Anna

Thanks. This looks promising. I want few more minor features but I can easily add them. Thanks again.

Something similar to splitwise.

Yeah I guess so. Due to SSL if you want to perform successful MITM you’ll need to have control of DNS and must have rootCA which you control installed on there system/browser. And if it is a supply chain attack where source it self corrupted then there is no hope.

That’s a bad advice you don’t know how they are updating it. If it is added in the repo then package manager will check the signing key but if it is an in app update then that may not be verifying the new package and if someone is doing MITM they can switch it up

You should always verify signature and hash for any software you are installing but also keep in mind that if someone was really trying to send you a malicious download then there’s good chance that they will also deliver you a malicious signing key and hash. And there is really no good solution. If it is critical you can try to get signings keys from different places and with different IPs and maybe even different devices but pick and choose how long do you want to go down this rabbit hole.

deleted by creator

Do not use any such services online. That will just generate another data point. Instead do it yourself manually. And in future create new email for every service. And use something like fake name generator to get name and email ID.

If you are a developer then no difference if you’re a scrum master then you need to gtfo

Why do I get a feeling that he is going to replace ATC workers with AI.

If you’re not going to give her sudo access then I’d say it’ll be really hard maybe even impossible to screw up. Also maybe setup a cron job that’ll do auto updates and if needed add in a check to make sure it isn’t uninstalling anything. Also how about immutable distro.

Yeah giving handouts to billionaires is the efficient use of Tax payer money. /s

It is not about police hijacking IMEI, my bank only provides 2FA with phone number, and the password can be reset using the OTP they send to my phone. I know the bank is terrible but where I live all banks do same thing. So if my phone ever gets stolen they can just remove the sim and put it in another phone and get access to the Bank account. Also did I mention you can also get username from OTP to your phone so, yeah I should probably not use any bank and go live in mountains. But SIM lock helps.

Heavily customized LFS

Even though there are really good open source app but I’ll not recommend this as Bluetooth itself is very very insecure

Obligatory https://xkcd.com/927/

I think it was renamed to CAT wiki

deleted by creator

I know nftable is more secure and robust but sometimes I feel like iptables is the way.

They don’t need to guess the password. If you don’t have full disk encryption I can just run another os in live mode and mount your drive and read everything. And even change the password to your fedora, by changing the hash in shadow file

a post from last year from my personal X account suddenly became a topic of discussion here on Reddit.

You mean last month right.