Posts by ds6

Or how hybrid Exchange environments require IE or else the embedded frames will not work?

Re: Bah!

This is an insult to our intelligence.

Re: Exceptional skills

Take my upvote you rat bastard.

Re: Personal Data Security

Shill that Facebook alternative, friendo. It sounds interesting.

Re: Annoying tho

I still refuse to use Pale Moon for the whole petulant children incident, and WaterFox phones home just as bad as mainline does. And even if I hate that Mozilla killed off XUL and Jetpack, there aren't a whole lot of reasons for me to go back, since everything I need has either been ported or its functionality recreated; there's also no denying that Quantum is leagues less heavy and significantly faster than old Firefox/Pale Moon.

IceCat and Ungoogled Chromium work just fine for me at this point.

Re: It's all very fascinating

There are multiple ways to use security keys like this. The FIDO2 spec is the standard right now so I'd look into that if I were you. There are multiple modes you can use with it, including private/public key-based authentication, one-time keys that cycle based on an algorithm known fully only by the device (and can be solved on the authenticating end using the number yout device spits out), and third party PKIM authentication where you set up a chain of trust like you mentioned and the third party is contacted to verify your identity with a signed root certificate.

Here are some useful links to see how the technology is used in practice from a low but not too low level:

https://docs.microsoft.com/en-us/azure/security/fundamentals/ad-passwordless

https://developers.yubico.com/#learn (features all U2F modes!)

Re: Extracting encrypted data?

Technically all encryption can be broken, the only reason it's considered safe is it will take a very, very long time with current methods and technology to defeat it.

More directly, the length of you password doesn't matter if your phone is already booted and has been unlocked once, as the decryption key can be siphoned out of /data/misc/vold; encrypted partitions are not unmounted when your phone locks, even if you trigger Lockdown. Your password is only used to unlock the phone and to encrypt the key used to encrypt the /sdcard filesystem (and other filesystems/per file encryption). Keep in mind there are sometimes 20-30+ partitions on an Android device, varying by vendor/ROM, and only a handful of them are encrypted.

If you have Xposed, Magisk, root over ADB, or root shell available and the passwords for any of those are either not enabled or easy to guess, then data can be easily exfiltrated. I don't think Xposed Manager, EdXposed Manager, or Magisk even have the ability to lock module installs behind a password.

It could also be possible to attack memory, flash a new bootloader, attack proprietary firmware like the baseband and/or wireless controllers, or use social engineering to get you to install a malicious APK.

Re: State is not county

Not all county jurisdictions are equal. Some municipalities don't have the ability to override the state like in this situation. It's understandable they got caught up in this, even if it could have been avoided.

Lest we forget, Sheriff Big Pants could have said "oh makes sense" and just left. The instigation was all due to not wanting the state to have its way, not because the guys were innocent or guilty. They were about to be sacrificed in the name of political bickering.

Re: Scintillating!

You can't change the current reality and the zone kick you out.

Oh, wrong emission?

Re: How to be a thief

Easy to break the law, hard to not get caught.

~ Confucius Kabbaj

Re: SSL VPN?

Citrix calls it that, Sonicwall calls it that, elreg too... the hot buzzword is SSL VPN likely because no one has updated their documentation.

Re: Bitcoin anonymity

There is a common misconception that because most cryptocurrencies including Bitcoin are not managed by a central bank or controlled by a government that they are anonymous. I do believe that's the reason for our good friend bob's sarcasm. Or I could be way off the mark and bob's blown a gasket again.

Re: "you all love to hate"

No, my name is John.

Re: What price Photoshop?

Wish we would have when they killed off Device Licenses, and for three months did not offer an alternative; meaning no CC for our clients in the labs, despite the fact that materials had already been updated for it. Imagine how many schools were thrown out of whack when their device licenses just stopped working.

We're going too deep, cap'n.

Re: Smart Summon used "more than one million times"

When I say "anonymize" I more readily mean clumping data sources together and stripping as much metadata as possible.

For driving locations, I would be fine with generating a heatmap based on mass grouped datasets, eg. Model 3 users drove around a lot in LA. Anything more I believe to be entirely irrelevant to anything except tracking individual driving patterns and improving GPS navigation. Of course, there still is a problem of single drivers being in weird locations like you said, but I normally take a stance against all telemetry so it's not like I've ever put that much thought into it.

For tracking statistics, you could keep vehicle-local controls that trigger thresholds to eg. indicate safe vs aggressive driving, and pass on a limited subset or set with reduced accuracy on to the server. This (and any delivered data) should not be bundled together, eg. so that location information cannot be mapped to driving style.

And of course the user should be able to disable all of this as they see fit, as no matter how anonymized every system has a risk factor.

Re: As a ex sys-admin....

And how ELSE can you remote-admin a system without su and sudo ????

doas

:-]

As a luser that grew up on FreeBSD, I have wheel set up for all my sudo rules.