[-] riskable@programming.dev 55 points 16 hours ago* (last edited 16 hours ago)

This is a, "it's turtles all the way down!" problem. An application has to be able to store its encryption keys somewhere. You can encrypt your encryption keys but then where do you store that key? Ultimately any application will need access to the plaintext key in order to function.

On servers the best practice is to store the encryption keys somewhere that isn't on the server itself. Such as a networked Hardware Security Module (HSM) but literally any location that isn't physically on/in the server itself is good enough. Some Raspberry Pi attached to the network in the corner of the data center would be nearly as good because the attack you're protecting against with this kind of encryption is someone walking out of the data center with your server (and then decrypting the data).

With a device like a phone you can't use a networked HSM since your phone will be carried around with you everywhere. You could store your encryption keys out on the Internet somewhere but that actually increases the attack surface. As such, the encryption keys get stored on the phone itself.

Phone OSes include tools like encrypted storage locations for things like encryption keys but realistically they're no more secure than storing the keys as plaintext in the application's app-specific store (which is encrypted on Android by default; not sure about iOS). Only that app and the OS itself have access to that storage location so it's basically exactly the same as the special "secure" storage features... Except easier to use and less likely to be targeted, exploited, and ultimately compromised because again, it's a smaller attack surface.

If an attacker gets physical access to your device you must assume they'll have access to everything on it unless the data is encrypted and the key for that isn't on the phone itself (e.g. it uses a hash generated from your thumbprint or your PIN). In that case your effective encryption key is your thumb(s) and/or PIN. Because the Signal app's encryption keys are already encrypted on the filesystem.

Going full circle: You can always further encrypt something or add an extra step to accessing encrypted data but that just adds inconvenience and doesn't really buy you any more security (realistically). It's turtles all the way down.

[-] riskable@programming.dev 2 points 17 hours ago

It's not like there's signs in the sky.

If there are, landing might not be the best option! Best to fly over the apocalypse πŸ‘

[-] riskable@programming.dev 6 points 17 hours ago

To be fair, a 250g RC aircraft can cause a lot of destruction to a plane that's in the process of taking off/landing or to a car on a highway.

Having said that, they really have gone overboard with the regulation. Restrict airspace near airports and over highways, not something as ambiguous as "over people". They also (still) require a spotter for FPV which is just silly. The point of the spotter is so you can figure out where it went if you lose control (presumably, to take responsibility if it crashes into something important and does some damage). Anyone flying FPV is going to know exactly where the RC aircraft was when they lost control (and modern ones will return themselves home if contact is lost like that).

They need to focus more on regulating features instead of "what and where". If every RC aircraft has to have a return to home feature that would make more sense than something super ambiguous like, "don't fly above people."

[-] riskable@programming.dev 4 points 1 day ago

Yet another reason why patents on software shouldn't exist.

[-] riskable@programming.dev 13 points 1 day ago

It's not enough that they're cross. They want you to be cross too!

[-] riskable@programming.dev 4 points 1 day ago

The Science VS podcast did a show on diets and nutrition a while back and they said that the only emulsifier showing evidence of potential harmful effects (e.g. gut bacteria problems) at the time was soy lecithin.

If you go into any grocery store in the US and look at the ingredients for stuff in the bakery soy lecithin is in everything! It's actually kind of ridiculous, actually.

It's also hard to find ice cream that doesn't have soy lecithin. It's not even brand-based where you can just choose one brand over another to avoid it. For example, most Haagen Dazs ice cream has soy lecithin but not the chocolate peanut butter flavor 🀷

[-] riskable@programming.dev 1 points 2 days ago

Just need the Stable Diffusion benchmarks.

[-] riskable@programming.dev 0 points 4 days ago

This is crap. TikTok is just a video hosting platform with a powerful, China-controlled algorithm that keeps people addicted. If TikTok were to disappear today a new platform would rise to take it's place within milliseconds. Seriously: Do you honestly think that everyone would just put down their phones and do something else because TikTok doesn't work anymoreβ€½

It's not even being banned! Which is another reason why this article is total bullshit. ByteDance just needs to comply with the law that is meant to prevent the Chinese government from interfering in US politics (yes, that's the real reason why that law was passed). That means they need to break ties with China or just outright sell the platform to some other company. If they let it die in the US they'd be throwing away billions of dollars which just isn't going to happen.

Furthermore, China has absolutely no ground to stand on by complaining about TikTok bans. They ban all sorts of foreign-owned apps in China for more dubious reasons.

[-] riskable@programming.dev 2 points 6 days ago

Amateurs! They should've charged $4000 and handed you some terrible "medical food" on the way out.

[-] riskable@programming.dev 2 points 6 days ago

You're supposed to use a lighter

50
Sticky aftermath (programming.dev)
79
The remnants of battle (programming.dev)
[-] riskable@programming.dev 101 points 2 months ago

The tower on the left is home to the Tea Wizard who uses parts of the lower floors for the nation's biscuit reserves. The one on the right is host to a princess that's been waiting for rescue by a prince for a very long time now.

33
submitted 7 months ago* (last edited 7 months ago) by riskable@programming.dev to c/imageai@sh.itjust.works

It's really hard to get SD to output something like a cat girl hugging a fox girl so I decided to learn how to use the "segment anything" extension for a1111. The first results were great!

Fox girl hugging bunny girl being hugged by cat girl

Got the trifecta: A fox girl hugging a bunny girl who was also being hugged by a cat girl.

But now I wanted to take it further: Can I get five different anime beast people's hugging? No, LOL. Now yet anyway 🀣

That's supposed to be a a fox girl, a bunny girl, a cat girl, a frog girl, and a horse girl (like Pretty Derby).

69
65

Generated by Bing DALL-E 3

199

We should generate images for other metaphors

54

I have since learned that this "fact" isn't true... Turns out the source of that info wasn't understanding how tags work. There's actually just a lot of fanfics that include Astarion. Not necessarily for romance 🀷

It's still hilarious though 😁

186

Manufacturer wanted $25 (+shipping) for a replacement garage door opener wall switch. 13 minutes of printing + 5 minutes of soldering + two leftover Cherry MX Blue switches (that I'll be use) and the problem is solved πŸ‘

Note: The wiring was slightly more involved than I thought... needed a resistor for the light (there's only two wires but it's got two functions: Light on/off and garage open/close.

If folks are interested I could make a much fancier PCB-based version with screw terminals and whatnot. It's a very trivial schematic.

269
submitted 11 months ago by riskable@programming.dev to c/linux@lemmy.ml

Happy 30th Birthday "New Technology" File System! Thanks for 30 years of demonstrating Linux superiority with a gap that widens with every new kernel release πŸ‘

50

As a full time desktop Linux user since 1999 (the actual year of the Linux desktop) I wish all you Windows folks the best of luck on the next clean install πŸ‘

...and Happy 30th Birthday "New Technology" File System!

456

As a full time desktop Linux user since 1999 (the actual year of the Linux desktop, I swear) I wish all you Windows folks the best of luck on the next clean install πŸ‘

...and Happy 30th Birthday "New Technology" File System!

[-] riskable@programming.dev 165 points 1 year ago

LGBTQ people and drag queens.

6
submitted 1 year ago by riskable@programming.dev to c/memes@lemmy.ml
view more: next β€Ί

riskable

joined 1 year ago