• 0 Posts
  • 189 Comments
Joined 2 years ago
cake
Cake day: August 12th, 2024

help-circle



  • That is just factually incorrect. Many plants produce the exact molecules or proteins that are used as hormones in humans. Hormones do much much more than influence breast size. In fact most hormones are completely unrelated to gender and sex. Ever felt stressed? Hormones. Ever felt hungry? Hormones. Actually … ever felt anything at all? Hormones. And plants do the same. They also feel stressed and they use some of the same hormones in the process.






  • That is not the point of TPM only unlock. Tell me, can you access the files on a windows system that automatically unlocks bitlocker and then boots to the windows login screen? What can you read without a user password? If you try to boot a different OS and read the data from there, the bitlocker encrypted drive will not be automatically unlocked.

    Bitlocker TPM only mode is ment to protect against a stolen hard drive and attacks in which the whole laptop is accessed by attackers (like someone breaking into your hotel room while you are at breakfast). Now bitlocker is broken in TPM only mode and many vulnerabilities exist, but conceptually its purpose is not only to protect against a stolen hard drive.


  • To expand: both bitlocker and LUKS (what OP probably uses on Linux) can unlock without userinput from TPM or require a user password or use the TPM and a password. Its just the defaults are different. In all cases, the TPM/passwords are used to decrypt the Volume Master Key that is used to de/encrypt the actual disk. If you change your password you don’t have to reencrypt 2TB of hard drive and wait 20+h.

    With TPM only unlock, secure boot/verified boot is used to ensure the hard disk is accessed using the correct operating system and no meaningful changes have been made to the system since the last boot. With bitlocker, several vulnerabilities in bitlocker allow full decryption in TPM only mode because windows is fundamentally broken. So you should always use pin+TPM unlock.

    PS. about the encrypted user data: that is not part of bitlocker. It encrypts the whole drive and that’s it. DPAPI is a windows component that encrypts some user data with the user password. For example chrome cookies are saved in DPAPI so even an administrator can not read your cookies while you are not logged in to the system (if you log in they can read everything)







  • instead to be chill and touch grass from time to time

    Sounds like you (and me) believe that humans are good creatures and will do moral things just because they are moral. Evil comes after from external influences.

    What if a study proved, without a shadow of a doubt, that humans have objective morality in the form of a soul. And that this soul is objectively evil and all humans only do good things because we fear repercussions?

    I would not believe it.


  • groet@feddit.orgtoSelfhosted@lemmy.worldImmich vs Ente ?
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 month ago

    My experience with ente was that it is horribly slow. It also lacks any feature to upload a large number of photos at once. I just never bothered uploading my 10k pictures I have taken over the last 15 years because it would have had to transfer them to a phone and then have the app open for a few weeks. No rclone or any other reasonable way to upload from a computer other than browser (which just doesn’t work for more than a few images)



    1. is there a reason you don’t use podman instead of rootless docker?
    2. can you run patchmon inside of docker and mount the socket to the original path inside of the container?
    3. the symlink has the file permissions of the file it points to. If the socket is owned by a user, so will the symlink, even if you used root/sudo to create the link. (technically the symlink will be owned by root, but the permissions on a symlink are ignored and the permission of the target are used)
    4. as long as you don’t change any permissions on /var/run or on the docker.sock to be more permissive than they are now, there is functionally no difference in security
    5. If you or someone else on the system tries to run docker with a different user/root, the symlink will likely cause issues