"Wish the sun to stand still.." 🌞

"There is no sanctum or honor among technophiles."

Creator of the Wyng backup system. Lifelong student of the personal computing condition (and human one as well).

#wyng #infosec #pcs #containers #vm #hypervisor #microkernel #backups #storage #linux #qubes #python #foss #oshw

Projects: https://codeberg.org/tasket/
Non-techie: tasket (npub1sjz…rgrs)
PGP Fingerprint: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
De-federate:: THREADS
ALSO: Wyng backup (npub1fye…4tz2)

Public Key

npub1sj2xh2u7w3wdaaeez7mgnmfu5tah6j6h4k07xgkj6adumxtj2q4q09zuuc

NIP-05 Address

tasket_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsgf9rt4w08ghx77uu30d5fa57297mafdt6m8lrytfdwk7dn9e9q2spz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds9eh3v5

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1sj2xh2u7w3wdaaeez7mgnmfu5tah6j6h4k07xgkj6adumxtj2q4q09zuuc

Show more details

Published at

2026-04-29T00:25:39Z

Kind type

0 Metadata

Event JSON

{ "id": "ddbdeebe2189728406c382c7fee7bd06408d7b6e7b9b294ceaac931737b592a5", "pubkey": "84946bab9e745cdef73917b689ed3ca2fb7d4b57ad9fe322d2d75bcd9972502a", "created_at": 1777422339, "kind": 0, "tags": [ [ "t", "infosec" ], [ "t", "foss" ], [ "t", "linux" ], [ "t", "python" ], [ "t", "storage" ], [ "t", "microkernel" ], [ "t", "vm" ], [ "t", "containers" ], [ "t", "backups" ], [ "t", "oshw" ], [ "t", "qubes" ], [ "t", "hypervisor" ], [ "t", "pcs" ], [ "t", "wyng" ], [ "proxy", "https://infosec.exchange/users/tasket", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/tasket", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"\\\"Wish the sun to stand still..\\\" 🌞\",\"about\":\"\\\"There is no sanctum or honor among technophiles.\\\"\\n\\nCreator of the Wyng backup system. Lifelong student of the personal computing condition (and human one as well).\\n\\n#wyng #infosec #pcs #containers #vm #hypervisor #microkernel #backups #storage #linux #qubes #python #foss #oshw\\n\\nProjects: https://codeberg.org/tasket/\\nNon-techie: nostr:npub1sjzl3fllcwd0dvyhhghs2tt8ckk8m4upz8ptlgxksd9apucd9x3surrgrs\\nPGP Fingerprint: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886\\nDe-federate:: THREADS\\nALSO: nostr:npub1fyelzf52vj7ru9js2d4xhx8tqrgthcgg7tvp6dp0t5h89nmpqe5qw24tz2\\n\",\"website\":\"https://infosec.exchange/@tasket\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/305/055/916/982/206/original/5bd743a84a54b258.png\",\"nip05\":\"tasket_at_infosec.exchange@momostr.pink\"}", "sig": "2712baa0f2b26696404a54a73bf7ce60b2c5628f5fdf95295c08a7717c632581029f2dc66958f672c5854c8a4b4628186543326bee5be66a5b930ae5107cb086" }

Last Notes

2026-05-16 03:44:08 UTC

- reply

Link sits there for about 1min:
"Please enable javascript and disable any ad-blocker."
NYT declaring itself a malware vector.

2026-05-05 17:59:27 UTC

- reply

Hey there, bud... keep up with the times! Stop holding back progress!
lol

2026-05-05 01:56:40 UTC

- reply

IPv8 plz....
🙃

2026-01-23 22:46:16 UTC

- reply

Fun fact...
When #Brexit became final, the UK escaped the EU's new tax-avoidance laws by mere days.
I think it could be argued that at the time, the greatest concern of UK politicians was making their land a cozy nest for Russian oligarchs (who, I might add, are very allergic to sharing space with working-class EU citizens from Eastern Europe – the much derided "Polish plumbers").

2025-12-29 20:44:50 UTC

- reply

Why use Sweden as an example? Why not France?

2025-12-23 18:57:54 UTC

- reply

Haven't forgotten about Naomi Wu @npub1jqy…2l40 and the Chinese keyboard spyware she discovered. Govt came down on her pretty quick.

2025-10-24 17:20:24 UTC

- reply

I never understood why these indicators are not hard-wired to the device's power circuit?
The same for on/off switches for cams, mics, wireless, etc. Why are we asking software to do this when the power should be cut instead?

2025-10-19 18:55:53 UTC

- reply

🖕
(This is anything but a DHH endorsemet. Its a kind reminder that whiffing your own fumes for too long leads to very stupid "tired: NoKings" memes. And I don't care about the fucking horse you rode in on.)

2025-10-17 23:09:46 UTC

- reply

The 5mx! My old steed!
This was my 'laptop' before I had a laptop, back in 99. 🙂

2025-09-15 19:41:40 UTC

- reply

AI "helping you" is the ultimate excuse to collect private data from our machines.

2025-09-14 09:02:05 UTC

- reply

de-Googled Android distros without the "AI" are available. I'm using one now.

2025-09-03 18:18:53 UTC

- reply

"spyware that can be used to hack into any mobile phone..."
I doubt it works very well against the top 2 Chinese brands. They have switched to microkernels.

2025-08-17 09:57:05 UTC

- reply

If this is about the still very unfinished BcacheFS, I'd say Linus may be rightfully looking for a reason to ditch that turkey.

2025-08-13 20:13:55 UTC

- reply

Yep, all that Zillow data floating around (for starters).

2025-05-03 05:32:25 UTC

- reply

"Money flows from investors to vendors. Almost 50% of investors are incorporated in Israel, the U.S., the U.K. and Italy. Image: Atlantic Council"
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/442/254/566/305/810/original/ba6ec99b7a24f9d2.webp

2025-04-11 00:26:11 UTC

- reply

This is going to lead to the exile / imprisonment of US citizens who denied Trump's election fraud claims, isn't it?
WaPo:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/316/484/770/490/941/original/75c01e9155b0a8fe.png

2025-04-10 16:40:49 UTC

- reply

I never really "Borged-up" to begin with. I deleted my Google accounts and the harrowing parts are:<li>Youtube videos don't play 3/4 of the time, as of about 6 weeks ago.</li><li>Couldn't get the T-Mobile compat. voicemail app to work from the Aurora store. I can see when voicemail is waiting, but I have to dial-in to hear it.</li><li>Banks sometimes give the impression you must use their app. In my experience, its a ruse and the idea you can't do banking on a PC is absurd.</li>
I use exactly one Play-dependent app via Aurora. It works fine without a Google login. Everything else comes from Fdroid. SMS also works fine, unfortunately.

2025-03-22 00:36:07 UTC

- reply

Well, everything gettin' hacked. So we are there already.
The real revolution will come when Computer Science grows up enough to embody that title.

2025-03-20 21:53:40 UTC

- reply

Ah, you have to have a Youtube account to see this.
I have de-Googled, so 🤷

2025-03-15 16:27:12 UTC

- reply

I would love to enable alerts on this thread to see what the responses will be... 🙃
TBH, I'm among the cloud-skeptics myself. Its an Orwellian marketing term intended to replace one (mainframe) that older generations feared. The word mainframe suggests centralized structure and someone doesn't want us to think about that.

2025-02-21 04:34:44 UTC

- reply

I checked the Ublock Origin addon and it claims to be blocking nothing on your site. But I don't see any ads.

2025-01-29 07:37:58 UTC

- reply

How do you cope with guiding users through the many different GUIs which (I imagine) they are using...?

2025-01-22 06:19:13 UTC

So let me see if I've got this straight about Bluesky:
Anyone can host their own domain, and their identity on that domain. But the Bluesky org controls the "app view" and also the "bsky.app" domain through which all links to Bluesky content are referenced.
:blobcatthinkingsmirk: :blobthinkingcool:
But.... "you control your identity". Except Bluesky corp can cut it off from the rest of the Internet because web sites must reference the content via 'bsky.app' URLs. So your identity is really '@bsky.app' no matter what screen name says.
:blobcatthinkingsmirk: :blobthinkingcool:
I must be missing something. Please someone explain it to me like I'm in grade school...
#bluesky #bsky #decentralization #techbros

2025-01-20 18:28:21 UTC

- reply

Was this the monument outsourced to China?

2024-12-19 03:23:55 UTC

- reply

Who is Starlabs? Never heard of them.

2024-11-21 08:07:26 UTC

- reply

When you hold the reset button down constantly, that computer won't boot.
Nothing of consequence ever begins or evolves on fedi. It is a collection of random hot takes showing off small personal projects by white people. There is no frisson here.
Troll farms easily scare off BIPOC people because fedi moderation tools are primitive and the reaction too slow.
But its good to know we have QTs now, which only show 10 words from the linked post because of course we can't facilitate the viral spread of info or opinions. Eugen touts this as "effective communication" but I disagree; we got plushie toys instead.
ActivityPub did get the W3C approval. But it can't be taken seriously without a protocol handler. It would take them maybe 40min to define it, and then news and other websites would have a sane way to link their pages to the fediverse. What users experience now (in the rare case a website does link) is fragmentary at best. AP's proximity to the W3C, perhaps the best org possible to help with this issue, isn't being utilized for good.

2024-11-18 14:54:21 UTC

- reply

Good time to remind people Naomi Wu was forced to stop her social media activities shortly after exposing a Chinese manufacturer's keyboard spyware. @npub1jqy…2l40
"For years she has called attention to this problem, in which people were using apps like Signal to protect their privacy but typing on a keyboard that could be recording every keystroke and sending it to the developer, Tencent..."
The spyware was independently verified, #TenCent denied it, and then the govt paid Wu a visit.
https://skepchick.org/2023/08/maker-naomi-wu-is-silenced-by-chinese-authorities-and-why-i-blame-elon-musk/

2024-11-11 07:21:30 UTC

- reply

I moved to Qubes back in 2013. Still using it!
On mobile, a major Chinese vendor (Xiaomi) has moved their Android stack to a microkernel based on the Apache NutX project. The OS is marketed as HyperOS its already on the market. Spent some time reading about it last week and it does sound a bit like a mobile version of Qubes.
If RIM is smart, they will brink back a new version of the Blackberry 10 platform. That used the same microkernel as QNX. I would not even be surprised if Apple bought RIM in the next year.
Google has their fuchsia microkernel OS, although its unclear whether they'll ever put it in a phone.
I think once you learn to appreciate the philosophy of these risk-isolation systems (via the old whitepapers and blogs from ITL/Qubes, for example) then "traditional" OS kernels become unacceptable for security. It isn't a matter having frequent patches or bits and pieces of the kernel acquiring new security tricks... their complexity is still the same, and that complexity is doing a f-ton of questionable non-security-related stuff all at the same high privilege as the security code.

2024-11-07 20:05:57 UTC

- reply

Everything in IT is now geared for consuming centralized services with abandonment. From that we get A) device proliferation and B) abbreviated or missing controls that dip below the point of irreducible complexity. With GenAI, we can add C) theft, obfuscation and false results.

2024-11-07 17:24:33 UTC

- reply

Right wing appeal to working class is largely based on the idea that they can exist as simple people... that they have a right to a simple social life and that anyone complicating it is the enemy.
Knowledge experts complicate the picture of life (and demand regulation of major industries), so they turned the Internet into a landscape of lie factories. 51% of the electorate is now completely divorced from even caring what facts are, and their enemies are people who do care.

2024-10-27 12:09:45 UTC

- reply

Yep, face value is just how I think of it. Macs are actually great for all the shortcut keys, additional menu functions that pop out with the Option key, and "advanced" buttons to open sub-dialogs. It offers a lot of features while remaining sleek and approachable to users.

2024-10-26 19:23:51 UTC

- reply

I sometimes wonder if it has something to do with that MacOS 1.0 Finder guy joining them back in the day. They are still trying to be MacOS 1.0.
Oh, and the original mission statement was a doozy, something like "Replace KDE". Very positive.

2024-10-24 14:59:20 UTC

- reply

So here is you, wagging your finger at the Apple and Google security experts.
Look in the mirror, please.
It is hardly ignorant to point out that your approach has been rejected by safety-conscious industries for decades.

2024-10-24 14:42:53 UTC

- reply

> Running badly secured operating systems and applications on top of a badly secured OS and hardware using x86_64 virtualization doesn't magically solve all security problems.
I beg your pardon, but that is your game plan, to tack virtualization on top of an insecure Linux platform (eventually). That plan is itself an interesting sort of admission that the current state of security is lacking.
But effective security isn't a garage sale full of acronym-laden tricks duct-taped together. It has to be in the architecture. So, once you add this virt feature to Graphene, will you pledge to cut off network access in the bare-metal Linux system? That is an architectural choice that cuts against the grain of BAU. But no one except Qubes ever does this for personal devices, and I've seen no sign that you will either.
Virt isn't magic, but its a wide field with some (dare I say) hardened choices that are small and much easier to secure. One can configure a laptop to boot a hypervisor first, leaving it (not exposed OSes) in control.
OTOH, its good that Graphene takes key escrow hardware seriously, but people need more security than that.
Like I said, if mission and safety-critical environments aren't using a certain type of OS (like hardened Linux or Windows or BSD) then that is a big red flag. Linux hardening is a decades-long practice, but not a convincing one.

2024-10-24 02:52:01 UTC

- reply

There are currently no smartphones offering decent security. People should NOT be piping their entire lives through them.
Doing banking, other sensitive tasks? Get a small laptop and put banking in one virtual machine and "general browsing, news, etc" in a separate VM. Do not browse or run apps from the main OS.

2024-10-24 02:34:51 UTC

#GrapheneOS is pushing a false sense of security. If smartphones were a story about the Three Little Pigs (and the Big Bad Wolf), regular Linux would be the #straw house while the Graphene-patched Linux would at best be another straw house but with a wooden door and shutters.
#linux #android

2024-10-24 02:20:12 UTC

- reply

There's a reason why "hardened Linux" isn't used as a basis in critical environments like automobiles and airplanes (not even in garden variety data centers, where hypervisor-based security is the norm).

2024-10-24 02:15:09 UTC

- reply

From this user of VM-isolated operating systems point of view, there is not much difference between the security offered by Graphene's Linux kernel vs all the other Androids.
The security failures are in the basic architecture, and clever tweaks are not going to turn the tide of malware. Its like throwing a chair or garbage can in the path of an advancing army.

2024-10-23 09:45:30 UTC

- reply

Also beware that there are a lot of fake look-alike apps in the Google Play store. If you want to install apps from a cleaner source then look in FDroid first.
Further, a great way to boost your "de-Google" ability is to install an alternative Android OS. I'm using CalyxOS on my Fairphone 4. Two others are eOS and GrapheneOS. They come with de-Googled default apps and settings, and some will let you do things like install apps from Google Play without Play getting its hooks into your online life (you can even install apps from Play without logging in)... for those instances when you really need to.

2024-10-23 09:36:50 UTC

- reply

I think the function you're looking for – what Google Authenticator does – is simply TOTP. A timed one-time passcode.
Lots of apps will do this, although companies like Google try to mislead people into thinking their auth tokens have to come from "the cloud".
For phones I recommend Aegis Authenticator, you can get it from either Google Play or FDroid. If you want combined password manager + TOTP in one app, then give KeePass or Bitwarden a try.
FWIW, you should be aware that its not possible to configure a phone to be as secure as a laptop, since phones don't have robust virtual machine capabilities. The list of auth apps you can use in a Linux "vault" VM differs somewhat from Android.

2024-09-20 19:14:18 UTC

- reply

So this is the band-aid they are putting on a very bad situation, with #Apple backing off their NSO lawsuit and allowing #Israel to sit on a pile of #iOS #0day exploits.
#iphone #nso