Hacker News: oil25

New comment by oil25 in "Hidden Cam Above Bluetooth Pump Skimmer"

oil25 — Tue, 26 Nov 2019 18:22:22 +0000

That's the best solution - improved privacy and sometimes even reduced gas prices when using cash.

New comment by oil25 in "She Texted About Dinner While Driving. Then a Pedestrian Was Dead"

oil25 — Fri, 22 Nov 2019 23:16:55 +0000

What's the penalty? It ought to be equivalent to a DUI, given the impairment is similar if not worse from phone distraction at the wheel.

New comment by oil25 in "Fastmail – 20 Years Old"

oil25 — Fri, 22 Nov 2019 18:41:54 +0000

That's too bad, looks like I'll have to stick with GSuite Gmail to have browser-based, non-Javascript access to my email.

New comment by oil25 in "Fastmail – 20 Years Old"

oil25 — Thu, 21 Nov 2019 22:52:28 +0000

Sincere question - why is JavaScript required to sign up for Fastmail? Is it for browser fingerprinting? If so, what data is collected, how is it used and how long is it retained? No specific mention of it in the privacy policy. If I sign up in a virtual machine, can I later use Fastmail without running scripts?

New comment by oil25 in "Ask HN: What do you use to backup your personal files in 2019?"

oil25 — Thu, 14 Nov 2019 00:59:36 +0000

Curious how you are managing disk encryption for all those devices, if you are at all.

New comment by oil25 in "OpenBSD: Why and How (2016)"

oil25 — Wed, 13 Nov 2019 16:56:43 +0000

Same here, but I have found wireless performance to be subpar. Ended up double-NAT'ing a second APU with Debian to use 802.11. Still plenty happy with OpenBSD though.

New comment by oil25 in "Show HN: GPG on macOS and YubiKey"

oil25 — Wed, 13 Nov 2019 00:36:38 +0000

> For usability while balancing security, cache PIN for at most a day.

https://github.com/DataDog/yubikey/blob/master/gpg.sh#147

This statement has no effect when using Yubikey - the PIN is cached by the key itself and it will remain unlocked indefinitely until it's physically unplugged. See https://dev.gnupg.org/T3362

New comment by oil25 in "Privacy: Is That iPhone?"

oil25 — Wed, 13 Nov 2019 00:13:42 +0000

Anyone disillusioned by the thought that Apple values privacy would be well served by reading iOS, The Future Of macOS, Freedom, Security And Privacy In An Increasingly Hostile Global Environment - https://gist.github.com/iosecure/357e724811fe04167332ef54e73...

There is so much more to privacy than is made apparent to the user as a few OS knobs to "limit" ad tracking.

New comment by oil25 in "Bypassing Authentication on SSH Bastion Hosts"

oil25 — Tue, 12 Nov 2019 20:07:27 +0000

I tried again and now get the Incapsula crap - maybe related to IP address (which changes often on Tor)?

Edit: the page loads for the first time after assigning a new IP in Tor, but subsequent loads throw the captcha. Odd system.

New comment by oil25 in "Bypassing Authentication on SSH Bastion Hosts"

oil25 — Tue, 12 Nov 2019 19:44:06 +0000

Characterizing this software feature as an "attack" or "backdoor" is pretty hyperbolic. In order to abuse multiplexing, the adversary needs local code execution ability, by which point you've already lost.

New comment by oil25 in "Bypassing Authentication on SSH Bastion Hosts"

oil25 — Tue, 12 Nov 2019 19:35:16 +0000

Works fine here, even over Tor - Firefox 70.0.1 with javascript.enabled=false in about:config.

New comment by oil25 in "Ask HN: Best privacy focused cell phone?"

oil25 — Tue, 12 Nov 2019 18:35:41 +0000

I'm happy with LineageOS running on a Pixel, no Play Services and only open source applications installed over adb.

New comment by oil25 in "Ask HN: Why are so many companies changing their privacy policy suddenly?"

oil25 — Tue, 12 Nov 2019 17:59:14 +0000

California Consumer Privacy Act takes effect next year - https://en.wikipedia.org/wiki/California_Consumer_Privacy_Ac...

New comment by oil25 in "How do I sign into a Google app on my iPhone without signing in for ALL apps?"

oil25 — Thu, 07 Nov 2019 00:41:24 +0000

I doubt it's possible. I think Google uses the device browser (SFSafariViewController) to do OAuth, so users aren't asked to sign in in every application. No doubt they think this is a feature. Why not simply use Google Maps in an private browser window if you're looking to improve privacy? Or even better, check out OpenStreetMap.

New comment by oil25 in "Milan Airport WiFi sends your MAC address to advertisers and trackers"

oil25 — Wed, 06 Nov 2019 17:03:13 +0000

Can someone post a TLDR? Twitter blocks Tor exit nodes, so the content is unavailable:

> 403 Forbidden: The server understood the request, but is refusing to fulfill it.

New comment by oil25 in "Milan Airport WiFi sends your MAC address to advertisers and trackers"

oil25 — Wed, 06 Nov 2019 17:00:20 +0000

MAC address of your radio, plus the BSSID of every wireless network you've ever connected to and saved.

New comment by oil25 in "Milan Airport WiFi sends your MAC address to advertisers and trackers"

oil25 — Wed, 06 Nov 2019 16:58:02 +0000

On OpenBSD:

    # echo "lladdr random" >> /etc/hostname.athn0

New comment by oil25 in "Adding Client-Side Scanning Breaks End-to-End Encryption"

oil25 — Sun, 03 Nov 2019 18:45:47 +0000

I agree completely. These efforts to "break" end-to-end encryption seem entirely ineffectual so long as open source alternatives exist - they are plenty and well proliferated. Banning the use of unapproved software is impractical, like asking everyone to turn in guns. So what's really their end game?

New comment by oil25 in "Ubiquiti adds phone-home to the access point firmware"

oil25 — Sun, 03 Nov 2019 18:19:11 +0000

I also experienced the gigabit performance issue (Debian 9 and 10, APU4C4); estimate a bandwidth cap of about 400 Mbps, too. I don't actually have a need to exceed that speed on my home network, so I'm still happy. But also curious if anyone has built a beefier, more capable open source hardware router that also isn't a power hog.

New comment by oil25 in "Ubiquiti adds phone-home to the access point firmware"

oil25 — Sun, 03 Nov 2019 18:12:29 +0000

I've been using the APU2 platform for a home network router and can strongly recommend it. I especially like the open source firmware (coreboot) with frequent, signed releases. Wireless performance on OpenBSD was lackluster, so I'm back to running Debian for 802.11. Performance is strong even at full WAN bandwidth capacity of 400 Mbps.