• 0 Posts
  • 67 Comments
Joined 2 years ago
cake
Cake day: January 25th, 2024

help-circle




  • I don’t believe there is any particular advantage of linux insisting on password input for privilege escalation. Obviously there is no proof of this, but I suspect that the design of this privilege escalation flow in linux is at least partly caused by its popularity as a server OS, for example the UI flow for Windows UAC wouldn’t work if you’re trying to remotely administrate a server through the terminal.

    Is Windows + UAC + no password secure?

    It should be, in fact I believe that by default if your local admin account doesn’t have a password set, remote logins and run-as is disabled for that account so you might even be able to argue that it is more secure. It’s probably one of the reasons why Windows 11 comes with a recommended option to disable passwords and only authenticate through Windows Hello.


  • tomalley8342@lemmy.worldtoTechnology@lemmy.worldLLMDeathCount.com
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    11 days ago

    I’ll try to exercise my “assume good faith” muscle here because I think the above poster is at least genuine about what they are posting: I believe this poster wishes that the people who oppose the proliferation of AI at the cost of human connection would “put their money where their mouth is” by reaching out to the people that this poster feels are unfairly ignored.











  • TLS handles security for the email sent from your device until it reaches the server, and various HIPAA compliance rules mandates security for that data once it reaches that server. It’s not alarmingly less secure than other HIPAA compliant methods of communication, unless the email provider on your end has poor support for TLS emails.

    Editing to include the disclaimer that this is for communications sent from your end. For communications sent from their end, this protection doesn’t necessarily apply (it depends on your email provider at that point, which may not be compliant), so for them to send you protected info via e-mail, they usually ask for your consent first, and usually the e-mail is just a link to a portal where you can access that information more securely.



  • tomalley8342@lemmy.worldtoLinux@lemmy.mlWhy did PinePhone fail?
    link
    fedilink
    arrow-up
    37
    arrow-down
    1
    ·
    3 months ago

    The only reason why consumers like you and me get to enjoy free software on modern PC hardware is because of the expectation of open standards and interoperability set way back when the industry was still growing and computer users gave a shit (or rather, when only the people who gave a shit owned a computer).

    Much to the industry giants’ enthusiasm, mobile hardware stacks were developed without this baggage, and so unless something fundamental changes, all mobile devices trying to focus on free software will be doomed to failure by abysmally poor hardware support and aging hand-me-down hardware.