1. 3
    ehouse avatar ehouse 1 year ago | link | on: Why I don’t Use 2048 or 4096 RSA Key Sizes

    This is similar logic to running services on non-default ports. It /may/ be more secure because attackers will pass over it but that’s a seriously dangerous assumption if that’s what you’re relying on for security.

    At least he pushes for modern crypto algorithms, so it’s not ALL bad.

    1. 6
      nc avatar nc 2 years ago | link | on: Apple Stole My Music. No, Seriously.

      Holy crap. This is making me seriously consider dropping my Spotify subscription (because as soon as one company gets away with it, the others will follow) and slowly buying back my library on CDs. That’s just freaking evil.

      1. 4
        noelle avatar noelle 2 years ago | link

        Does Spotify offer to upload your personal library and serve it to you? I thought the external song stuff was just integration of local files with your library and if the file didn’t exist on the local system it wouldn’t play it?

        There are plenty of reasons to want to drop Spotify, but this is one of the more out there ones I think.

        1. 1
          nc avatar nc edited 2 years ago | link

          You’re right, it is just reads a local library for now. However, many of the other popular streaming services upload your music. I wouldn’t be surprised to see Spotify add this “feature” too.

          1. 3
            ehouse avatar ehouse 2 years ago | link

            With how much bad PR apple is getting over this I highly doubt Spotify will add such a feature. Although all of these fears can be avoided if regular backup are taken.

      1. 10
        ehouse avatar ehouse 2 years ago | link | on: 'W^X enforcement' - for Common Criteria

        Make sure you also read Theo De Raadt’s follow up.

        https://marc.info/?l=openbsd-misc&m=145943630726937&w=2

        1. 1
          ehouse avatar ehouse 2 years ago | link | on: Why OpenBSD?

          I know it’s not going to happen but I wish they had gzip compression planned for httpd.

          1. 4
            trousers avatar trousers 2 years ago | link

            Yeah, I also really wish httpd had support for setting arbitrary headers. Requiring relayd for setting expires/cache-control, charset, CORS, etc.. just adds yet another moving part. At least hsts is possible now. Not sure why they didn’t just add support for setting arbitrary headers though.

            1. 5
              tedu avatar tedu 2 years ago | link

              Informally, I think of httpd as ftpd that speaks http.