eric1293's comments

eric1293 | 5 years ago | on: Pandemic speeds largest test yet of universal basic income

There are numerous independent social programs in France. RSA is one. People could receive input from up to 3-4 social programs.

Consider CDI contracts at universities. It has become a sort of UBI. People show up once every few weeks. Never publish papers; never teach properly; never go to any conference; etc. Totally detached from academic life. And they can't be fired. You know what they do with the UBI?

-- Become members of unions. Unions were supposed to protect workers in 80s. Now the least productive members of the institutions join unions to protect themselves. They kill reform policies and maintain status quo.

-- Work is associated dignity. You can't have two classes: workers and suckers. So UBI recipients, holding into administrative roles and unable to do meaningful work, try to fail non-UBI takers.

-- Fail those who actually do their jobs. Otherwise, the gap is going to be problematic.

At the end of the day, UBI would only shift the baseline. The same problems it tries to address exist after the administration of UBI.

You would be surprised if I go over details. America's left does not understand what it's getting into. France's system has really been an eye opening experience for me. I highly recommend people spending time in Europe.

eric1293 | 5 years ago | on: KeePassXC 2.6.0 Released

How does Keepassxc compare to other password managers (passwordstore with gpg-agent/gnome keyring, 1password, Bitwarden, etc) in terms of protecting secrets when the vault is unlocked?

For example, part of data may be held unencrypted in RAM that could be read by OS or other programs. Any use of TPM?

eric1293 | 5 years ago | on: UtahFS: Encrypted File Storage

It's one big container. A small change means the whole file has to be uploaded again. If you are lucky for Dropbox blocks are synced only.

Also it lacks authentication. The snapshots of the XTS mode are prone to certain attacks.

eric1293 | 5 years ago | on: UtahFS: Encrypted File Storage

I find it difficult to set up a good system for encrypted storage.

1. Cryptomator: it's immature and buggy, especially the 1.5 version. See comments in forum.cryptomator. The files and folders disappear, vaults crash, vaults fail to mount, etc.

Boxcryptor is the paid version and not buggy. But it's not open source.

2. EncFS. Has security issues that haven't been resolved.

3. CryFS. Too slow and immature.

4. Encrypted backup, like rclone or duplicity. These are not sync tools.

5. eCryptfs: Used for Ubuntu home encryption (even then somewhat outdated), not for cloud.

6. AWS KMS: server side encryption; amazon has the keys.

7. Gocryptfs: It's OK. Reasonably fast. Cons: command line only, and for Linux. Uses OpenSSL library which isn't all that secure.

It seems to me gocrytfs is the best among these.

eric1293 | 5 years ago | on: What would you do if you lost your Google account?

I wonder if you push your Password Store to GitHub? Its encryption is based on RSA with around 128 bits of security with current keys. It's unclear if it's going to stand beyond 2 decades.

I might be paranoid but with clouds I would be more comfortable with AES-256. If RSA is a must, maybe RSA 7680.

eric1293 | 5 years ago | on: A Mathematical Theory of Communication (1948) [pdf]

To say Wiener and Shannon founded information theory is like saying Lorenz and Einstein founded speial relativity. I don't think physicists would consider Lorenz having made a major advance, and in fact even after the relativity was explained some people still didn't understand it.

Wiener made important contributions to mathematics but not to information theory. He wrote a book saying that entropy is related to "information" and is maximized for a Gaussian. That's about his involvement. The paper attached goes way beyond that.

eric1293 | 5 years ago | on: The third wave of open source migration

Open source is a two edge sword. If developers voluntarily contribute to the projects, it could be positive.

But increasingly it's becoming a source of cheap labor. It used to be that you get a college degree and start a job. Now you need years of schooling, unpaid internships, postdoc and unpaid scientific contributions, an extensive GitHub page with open source contributions, etc to get the same job. The competition for better CVs will push individuals towards taking years of unpaid jobs against their will, which is negative.

page 1