Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @dan@d.sb

  • 12 Posts
  • 4.83K Comments
Joined 3 years ago
cake
Cake day: June 14th, 2023

help-circle





  • There’s other approaches to automatically unlocking. For example, you can combine Clevis with Tang to use Network Bound Disk Encryption, which lets you automatically decrypt only when on a trusted network. (the password is stored on a different system on the same network)

    You can have multiple different LUKS keys, and any of them can be used to decrypt the disk. This lets you automatically unlock via a network server when your system is at home, while still prompting for an unlock password when not at home.

    At my workplace, our laptops have two LUKS keys - one for me and one for IT / tech support. It lets IT boot the system (eg if I send it in for repair) without having to know my LUKS password.


  • Bitlocker stores the key required to boot the system in the TPM.

    You can do that on Linux too if you want to, using Clevis or systemd-cryptenroll.

    As far as I know, Bitlocker uses two keys to boot: There’s a key in the TPM, that’s used to decrypt a key stored on the drive, that’s used to decrypt the data.

    I think some data (maybe just user-specific data?) is encrypted with a user-specific key too, that isn’t unlocked until you log in. Edit: I think I was thinking of DPAPI.

    I’m not 100% sure about the specifics of its design.




  • cost of AI going up

    The highly subsidized Anthropic and OpenAI subscriptions will go away, but open weight models are getting much better over time - GLM-5.2 and Kimi K3 are both very good.

    The most expensive part by far is training the model. That’s why OpenAI and Anthropic are losing so much money (well, that and the subscriptions).

    With an open weight model, someone has already trained it, and you just have to cover the cost of inference, making it a lot cheaper. Any company (or individual!) with powerful enough equipment can host the model, which means there’s competition in terms of price, compared to something like Claude Opus where the only four hosts (Anthropic, Amazon Bedrock, Google Vertex AI, and Azure AI Foundry) use Anthropic’s pricing.


  • I agree that AI slop is bad, but I don’t really agree with their method of determining if an app is abandoned (no updates in 2-3 months).

    Sometimes apps don’t need updates. Some Linux apps don’t receive major updates for years. I used backupninja (https://0xacab.org/liberate/backupninja) for long time even though sometimes there’s 2-3 years between releases, because it did what I needed. (I switched to Borgmatic at some point though).

    I didn’t update one of my apps for over a year because it already did everything I needed, and I wasn’t receiving any major feature requests. There’s still some bugs I need to fix but I just haven’t gotten around to it yet.























Moderates