• 0 Posts
  • 11 Comments
Joined 7 months ago
cake
Cake day: December 12th, 2023

help-circle
  • Very similar heuristic here, insofar as when to use passphrases and how long.

    LUKS and Bitlocker volumes get 8 words, computer logins usually get 4 words (potentially more depending on frequency/criticality of system).

    Smartcards and mobile devices do have numeric pins due to frequency of use and relative difficulty in copying those for offline attacks.

    Websites that are filled in w/ password manager get passwords get the random symbol-laden strings that ‘meet requirements’


  • If that is the threat model then Signal is not and never was fit for purpose at all.

    Because every time I’ve complained about not wanting to give my phone number to sign up for Signal I’ve been lectured about how Signal is “all about privacy, not anonymity and those are not the same thing” and how that is good for the average Joe even if it isn’t useful for journalists and activists, and what you’re saying goes completely against that by suggesting that the police are somehow unable to get the phone number out of the thing that uses the phone number as the user id.

    You’re describing how a real privacy-focused app like Briar functions, but definitely not how Signal does.




  • Yet in the same posts they insult people who don’t have the same opinion as them.

    I’m betting it’s the use of the phrase “objectively easier” when that is incorrect by argument of geometry. The “objectively” riles people up.

    There is a reason why forklifts have rear-wheel steering (and therefore behave much like an automobile driving in reverse): having the point of rotation towards the direction of motion allows for much more precise maneuvering, much like you would need to do in a larger vehicle trying to fit into a tight parking space.



  • Obviously biased, but I’m really concerned this will lead to it becoming infeasible to self-host with working federation and result in further centralization of the network.

    Mastodon has a ton more users and I’m not aware of that having to resort to IRC-style federation whitelists.

    I’m wondering if this is just another instance of kbin/lemmy moderation tools being insufficient for the task and if that needs to be fixed before considering breaking federation for small/individual instances.





  • Docker swarm is pretty easy to set up and use (and lets you use compose files directly!) and is probably more than enough average self-hosters/homelabbers, but if you want to do something super fancy related to clustering there’s a good chance you’ll hit functionality walls quickly.

    Kubernetes is a pain to set up but is very flexible and ‘scalable’ to incredible levels, while being massive overkill for most applications.