• 0 Posts
  • 29 Comments
Joined 5 months ago
cake
Cake day: June 23rd, 2024

help-circle


  • Laser@feddit.orgtoTechnology@lemmy.worldMatrix 2.0 Is Here!
    link
    fedilink
    English
    arrow-up
    7
    ·
    17 days ago

    What would be the utility for someone, who cares about privacy and currently uses Signal and email for communication?

    Your organization can’t host a federated Signal server, and email isn’t private.

    Is Matrix anything good already, or is it something with potential that’s still fully in development?

    My previous organization has used it for over 4 years without issues, however mostly limited to text.

    How tech savvy does one need to be to use Matrix?

    Simply using? Not very much, basically like Lemmy.


  • And I don’t know if you noticed or not, unfortunately, the sanctions aren’t working that well… Maybe the answer is more sanctions? idk

    I’m in favor of more of them, but I don’t think the current ones aren’t working. It was clear from the beginning that they’d be escalating so that Russia has a way out. They’re not using it so sanctions get worse.


  • Sure… Their anger will be directed at Putin, not at who actually imposed those sanctions.

    I am worried that these sanctions will make them band together and support Putin even more.

    And then what? They’ll go to war even harder? And if Putin is such a good leader, why doesn’t he just have Russia produce alternatives to the goods and services under sanctions?

    The old status quo without sanctions got the world into the current situation. Why would keeping it the same fix it?

    One could also make the opposite case for your logic: I am worried that without sanctions, people will see Putin as a strong leader, and as such hand together and support him even more.





  • I worked in software certification under Common Criteria, and while I do know that it creates a lot of work, there were cases where security has been improved measurably - in the hardware department, it even happened that a developer / manufacturer had a breach that affected almost the whole company really badly (design files etc stolen by a probably state sponsored attacker), but not the CC certified part because the attackers used a vector of attack that was caught there and rectified.

    It seemingly was not fixed everywhere for whatever reason… but it’s not that CC certification is just some academic exercise that gives you nothing but a lot of work.

    Is it the right approach for every product? Probably not because of the huge overhead power certified version. But for important pillars of a security model, it makes sense in my opinion.

    Though it needs to be said that the scheme under which I certified is very thorough and strict, so YMMV.


  • Salt the hash with something unique to that specific user so identical passwords have different hashes

    Isn’t that… the very definition of a Salt? A user-specific known string? Though my understanding is that the salt gets appended to the user-provided password, hashed and then checked against the record, so I wouldn’t say that the hash is salted, but rather the password.

    Also using a pepper is good practice in addition to a salt, though the latter is more important.



  • I don’t really know. For text based discussion, I prefer something like Lemmy, also due to better moderation tools etc. It’s a cool early thread-based discussion tool, but mostly outdated.

    Unfortunately, there is absolutely zero other use for it, and nobody should ever bother, it’s wasted time.


  • The big issue that the author kind of mentions is that while the kernel has all these neat features, the overlaying OS seems to use them in such a way that they’re often not effective. XP before SP1 was a security nightmare and we got lucky that blaster was not working correctly. A secure token for the processes in your session? It doesn’t really help if every process you spawn gets this token with the user being the administrator (I know this is kind of different nowadays with UAC). A very cool architecture that allows easy porting? Let’s only use it on x86. Even today, it’s big news for Windows running on ARM, which the not-by-design-portable Unices have been doing for years.

    Maybe if Microsoft had allowed the kernel to be used in other operating systems - not expecting a copyleft license - the current view is that Windows Is Bad, and the NT kernel is an inseparable part of Windows. And hell, even Windows CE which did run on other devices and architectures, doesn’t use the NT kernel.

    So while the design and maybe even large parts of its implementation may be good and clean, it’s Microsoft’s fault that the public perception of the NT kernel.




  • I actually have an account on there with almost nothing, just my nix configuration, plus a repo I cloned to commit a bug fix on software I used. But it seemed like the most responsible solution as in the price is reasonable, plus I actually like the interface. Codeberg also looks good and claims to be better in some regards, but these are the only choices nowadays.

    Anyhow, I’m still waiting for Pijul to have a final 1.0 release and independent hosting solutions to appear.