Apicultor 🐝 / is on Nostr

In a sense, I am a beekeeper, hence the username.

I work in the rail industry trying to secure all the things: tons of legacy infrastructure which is now being networked.

Never forget: there is no cloud, there is only other people's computers.

I break shit for fun. Sometimes I even fix it afterwards!

They say that "life is what happens while we're busy making other plans", and they're right; tot i que la vida m'ha allunyat de Catalunya, tinc moltes ganes de tornar a casa.

Geek. Aspie. Poly.

xkcd: 538,1053
infra: FreeBSD,Proxmox,Linux
mobile: GrapheneOS
secrets: in secure elements where they belong

Last Notes

2024-09-10 19:54:27

- reply

>(Free link but Post demands a working email address.)
Not all costs are financial. No thanks.

2024-09-09 13:44:21

- reply

Ah, so you couldn't rebut what I said, so you throw some new stuff into the mess. Okay.
>NitroKey still has WAY less features and capabilities than a Yubikey. They also don’t have a lot of capabilities needed by enterprises.
OATH and legacy Yubikey OTP are both irrelevant nowadays, so by "way less features and capabilities" you mean "missing PIV".
>Some services in enterprise only accept Yubikey.
That's a company-specific decision... and a poor one at that.
YK repeatedly fails.

2024-09-09 04:25:35

- reply

Do you really think I'm suggesting Yubikeys should accept whatever home-rolled firmware you can throw at them?
No. No, I'm not.
My Smartcard-HSM is field-upgradeable with two caveats: the update must be signed by CardContact, and all keys will be wiped during the update. (You can wrap the keys, export them, then reimport them after the update.) And it costs less.

2024-09-09 03:57:42

- reply

Except keep its secrets secret.
This is not the first time a Yubikey firmware issue has bitten me in the ass, either. And, of course, they are non-upgradeable, unlike the competition. So now mine are e-waste.
I will not be making the mistake of replacing them with more Yubikeys.

2024-09-08 22:36:49

- reply

Yubikey? No thanks.
Nitrokey? Solo 2? Now we're talking.

2024-09-08 00:25:29

- reply

I can't wait! Thanks!
I'm also considering the Sette 270Wi. I didn't find anything about it on your site, but is it as good as many say it is? Does it really need a burr shim for espresso?

2024-09-07 11:45:07

- reply

Ooh, excellent recommendation, thank you! Do you think it's better than the Profitec Go?

2024-09-06 22:06:31

@npub1ep8…29a5 I'm super tired of cheap shitty plastic and useless electronics for the sake of it. If longevity, solid build, and repairability are just as important as the quality of what ends up in the cup, do you think the Silvia V6 is the right choice?
Also considering the Sette 270Wi. It is as good as they say? Does it really need a shim for espresso?
Thanks in advance!

2024-08-28 11:27:09

- reply

Does this mean an A12-powered iPhone with 17.5 in BFU will yield only what is listed here?
https://cellebrite.com/en/what-can-be-recovered-from-bfu-data-collection/
Do you have info covering 17.6.1?

2024-08-26 08:55:35

- reply

Why can the Type C driver not figure out the lane assignments? That's within its "layer of the OSI model", no?

2024-08-25 22:03:41

- reply

Why the fuck is it done in the driver and not in the USB controller itself?
It's Winmodems all over again. 🤦🏼‍♂️

2024-08-15 21:34:34

- reply

>A horrible flaw on ALL Google Pixel phones leaves them open to exploits by bad actors.
No, only Pixels running Pixel OS; those running @npub1kwa…e0nj are unaffected.
The article claims it is a "firmware" issue, but it is actually a software issue in Pixel OS.