$argon2id$v=19$m=512,t=256,p=1$wCQYS+4N8q5iKLigIZ22gQ$V/fqDkL++GTiMe0Acyk1RbjNr7loyJlppLecbNk93ec

  • 0 Posts
  • 4 Comments
Joined 3 years ago
cake
Cake day: June 14th, 2023

help-circle
  • Containing lateral movement of a compromised machine is hard

    Before doing anything else , consider if you actually need to expose anything to the internet at all. Running a VPN would let you reduce your exposed service to 1 port ( wireguard is UDP based so it’s harder to test if the port is open too ). A VPN like NetBird / tailscale / Cloudflare warp don’t need you to open any ports at all

    Except for services that absolutely must be open to the internet ( like my Tor Relay ) I access everything via NetBird



  • I’m by no means an espresso expert ( I currently don’t actually own an espresso machine … )

    But I believe pressurised baskets are meant to account for coffee that isn’t ground fine enough, the added pressure is making up for a puck that doesn’t provide enough resistance to the water. It may be that you’re able to grind fine enough that the added pressure from the basket is causing water / coffee to escape out the sides.

    Maybe try grinding coarser ( like pre-ground / pour over coarse )?


  • I appreciate you taking the time to implement this and answering some questions! I have a follow up question- What’s the benefit of using asymmetric encryption here? You’re not signing the message ( you probably should imo ) and you don’t appear to support sharing encrypted notes ( i.e a user provides one or more additional public keys that a note is encrypted for ). You’re basically doing symmetric encryption with the pain of key management

    It’d be simpler ( from a user and code perspective )to use symmetric encryption ( something like aes-256-gcm or ChaCha20-Poly1305 for example ) and use key wrapping to avoid encrypting user data directly and you’d have stronger crypto as a result

    You’re right that PGP is a valid encryption method but it’s not very popular in the modern day because it’s very hard to get right. Latacora has a great post on the PGP Problemand the Soatok blogs that u/litchralee linked are well worth a read too