ylk

Firecracker, the software AWS Lambda runs on, is written in Rust: https://github.com/firecracker-microvm/firecracker

Mozilla wrote Servo, a browser engine, in Rust. Part of it has been integrated into Firefox a while ago:

> Mozilla incorporated the Servo CSS Style engine in release 57 of its Firefox Quantum browser.

https://research.mozilla.org/servo-engines/

It’ll be used in Android: https://security.googleblog.com/2021/04/rust-in-android-plat...

It’ll probably find it’s way into the Linux kernel: https://news.ycombinator.com/item?id=29485465

> Most of our memory bugs occur in new or recently modified code, with about 50% being less than a year old.

> […] we’ve found that old code is not where we most urgently need improvement.

https://security.googleblog.com/2021/04/rust-in-android-plat...

The WAF is $20/month and as far as I know you don't get it automatically for free by using Cloudflare Tunnel, though feel free to correct me. There was the case of them enabling mitigations for the log4j vulnerabilities for anyone on Cloudflare, but that was an exception.

> By default containers are unprivileged […]

https://linuxcontainers.org/lxd/docs/master/security/#contai...

As for LXC:

> LXC containers can be of two kinds:

> - Privileged containers

> - Unprivileged containers

> […]

> The latter has been introduced back in LXC 1.0 (February 2014) […]

https://linuxcontainers.org/lxc/security/

> The E2EE in Signal only protects the actual content of messages.

> [By] (simply saving the data) Signal could get access to things like contacts and phone numbers.

And the linked blog posts show that for a few years now they've been working on limiting their own access to this kind of data --- i.e. it's not as simple as just saving it (like e.g. WhatsApp is able to and most likely doing 100% of the time to build social graphs).

Now of course all of those things are likely vulnerable to some attacks, but that's another discussion and it doesn't change the fact that Signal doesn't have immediate easy access in the way you claimed in your original comment. The fact is that there are some barriers and they'd have to put some effort into either disabling these protections or exploit flaws in them to get to the data.

They use sealed sender: https://signal.org/blog/sealed-sender/

Private contact discovery: https://signal.org/blog/private-contact-discovery/

And a "Private Group System" which is supposed to keep group membership information from the server: https://signal.org/blog/signal-private-group-system/

Though of course they could still push malicious updates.

> [...] never include sensitive data or data that can be retrieved by other means in your payload. Instead, use notifications to alert the user to new information or as a signal that your app has data waiting for it.

https://developer.apple.com/library/archive/documentation/Ne...

https://support.apple.com/en-nz/guide/security/sec6cbc80fd0/...

Open the Settings app and search for "Find My". You'll find the setting. Or follow this: Settings->Apple ID->Find My->Find My iPhone->Find My network

There's some explanation as to what it does and you'll be able to opt out if you don't like it. (Though you won't even see the "Find My network" setting if you had "Find My" disabled anyway)

https://www.apple.com/newsroom/2021/04/apple-introduces-airt...

In case you care about details: https://support.apple.com/en-nz/guide/security/sec60fd770ba/... https://support.apple.com/en-nz/guide/security/secd4ab33e5c/...

I'm not sure how the e2ee works out when using Find My in the browser, but that's a different topic, I guess.

edit:

> This entire interaction is end-to-end encrypted, anonymous, and designed to be battery and data efficient, so there is minimal impact on battery life mobile data plan usage and user privacy is protected.

https://support.apple.com/en-nz/guide/security/sec6cbc80fd0/...

Edit: To add some details - using ProxyJump you don’t have to expose anything to the jump host and instead just proxy through it.

It might be an alternative to Jira Cloud, which is cool and all, but your comment is just completely misleading.

I found out about it through HN, iirc, and it’s how I got started with using org-mode.

[1]: https://beorg.app

> Since communication is done via TLS all the way to GIPHY, the Signal service never sees the plaintext contents of what is transmitted or received. Since the TCP connection is proxied through the Signal service, GIPHY doesn’t know who issued the request.

> While this does hide your IP address from GIPHY and your search terms from Signal, there are some caveats. The GIPHY service could use subtleties like TLS session resume or cache hits to try to correlate multiple requests as having come from the same client, even if they don’t know the origin.

edit: more here https://signal.org/blog/signal-and-giphy-update/

previous discussion: https://news.ycombinator.com/item?id=12853248

Edit: to elaborate, each committee would be a vertex and a committee-vertex is connected to another vertex if one or more of their members overlap. Once you’ve got such a graph you simply have to a assign a color (or number/letter/anything) to every vertex in the graph, with the requirement that no neighboring (as defined by being connected by an edge) vertexes are allowed to have the same color. You also try to use the minimum amount of colors needed. Then you can safely schedule the committees with the same colors for the same timeslots, and be sure that everybody will be able to attend.

Here, have a random statistic - they talk about the decrease in percentage of beverages offered in reusable packaging: https://de.statista.com/infografik/amp/8077/anteil-von-einwe... It’s apparently “only” 42% for reusables, compared to 56% for disposable ones. It’s not perfect, but It’s better than what pretty much everybody else in the world is doing.

Edit: turns out the statistica link is not so random - it’s based on data published by the federal environmental agency. More (in German) here: https://www.umweltbundesamt.de/publikationen/verbrauch-von-g...

There are reusable and disposable plastic bottles. The disposable ones are of really thin plastic and crushed, yes. The reusable ones are put into crates and return to the factories so that they can be cleaned and refilled. You can actually look through the machine and see the stacks of crates in the room behind them.

Many glas bottles (e.g. for beer, water and more) are reusable, too. They’re treated like reusable plastic bottles. Disposable glas does not have a deposit on it. You take those to a bottle bank (? containers on the street you throw them into), which is emptied once every two weeks (not too sure on the frequency).

Cans are the only type that is always crushed on return, afaik.

pass stores the password, username (and whatever else you want) in a simple textfile, which is gpg encrypted. There's a browser extension for it, a GUI implementation and lots more (all on the website at link [2]).

[1]: https://developers.yubico.com/PGP/Card_edit.html [2]: https://www.passwordstore.org/

Edit: Addressing your edit: you could use pass with pass-tomb (puts all the separate password files in a folder and encrypts that, see website) and use a GPG key with password to encrypt all that (and re-enter that on every separate password decryption attempt). Don’t know any other password manager that would allow you to do exactly that..

*at an ASML booth at a kind of job fair at my uni

You can actually use GitHub Desktop with any repo: https://help.github.com/desktop/faq/articles/do-you-support-... (Although it looks like you have to clone it first?)

Thanks!

http://www.notebookcheck.net/Lenovo-Classic-ThinkPad-models-...