modem_down
joined 1 week ago
Kdenlive is the top-ranked FOSS video editor on AlternativeTo.
I agree with that ranking, having also tried 5 or 6 of the other entries on the list.
Trust isn't really the point. Everyone knows Israel and Hamas don't trust each other. I'm more concerned with whether the violent conflict can be reduced, and a stable peace achieved.
Are Hamas's arms doing Gaza any favours? Not that I can see.
AFAICT, if Hamas disarmed:
- Israel's only(?) excuse for mass military action in Gaza would disappear.
- International support (already shaky) for Israeli military presence in Gaza would decrease.
- One or more of Australia, Canada, Costa Rica, Ecuador, Honduras, Israel, Japan, New Zealand, Paraguay, Trinidad and Tobago, the United Kingdom, the United States, or the European Union might end their designation of Hamas as a terrorist organisation, which could in turn increase the aid and other international support available to Gaza.
If you think I'm wrong, I'd be glad to know why.
Terrorism arises in defense to oppression.
Technical point: that isn't exhaustively true. Terrorism can be, and sometimes is, committed against vulnerable parties by more privileged ones.
Progress report 1
- I'm ruling out HMAC-SHA1, because:
- Plain vanilla HMAC-SHA1 uses a shared secret. I don't want the PC/server to have a copy of the credential. May also be susceptible to MITM/relay attacks.
- Rolling-code HMAC-SHA1 only partially solves those problems.
- Encrypted rolling code HMAC-SHA1 solves those problems, but I haven't found a reliable source for using it with LUKS.
- If using
systemd, pick FIDO2:- Avoids flaws of HMAC-SHA1.
- Native support in
systemd, so "future-proof". - Wider support than OpenPGP. More HST vendors to choose from, including cheaper options than NitroKey or Yubikey: useful if each sysadmin (or colleague, or relative) needs an HST.
- Compatible with QubesOS.
- Otherwise, OpenPGP:
- TBD: Clevis/Tang:
- Remote/network-based unlocking.
Thank you for this! That thread is helpful in itself, and also links to other relevant resources - including by Lennart Poettering (controversial guy, but the canonical source on systemd).
ChromeOS uses a Linux kernel, so one could say desktop Linux usage is >12%.
A young 'un! Macintosh, surely.
their setup required a couple large antennas that the victim would need to stand in between. Not impossible, but you'd notice with each side being half a meter away.
So yes, it's a technical risk, but not one that I'd bother putting much effort into avoiding. And the being able to use the key via NFC is probably worth the risk.
This was my conclusion, too, but I didn't want to prejudice the discussion. Thanks for confirming.
IMO, using a Faraday pouch isn't "much effort", and is therefore worth doing if the HST is being carried in unfamiliar/non-secure locations.
OS X (obsolete & unsupported since 2018) has more users than macOS?!
~~Also, where did you get those stats? https://gs.statcounter.com/os-market-share/all/north-america has different numbers to yours.~~
Link to stats: https://gs.statcounter.com/os-market-share/desktop/north-america
Interesting point. Would realistic human-edited ("Photoshopped") content have to be labelled? That could be a good thing!
(Might cause embarrassment for fashion magazines unless they stop doing it.)
Even if you can [exploit NFC] at 1m, thats close enough that it can just be stolen from you.
Stealing the HST should not give the user a false sense of security. Not so dangerous.
Silently exfiltrating the private key (or data for a replay attack), OTOH, would leave the user with a false sense of security. Dangerous.
your link to rfidgate appears broken
Wfm. Here's an archive link.
view more: next ›