tnbp · HackerTrans

vor 2 Jahrendiscuss

I documented how I did it here, which definitely involves downloading an older version of Steam: https://web.archive.org/web/20240412101635/https://datacu.be...

tnbp

vor 2 Jahrendiscuss

1. Doesn't matter. ZFS or whatever. I use ext4, it's good enough.

2. Buy as many 3.5 inch external USB drives as you need to reach 23 TiB, then connect them all over a single USB hub. Buy the same drives again, shuck them, and stuff them in this[1]. Store them in one of these[2] when you're not doing a backup and put it somewhere outside your home. Merge them all using mergerfs.

3. rsync. If you need to think about how precious your data is, at 23 TiB, you've already lost. Just backup everything in triplicate. Don't bother setting up RAID; it's not a backup.

[1] https://www.amazon.com/-/en/dp/B07MQCDVJ2/ [2] https://www.amazon.com/-/en/dp/B087WXFFW6/

tnbp

vor 2 Jahrendiscuss

Your comment is incompatible with mine, so one of us must be incorrect; I will leave it at that.

tnbp

vor 2 Jahrendiscuss

This! Your bank should never get a say in what you run on your phone or even if you have a phone. Do not take any such bullshit.

tnbp

vor 2 Jahrendiscuss

I can show my government-issued ID to any third party without the government knowing about whom I've shown this ID to. The third party needs to trust the government and the authenticity of the ID.

The problem is that my ID contains too much information; I would prefer a document (i.e. digital certificate) that only certifies my age, not my name, address etc.

tnbp

vor 2 Jahrendiscuss

That sounds nightmarish. I don't want the verifier to know what porn sites I visit. Someone else proposed the following system to me: a third party authority issues a certificate which I can then use to prove I'm 18. The CA cannot see where I use the certificate, though.

tnbp

vor 2 Jahrendiscuss

  Some more clever sites asked for my birth year… forcing me to do the arduous work of taking the current year and subtracting 14.

But why? You could have just picked a year that worked, and sticked with it. Obviously, there's no way of telling which year works, but you could have bruteforced that just once.

tnbp

vor 3 Jahrendiscuss

We have no reason to believe you. However, there is one party who really benefits from people considering all encryption weak and all cryptography broken: the NSA.

tnbp

vor 3 Jahrendiscuss

You should not require users to change their passwords periodically, as this will piss them off and make them use many weak passwords rather than one strong password. Only require a password change when there is reason to believe their old password has been compromised.

tnbp

vor 3 Jahrendiscuss

You can technically do this with TOTP if you save the secret instead of simply enrolling the account. You're not supposed to do that, though.

tnbp

vor 3 Jahrendiscuss

Both are true, #2 is huge. I would like to add: 3. Self-checkout displaces workers to the benefit of stores and the detriment of society at large.

tnbp

vor 3 Jahrendiscuss

Surely, this computer must have come with a non-BT keyboard and/or mouse, though?

tnbp

vor 3 Jahrendiscuss

  Even if I do have keys, they are safe in my pocket, not sticking out the side of a fragile USB port.

It's difficult, though not impossible, to break your USB port with a Yubikey due to its shape. It's not a regular USB plug and will come out quite easily.

  but how about when I'm using a mobile and my laptop is in my bag, or at home?

USB-C and NFC variants are quite common.

  And OK, lets say I solve all that. How do I add a second key?

The same way you add the first--most of the time, you have to scan a QR code. You can scan it more than once.

  The beauty of SMS for 2FA is that my phone number sticks with me. If my phone is lost or stolen, a new sim card is sent to my home and I have access to all my 2FA authenticaitons.

I'm not giving you my phone number, and mobile providers are known to send replacement SIM cards to random strangers if they ask nicely.

tnbp

vor 3 Jahrendiscuss

where can I read your paper

tnbp

vor 3 Jahrendiscuss

But it's a key though. It goes on the keychain. Unless you don't carry around keys either, in which case yes, that would be very inconvenient indeed.

Also, your Yubikey is probably less likely to be stolen or break, but I figure it's much easier to lose it, which is why you might want to have two, just in case. And that's where it gets really inconvenient.

tnbp

vor 3 Jahrendiscuss

I'm a bit confused why the author is unfazed by "eleuthero root" and "cordyceps mushrooms", but puts "nascent iodine" in scare quotes.

Is it not nascent iodine? If no, then what is it? Oh no, it's nail clippings, isn't it. Gwyneth has tricked me yet again!

Edit: Thanks to everyone who replied--I learned something!

tnbp

vor 3 Jahrendiscuss

That's also possible; my mind was going the prostate route.

tnbp

vor 3 Jahrendiscuss

Give it a few years, pops :-)

tnbp

vor 3 Jahrendiscuss

Your web app is most likely rubbish and 20 times as complicated as it needs to be, and probably still nothing special.

A website that requires JavaScript is, and always will be, worse than one that accomplishes the same without JavaScript.

tnbp

vor 3 Jahrendiscuss

Do this only if you don't care about the people that use (sometimes: have to use) your software. Otherwise,

>> Choose the least powerful language suitable for a given purpose.

(Don't make me needlessly enable JavaScript to use your site.)

comments