News for hackers. Stuff that matters.

jtdressel

Yes, you should get that checked out.
Re:About Security Keys for Apple ID on Monday January 23, 2023 @06:07PM (#34496409)
This is excellent news.

> At least two FIDO® Certified

I'm glad to see that they not only support, but require the use of multiple keys.

> iOS 16.3, iPadOS 16.3, or macOS Ventura 13.3, or later on all of the devices where you're signed in with your Apple ID.

and

> During set up, you're signed out of inactive devices, which are devices associated with your Apple ID that you haven't used or unlocked in more than 90 days. To sign back into these devices, update to compatible software and use a security key. If your device can't be updated to compatible software, you won't be able to sign back in.

I'm not ready to set this up, since I still use a few Big Sur and Monterey machines.

Re:Plex: Important notice of a potential data breach on Wednesday August 24, 2022 @07:40PM (#32587378)
Disclosure: I work at 1Password.

I used to use a catchall with my domain, but now I use our masked email feature. You need a 1Password account, and for fastmail to be your host.

https://1password.com/fastmail/

Depending on your settings, you can use your own domain (which is portable, but less anonymous) or you can generate *@fastmail.com addresses.

You could use this in addition to regular macOS machines. You can run tests from un-trusted branches, without worrying that something will expose the signing keys.

Then after merging, you have a second machine / set of machines that only does signing. It increases the difficulty of an accidental or intentional leakage of your sensitive keys.

(Note: I have not tested this yet)

Re:Vanced Discontinuation on Sunday March 20, 2022 @07:04PM (#30747703)
I think this is it: https://apkpure.com/youtube-vanced/com.vanced.android.youtub...

I have not done any level of verification.

I believe you lose gmail/docs/sheets.

Based on the below comment, I think you can keep some services like youtube and photos. That said, I strongly recommend every do regular google takeouts https://takeout.google.com/settings/takeout?pli=1

https://old.reddit.com/r/DataHoarder/comments/s7v4my/google_...

Re:Masked email from Fastmail and 1Password on Tuesday September 28, 2021 @09:16AM (#28682376)
This feature is an integration with Fastmail's masked addresses. You don't need to use their domain, but you do need to use them as your email provider.

Disclosure - I work at 1Password, though I had only tangential involvement in this effort

Re:Masked email from Fastmail and 1Password on Tuesday September 28, 2021 @09:06AM (#28682282)
Settings -> Domains -> Team Settings -> Masked email domain.

Disclosure - I work at 1Password, though I had only tangential involvement in this effort

Re:Masked email from Fastmail and 1Password on Tuesday September 28, 2021 @09:00AM (#28682231)
Thanks for the vote of confidence! If you have a custom domain at fastmail you can avoid any lock-in by using it for your masked addresses. Settings -> Domains -> Team Settings -> Masked email domain.

With that it's entirely portable. You can point your mx records at any other provider.

Disclosure - I work at 1Password, though I had only tangential involvement in this effort.

I don't have a lot of time, but this was an interesting question. If you message me I'll dig up references. There are nuances and exceptions to almost everything I list below.

The radio spectrum is a scarce resource. Two of the main reasons amateur radio users are given access to the spectrum is to help with disaster recovery and to advance the art and science of radio.

Callsigns are public - you can look up anyone's to see who they are.

You're required to give your callsign at the end of your transmission, and every 10 minutes.

There are some limitations on content. No music, no profanity, no commercial uses, and no encryption.

netiquette varies based on what you are doing. In general, shorter range bands have better sound quality and are more casual. Longer range has worse sound quality (or no sound like morse or ft8).

If you're on one of the shorter range bands (e.g. 70cm) you'll often find people who are keeping in touch with friends, or just looking for someone to talk to.

On the longer range, you'll run into stuff like contests - all the other person wants to know is who you are, and where you are. They're trying to see either how many contacts they can make in a period of time or how far away they're able to make contacts.

There are "formal traffic" nets - which pass messages. Local nets will route traffic they can't deliver to regional nets, and then back down to local nets. Usually they just pass practice traffic around - until a disaster occurs and they are needed. More info https://www.arrl.org/nts-manual

The lowest level license is the Technician. You can find the Technician exam pool online in several formats. https://www.arrl.org/files/file/VEs/2018-2022%20Tech%20Class...

Edit: I forgot about you abuse question. Hams tend to police their own or will work with the FCC to report people misusing the airwaves. The practice version of this is called "fox hunting" - where someone places a transmitter and you try to find it.

Most hams care about keeping the hobby alive. If they find someone who's broadcasting with too much power or without a license usually they'll try to work with that person to correct the behavior. If that doesn't work, they'll often work with the FCC.

Re:1Password for Linux on Tuesday May 18, 2021 @10:43AM (#27195257)
Were you able to update to 8.0.34? We recently moved the deb and rpm repositories to prepare for this release. Installing the deb or rpm from https://1password.com/downloads/linux/ should setup the correct repo for future updates.

If you have 8.0.34, and still can't log-in you may be experiencing the issue yabones described. [email protected] can provide you with more hands-on help.

(Disclosure: I work at 1Password)

I'm cis male. I recently decided to add pronouns to my slack and twitter bio.

I would prefer a world where pronouns are not gendered. I can't change that, but I can take the simple step of adding my pronouns. It costs me nothing, but may provide some comfort to others maligned by society.

I think your employer recommending it is fine. Wider adoption makes it more comfortable for trans/non-binary individuals to state their preferences. I'd object to an employer mandating it. My employer has a field in slack, but there is no pressure to fill it out.

This is a Mac app, not iOS.

This would be analogous to Microsoft kicking them off the windows app store. You could still download it manually.

Re:Ask HN: Best Talks of 2020? on Friday December 25, 2020 @11:52AM (#25537492)
I really enjoyed the RustConf 2020 Closing Keynote: https://youtu.be/RNsEsZbXE-4

It details how the Poikemon missingo glitches work. (In the context of how memory safe languages would prevent them)

Re:How much is YouTube worth today? on Sunday November 22, 2020 @12:20PM (#25179120)
It's free of ads from youtube. You'll still see in-video ads embedded by video creators.

(It's not like some podcast feeds, where you get a second rss link that has episodes without ads)

Re:ZSA Moonlander: A next-generation ergonomic keyboard on Friday July 31, 2020 @03:43PM (#24013037)
You probably don't, they are certainly not for everyone.

I have two of the earlier keyboards (ergodox ez). I gladly paid the price because it makes me more comfortable. I find it similar to a nice monitor or chair.

I don't know if my performance is better, but it's a nice piece of gear that's a joy to use.

Re:Understanding Certificate Pinning on Tuesday June 16, 2020 @08:14AM (#23538191)
Instead of pinning the cert, you can pin to one or multiple rsa public keys. Then you can use those keys when you generate signing requests (CSR) from lets encrypt.
Re:CPAP: Back-up power and battery systems for travel on Friday May 25, 2018 @09:33PM (#17159600)
I've been there, that's not fun.

You can often find inexpensive units on Craigslist. I think it's a great investment to have a second set that's always packed and ready to go.