Notices by Phillip HAS MOVED INSTANCES (pb4000@infosec.exchange)

@binarydigit AAHH I didn’t realized it release already! Buying it now 🤑 have fun on stream!

@binarydigit Looks great!

My girlfriend brought me flowers at work for our anniversary 🥰

Can you tell that purple is my favorite color? Lol

@binarydigit Lovely! There's something to be said for disconnecting like that. It feels so cozy!

I'm slowly doing something similar, but by moving more to Plexamp, so not quite to the same level lol. I generally listen all the way through an album and don't use playlists much, so it's great for that. Plus, I realized I can make collections of artists or albums, grouping them similarly to how playlists work with songs?? So cool!

@binarydigit
@mullvadnet is my one true love 😍

@sundogplanets No suggestions, but thanks for the reading list! I fear what my backlog of books is becoming

@badnetmask I didn’t know they had a control panel like that?? Will definitely have to check it out.

This is the tool I use to help me choose the fastest providers and know my options. Pretty nifty

https://dnsspeedtest.online/

@badnetmask I’ve been enjoying Quad9 on my network. I’ve got AdGuard’s public DNS set up as well for load balancing

#Passkeys have a lot of confusion and valid criticism against them. However, there is one huge benefit that I feel like no one is talking about: they effectively eliminate password breaches as we know it!

#security #cybersecurity #passwords #technology

🧵1/2

This is because they use public key cryptography/asymmetric encryption, as opposed to the symmetric encryption we are used to with passwords. It is functionally identical to using ssh keys vs a password.

On sign up, your device generates a key pair and sends only the public key to the server. On login, the server provides the client with a challenge signed by the client's public key, which can only be completed with the client's private key. Your private key NEVER leaves your device. If the server gets breached, then the attackers can only get your public key, which is effectively useless. Even TOTP doesn't use asymmetric keys. This is huge!

The Fido alliance website has a nice, albeit greatly simplified, explainer here. I'd strongly recommend giving it a read.

🧵2/2

https://fidoalliance.org/how-fido-works/