Notices by Gwmngilfen (gwmngilfen@fosstodon.org), page 22

Day one of #osseu was a blast! Voice is going because of all the chat, but I'll be back at the #RedHat booth today for more, so find me there, or come to my talk at 12.15 on communication tooling for communities!

#oss #openSourceSummit #edinburgh

If anyone is at #OpenSourceSummit in Edinburgh, you can find me at the Red Hat booth in the main foyer, apart from my talk in the community track at 4.15. Come chat!

#oss #osseu #foreman #redhat

@ben0_o @PhotonQyv my tradition is turning all the lights off, pretending to be out, and playing computer games in the dark. Works well :)

@HerraBRE the UK feels super authoritarian to me too, and I live here. Scotland is better though, at least for walking. We have the Right to Roam rules which means only stupidly dangerous places like MoD training areas are off limits :)

@AppleStrudelMan welcome, fellow data person! I should check out how #pandas work sometime, I'm probably too focussed on #rstats at the moment :)

Also autocorrect sucks. That's Or*bot*

Sigh. Heisenbugs are annoying....

* restarted Orbit - nope
* turned off Nginx and connected directly to Mailpile - nope
* changed Tor endpoint - nope
* tried it in the alpha of Tor Browser (instead of Orfox) - nope
* asked Orbit for a new Tor identity - WORKS

No, I have no idea why. Le sigh.

Sigh. Works great on tor-browser on the other laptop. Does not load in Orfox. Too late at night to troubleshoot right now ...

OK, got #mailpile fronted by an NginX reverse proxy (for SSL) and a Tor Hidden Service in front of that. So now I can access mail when out of the house. Snazzy!

#yakShaving #funWithPorts

Mandatory email encryption? Great idea, although tricky for enforcement? To be clear, that's mandatory TLS, with E2EE for sensitive mail (but the definition of whether a mail is sensitive is up to the controller). Good for awareness at least, I would expect.

Interesting that it applies to "businesses doing business in Denmark". I wonder how this will play out with foreign companies...
https://tutanota.com/blog/posts/denmark-email-encryption-gdpr

@Tutanota @HerraBRE

(Hattip: neil_neilzone on Twitter)

@kev @LibertyPaulM @ChrisWere depends on your threat model I guess. The first challenge would be getting hold of the password database, which is not easy (compared to getting access to my account on a given website *without* 2fa). Assuming you look after the DB well, of course ;)

That said, you could store the 2fa tokens in a separate DB, perhaps secured with a key-file? I'm not actually convinced that's better given my personal threat model, but perhaps it would help you :)

@LibertyPaulM @kev @ChrisWere password managers can often handle 2fa (keepassxc can), although that doesn't help if you're away from your machine.

I'd miss my #OpenHab app for controlling lights and heating. Maybe I can ditch that if I get Mycroft up and running...

@HerraBRE oh! Then it doesn't count. You should totally not eat those at all ;)

@HerraBRE but, but, they're so tasty! Marzipan is great... :)

@dkl @tek I put those in an "optional" section. Not all trips require the same things.