retr0.id/media/bd23a2fb-c7a6-4…

alt text:

Goose chase meme. In the first frame, the goose asks “all the data is encrypted?” In the second, the goose chases a person, asking “encrypted how and with whose keys, motherfucker?”

@196

  • @pohart
    link
    987 months ago

    I once had to work with a government agency that insisted they generate and provide my private key.

    • @8ace40
      link
      287 months ago

      I’m migrating millons of encrypted credit cards from one platform to another (it’s all in the same company, but different teams, different infra, etc).

      I’m the one responsible for decrypting each card, preparing the data in a CSV, and encrypting that CSV for transit. Other guy is responsible for decrypting it, and loading it into the importer tool. The guy’s technical lead wanted me to generate the pair of keys and send him the private key, since that way I didn’t have to wait for the guy and “besides, it’s all in the same company, we’re like a family here”.

      Of course I didn’t generate the key pair and told them that I didn’t want to ever have access to the private key, but wow. That made me lose a lot of respect for that tech lead.

    • verdare [he/him]
      link
      fedilink
      317 months ago

      The fact that you have to enter your iCloud credentials directly into the app was a red flag.

      Security PSA: Don’t enter passwords or other secrets for important accounts directly into a third party UI. This is why we have tokens and federated login. Third parties should never see your Google/Apple/whatever credentials.

      • @[email protected]
        link
        fedilink
        67 months ago

        Security PSA: Don’t enter passwords or other secrets for important accounts directly into a third party UI.

        By chance, would you (or some other passerby) happen to know how this is handled with the Lemmy apps/interfaces? I’ve been mixed on using them since I’m unclear how they’re handling this info.

        • verdare [he/him]
          link
          fedilink
          8
          edit-2
          7 months ago

          Hmmm, that’s a good point. I did type my Lemmy credentials directly into at least two different apps. I guess it would be better if it redirected to a login page provided by my instance (Beehaw). But I also don’t consider my Lemmy account to be very critical. It’s not a huge deal if it gets compromised, as long as it’s not associated with my real identity.

          EDIT: Also, I use a password manager, so a leak of my randomly generated Lemmy password shouldn’t affect anything else.

    • setVeryLoud(true);
      link
      fedilink
      167 months ago

      That’s not even Nothing Chats’ biggest problem: it’s that it gets completely MITM’d by going onto some mac mini in some server farm somewhere.

  • @[email protected]
    link
    fedilink
    367 months ago

    It’s encrypted by changing the font to windings and making the text colour white before sending.

  • @[email protected]
    link
    fedilink
    217 months ago

    Wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow wow… The data are encrypted

    • @pythonoob
      link
      127 months ago

      Ugh. This is one of the correct usages that actually bothers me.

      • @[email protected]
        link
        fedilink
        67 months ago

        Correct according to whom? The word has a long history of being used with a singular verb. The dictionary indicates it is usually used with a singular verb. Only a small number of people insist on trying to override this.

        Who cares if it is plural in Latin? Once something moves into a new language, it’s not beholden to the old language. We don’t use a plural verb with “spaghetti”. Germans borrowed the word “party” from English and they pluralize it as “partys” — they don’t need to follow our rules for what is now also their word.

        Don’t give in to these people who claim that “data” is supposed to be plural. They are treating a personal preference as a fact.

        • @[email protected]
          link
          fedilink
          27 months ago

          To be fair, German (and other languages) borrowing from Italian is a whole can of worms, but you’re right: Borrowed words don’t need to follow all the declination or conjugation roles from their original language.

          See also: Two espressos. One zucchini.

    • DefederateLemmyMl
      link
      fedilink
      English
      1
      edit-2
      7 months ago

      So there’s like a talking goose and your first thought is to criticize it on grammar?

  • katy ✨
    link
    fedilink
    147 months ago

    it’s ok i’m always losing my keys anyway

    but my couch cushions are pretty secure