Notices by Rysiekúr Memesson (rysiek@mastodon.social), page 6

TIL about a keepass-rs, "KeePass kdbx database file parser" written in Rust:
https://github.com/sseemayer/keepass-rs

Another user used it to make a Rust CLI tool to create diffs of 2 KeePass databases: https://github.com/Narigo/keepass-diff

I should definitely set this up: https://github.com/woju/qubes-app-split-git

...to manage my #QubesOS Salt config.

Obviously, I should do that using Salt.

Waaait... 🐓 🥚

Self-Encrypting Drives, or why "hardware" SSD encryption is mostly crap: https://media.ccc.de/v/35c3-9671-self-encrypting_deception

Great #35C3 talk, with live demos (and a kernel panic). Conclusion: stick to dm-crypt.

#InfoSec

@jeffcliff

Any sufficiently hyped technology is indistinguishable from crap.

@freakazoid @KitRedgrave I don't assume restrictions are always legitimate.

If you are worried about how the banking system works and enables high-level graft, wait till you see what people getting millions in bribes can do with a real privacy coin.

Money is power, power corrupts and needs to be checked. Superrich already have it easy, no need to make it easier for them to screw us over even more.

Hey @cwebber do you know what the ticket price is for Copyleft Conf? Cannot find it anywhere outside of the login-first-area...

So, the fact that my main e-mail client (Mailpile) and my social media (Mastodon) are both browser-based means that I cannot easily open random links coming my way through these channels in a separate cube, using porcupine: https://micahflee.com/2016/06/qubes-tip-opening-links-in-your-preferred-appvm/

This is less than ideal. Why does everything have to be browser-based these days.

Full-time #Mozilla #Thunderbird staff growing to 14 this year:
https://blog.mozilla.org/thunderbird/2019/01/thunderbird-in-2019/

This bit I like very much:
"The primary reason we’ve been able to do this is an increase in donors to the project. We hope that anyone reading this will consider giving to Thunderbird as well. Donations from individual contributors are our primary source of funding, and we greatly appreciate all our supporters who made this year so successful!"

@galaxis @elomatreb also 2018: every "app" is now a thin layer over a full blown browser with JS, video, and audio support, but tracking ~2 versions behind the upstream browser and carrying vulnerabilities fixed in (and described publicly by) the upstream.

Tumblr's porn filter blocked Tumblr's images illustrating what Tumblr's porn filter won't block
https://boingboing.net/2018/12/18/shitty-bot-inception.html

I'm struck by how similar the Russian influence ops were to traditional Internet direct marketing campaigns. Make organic ad copy masked as legit content (guides, etc), buy targeted GOOG/FB/etc ads pointing to content. Main diff is payload: manipulating your vote, not your purse.

@rysiek kill it with defederation

@rysiek pleroma has a how-to: https://git.pleroma.social/pleroma/pleroma/wikis/Easy%20Onion%20Federation%20(Tor)

Received my personal data center 🤗

This would make a great #pubnix wouldn’t it?

@m4iler @ryen @rysiek @bob

alright, so OPSEC guide for defeating this tech.

IR emitters.
Pebble in shoe.
Be a fan of ICP or Kiss.

got it.