• 1 Post
  • 12 Comments
Joined 11 months ago
Cake day: March 21st, 2024
  • xorollo@leminal.spaceOPtoDeGoogle Yourself@lemmy.ml•immich question
    1·
    10 hours ago

    VPN issue – my phone runs VPN regardless of whether I am at home or not, so I would still need to be able to route synchthing outside of the VPN traffic to be recognized as being at home?

    I don’t need much space for pictures. I’m at 30 GB I believe. But outside of pictures I could also backup other data and maybe get to around 100 gb.

    I’m going to guess that cronjobs allow you to schedule batch scripts to run at certain times of the day. So, as an example, you could rsync copy your library to another location in an automated way.

    I’m willing to accept some risk of loss to get off Google, but would like to minimize the risk within my means (not much means). I’m not concerned about theft, nor fire. If I want to avoid hardware failure, I need to purchase an external storage space and back the data up there. I think with the quantity of data I have, I could spend $80-$100 USD for a SSD, and be well covered space wise.

    Thoughts? And let me know if I interpreted anything you said wrong. I do computer stuff, but have always had to trust others for this part of things.

  • xorollo@leminal.spaceOPtoDeGoogle Yourself@lemmy.ml•immich question
    1·
    13 hours ago

    1. does synchthing have the same VPN issue? I was separately planning to do synchthing to backup my RSS lists, podcast subs, and some other smaller things.

    2. I wasn’t considering this as part of my backup strategy. I hadn’t gotten that far yet, but one of the tutorials I was looking at mentioned backup strategy as the next step. I’d love to hear your recommendations on this. Backups is obviously the big thing I’m loosing moving off of photos.

  • xorollo@leminal.spacetoFediverse@lemmy.world•Happy #GlobalSwitchDayEnglish
    1·
    7 days ago

    So if you don’t need to create an account, how do you know you’re talking to who you think you’re talking to?

    I can see this being valuable as a Lemmy style service where I’m sharing information and reading information but want to be anonymous. But not a good service if I want to talk to my mom about a sensitive subject and protect my privacy.

  • xorollo@leminal.spacetoFediverse@lemmy.world•Happy #GlobalSwitchDayEnglish
    2·
    7 days ago

    Yes, I really have t looked into this before. I just vaguely remembered jokes about PGP from a security class a while back, so looked it up. It does look like the encryption scheme used in XMPP does solve this issue.

    Wikipedia saves the day again:

    OMEMO is an extension to the Extensible Messaging and Presence Protocol (XMPP) for multi-client end-to-end encryption developed by Andreas Straub. According to Straub, OMEMO uses the Double Ratchet Algorithm “to provide multi-end to multi-end encryption, allowing messages to be synchronized securely across multiple clients, even if some of them are offline”.[1] The name “OMEMO” is a recursive acronym for “OMEMO Multi-End Message and Object Encryption”. It is an open standard based on the Double Ratchet Algorithm and the Personal Eventing Protocol (PEP, XEP-0163).[2] OMEMO offers future and forward secrecy and deniability with message synchronization and offline delivery.

  • xorollo@leminal.spacetoFediverse@lemmy.world•Happy #GlobalSwitchDayEnglish
    102·
    7 days ago

    Precise language is important if you want to understand and communicate truth. It helps a lot to understand the difference between privacy and anonimity there is a scenario where a person doesn’t care that an adversary knows their id, but does care about the content of their messages. In which case, differentiating tools that provide that particular service requires language to discuss it.

  • xorollo@leminal.spacetoFediverse@lemmy.world•Happy #GlobalSwitchDayEnglish
    6·
    7 days ago

    PGP is a very curious choice. A quick Google search says a downside of this is that it does not provide “forward secrecy”. From the Wikipedia page on forward secrecy, it prevents things like the following.

    If an adversary can steal (or obtain through a court order) this static (long term) signing key, the adversary can masquerade as the server to the client and as the client to the server and implement a classic man-in-the-middle attack.