Show more

Wow... thanks to SourceHut I was able to make my `pam-tacplus` project to compile clean on FreeBSD in like 15 mins git.sr.ht/~kravietz/pam-tacplu As easy as pie!

"My Semester With the Snowflakes”

When a 52 year old military vet became a freshman at Yale this fall, he found out that the students didn’t fit Faux News stereotype.

It’s a touching essay and worth your time:

gen.medium.com/my-semester-wit

Really cool idea: convention for self-describing data structures such as serializations, hashes, addresses etc

github.com/multiformats/multif

This three part highly acclaimed documentary series, produced in 1986, examines the pro's and con's of power as they have never been examined before...or since. amazon.co.uk/gp/video/detail/B

This is amazing, we evolved the alphabet from pictograms to highly stylized characters to letters and now we're going full circle by incorporating emojis such as 🐂 that thousands of years earlier became "a" and 🐟 that became "d"

Second, CTOs have the picture of manually keyed DNSSEC from 2000's (which was a nightmare) because this is when they usually stopped having hands-on experience with technology. They never heard about DNSSEC inline signing or ACME.

Third, large orgs frequently use "large" managed DNS providers, which suck at implementing "bleeding edge" technologies such as DNSSEC and IPv6. Or they will charge for them as "premium" features.

Show thread

Why is so unpopular among large orgs? As someone who works for large orgs I have seen a number of excuses, none of them really valid.

First, large orgs are traditionally risk averse and since they routinely screw up on simple "mandatory" things like TLS cert renewals so any mention of "DNS outage due to expired key" makes them freak out and reject any proposals of "optional" controls that could go wrong.

@eo

They are already, the cost of additional DNS and HTTP request is higher than multiplexing them in your own site.

csswizardry.com/2019/05/self-h

@kravietz @tyil @amolith @lioh

[*] with WhatsApp you can't really completely get rid of it because they actively ban independent client implementations so the bot uses WhatsApp Web, which in turn needs a running WhatsApp on Android. It can be an emulator (memory & disk hog) or a spare phone that sits at home connected to WiFi 24/7 just to do the bridging.

Show thread

Weekend achievements: 1) spin a private instance on Synapse, 2) get Telegram bot working, 3) get WhatsApp bot workig. This way I can get rid of both and [*] apps from my device.

On the screenshot - Matrix chat client with a number of private WhatsApp chats open and a number of Telegram groups I'm subscribed to.

So the European Central Bank has published a white paper about a crypto currency.

ecb.europa.eu/paym/intro/publi

But this currency seems to be an own development, requires intermediate banks to be involved in all transactions and puts those banks in charge of remove your data from smaller transactions to make them anonymous.

Let me put it this way: this is broken by design. And that while we already have solutions for those problems implemented in GNU Taler.

taler.net/

It's just sad…

"Galaksija" or Galaxy in Serbian, was a DIY computer from Yugoslavia, invented by Voja Antonić in 1983

It ran on a Zilog Z80 at 3Mhz and had 6K RAM and 8K ROM max. You built the whole thing, including the keyboard

Here's the complete listing from the Računari magazine (January, 1984) with the complete build instructions including the keyboard wiring (language is Serbian, I think)
voja.rs/galaksija/0102.htm

And the ROM-a B instruction set voja.rs/galaksija/ROM%20B%20Li

@amolith @kev I'm more concerned with Clouflare's dominance (~75% of high-traffic websites on internet) regarding caching HTTPS in exchange for website owners private keys (in effect silently compromising all visitors to said sites as well). After digging into en.wikipedia.org/wiki/Cloudble and the technical solution at Cloudflare making this security bug possible, along with their transparency (cloudflare.com/transparency/), it became apparent that this is the biggest orchestrated HTTPS weakness out there serving US government.

"Web design" has become kind of an oxymoron

On one hand, it's easier through building blocks, by including existing libraries. On the other, most people stick to the same or similar layouts

Also, browsing is a nightmare even on "non-app" type pages because of the sizes and number of third-party garbage. If it wasn't for uBlock Origin and uMatrix, I wouldn't be using a browser

Still thankful to @schnittchen for letting me know about uMatrix more than 2 years ago

Show more

kravietz 🦇's choices:

Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!