tmpod

joined 3 years ago
MODERATOR OF
[–] [email protected] 13 points 8 months ago

encrypted email

Besides being a form of messaging (so the text somewhat contradicts itself), typical email is a deeply insecure protocol.
In my opinion, it's probably impossible to secure without making a new protocol or making such drastic changes that it might as well be considered one.

Here are some key concerns regarding the usual PGP-powered encrypted email:

  • Email, at a simple level, works much akin to physical email — there's an "envelope" containing important info regarding the communicating parties, which can't be encrypted, otherwise the mailing servers wouldn't know where to forward the messages. This essentially leaks a lot of metadata that can be almost as valuable as the message body itself.
  • There's no forward secrecy — one of the best cryptography features that has become pretty much a commodity in modern systems is forward secrecy, which prevents attackers from decrypting older messages after gaining access to one of the keys.
  • While not an issue with the protocol itself, it's the sad reality and we need to consider — most people use GMail, Outlook and the like, which ultimately need to read your emails in plaintext, for better or worse reasons (search is incredibly useful, but some big players don't stop there of course :p).
  • Another thing is the fact that it's incredibly easy to have an imbalance of encryption, i.e. someone is encrypting their messages, but others aren't. With the very popular email culture of quoting (be it top or bottom posting), an unencrypted party in the the conversation can leak important information.
  • PGP is... peculiar, so to speak. I has a lot of issues, mostly stemming from its age (which could also be a source of robustness and security, due to being very battle-tested, but I don't think that's quite the case with PGP/GPG), tries to do too much and typically has a clunky UI, which impedes wider and proper adoption by less technically people.

This isn't to say people should definitely stop using and promoting encrypted email, since it can be useful.
It's just it gives, more often than not, a false sense of security and can lead less proficient users to send sensitive data through this medium which isn't nearly secure enough for such use cases. Preferably, people with such threat models should opt for better alternatives, most suggested in that article (such as, but definitely not limited to, Signal, SimpleX, Matrix+Olm, XMPP+OTR/OMEMO, sharing files via MagicWormhole, encrypting with tools like age).

On a slightly tangential note, I think someone should make a Matrix client with an email client interface. I started working on a new traditional chat client (completely nonfunctional still, very much in-dev), but I've been honestly thinking more and more about making one looking like an e-mail client, where there isn't much focus on instant room-based chats, but rather on longer-lived 1-to-1 and list-like exchange of messages.

[–] [email protected] 15 points 8 months ago (9 children)

I went through my subscription list on FreeTube and filtered these out (the list was much lengthier initially :p)

  • Alt Shift X — well detailed and narrated videos about fantasy series such as Dune, ASOIAF.
  • Captain Disillusion — very well made videos about VFX.
  • Computerphile — computer science twin of Numberphile; neat videos about the field with a wide range of guests.
  • EthosLab — pretty much the only Minecraft creator I still watch; witty, quiet and virtually the same for a long time.
  • hbomberguy — well known video essayist, easily one of the best in the platform
  • Jacob Geller — another quality essayist, exploring different themes, such as horror
  • Lemino — very well known creator focusing on mysteries, with incredible narration and stunning visuals
  • LockPickingLawyer — very simple, to the point and informative channel about locks and lockpicking; also virtually unchanged for years
  • Oversimplified — great overviews of major history events and periods, with funny narration and visuals
  • Tantacrul — fairly unknown essayist on music, with well researched material and nice takes :P
  • Then & Now — possibly my favorite atm (alongside hbomberguy); extremely well researched and presented video essays about history, politics and philosophy; very underrated imo
[–] [email protected] 1 points 8 months ago

Exactly. There were good comments on that thread already.

[–] [email protected] 0 points 8 months ago

Sadly "your local email coop" is very far from being common. Sounds like a fun thing for nerds to do, but I doubt normal folks would be interested in that, over just using one of the big players.

[–] [email protected] 1 points 8 months ago

Glad to hear! Good luck :)

[–] [email protected] 1 points 8 months ago (2 children)

Just tested* and it doesn't seem to work, no. I don't know if it's doable though, it may be.

  • Even though I'm a heavy user of that behaviour in Firefox (which now has to be explicitly turned on :/), I've gotten used to just use the left and right arrows (+kitty mod bind) to move around tabs.
[–] [email protected] 5 points 8 months ago (4 children)

Kitty has been my daily driver for quite some time now, I really like it for its rich feature set and extensive configuration.

You can use its goto_tab action with 0 and negative values to get MRU behaviour. See more here: https://sw.kovidgoyal.net/kitty/actions/#action-goto_tab

[–] [email protected] 5 points 8 months ago

Yeah Mullvad's system is better than Proton's, since the latter asks you to place your username inside the envelope. Mullvad's random token is better in that regard.

More info on Proton's cash payments: https://proton.me/support/payment-options#cash

Disclaimer: I've never paid in cash on either of these services.

[–] [email protected] 1 points 8 months ago (2 children)

I believe proton also accepts cash payments. At least I've seen that in their mail service.

[–] [email protected] 2 points 8 months ago

Yep, that's correct! There have been multiple occasions where the guest wins the episode.

[–] [email protected] 4 points 8 months ago
[–] [email protected] 2 points 8 months ago (2 children)

I'd say there's a bit of both in Portugal's TM. Sometimes the TM acknowledges the creativity, but if the execution it too off the rules, it doesn't get well rewarded. Other times, creative solutions really bump a player's score.

An interesting detail, though, is that in here, TM contestants are mostly non-comedians, and only four of them are permanent per season, with each episode having a different guest. I don't know how it is in US, but I find it really entertaining seeing well known figures doing silly shit and being creative. The varying 5th seat also brings a nice dynamic, and sometimes some of them then get moved to the permanent cast in following seasons.

 

._.

 

Não gosto nada da Igreja Católica como instituição, mas ainda bem que o Papa está melhor. Seria muito mau não acontecer nada de especial depois de tanto espalhafato e dinheiro (público) que se enterrou nas JMJ.

 

Alguém assistiu ontem presencialmente ou na RTP?

 

Gostava era que se focassem mais na ideia de "Dinheiro público, código público". Já há algumas coisas no GitHub da AMA (como a Autenticação.Gov), mas devia haver mais transparência.

 

A novela continua...

 

Parece que foi uma quebra de energia num centro de dados importante que causou as falhas de Internet de hoje.

Por acaso não me senti particularmente afetado, e vocês?

view more: ‹ prev next ›