• 0 Posts
  • 40 Comments
Joined 5 months ago
cake
Cake day: June 23rd, 2024

help-circle
  • It’s like every generation loses the ability to do something in computer technology that was just abstracted away somehow. I as a millennial have never soldered a PC mainboard (modding an Xbox doesn’t count), but I’d say that otherwise, my understanding is pretty good. And I think all of my friends understand the concepts of files.

    I recently asked someone about 10 years older if he knew what partitioning and formatting means in the context, and he knew, despite initially saying he has no clue about computers, to show someone 10 years younger (who didn’t know) that such knowledge was just basically required back in the day. And it’s not like these terms are obsolete, the concepts are still the same, even though we went from MBR to GPT and from FAT32 or whatever to better filesystems. It’s no different for phones, but not required and even hidden.

    I’d say generally, the technology userbase broadened while average knowledge in the group declined, however I’m not sure whether the absolute numbers of people with a certain knowledge level actually went down.








  • I worked in software certification under Common Criteria, and while I do know that it creates a lot of work, there were cases where security has been improved measurably - in the hardware department, it even happened that a developer / manufacturer had a breach that affected almost the whole company really badly (design files etc stolen by a probably state sponsored attacker), but not the CC certified part because the attackers used a vector of attack that was caught there and rectified.

    It seemingly was not fixed everywhere for whatever reason… but it’s not that CC certification is just some academic exercise that gives you nothing but a lot of work.

    Is it the right approach for every product? Probably not because of the huge overhead power certified version. But for important pillars of a security model, it makes sense in my opinion.

    Though it needs to be said that the scheme under which I certified is very thorough and strict, so YMMV.



  • I was also with a provider that didn’t offer API access for the longest time. When they then increased prices, I switched, now paying a third of their asking price per year at a very good provider.

    I guess migrating is difficult if the provider doesn’t offer a mechanism to either dump the DNS to a file or perform a zone transfer (the later being part of the standard).

    Can only recommend INWX for domains, though my personal requirements aren’t the highest.




  • Also wildcard certificates are more difficult to do automated with let’s encrypt.

    They are trivial with a non-garbage domain provider.

    If you want EV certificates (where the cert company actually calls you up and verifies you’re the company you claim to be) you also need to go the paid route

    The process however isn’t as secure as one might think: https://cyberscoop.com/easy-fake-extended-validation-certificates-research-shows/

    In my experience trustworthyness of certs is not an issue with LE. I sometimes check websites certs and of I see they’re LE I’m more like “Good for them”

    Basically, am LE cert says “we were able to verify that the operator of this service you’re attempting to use controls (parts of) the domain it claims to be part of”. Nothing more or less. Which in most cases is enough so that you can secure the connection. It’s possibly even a stronger guarantee than some sketchy cert providers provided in the past which was like “we were able to verify that someone sent us money”.


  • Weed makes you question if you should get more snacks

    I haven’t tried it in a really long time though but I didn’t really like it very much. Not that I think it’s bad, but it’s a downer and they’re just not my favorite.

    Acid and 2C-B on the other hand, man. Haven’t tried other psychs unfortunately but I find them both great for their individual effects. Unfortunately, there’s the huge stigma around psychs in general plus the naturalistic crowd that makes up a proportion of psych users will only accept stuff like shrooms, peyote and ayahuasca.




  • The goal of a banking system is to move money (possibly a lot) quickly, without physical exchange, for the maximum number of goods and services. States also want to control a currency for their fiscal policy, and they want to be able to go into debt.

    Established crypto fails the maximum number, fiscal policy and debt criteria. As soon as you introduce mandatory physical exchange via previous metals, what remains?

    And yes; Monero theoretically has an infinite amount of coins. However, it has reached tail emission since about two years, meaning the block reward is 0.6XMR every two minutes, which currently equates to about $65.000 per day. However, mining requires CPUs, which would need to be acquired first.

    All in all, the current numbers don’t make it a feasible solution.



  • Because for those states and companies, crypto is a toy and not real money. Also not having a bank means your transactions are always final (nobody is putting up with multisig).

    Crypto has been great for buying drugs via darknet and taking money from investors for partnerships that don’t exist or make sense. Been using it myself actually. Also facilitates gambling, either via crypto casinos or directly against its price. Outside of that, traditional banking wins.

    It’s also questionable whether a state could acquire so much crypto quietly at this point. Most big holders are either very publicly about it, like Argentina, or confiscated it from illegitimate sources (like when Germany raided a darknet market operator).


  • The value of cryptocurrency is usually tied to the price. The price is determined at exchanges. Russia however can’t use foreign exchanges as the accounts there normally require identification (some offer pseudonymous crypto to crypto swaps) as the exchanges don’t accept Russians, and if you want to convert crypto to a currency, you need a bank account calling in that currency, which is not happening. If the exchanges even transferred money to those as they’d lose their license.

    The value of cryptocurrency is much less than what you see on CMC etc. if you can’t actually convert it to those currencies. Which is the main issue.

    Add to this that most crypto currencies can be traced and having transacted with known Russian problematic accounts - even via proxies - taints your wallet, making it hard to impossible to buy and sell on exchanges later down the line.