kerouanton

Glad I deleted my keybase account several weeks ago...

Having being a `screen` user for over two decades, migrating to tmux has been a pain. A week ago, however I discovered a wrapper called `byobu` (1) which really helps, and controls both screen and tmux depending on which one you have on your system. It basically wraps Function keys and more to tmux, but has plenty of other features. Time will tell if it was worth installing, but I do believe it's simpler for me to use it as a transition from screen.

(1) https://byobu.org

Luxembourg will make public transportation free for everyone in the whole country next summer. That's a great step forward.

I didn't renew my Dyn subscrition a few months ago, considering they had increased their pricing model and offered nothing new. And being owned by "evil" Oracle didn't help.

Today it's relatively easy to build a self-hosted dynamic DNS equivalent, e.g. https://github.com/dprandzioch/docker-ddns so I'm in the process of solving the issue like this.

You could also "sign" using a random figure, not your real signature, after all. No? Nothing prevents you to do so, legally speaking.

I still love all those games, and play them from time to time using ScummVM [1], which I installed on my PC and Mac. Back at the time, I bought them in boxed editions and was so thrilled to get them! I still have those original games as part of my greatest 80's collection items. The SCUMM engine is also very interesting to look at, internally.

[1|: https://www.scummvm.org/

Indeed. On sites I have to register but know I won't go frequently I enter a random password I don't even write down, relying on the Forgot password feature if I ever need to come back later.

The dataset itself is nice, but if weighting each pack would have been part of the procedure it would have been even more interesting, no? Anyway, this dataset is already in my favorite examples of illustrating a birthday attack for my crypto lectures ;)

I also use and like Wire for the same reasons.

Maybe (I'm also a HAM licensee) but making a device available on a IP network without any authentication and weak protocols such as telnet doesn't justify this.

Thanks for the link, it's a nice discovery. fourmilab.ch is a real website for hackers, lots of interesting things. Also, I didn't know its author, John Walker, creator of AutoDesk AutoCAD was living in Switzerland and still so interested in topics such as astronomy, C64, science fiction, Kerbal Space Program and more nerdy things.

Nice project, but why are all hardware guys designing projects without ANY security?

Page 14, the guide explains the connection to the modem is possible with Telnet with no password...

That's a common issue in IoT and embedded systems, it seems, so I'm wondering if there is a reason why hardware developers just fail at security ?

Linkedin has been an issue for years for me, because they simply disclosed your email to anyone connected. This enables some people and/or corporations to scrap profiles and build spam email databases. After being annoyed about this, I started to change my linkedin dedicated email address frequently, 4-5 times a year. The conclusion was obvious: less than a few days after the change, I began receiving spam and proposals on this new dedicated email address, thus confirming the email scraping problem.

Yesterday I went back to Linkedin to reconfigure a new email address, and found that the account settings now incorporate a setting to hide your email address to anyone (inactive by default...). I've enabled it and changed again to a new dedicated email address, to see if it is true. I hope this time Linkedin did things right.

I'm puzzled. Does that mean nobody uses Windows in those countries? Same for Google/FB?

It's striking to see that there is a full section of Troubleshooting and test procedures, over 250 pages for the PC manual, as if it was supposed to fail by default.

Apple did the opposite, user-centered approach meaning it should work by default.

Opposite cultures, indeed.

I confirm Linkedin is a vector for spam, the way they handle and publish your email address: I use a dedicated, unique email address for my account, and systematically start receiving unsollicited emails and spam a few days after.

I now have the habit to register a new email address every few months on Linkedin, to track the issue. It's clear and easy to prove that the new email address is used by spammers after a short time. One of the main reasons is probably because once you are connected to someone, he/she can access your profile contact details including email and phone number. My guess is there are bots scraping the contacts to populate their spam databases.

I'm sure most, if not all users of Linkedin don't realize this issue, as they generally register using a non-dedicated email address, preventing them to check the origin of the spam leak.

This is the same that occured with PocketPC, no? I bought several games on PPC that I am no longer able to run, because lack of emulators (if any, please mention some), but mostly because many games and software at the time required an activation code which is no longer available because the companies/authors/servers disappeared.

A french Telco provider tried this once. You could get free calls from your mobile but had to listen to an ad before being connected. It didn't last long.

Another billions of $ managed on a stealth website: https://www.rentec.com/

(Those behind Cambridge Analytica, btw)

My english sucks. I'm a former demomaker, that's more precise. https://csdb.dk/scener/?id=21588

+1 for your vision. I also love demoscene and am a former scener.

The idea is not to be the best. The philosophy is to experiement, try, and have fun while discovering what we, or others, can achieve. My hobby is electronics. I'm learning every time I practice and the fun and rewarding part is that there is still a lot to learn and improve. That's what a hobby should be.

"LinkedIn seems to only be used as a spam delivery mechanism these days."

I created a dedicated email address for Linkedin. And yes, I do receive a lot of spam on this unique email address. For testing purposes, I regularly update this email address to a new one every 6 months, and spam begins to flow a few days after the address change. So I believe either LinkedIn resells email addresses, makes users emails public and easy to scrap, or regularly gets hacked.

The Art of Thinking Clearly : a 2013 book by the Swiss writer Rolf Dobelli which describes in short chapters 99 of the most common thinking errors - ranging from cognitive biases to elements like envy and social distortions. Really changed my way of life.

This attack uses physical fault injection, so it shouldn't be trivial for remote attackers to use it, but it definitely is a nice demonstration, and exposes vulnerabilities on chips that generate and store such keys, like maybe pay-tv cards (remember the business of Kudekski/Nagra).

well, strictly speaking storing the password itself is a good hint, no?

I don't know if it's the case elsewhere but starting 2019 all invoice payments in Switzerland will use mandatory QR codes. https://www.paymentstandards.ch/en/home/softwarepartner/qr-b... That promises to be challenging too in terms of publication of sensitive data.

Thank you for the clarification. I've probably read it too fast.

Great work and paper. The fact 53% of the Tor relays have either shared prime factors or non-standard RSA components is worrying. This kind of research is mandatory.

I don't know if it's the case elsewhere, but for example in France there is a law enforcing a 10 year warranty for every building or repair on buildings. https://www.french-property.com/news/build_renovation_france...

Apple aims at planned obsolescence. Those 2007 Macs are still reliable (I have one) but you can't upgrade to the latest OS, so you miss security patches... Same for IOS devices.

I see two objections here.

First, it's often more expensive than people can afford. Most relatives I know are "stuck" buying low-grade appliances/furniture just because they can't afford more, and they know they will have to replace it in 4-5 years.

Second: fashion/mode/trend. I was surprised to see many people throwing functional appliances, computers and even furniture just because it was outdated, not trending. such as "My old cell phone still works but I'd pass for a retarded if I don't show up my latest iPhone". Same for furniture, curtains, chairs and tables that are still good, but people often change because they want to renew the appearance in their homes. Do many of you still use good'old wooden furniture of your grand-parents in your home?

So, I'm not convinced the "50 years" model would be ideal for everything. Because human nature.

A 10 years model would be great, imho.