Skip Navigation
Selfhostable notes app that encrypts the files on Disk?
  • if you want to type the key yourself each time this could work. I'm not aware of an app that does this but it wouldn't be too hard I don't think.

  • Selfhostable notes app that encrypts the files on Disk?
  • if you're encrypting at rest you also have to consider where there encryption key is being stored.

    if you're storing the encryption key plaintext on the same drive as the data, there's not much of a point in encrypting.

    a TPM/HSM could solve the issue, depending on how far down the rabbit hole you need to go.

    EDIT: You could also encrypt the disk of the VM/Server hosting the app. similar situation.

  • Working from home
  • For desktop windows this is not true. A remote sign in will sign out the local user and vice versa

  • Parody site ClownStrike refused to bow to CrowdStrike’s bogus DMCA takedown
  • Cloudflare and Crowdstrike are different companies.

  • Which adaptation do you think has surpassed its source material in quality?
  • Invincible. The comics are great, but I think the show dramatically improves a couple characters

  • wanted: e-mail provider that supplies onion email addresses and allows users to use them on clearnet
  • No you can totally modify mail headers anytime you want to, just be prepared to get mail rejection if you're not following current mail security best practices.

    I'd recommend just renting a cheap vps from vultr or something, then you can setup your mailserver to send from anything you like. That's how my mailserver works. I pay like $3 a month, and its plenty of space for a single user mailserver (i have like 3 mailboxes)

    I did go through the work to setup dkim/dmarc/spf. Took a weekend, but wasnt too bad. My mail is received by gmail yahoo and Microsoft. I imagine doing the same with onion addressing would be complicated.

  • wanted: e-mail provider that supplies onion email addresses and allows users to use them on clearnet
  • Maybe i need to further clarify that none of this is in the email RFC. Email is very old. These are new standards that everyone has agreed to on top of the RFC

  • wanted: e-mail provider that supplies onion email addresses and allows users to use them on clearnet
  • That is 100% what im saying, yes. The sending server needs to sign all messages with a private DKIM key where the public key is in a dns text entry. Then the reverse dns lookup for the mailserver needs to match the SPF txt record. Then your DMARC record has to match the dkim and spf settings.

    Ive set this up for exchange at work as well as my own personal mailserver, which is just a debian server running postfix and dovecot.

    When you want to use gmail as a mailserver for your own domain, you set these three things up so that your messages arent all blocked.

    Keep in mind, you do not need these to simply send and recieve messages, but if you want to interact with the rest of the world you do. Email is too easy to spoof, so everyone has agreed on these protocols for authenticity.

  • wanted: e-mail provider that supplies onion email addresses and allows users to use them on clearnet
  • Because dmarc, DKIM, and SPF validate the domain against the sending server, not the address.

    When i send from noreply@ at work, it passes dmarc, DKIM, and SPF, because the recipient mail server validates the message came from an authorized mail server for the domain (mosty based on dns entries).

    Without that validation, you can certainly still send emails, but most clearnet mail hosts will drop your messages. Google, Microsoft, and yahoo at the bare minimum will

  • wanted: e-mail provider that supplies onion email addresses and allows users to use them on clearnet
  • How do you expect to receive replies from clearnet users, or are you okay not receiving replies?

    Also most mail hosts these days toss emails that dont match dmarc/dkim/spf, which would be especially hard to do for an onion email

  • M365 dropping email from Gmail domain?
  • Are you using defender for o365? If so, usually uou can get a copy of Any rejected messages at security.microsoft.com and get more info from the message explorer

  • M365 dropping email from Gmail domain?
  • can you drop the header in here: https://mha.azurewebsites.net/pages/mha.html

    it might have some more info for you

  • Junior Dev VS Senior Dev
  • Neovim can be used for anything you want! it's a great experience if you're willing to take the time and learn it

  • Despite Microsoft's push, Windows 11 and Edge see decreases in user share
  • Im assuming he meant the virtual desktop vuesure yeah. Exactly what you mentioned. Its been on linux for decades but windows added it with 10

  • Despite Microsoft's push, Windows 11 and Edge see decreases in user share
  • Windows 10 has multiple desktops as well

  • Any C# devs want to share their setup?
  • I think there are windows containers available, but even M$ has given up pushing windows server for cloud native stuff. All their tutorial docs for containers use linux haha

  • Any C# devs want to share their setup?
  • Just sent them to you.

    Once in a blue moon i have to restart omnisharp, but its just a simple lsp restart

    Much less often these days then even a year ago

    I also use neovim through WSL on windows to do work

  • Any C# devs want to share their setup?
  • All linux! I think debian, though they have alpine images too.

    I wouldnt wish windows containers on my worst enemy haha.

  • Any C# devs want to share their setup?
  • I use the dotnet/sdk image to build and publish into the dotnet/aspnet for runtime since it's smaller. Both from mcr.microsoft.com

  • Tv box recommendations?

    Is the nvidia shield TV still the go-to box for streaming content to your TV?

    I don't really need much, just something that can pick up jellyfin. hulu/HBO/etc. is a bonus

    68
    mark mark @infosec.pub
    Posts 1
    Comments 32