without spending lots of time figuring out how to mess with it.

[0] https://refined.chat

Re:Ask HN: What a universal remote job salary should be? on Sunday April 25, 2021 @05:18PM (#26936772)
Also: nice to see you here as well, this is a small scene :P it took me a bit to recognize you!
Re:Ask HN: What a universal remote job salary should be? on Sunday April 25, 2021 @05:17PM (#26936766)
ha, I'm also from Uruguay. A couple months ago I received 3 offers. One of them explained their offer was "the salary from Philadelphia adjusted to the local market". The other two offers where comparable to what I've been making (similar to a US salary). I didn't go for the "local-market adjusted" one.

The only thing they're doing is missing on some talent, but that could be ok for them.

at a macro level? sure. At a micro level, had I been convinced that my pay was fair (it was enough to cover my needs and save) and not asked for more, I’d be making upwork money.

Older »