Notices by mulander (mulander@mastodon.social)

Friendly reminder. Full disk encryption on a server you have no physical access to grants you no security, same for your laptop if you carry it around in sleep mode. FDE protects your data at rest as from a cold boot you need to provide the passphrase. If your box is running the secret is present in memory and can be grabbed by a dedicated attacker.

For the same reason, when approaching border control, TURN OFF your phone, just locking the screen is often not enough.

Clerk at a shop was convincing me that installing the $brand loyalty Android/iOS app was a good deal. I declined stating privacy reasons and was surprised as she asked why.

So I asked her if it would be OK in me having information on:
- where & when she shops
- what she buys
- with whom she meets
- how often she uses the toilet
- and potentially leaking that information online by accident
in exchange for a 20% price cut on a deodorant.

She uninstalled the app on the spot. No joke.

Very creepy @WhatsApp, someone was apparently typing in an URL and WhatsApp was fetching it off my server char-by-char https://mastodon.social/media/96lwJ5IyFyVXx6t85qQ