Avatar

Riskable

riskable@programming.dev
Joined
16 posts • 655 comments

Father, Hacker (Information Security Professional), Open Source Software Developer, Inventor, and 3D printing enthusiast

Direct message

Unless the president does something monumentally stupid (like telling people not to wear masks during a pandemic) the president has little impact on the economy (or oil prices). Why do people keep talking about the president like he’s got a great big series of valves that controls the economy? It’s ridiculous!

Any decision the president makes that will impact the economy is most likely to have an impact ten years later. Sometimes an impact can be felt sooner than that but it’s usually not a good thing for the economy… Like starting a war or closing the borders.

permalink
report
reply

It’s not In Another World With My Smartphone levels of terrible but the story and dialog is seriously low-effort and cliche.

I was actually making a joke using a line from the anime that goes like this:

“You’re 1,000 years too soon for the dragon!”

(Note to self: Why TF do I remember that‽ LOL)

permalink
report
parent
reply

Narrator: They did not win. Not even when they won. For they did not know or understand governance.

permalink
report
parent
reply

LOL! He’s not Sundowning he’s just old!

It’s a stereotype as old as time: Old people get up early and don’t like staying up late. It’s not a sign of dimensia it’s a sign of age.

A proper outward sign of dimensia would be issues with balance. Has he been stumbling? Does he seem to lose his balance if he has to make a sharp turn or during quick turns of his head? Trouble with stairs or ramps? That sort of thing.

permalink
report
parent
reply

They’re 1,000 years too soon to make more of this low-effort anime.

permalink
report
reply

This is a, “it’s turtles all the way down!” problem. An application has to be able to store its encryption keys somewhere. You can encrypt your encryption keys but then where do you store that key? Ultimately any application will need access to the plaintext key in order to function.

On servers the best practice is to store the encryption keys somewhere that isn’t on the server itself. Such as a networked Hardware Security Module (HSM) but literally any location that isn’t physically on/in the server itself is good enough. Some Raspberry Pi attached to the network in the corner of the data center would be nearly as good because the attack you’re protecting against with this kind of encryption is someone walking out of the data center with your server (and then decrypting the data).

With a device like a phone you can’t use a networked HSM since your phone will be carried around with you everywhere. You could store your encryption keys out on the Internet somewhere but that actually increases the attack surface. As such, the encryption keys get stored on the phone itself.

Phone OSes include tools like encrypted storage locations for things like encryption keys but realistically they’re no more secure than storing the keys as plaintext in the application’s app-specific store (which is encrypted on Android by default; not sure about iOS). Only that app and the OS itself have access to that storage location so it’s basically exactly the same as the special “secure” storage features… Except easier to use and less likely to be targeted, exploited, and ultimately compromised because again, it’s a smaller attack surface.

If an attacker gets physical access to your device you must assume they’ll have access to everything on it unless the data is encrypted and the key for that isn’t on the phone itself (e.g. it uses a hash generated from your thumbprint or your PIN). In that case your effective encryption key is your thumb(s) and/or PIN. Because the Signal app’s encryption keys are already encrypted on the filesystem.

Going full circle: You can always further encrypt something or add an extra step to accessing encrypted data but that just adds inconvenience and doesn’t really buy you any more security (realistically). It’s turtles all the way down.

permalink
report
reply

It’s not like there’s signs in the sky.

If there are, landing might not be the best option! Best to fly over the apocalypse 👍

permalink
report
parent
reply

To be fair, a 250g RC aircraft can cause a lot of destruction to a plane that’s in the process of taking off/landing or to a car on a highway.

Having said that, they really have gone overboard with the regulation. Restrict airspace near airports and over highways, not something as ambiguous as “over people”. They also (still) require a spotter for FPV which is just silly. The point of the spotter is so you can figure out where it went if you lose control (presumably, to take responsibility if it crashes into something important and does some damage). Anyone flying FPV is going to know exactly where the RC aircraft was when they lost control (and modern ones will return themselves home if contact is lost like that).

They need to focus more on regulating features instead of “what and where”. If every RC aircraft has to have a return to home feature that would make more sense than something super ambiguous like, “don’t fly above people.”

permalink
report
parent
reply

Yet another reason why patents on software shouldn’t exist.

permalink
report
reply