Notices by Gwmngilfen (gwmngilfen@fosstodon.org), page 18

For the record, the official description of that feeling is "*sigh* FINE" :)

TFW when the local WiFi blocks client-to-client connections, so you're SSH'ing between two side-by-side machines via sshd exposed as a Tor Hidden Service...

#tor #onion #TheresAlwaysAWay

@karokann yes. happily I own my own domain, so I have an infinite number of addresses to use.

Does cause surprise to non-techy people on the phone when I give "your-company@my-domain" though :)

@kungtotte @acasajus No, the whole idea. An election must be:

1. Anonymous
2. Trust (lack of)
3. Comprehensible

1 & 2 are obvious. 3 matters because if the public can't understand how the votes are tallied, they won't have confidence in the result. Our process relies on everyone accepting the result, which is broken if people can't trust the process.

I don't think you can design an e-vtoing system that satisfies all three conditions. Two, yes, not three.

Source:

https://www.youtube.com/watch?v=w3_0x6oaDmI

@acasajus agreed, but it weakens the argument for evoting significantly, I think. At least, I hope it does, it's a daft idea...

Scotland's evoting consultation:

"When asked whether they would be more likely to vote if e-voting were available, 65% of the public said no."

Proud of my fellow Scots for seeing sense on this, and groups like ORG for promoting that sense.

(Source: ORG mailshot. Will try to find a link)

Laptop progress: basic i3 config in place, some half-decent font config, Firefox, and a manual netctl profile.

Aurutils is building a few things for round 2 (eg nextcloud client), so that's for tomorrow

So far, it's all in a massive #salt state file. Will need cleanup, but at least I'm sticking to my config management goal :)

@GreyLinux yeah I tried pcbway but I'm getting website errors on their site. Probably transient if it worked for you, will try again later.

@GreyLinux out of interest which manufacturer did you use?

@GreyLinux nice! I'll have to order a few.

@cybette +1 to that, I've had a similar response. Communities are awesome.

Laptop install round 2 - a decent dose of TFTP-B-Gone ;)

@measlytwerp private keys should not be transmitted at all, ideally, they're sensitive data. Generate them on the client, then upload the public key to the server

@measlytwerp I should also say, I am no security expert. Many of the key exchange and end-to-end encryption methods in chat clients may be more suitable (eg autocryot, olm in matrix, etc). I just know gpg *can* do it.

@measlytwerp as ever with gpg, your challenge is getting users to understand public/private key cryptography :)