Zak :1password:

Privacy Analyst at 1Password (npub1ak3…t4td). Previously Jolicloud. I live at Disney World. Opinions are mine, you can’t have them.

LinkStack: https://linksta.cc/@zak

Public Key

npub1cxshdy5d8awhm7y7wgrlwthhh3e764hz9jfa03ve6n8rrwvm2xgs59yv3r

NIP-05 Address

zak_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsvrgtkj2xn7htalz08yplh9mmmculd2m3zey7hckvafn33hxd4rygpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds8ps8rx

Publishing to

relay.nostr.bg

nos.lol

relay.damus.io

Author Public Key

npub1cxshdy5d8awhm7y7wgrlwthhh3e764hz9jfa03ve6n8rrwvm2xgs59yv3r

Show more details

Last Notes

2025-09-24 18:52:11 UTC

[@hen](https://social.lol/@hen ) On the most recent [@sr](https://social.lol/@sr ) today, you brought up being a self-hosting normie and using Synology (like I do) instead of Nextcloud. Just wanted to bring up that I plan on looking into swapping to @npub129e…3cyx next chance I get because it seems fairly similar in the "install a thing and use it" instead of messing with Docker sort of way. Mostly just waiting on a new release because it's based on Debian and my hardware is too new for their current kernel 6.1.

2025-06-13 23:03:23 UTC

- reply

Right, true. I consider Play Integrity to be a totally separate issue, but you're right in saying that it's a huge issue nonetheless. I'm personally more concerned with future hardware/firmware support and how it will be able to support, as you say, AOSP-based operating systems. This is what I'm scared of. I know that GrapheneOS-compliant hardware is possible. I just don't know if or when it'll happen.

2025-05-11 18:00:27 UTC

Apparently the public sharing of Signal usernames isn't generally recommended. If you wanted to create a public profile with which people could send you a message, what would you be using?

2025-04-29 20:38:12 UTC

What's everyone using as their RSS service and client(s) of choice?

2025-04-15 23:07:09 UTC

My biggest issue with #OpenWRT so far is the upgrade process. As in, keeping the OS up to date. The package manager's upgrade functionality, which is fully baked into the OS and its GUI web interface, prominently displays a warning at the top that tells you not to use it. Don't upgrade packages, it can and will break your system: https://openwrt.org/meta/infobox/upgrade_packages_warning
Okay, then why is that feature baked into the OS at all?
Meanwhile, the sysupgrade feature, which is the recommended way to keep the OS up to date, is also baked into the OS, but only at the cli level. If you want to use the GUI web interface, you need to manually install the attended-sysupgrade package, after which point you can manually re-flash the OS whenever you want to using up to date packages, provided that you also (somehow) keep up to date about their releases without the use of a real tool to check for updates using the GUI. Why isn't that baked into the OS instead?
The whole thing is just very confusing.
#FOSS #Linux

2025-02-28 15:03:58 UTC

For a time, "Skype" was a verb synonymous with video calling. My grandparents knew how to Skype. That it had to be acquired, neglected, and killed in favor of a Slack clone is a damn shame.
https://arstechnica.com/gadgets/2025/02/on-may-5-microsofts-skype-will-shut-down-for-good/

2025-02-27 02:43:32 UTC

Every so often I think about how cool it'd be if iOS and Android were still competing with BlackBerry as a platform.

2025-02-17 19:03:43 UTC

- reply

This looks like Gapless, I think?

2025-02-07 21:31:21 UTC

On the web, I've been using elk.zone for Mastodon and phtn.app for Lemmy. Are there any good web applications for Pixelfed?
#fediverse

2025-02-02 19:19:05 UTC

Babe wake up, #fediverse Facebook Marketplace just dropped. https://codeberg.org/flohmarkt/flohmarkt

2025-02-01 22:31:14 UTC

I wish Mozilla would take Firefox development a bit more seriously. It's a great web browser, but it does still fall short of Chromium in a number of ways. And it'd be really awesome to have a true competitor out there, run by a more ethical nonprofit.
Props to those who use it right now. It's just not for me at the moment.

2025-01-31 04:26:34 UTC

If you're a @npub1ak3…t4td user, or you're just getting started with password managers in general, I'd strongly recommend a look at this blog post from @npub1s23…ah67. A secondary encryption secret is why I chose 1Password as my password manager, well before I started working for the company. It's a massive stand out feature that others don't have. But to most, it's very difficult to explain.
https://blog.1password.com/what-the-secret-key-does/
#security #passwords

2025-01-31 04:14:40 UTC

Use Signal.

2025-01-29 23:59:41 UTC

I've started using @npub1zje…acky for location sharing as an alternative to Find My Friends. It uses @npub1m9z…whzq to communicate and seems to be exactly my thing. With that said, it's very early days. The roadmap looks good, but the app itself seems a bit buggy and inefficient on some platforms. But it'll get there.
https://mygrid.app/
#privacy #FOSS

2025-01-24 03:02:39 UTC

- reply

I've made a bit of a trade off here in the form of prioritizing NextDNS blocklists over blending in using a shared IP address. Mostly because the sites and services that I use tend to require signing in with an account anyway, so I wouldn't be anonymous either way. If I need it, I'd likely temporarily disable Private DNS and use Tor or something. But it's very rare that I use a VPN for anything except getting around regional blocks.

2025-01-24 02:48:13 UTC

- reply

I'm not sure that I understand the realistic difference between this and what's described by @npub1dm2…7754. It seems that the end result is an implementation of DoH that can only be used with Google or Cloudflare servers. If that's not the case, then I've been misinformed and I just don't know how to properly configure the private DNS feature to use DoH.
(Context: I am a NextDNS user)

2025-01-24 02:34:03 UTC

Cool Whip implies the existence of Lame Whip.

2025-01-23 23:16:25 UTC

I wonder if @npub1kwa…e0nj could/would implement their own DNS over HTTPS functionality now that Google has expressed their desire to reject it from ever reaching the AOSP?

2025-01-20 18:17:37 UTC

- reply

They were decent enough, but I remember going through that first season episode by episode every week, listening to podcasts full of theories, wondering where it could all be going. It was just nuts.

2025-01-20 18:09:30 UTC

Every so often I think about how good the first season of Westworld was.

2024-12-13 01:25:39 UTC

- reply

I've heard this, about how GrapheneOS is looking to eventually move away from the Linux kernel, and I'd be interested to know how that might be implemented in the future. It seems like a huge deal.

2024-12-05 16:47:05 UTC

- reply

Can confirm. Updates are best presented in terms of features, performance, and ease of use improvements. Security is often for someone else to worry about until something bad actually happens. And even then, it's a hard sell.

2024-11-10 18:17:56 UTC

- reply

Thanks for the tips. Small things like this are a big reason why I'll be moving to Graphene. Admittedly, the biggest thing that caught my eye was "we use an up to date, patched Linux kernel." I love that. Scopes are going to be relatively new territory for me beyond yes/no permissions, but I'll be learning as I go. Sandboxed GPS and additions like Android Auto will definitely help ease my transition over.
I think that as long as the installation and update processes remain easy (and they seem like it), I'm very likely to stick with it. I appreciate the work put into this!

2024-11-10 01:40:07 UTC

After taking some time to think it over, here's what I'm going to be doing over the next few weeks:
- Transition off of iOS for the first time in 8 years. I've ordered a Pixel 9 Pro that I'll be installing @npub1kwa…e0nj on.
- Delete my Twitter account. At this point, even my more mainstream friends are starting to move to Bluesky, which I think will eventually end up being a drop-in replacement. I'll still primarily be here, but I do have an account there, too.
- Cut down on social media a lot.
- Start my account spring cleaning early. I'll be a little bit more strict than normal, so I'll be deleting much of my online presence that I don't use.
- Replace my networking equipment with something open source.
- Later: buy a NAS and some extra storage for self-hosting media. I still know next to nothing about this, so it'll be a big one.
Among other things. It sucks to live in a country with a hostile government.

2024-09-17 21:42:21 UTC

It seems that by default, iOS 18 contains a “Hidden” folder at the bottom of the App Library that requires biometric unlock to open. Once open, it does nothing.
This should probably (and ironically) be hidden while it’s not in use.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/155/069/555/998/209/original/f616a97e6facee2a.png