englabenny

- friends
827 link karma
4,981 comment karma
send messageredditor for
what's this?

TROPHY CASE


  • Two-Year Club

If you are running Linux on a Laptop and NOT using Jupiter - then you are crazy. Check out this amazing app! Improved my battery life by an additional 2-3 hours! by levlin linux

[–]englabenny 0 points1 point ago

pm-utils runs helper scripts, and some distributions use those to put devices in low power states as appropriate, like debian does.

If you are running Linux on a Laptop and NOT using Jupiter - then you are crazy. Check out this amazing app! Improved my battery life by an additional 2-3 hours! by levlin linux

[–]englabenny 3 points4 points ago

ok. By using powertop's power saving hints I think I have already covered most I can do. Also debian's pm-utils enables quite a few tweaks, but only with a recent version.

BBC News - SpaceX Dragon docking with ISS by seb19in worldnews

[–]englabenny 0 points1 point ago

Right now it's just showing the dragon module as docked with the earth moving beneath it all.. still cool as hell with a live stream from up there above the atmosphere..

Final Eurovision predictions, and what to watch out for in the voting by mewo2in eurovision

[–]englabenny 1 point2 points ago

the song quality is a minor factor still in his model. I'd say good song + good position with "friendship" votes makes the chances higher than his prediction.

Flag of Friesland (province in the north of the Netherlands) by Fatsomein vexillology

[–]englabenny 0 points1 point ago

Why the halfhearted hearts?

Linux 3.4 released - Btrfs improvements, a new X32 ABI, improved GPU driver support by diegocgin linux

[–]englabenny 0 points1 point ago

Is that what mount -o recovery does now? That was what I tried and it didn't work, that should restore from the newest functioning 30-second snapshot if there is one..

Hamscape by BenevolentVillainin pics

[–]englabenny 0 points1 point ago

Now get me a lambscape.

Second time by cousinroyin comics

[–]englabenny 2 points3 points ago

Wrong! It's this guy in Independence Day. :-)

Grive: Open Source Google Drive Client For Linux by THpubsin linux

[–]englabenny 9 points10 points ago

If it works well with a local encryption wrapper (such as encfs), I'm all for it.

Lennart Poettering comments on Canonical's decision not to adopt systemd by firexqin linux

[–]englabenny 0 points1 point ago

D-Bus isn't new though.

Safest ways to convert bitcoins to cash anonymously? by kneadersin Bitcoin

[–]englabenny 1 point2 points ago

with a very small part of his holdings.

Systemd might be coming to Ubuntu by mastain linux

[–]englabenny 1 point2 points ago

Ubuntu and debian can deviate there just fine I think. Hard for me to know what it would force but I think they manage slightly different udev etc already.. and upstart certainly.

It's not about boot time. It never will be, that's just a side effect whichever way it goes. Systemd, upstart etc are about how the core of the distro hangs together, how devices are detected and handled and how the service manager (systemd or upstart etc) keeps track of running services.

systemd sounds good for debian because of things like systemd-nspawn that can spawn a sub-init safely (useful for debian chroots, debootstrap etc).

Greg Kroah-Hartman on the idea of a “core distro” by ouyaweiin linux

[–]englabenny 1 point2 points ago

Sure, ask a question and I'll answer it.

TACK: certificate pinning to solve the SSL Certificate Authority problem by englabennyin technology

[–]englabenny[S] 0 points1 point ago

Summary

This is an excellent proposal for an SSL extension to solve the problem of rogue CAs. It's by Trevor Perrin (a former co-worker and great crypto engineer) and Moxie Marlinspike, from Whisper Systems (now Twitter).

The way it works is simple. The admin for a site signs a message that "pins" a given public key to the domainname. This message is delivered by an SSL extension or appended to the SSL cert chain (a hack, but requires no protocol changes).

The pin message states that the public key won't change for a given period. If it changes, a rogue CA has issued a different cert and you are under attack. The browser will reject the session.

The admin can "break" the pin early by signing another message, distributed the same way. Then they can re-pin a new cert. This allows certificate mobility, fully under the control of each site admin.

This accomplishes the same goal as whole-cert pinning (as practiced in Chrome), but with many advantages. First, when you pin the cert (not public key), you don't allow for CA mobility. So if you keep the same server key but get a new cert, this appears to be an attack. Second, you have to notify Google and wait for them to issue a browser update when you do get a new cert. This is complicated and too costly.

Whole-cert pinning is used extremely rarely (not even all top 500 sites) and will never gain widespread adoption.

TACK is an extremely simple protocol, and the messages are tiny. It is very well-designed, and the site has working code on Github in addition to the Internet draft.

Trevor and Moxie are doing great things, so please do all you can to support them in this. It really is one of the few initiatives in recent times to have a huge impact on your family's actual security, as well as dissidents in countries like Iran.

I am a reasonably successful international female model, AMAA by modelthrowawayin IAmA

[–]englabenny 0 points1 point ago

You don't have duct tape for situations like this?

I am a reasonably successful international female model, AMAA by modelthrowawayin IAmA

[–]englabenny 0 points1 point ago

Why is travelling needed? Don't most want to stay in one big city?

Systemd might be coming to Ubuntu by mastain linux

[–]englabenny 0 points1 point ago

Well most basic services are covered already by systemd or by themselves. This is the filelist for systemd in Debian, look at all those .service files.

The most problematic part is replacing sysvinit since it's marked essential by APT, so it does not allow you to remove it without force. I don't know why they haven't solved it with dpkg-divert.

Systemd might be coming to Ubuntu by mastain linux

[–]englabenny 1 point2 points ago

Don't know if they can share Debian's work on systemd. Debian has the latest version in unstable (44), not as default of course.

How does one rape a window? by dfinchin gameofthrones

[–]englabenny 8 points9 points ago

killjoy

Greyjoy

view more: next