boatswain

joined 1 year ago
[–] boatswain@infosec.pub 4 points 5 months ago (2 children)

I love Localsend because it's gloriously simple: Does exactly what you want, and nothing more. I haven't used KDE Contact; what else does it add in?

[–] boatswain@infosec.pub 2 points 5 months ago

If XSS is your concern, check out Firefox's Container Tabs. They allow you to set up tab groups that restrict access to cookies to only tabs in that group, so you can just, eg, set up a group for your bank and restrict it to just your bank's site. Your session cookie etc are then not available to any other tab groups.

I pair that with the Temporary Containers extension, so any random tab I open is in its own container. Everything is always separate.

[–] boatswain@infosec.pub 69 points 5 months ago (4 children)

Hardware controls are meaningless if an attacker gets you to click on a dodgy link in a phishing email or you fall for a social engineering scam when "Microsoft" calls you because your computer has a virus.

[–] boatswain@infosec.pub 7 points 6 months ago (1 children)

Two of the employees were twins. It wasn't planned, but it did give us a chance to see if twins were a weak point.

No, it gave you a chance to see if that particular set of twins was a weak point.

[–] boatswain@infosec.pub 15 points 6 months ago (3 children)

In fact, I myself could only tell them apart by their clothes. They had very different styles.

This makes it sound like you only tried one particular set of twins--unless there were multiple sets, and in each set the two had very different styles? I'm no statistician, but a single set doesn't seem statistically significant.

[–] boatswain@infosec.pub 5 points 6 months ago (3 children)

What about just giving transparency to what the ranking is and letting people control it? Analogous to "sort by new/best/top" bit ideally with more knobs to tweak and a bunch of preset options?

[–] boatswain@infosec.pub 3 points 6 months ago (4 children)

Sure but given that their previous language explicitly mentions Google why remove that unless they're trying to make people think that maybe they didn't use Google. It's a shady change, from a company whose CEO is already doing somewhat unhinged things.

[–] boatswain@infosec.pub 16 points 6 months ago (7 children)

The issue is that they're using it but no longer being explicit about that use.

[–] boatswain@infosec.pub 13 points 7 months ago

Obsidian is fantastic. I use it for work and also for personal stuff like planning TTRPG sessions. Especially with the plugins that are out there, it's super powerful. Getting into using metadata tags and the Dataview plugin it becomes a pretty amazing knowledge engine.

[–] boatswain@infosec.pub 8 points 7 months ago (1 children)

I'd encourage you to check out SyncThing; it works great for syncing pretty much anything: I use it for my Obsidian notes and for my KeePass vault.

[–] boatswain@infosec.pub 2 points 7 months ago

Interesting, thanks! I've only vaguely followed crypto stuff, so not really too familiar with how it gets used day-to-day

view more: ‹ prev next ›