whitepoplar

I don't own any crypto, but if I did, I'd probably choose to use a multisig setup with 2+ signers, including at least one (regularly pentested) software wallet.

Loved the book as well!

As someone who only has a cursory knowledge of Postgres backup systems, how does this compare to something like pgBackRest? When would someone reach for one over the other?

I'm curious to know how PlanetScale Postgres would fare.

A lot of people have been very vocal about this. I use uBlock Origin Lite and haven't noticed a difference between it and uBlock Origin. Am I missing something?

Wait, how do you properly clean glasses?

Do you recall the name of the manufacturer?

I'd like to switch to Bitwarden, but my singular focus is on security. I trust 1P because of its reputation in the security community. Does Bitwarden have any drawbacks when compared to 1P, security-wise?

16e still uses a Broadcom chip for WiFi + Bluetooth, though. iPhone Air is currently the only iPhone that uses both Apple-designed baseband + WiFi/BT chips.

Thank you so much for this!

Are you a person of high interest? I was under the impression that these sorts of breaches only happen to journalists, state officials, etc.

How much do you think Lockdown Mode + MIE/eMTE helps? Do you believe state actors work with manufacturers to find/introduce new attack vectors?

Tell us more about some of these ideas and approaches that changed you as an engineer! We'd love to hear!

Given that A19 + M5 processors with MIE (EMTE) were only recently introduced, I wonder how extensively MacOS/iOS make use of the hardware features. Is it something that's going to take several years to see the benefit, or does MIE provide thorough protection today?

There's no way to easily tell that those phones have unlocked bootloaders, though. Ex-Verizon phones may be completely carrier unlocked, will work on any network, and still have locked bootloaders. This isn't an issue for anyone running stock Android, but will restrict those phones from being used to run GrapheneOS.

One caveat--you have to be certain that you get a Pixel with an unlocked bootloader. There are a lot of Pixels (mostly sold by Verizon) that are unlocked for use with any carrier, but whose bootloaders remain locked. If you have one of these ex-Verizon phones, there is no way as of now to unlock the bootloader.

I would hope so.

Thanks! I think you're right about just using an HDD, but for my portable SSD situation, after a full read of all blocks, how long would you leave the drive plugged in for? Does the refresh procedure typically take a while, or would it be completed in roughly the time it would take to read all blocks?

How long does the data refresh take, approx? Let's say I have an external portable SSD that I keep stored data on. Would plugging the drive into my computer and running

  dd if=/dev/sdX of=/dev/null bs=1M status=progress

work to refresh any bad blocks internally?

Does the reduced price mean increased usage limits on Claude Code (with a Max subscription)?

This is great information, thank you! Do you happen to know to what extent MTE is used on Android 16 when both Advanced Protection is enabled and when the newly-released "Device Protection" feature is enabled?

Any word on whether this chip has "Memory Integrity Enforcement" capability, as included in Apple's A19/A19 Pro chips?

https://security.apple.com/blog/memory-integrity-enforcement...

Can you recommend some good books on how to learn these things?

Is this only available on iPhone 17 for now?

Do you use Gemini 2.5 Pro via Cursor?

why "the biggest house you can reasonably afford"?

Given your expertise, any chance you can comment on the risk of data corruption on APFS given that it only checksums metadata?

TIL! Any link to this?

Personal wish list:

- Right-side USB-C

- Slightly brighter display

- Slightly wider hinge angle

- Option for nano-texture display, just like the MBP

- WiFi 7

Can anyone with security expertise clarify what Wiz actually does? Is it a legitimate company or is it fuzzy consultingware?