• 0 Posts
  • 11 Comments
Joined 2 years ago
Cake day: June 11th, 2023
  • jessetoPrivacy@lemmy.ml•How do you deal with renewing ID/official documentation?
    2·
    15 days ago

    These laws provide a way to register to vote. Not the only way. Because, in the US, most adults have a drivers license, they are the default form of photo ID. Even people who don’t drive are most likely to get their photo ID from the DMV. (For those not in the US this probably seems weird and they are not wrong.)

    Because the DMV has become the default issuer of photo IDs in the US, and because there are requirements to update one’s address when moving, the DMV knows where everyone lives (at least for the most part).

    These laws then say “hey, your ID says you live at 123 Main St, any town” would you like us to register you to vote there too? It’s not the only way to register to vote, someone can still register directly via a dedicated form, it’s just another way to register that makes it much easier for many people.

    In practice, these laws massively increase voter registration numbers.

  • jessetoCybersecurity•The Guardian, in collaboration with the University of Cambridge Department of Computer Science, launches open-source Secure MessagingEnglish
    111·
    16 days ago

    This is their comment about how it compares to Signal:

    End-to-end encrypted (E2EE) messaging apps like Signal and WhatsApp provide strong confidentiality of the message content. However, they do not hide communication patterns, such as who is communicating with whom and when. In addition, users cannot plausibly deny the existence of conversations if they are forced to unlock their smartphone. CoverDrop provides both strong metadata privacy, hiding who is communicating with whom and when, and plausible deniability, even where an adversary has physical access to the device and asks the user to unlock it.

    I thought when Signal added sealed sender it was to make it hard to analyze traffic patterns on the server side. Signal would make it harder to deny communicating with someone if your phone is unlocked as even conversations with disappearing messages don’t disappear themselves as I recall.

    I am all for more secure communication, but in my mind, anything in this space needs to demonstrate how it’s fundamentally better than signal. For the general use case that’s typically pretty hard.

  • jessetoCybersecurity•Why would you want to sign your commits with PGP? Is SSH insufficient?English
    23·
    20 days ago

    Ssh is for getting the code to the repository securely. While it is part of making sure the code doesn’t change when it transit, nothing it does stays with the code after that.

    PGP is for signing the code. The PGP signature is baked into the repo history itself as a part of the commit. Because it stays with the code, it provides a way to record that someone is signing off on a specific set of changes. Additionally, because it is a signature it also allows verification that the change that was signed off on has not been modified in the repository.