ooterness @ ooterness @lemmy.world

I'm an electrical engineer living in Los Angeles, CA.

---

Read more

Posts

0

Comments

302

Joined

2 yr. ago

Every time I see "lichess", it makes me think about "lich-ess", i.e., a female undead wizard.

Florida Man strikes again.

Freedom sounds intensify

AOC for President.

Elerium-115?

I assume this guide is for engaging the F-117 in midair hand-to-hand combat after you've leapt aboard. But in that case, where are you supposed to get dirt? Bring it with you, like some kind of peasant?? Just use your sword like a normal ninja.

Sadly, Firefox mobile got rid of about:config, and I can't find any relevant options in the regular settings.

You can disable this "feature":

1. Visit about:config
2. Set "dom.private-attribution.submission.enabled" to false

Sure, but there's still no excuse for "store the password in plaintext lol". Once you've got user access, files at rest are trivial to obtain.

You're proposing what amounts to a phishing attack, which is more effort, more time, and more risk. Anything that forces the attacker to do more work and have more chances to get noticed is a step in the right direction. Don't let perfect be the enemy of good.

No, defense in depth is still important.

It's true that full-disk encryption is useless against remote execution attacks, because the attacker is already inside that boundary. (i.e., As you say, the OS will helpfully decrypt the file for the attacker.)

However, it's still useful to have finer-grained encryption of specific files. (Preferably in addition to full-disk encryption, which remains useful against other attack vectors.) i.e., Prompt the user for a password when the program starts, decrypt the data, and hold it in RAM that's only accessible to that running process. This is more secure because the attacker must compromise additional barriers. Physical access is harder than remote execution with root, which is harder than remote execution in general.

UTC is better than most, but leap seconds are still awful. Computers should use GPS or TAI everywhere. Dealing with time zones and leap seconds is for human readability and display purposes only.

Full disk encryption doesn't help with this threat model at all. A rogue program running on the same machine can still access all the files.

I'm tired of having to choose between "Uvalde shooter" and "Uvalde cops" in every election. Fucking do something or get out of the way.

How is this a science meme?

CBOR for life, down with JSON.

I'm looking at you, Olórin, Mithrandir, Incánus, Tharkûn, Greyhame, Stormcrow, Láthspell, and/or Gandalf.

Clippy knows all and sees all.

It's a parody of overserious memes that are trying to sound edgy and badass. The archetype is a gun-wielding skeleton that's riding a motorcycle and saying something about thin blue lines, but wolves and other imagery are also adjacent.

Instead, THE_PACK takes that aesthetic, cranks it up to 12, and adds some silly text. Everyone is role-playing as a skeleton that's obsessed with motorcycles (hogs). You have to TALK IN ALL CAPS to be heard over the engine noise. And everyone's friendly and welcoming in a way that edgelords aren't.

A few great examples from the last year or so:

• Exhibit A
• Exhibit B
• Exhibit C

IMMA LET YOU FINISH, BUT THIS MEME ABOUT CRANKING HOGS WOULD BE WAY BETTER IF IT HAD FLAMING SKELETONS IN IT.

Yeah, Tactical Breach Wizards has been in development since at least 2020. I was in the closed beta in 2022 and it was pretty great. They've finally announced the release date of August 22, and I'm excited.