stifle867

joined 1 year ago
[–] stifle867@programming.dev 28 points 1 year ago (2 children)

"we need to break encryption so that we can stop terrorists and CP!"

[–] stifle867@programming.dev 46 points 1 year ago (3 children)

It's the fact that the intelligence agencies have proven themselves to be unable to responsibility use their powers, and instead find every sneaky way possible to infiltrate and spy on their own citizens while preventing nothing. That's what has pushed the world to say enough is enough and we are going to encrypt everything we can. Now the global powers are crying poor about how they need access to stop terrorism, while being completely unable to point to a single instance where they stopped a terror attack and contrarily there's plenty of terror attacks that were never stopped.

[–] stifle867@programming.dev 0 points 1 year ago (1 children)

Very weird. I tried replicating this but I haven't been able to.

[–] stifle867@programming.dev 9 points 1 year ago

These are all points to be making to a totally different conversation. The original comment that caused this person to step down was a condemnation of committing war crimes, not an analysis of which specific acts qualify as war crimes nor whether they support a specific party. These type of comments further the exact problem I pointed out. It's not an excuse to say "but they do". Be better, don't make the same mistakes just because everyone else is.

[–] stifle867@programming.dev 2 points 1 year ago

Yes I did and everything you pointed out does nothing to address my comment.

It doesn't do any actually tests to compare it to other OS implementations.

Is it Windows 11 that's specifically causing this, or is it a general problem?

How does pointing out that they did tests with different CPUs and SSDs, multiple benchmarking software, and different encryption methods do anything to address my complaint that they did not comment on whether this is a Windows 11 specific issue? Did you even ready comment?

[–] stifle867@programming.dev 2 points 1 year ago (1 children)

Exactly right. To me it seems overly clicky baity to specifically condemn Windows 11 for the overhead of software based encryption because the hardware doesn't support it. The same problem exists across all platforms (hypothetically) if there is no hardware support.

It would have been another thing if they could show this problem was unique to Windows 11, or if they focused on the fact that it was difficult to disable. Instead they put so much effort into saying Windows 11 runs 45% slower due to Bitlocker.

[–] stifle867@programming.dev 16 points 1 year ago* (last edited 1 year ago) (2 children)

It's not a competition to see who can commit the most war crimes. This whole idea of comparing one faction against another to see who is worse is just stupid. It should not even come into play when someone simply condemns war crimes! The fact that people read so much into a simple statement says more about them than the person who posted it. If someone's reaction to someone saying "war crimes are war crimes even when commited by your allies" is to think "well that person is justifying Hamas's actions" then the problem lies there, just as much as it is to think "that person is saying Israel doesn't have a right to defend themselves".

All it is is making the world more divisive when it should be unifying to condemn the tragic loss of innocent human life. People should not impose their factional viewpoints on something as simple as that.

[–] stifle867@programming.dev 0 points 1 year ago (5 children)

That's one issue I had with this article. It doesn't do any actually tests to compare it to other OS implementations. How can we condemn Microsoft for 45% slower speeds (in a specific benchmark on specific hardware) when there's no context to compare it to? And this claim is specifically only for software encryption where hardware level encryption is not available. Is it Windows 11 that's specifically causing this, or is it a general problem?

[–] stifle867@programming.dev 27 points 1 year ago (4 children)

Everything you said is valid... but to me, it doesn't really apply to this specific context. As far as I could see (admittedly I did only skim the article) but the general statement he made did not mention any specifics. I think it's unfair to take a broad statement such as condemning war crimes, and to rebut it by saying well a lot of other people are calling this one specific instance a war crime when it hasn't yet been proven.

[–] stifle867@programming.dev 3 points 1 year ago

Good point. Smash & grabs are definitely a valid threat model that FDE can help mitigate the effects of. Can be more or less prevalent due to location and ease of access. Personally, I live in a high rise, access controlled apartment so the smash & grab is a non issue for me.

Another specific threat could be protection against government seizure.

[–] stifle867@programming.dev 19 points 1 year ago (1 children)

While this is a real issue, the threat is best mitigated outside of the browser. In theory any application you run could put contents in your primary selection, the threat is what you do with that. The biggest threats I can imagine are insecure shell settings which the author pointed out and can be mitigated easily. Or as a commenter pointed out, cryptocurrency related activities could be at risk - such as pasting in an address to send the currency to could be hijacked and you probably wouldn't even notice as the addresses are random. X is known to be insecure and if you're doing something sensitive like handling cryptocurrency it would be best practice not to run X anyway.

[–] stifle867@programming.dev 4 points 1 year ago (1 children)

It would be much easier to check the settings for your shell and display server. It's a very niche threat. Think about how having something copied into your clipboard could actually effect you? I can't imagine too many scenarios where you would paste something malicious that would actually be a problem. Paste something malicious into an email and you could just delete it. Paste something into the URL address bar and it wouldn't submit until you told it to. Paste something malicious into your terminal and it wouldn't submit until you hit enter (check that last one yourself).

Alternatively, disable javascript in the browser.

view more: ‹ prev next ›