I agree. But as you say, since there are a non-trivial number of q's that need to be manually retagged - lets do it slowly... Please, everyone jump in (but only a bit at a time!) — AviD ♦8 hours ago
@DeerHunter so we're looking at a situation where someone has pre-loaded malware on a computer which is going to be used as a air-gapped signing computer and has also planted malware on the mobile phone of one of the participants of the ceremony
for key-signing ceremonies... hmm that would be a question for the bear or perhaps @RoryAlsop . I've not done it directly but know people who have, I recall there being a lot of paperwork and beaurocrary involved
@RоryMcCune - the links I've found say nothing about flashing LEDs or audio speaker physically torn out...
In fact, the Wiki says 'From the moment the vault door is closed until it is re-opened, everything is also video recorded.' Where's video, there's audio...
@DeerHunter tHE ONLY ONE i HAVE BEEN DIRECTLY INVOLVED WITH HAD THEIR OWN MANUAL FOR EVERY STEP OF THE WAY: ACTION, COMMANDS TO BE TYPED, PHYSICAL MOVEMENT, NAMED INDIVIDUALS/ROLES ETC
There is a risk. Websites can use CSS and JavaScript to hide things and then when you copy from that website, you actually copy what they want. @Gumbo provided the example: https://thejh.net/misc/website-terminal-copy-paste.
The fix: Don't copy and paste from websites you don't trust. Or visit t...
learned something new. or rather, a new application of something I've done before for totally different reasons
I recently started server-side programming, and wrote up a page containing a drawable-canvas that lets users publically draw and save a picture, and overwrite pictures made by others.
For kicks, I thought of advertising the link on social media to see what happens.
I'd rather not put my compute...
Well, sometimes all you need to start down the road of security if for someone to tell you not to do something... so you start thinking at every turn, "should I do x?"
First of all I will try to explain my situation:
I would like to keep "outsiders" eyes out of my browser activity.
I don't know any other method other than to encrypt the driver where the browser is installed.
How can I achieve that goal?
If I encrypt that drive is there any other way he or s...
@MarkBuffalo well if its a specific "x", then its fine. If it is "tell me all the x's from a to z about this very generic scenario", then its not really a question, is it
From what I've seen "Server Name Indication" is the main way to achieve this at the moment.
One of the downsides is that older browsers won't support this so depending on the site it may not be a possibility for it to be used.
Edit: Just to update following @D.W.'s and @Piskvor's comments loo...
I like this
"From what I've seen "Server Name Indication" is the main way to achieve this at the moment."
Really takes into account how rapidly infosec is changing
I recently started server-side programming, and wrote up a page containing a drawable-canvas that lets users publically draw and save a picture, and overwrite pictures made by others.
For kicks, I thought of advertising the link on social media to see what happens.
I'd rather not put my compute...
First of all I will try to explain my situation:
I would like to keep "outsiders" eyes out of my browser activity.
I don't know any other method other than to encrypt the driver where the browser is installed.
How can I achieve that goal?
If I encrypt that drive is there any other way he or s...
From what I've seen "Server Name Indication" is the main way to achieve this at the moment.
One of the downsides is that older browsers won't support this so depending on the site it may not be a possibility for it to be used.
Edit: Just to update following @D.W.'s and @Piskvor's comments loo...
