• 0 Posts
  • 114 Comments
Joined 2 years ago
cake
Cake day: August 12th, 2024

help-circle


  • That’s just not true. Bottles are made from 4 different plastics that all have to be separated for recycling (bottle, label, cap+ribbon, soft part inside the cap to make a waterproof seal). The ribbon part the cap is attached to is also present in bottles where the cap is not attached and it has to be removed anyway. So nothing really changed there except the part that has to be removed is bigger now.

    Despite what right wing nuts that have to be against every progress say, there is literally no downside to this law.

    But the biggest improvement is from nature cleanup crews that previously always found the bottles but never the caps.






  • The problem is that the standard is fucking huge and maybe your browser supports every feature of version 5xx but is missing a feature related to authentication using guinea pigs introduced in v369. So it would only be allowed to advertise compatibility with v368 even though it can do everything except Guinea pigs.

    Realistically you would trim the standard to a core set and advertise compatibility with a version of that and then advertise optional extensions. And that’s optional bits if you ask me.



  • If you do not set a master password for the browser (that you have to type before the saved passwords are filled in), the despite what others have written, the passwords are not really encrypted. They are, it just doesn’t matter. Because they are encrypted with the password of you OS user. So they are unreadable if someone steals your device or to any other users on your system, but any malware that runs in your user context has full access to the passwords any time you are logged on to the machine.

    Of course if you have malware on your system they can also log your master password as you type it, same with any other password manager. If you unlock the password save, it is available to malware in that moment.

    Also if you use passwords for anything other than websites you should have a password save for those passwords as well so why not have one single save instead of one in your browser and one outside of it.

    Tl:dr saving passwords in your browser is fine but you should absolutely set a master password. External password manager can be more pragmatic compared to browser only.


  • groet@feddit.orgtoPrivacy@lemmy.ml*Permanently Deleted*
    link
    fedilink
    arrow-up
    3
    arrow-down
    2
    ·
    2 months ago

    I heard the wisdom once that you should self host everything except for email. I’m sure there are great tools to make it manageable but the effort/gain is just very high.

    Just find a email provider that let’s you connect your own domain, use wildcards, etc.

    Of course email is pretty central to most digital identities, as most accounts can be reset through email. So if you absolutely want to be sure you control your identity you must self host email (but you also must own the authoritative DNS for that domain so you must register directly with the TLD and not through a registrar …)





  • License? I never mentioned licenses.

    Selling drugs is illegal because drugs are illegal. If a OS without age verification is illegal, then (depending on how stupid the laws are) having a site where you can download such a OS could also be declared illegal.

    Basically force all providers of OSs to include verification or block downloads to those states, or face fines for “distributing illegal software”.

    I am saying, if they are stupid enough to do X they might be stupid enough to try the even more stupid thing to achieve X.



  • Yes, cloudflare will not tamper with your record because you are not important enough to be worth the reputation loss. Realistically, no harm will come to you from cloudflare.

    However! They are still the party that could theoretically cause the largest amount of damage to both you and your users.

    Cloudflare cannot track visitors of my website, the only malicious thing they can do is to tamper with my DNS record.

    They “cannot” only because they say so. Changing your DNS record allows them to read 100% of all incoming traffic even if it is TLS encrypted (because they can acquire a valid TLS certificate for your domain through a DNS challenge).


  • DNS is the most important foundational stone. Whoever controls your DNS can redirect all of your users to any address they want AND present a valid TLS cert through a DNS challenge. They can also redirect all E-Mails of the associates domain, and if any address was used to register an account, they can reset that accounts password. Trusting someone to handle your DNS is the highest trust you can put on someone on the internet. And that is both for a website povider trusting the registrar of their domain and for a end user with their DNS resolver.



  • With a tiny bit of offsec you can make pretty bulletproof setup.

    Work only exists inside of a Win11 VM. It never touches the underlying system! All files associated with that VM (most importantly the virtual disk) live on a separate partition, or better separate drive. That partition is not mounted in fstab. So under normal circumstances it should never be mounted. So any fuck up they do to their Linux system will leave that partition untouched. If worst comes to worst that can boot a live iso from USB and run their work VM from there.

    I would trust that setup infinitely more than having windows as a base system.