Youtube hearted comments of (@dingokidneys).

  1. I'm a KeepassXC user on Debian 12. I support a keepassxc-minimal and a keepassxc (full-fat) version so as not to break existing users ingrained workflow. The Yubikey issue is particularly egregious.
    126
  2. I read that Ken Thompson story back in the 1990's and it's coloured my view on computer security ever since. It didn't make me paranoid but it did make me consider who I was effectively trusting and what their intentions and motivations might be. Life is complicated.
    24
  3. Thanks for this analysis. I'd read about this but couldn't really put it in context. You're breakdown really clarified the issues and the risks so very well. Cheers.
    7
  4. Recall is a god send for scammers the world over. They are already connecting to people's PCs and manipulating the interface. All they need to do is turn Recall on if it's not there already, and the supposed security feature of it not being decrypted without a biometric confirmation won't be a problem as they already get people to tell them SMS 2FA codes or otherwise confirm 2FA challenges, so setting the biometric to be face recognition will be a breeze - the only problem is if Windows Hello can't recognise the old lady frowning at the camera instead of staring blankly. Once past the biometric challenge, it's decrypted and ripe for all that data to be downloaded and sifted through later on.
    1
  5. Interesting to see the use of the masks. I've not tried that before . When I moved into my new house, I had a play with Hashcat on a 14yr old low-powered laptop - Core 2 Duo, no GPU. On a totally unrelated note, I think that several of my neighbours really need to learn a little more about wifi security.
    1