Having a certificate for any subdomain has implications for other sibling domains, even without a wildcard certificate.
By default, web browsers are a lot less strict about Same Origin Policy for sibling domains, which enables a lot of web-based attacks (like CSRF and cookie stealing) if your able to hijack any subdomain
I did not have the money to pay the insane amounts these greedy for-profit certificate authorities asked, so I only remember the pain of trying to setup my self-signed root certificate on my several devices/browsers, and then being unable to recover my private key because I went over the top with securing it.
What do you mean? Are you talking about the hash being spoofed?
Not so long ago, while trying to turn a side project of mine into a package, I bind mounted my home directory into a chroot.
Guess what happened when I rm -rfed the chroot…
The readme mentions “transcription time on CPU” so it’s probably running locally
From what I understand, TPM is “trusted” because of the fact the secrets it contains are supposed to be safe from an attacker with hardware access.
This is what makes it good at protecting data in case of a stolen laptop. This is also what makes it good at enforcing offline DRM or any kind of system where manufacturers can restrict the kind of software users can run on their hardware.
So how is it supposed to replace the project described in this post ?
How does a splitter help? Can you post a link to such a device so I can see what you’re talking about, because I think I’m misunderstanding what you’re talking about
Yeah, there is something oddly mesmerizing about projects that solve an “already-solved-in-a-more-efficient-way” problem in a weird way
KOReader is by far better than the crappy stock firmware from Kobo. While the interface is not the prettiest, it still has a lot of advantages :
While I really hate Kobo’s stock UI, I still recommend getting one if you like truly owning your hardware. It’s really easy to enable ssh access and then it’s just regular Linux. It’s even possible to run an X server and launch Linux graphical apps on the e-ink display (not quite usable though)