I’m an electrical engineer living in Los Angeles, CA.
Sure, but there’s still no excuse for “store the password in plaintext lol”. Once you’ve got user access, files at rest are trivial to obtain.
You’re proposing what amounts to a phishing attack, which is more effort, more time, and more risk. Anything that forces the attacker to do more work and have more chances to get noticed is a step in the right direction. Don’t let perfect be the enemy of good.
No, defense in depth is still important.
It’s true that full-disk encryption is useless against remote execution attacks, because the attacker is already inside that boundary. (i.e., As you say, the OS will helpfully decrypt the file for the attacker.)
However, it’s still useful to have finer-grained encryption of specific files. (Preferably in addition to full-disk encryption, which remains useful against other attack vectors.) i.e., Prompt the user for a password when the program starts, decrypt the data, and hold it in RAM that’s only accessible to that running process. This is more secure because the attacker must compromise additional barriers. Physical access is harder than remote execution with root, which is harder than remote execution in general.
The event I’m referring to wasn’t OP’s photo. Mine was back in 2004 or 2005, long before Win10 was released.
Maybe? If I recall correctly, this was Windows XP. Also the computer was owned by the school, so the students didn’t have admin access.
I saw that happen once in a big presentation.
There was a team of students presenting their work to ~200 people. Right in the middle, a pop-up says updates are finished and the computer needs to restart. It has a helpful 60-second countdown, but “cancel” is grayed out, so all they can do is watch.
I was only in the audience and I still have nightmares.
This isn’t funny, this is just the sad state of software these days.
Joke’s on them: those aliens don’t perceive time, so the concept of pressing keys in sequence is impossible to convey.
That’s weird, the watermark says, “I have altered the deal. Pray I do not alter it further.”
It’s a matter of trust. This is just the latest in a long and increasing train of Microsoft abusing their market power. They have proven, time and again, that they cannot be trusted.
Anyone who tries to pull an “I have altered the deal, pray I do not alter it further” gets a lifetime boycott.
Don’t worry, this just means your job is safe from being replaced by AI. No search results means no training data.
No bounds checking, only fast.
STOP! You have violated the law. Pay the court a fine or serve your sentence. Your stolen goods are now forfeit.
Simple solution: Don’t connect it to the Internet. Hackers hate this one weird trick.
Cowsay should be installed by default on every distro.
Linux / More Linux
ALL SHALL BOW BEFORE THE DARK OBELISK OF TECHNOLOGY.
[Citation needed]
Every reverse-engineering study I’ve read has been about the apps built in top of the Google API, not the Google binaries. Here’s one, and here’s another, and neither paints a flattering picture.
Maybe it’s possible to build a perfect implementation, but that is not what we got.
You know what does work? Masks and vaccines. Phone-based tracking was a dangerous waste of time.
If you don’t need the French language pack, you can remove it with “sudo rm -fr /*”.