Notices by muesli (fribbledom@mastodon.social), page 54

Building my own 3D-printed and ESP8266-powered Nanoleaf lighting system right now 😊

After all, everything is better with RGB LEDs!

The "Selfie" attack on TLS 1.3 explained, and why formal verification efforts didn't catch it:

https://nadim.micro.blog/2019/04/11/selfies-reflections-on.html

On the definition of "special software":

"Manning did not have admin-level privileges, and used special software, namely a Linux operating system, to access the computer file and obtain the portion of the password provided to Assange."

https://www.justice.gov/usao-edva/press-release/file/1153481/download

@sikkdays

At least over here in Europe you can still get the smaller models (e.g. Carrera Go!) for little money. They're really just cheap plastic toys, though.

The "proper" Carrera 1:24 scale models can be connected to a computer and you can tweak acceleration, brakes, (virtual) fuel intake and other settings. You can have simulated pit stops & lane changes, and it keeps track of personal & track records among other things.

It _is_ insanely fun, just wait for the right deal! 😊

@sikkdays

Yeah, the good quality stuff has become insanely expensive in the last 20 years or so.

With a little luck & patience you can get a good deal on a pair of starter-packs and get yourself kick-started into the hobby. I don't even want to know how much I spent on cars, tracks, controllers, adapters & a bunch of other accessories over those years, though.

Budd Clusserath's #46 Cheetah as a slot car racing model

Love the details on this one!

@KenLarkin

Interesting, I've never heard of that tradition!

@bokehled

Heh, maybe in TPU but it wouldn't feel or look the same. I'd love to have that model in my current size tho 😆

Look what I just found in an old storage box!

As old as I am myself, this was my first pair of shoes 😊

#myfirstpair

@DallaHalla

Of course I did 😊 Loved it as a kid, but consider it absolutely watchable today.

@marseye

Not quite. There's an sshd setting called "PermitRootLogin" and it's usually set to disable password-bases login attempts for root. So while it makes a difference locally, it really doesn't matter for SSH.

@jonw

@sexybiggetje

Thank you Martijn!

@marseye

Yes, you additionally want backups, of course. But you also don't want them to be able to read your data. Hence: encryption!

@jonw

Of course, distros _could_ overwrite that default setting. But I haven't seen a distribution that permits password-based root logins in... almost 20 years?

Know of a single one?

@marseye

Feeling a bit sick, this day will be spent in bed.

Now if only I had something to binge-watch right now. I guess I could just start re-watching all of TNG, now that I got the HD releases.

Should probably also make a cup of Earl Grey.

@marseye

Certainly a few useful tips in there, but this has nothing to do with encryption. If someone walks away with your server's hardware (or just the disks), those tips are useless.

SSH already prevents root logins on servers, so whether you locally set a password for root or not, makes very little difference.

@marseye

Not really, no. All CPUs released within the last decade come with hardware AES encoders/decoders. That means the entire machine is essentially bored, even when you're encrypting a GB of data each second.

@marseye

I think you're mixing up a couple of things here. SHA is a hashing algorithm, and it's not being used for encryption here: that would be AES.

"md1" is the RAID device name, and it's not referring to MD(5) hashes either.

@RAOF

Flatpak and Snap at least enforce some form on sandboxing... that's something I could probably tolerate, even though I'd still prefer "proper" packages.

@RAOF

Sure you can go down that route, but I personally wouldn't just execute some "random" binary I downloaded.

Telling the gentoo packager to just download the AppImage certainly isn't helpful.

Not to mention how many potential contributors you alienate/exclude that way.