{"generator":"GNU social 1.1.3-beta3","title":"Conversation","totalItems":6,"items":[{"actor":{"id":"https:\/\/social.umeahackerspace.se\/user\/2","displayName":"MMN-o \u2705\u20e0","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-48-20190530041804.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-24-20190530044220.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"2620"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","summary":"Free software and free culture fanatic.","url":"https:\/\/social.umeahackerspace.se\/mmn","location":{"objectType":"place","position":"+63.82842+20.25972\/","lat":"63.82842","lon":"20.25972"},"portablecontacts_net":{"preferredUsername":"mmn","displayName":"MMN-o \u2705\u20e0","note":"Free software and free culture fanatic.","addresses":{"formatted":"Ume\u00e5, Sweden"},"urls":[{"type":"homepage","value":"https:\/\/blog.mmn-o.se\/","primary":"true"}]}},"content":"@<a href=\"http:\/\/sn.jonkman.ca\/bobjonkman\" class=\"h-card mention\" title=\"Bob Jonkman\">bobjonkman<\/a> Yes, it is hard to trust hardware nowadays. Hopefully RNGs aren't infiltrated too.","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191799:objectType=comment","object":{"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191799:objectType=comment","objectType":"comment","content":"@<a href=\"http:\/\/sn.jonkman.ca\/bobjonkman\" class=\"h-card mention\" title=\"Bob Jonkman\">bobjonkman<\/a> Yes, it is hard to trust hardware nowadays. Hopefully RNGs aren't infiltrated too.","url":"https:\/\/social.umeahackerspace.se\/notice\/191799","status_net":{"notice_id":"72056"},"inReplyTo":{"objectType":"note","id":"http:\/\/sn.jonkman.ca\/notice\/772315","url":"http:\/\/sn.jonkman.ca\/notice\/772315"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"http:\/\/sn.jonkman.ca\/user\/2"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72056","source":"ostatus"}},"published":"2015-02-20T16:50:38+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"https:\/\/social.umeahackerspace.se\/notice\/191799"},{"actor":{"id":"http:\/\/sn.jonkman.ca\/user\/2","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-48-20170904220604.jpeg","rel":"avatar","type":"image\/jpeg","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-24-20170904220611.jpeg","rel":"avatar","type":"image\/jpeg","width":24,"height":24}],"profile_info":{"local_id":"2495"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},"objectType":"person","summary":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","url":"http:\/\/sn.jonkman.ca\/bobjonkmanformer","location":{"objectType":"place","position":"+43.60009-80.54970\/","lat":"43.60009","lon":"-80.5497"},"portablecontacts_net":{"preferredUsername":"bobjonkmanformer","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","note":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","addresses":{"formatted":"Elmira, Ontario, Canada"},"urls":[{"type":"homepage","value":"https:\/\/gs.jonkman.ca\/bobjonkman","primary":"true"}]}},"content":"LUKS is applied at the file system by the OS. Even compromised firmware on a hard drive will see only a stream of encrypted bits. OTOH the baked-in encryption on drives is now forever suspect.","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"http:\/\/sn.jonkman.ca\/notice\/772315","object":{"id":"http:\/\/sn.jonkman.ca\/notice\/772315","objectType":"note","content":"LUKS is applied at the file system by the OS. Even compromised firmware on a hard drive will see only a stream of encrypted bits. OTOH the baked-in encryption on drives is now forever suspect.","url":"http:\/\/sn.jonkman.ca\/notice\/772315","status_net":{"notice_id":"72051"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fresh.federati.net\/user\/54"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72051","source":"ostatus"}},"published":"2015-02-20T16:17:28+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"http:\/\/sn.jonkman.ca\/notice\/772315"},{"actor":{"id":"http:\/\/sn.jonkman.ca\/user\/2","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-48-20170904220604.jpeg","rel":"avatar","type":"image\/jpeg","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-24-20170904220611.jpeg","rel":"avatar","type":"image\/jpeg","width":24,"height":24}],"profile_info":{"local_id":"2495"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},"objectType":"person","summary":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","url":"http:\/\/sn.jonkman.ca\/bobjonkmanformer","location":{"objectType":"place","position":"+43.60009-80.54970\/","lat":"43.60009","lon":"-80.5497"},"portablecontacts_net":{"preferredUsername":"bobjonkmanformer","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","note":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","addresses":{"formatted":"Elmira, Ontario, Canada"},"urls":[{"type":"homepage","value":"https:\/\/gs.jonkman.ca\/bobjonkman","primary":"true"}]}},"content":"@lnxw48 True, https is still good. And yes, the entire PKI business is corrupt (Thanx, Diginotar and Comodo!). The Lenovo MITM problem comes from corporate greed, an operating system that's hostile to its users, browsers that merrily display a little lock icon regardless of origin (see my PKI complaint above), and users who trust the vendors, certs, OS, and browsers without verifyi<a href=\"http:\/\/status.hackerposse.com\/attachment\/6774\" class=\"attachment more\" title=\"Show more\">&#8230;<\/a>","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"http:\/\/sn.jonkman.ca\/notice\/772296","object":{"id":"http:\/\/sn.jonkman.ca\/notice\/772296","objectType":"note","content":"@lnxw48 True, https is still good. And yes, the entire PKI business is corrupt (Thanx, Diginotar and Comodo!). The Lenovo MITM problem comes from corporate greed, an operating system that's hostile to its users, browsers that merrily display a little lock icon regardless of origin (see my PKI complaint above), and users who trust the vendors, certs, OS, and browsers without verifyi<a href=\"http:\/\/status.hackerposse.com\/attachment\/6774\" class=\"attachment more\" title=\"Show more\">&#8230;<\/a>","url":"http:\/\/sn.jonkman.ca\/notice\/772296","status_net":{"notice_id":"72050"},"attachments":[{"id":"tag:status.hackerposse.com,2026-07-14:file:6774","objectType":"file","url":"http:\/\/status.hackerposse.com\/attachment\/6774"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fresh.federati.net\/user\/54"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72050","source":"ostatus"}},"published":"2015-02-20T16:08:42+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"http:\/\/sn.jonkman.ca\/notice\/772296"},{"actor":{"id":"https:\/\/social.umeahackerspace.se\/user\/2","displayName":"MMN-o \u2705\u20e0","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-48-20190530041804.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-24-20190530044220.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"2620"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","summary":"Free software and free culture fanatic.","url":"https:\/\/social.umeahackerspace.se\/mmn","location":{"objectType":"place","position":"+63.82842+20.25972\/","lat":"63.82842","lon":"20.25972"},"portablecontacts_net":{"preferredUsername":"mmn","displayName":"MMN-o \u2705\u20e0","note":"Free software and free culture fanatic.","addresses":{"formatted":"Ume\u00e5, Sweden"},"urls":[{"type":"homepage","value":"https:\/\/blog.mmn-o.se\/","primary":"true"}]}},"content":"In the case I was thinking about you could format it either way you wanted.<br \/> The more dangerous backdoors are the ones the #<span class=\"tag\"><a href=\"https:\/\/social.umeahackerspace.se\/tag\/nsa\" rel=\"tag\">NSA<\/a><\/span> have access to, where the actual firmware of the disk is tampered with (giving possibilities to circumvent many security measures).<br \/> And such tampering is already available publically for SD cards (and SSDs in general I guess) since bunnie et al. presented it on 30c3.","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191761:objectType=comment","object":{"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191761:objectType=comment","objectType":"note","content":"In the case I was thinking about you could format it either way you wanted.<br \/> The more dangerous backdoors are the ones the #<span class=\"tag\"><a href=\"https:\/\/social.umeahackerspace.se\/tag\/nsa\" rel=\"tag\">NSA<\/a><\/span> have access to, where the actual firmware of the disk is tampered with (giving possibilities to circumvent many security measures).<br \/> And such tampering is already available publically for SD cards (and SSDs in general I guess) since bunnie et al. presented it on 30c3.","url":"https:\/\/social.umeahackerspace.se\/notice\/191761","status_net":{"notice_id":"72048"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"nsa"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.mxchange.org\/user\/1"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72048","source":"ostatus"}},"published":"2015-02-20T15:55:49+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"https:\/\/social.umeahackerspace.se\/notice\/191761"},{"actor":{"id":"https:\/\/social.umeahackerspace.se\/user\/2","displayName":"MMN-o \u2705\u20e0","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-48-20190530041804.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-24-20190530044220.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"2620"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2620-original-20190530040929.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","summary":"Free software and free culture fanatic.","url":"https:\/\/social.umeahackerspace.se\/mmn","location":{"objectType":"place","position":"+63.82842+20.25972\/","lat":"63.82842","lon":"20.25972"},"portablecontacts_net":{"preferredUsername":"mmn","displayName":"MMN-o \u2705\u20e0","note":"Free software and free culture fanatic.","addresses":{"formatted":"Ume\u00e5, Sweden"},"urls":[{"type":"homepage","value":"https:\/\/blog.mmn-o.se\/","primary":"true"}]}},"content":"Of course we can trust transport layer security, as long as we don't blindly trust a factory image to come configured in a secure fashion. :)<br \/> Heck, even harddrives have been known to come preloaded with trojans because they were &quot;pre-formatted&quot; with a filesystem (and someone had measled in an evil .exe). Can't really remember who had this problem, but I think it was #<span class=\"tag\"><a href=\"https:\/\/social.umeahackerspace.se\/tag\/maxtor\" rel=\"tag\">Maxtor<\/a><\/span> or someother.","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191749:objectType=comment","object":{"id":"tag:social.umeahackerspace.se,2015-02-20:noticeId=191749:objectType=comment","objectType":"comment","content":"Of course we can trust transport layer security, as long as we don't blindly trust a factory image to come configured in a secure fashion. :)<br \/> Heck, even harddrives have been known to come preloaded with trojans because they were &quot;pre-formatted&quot; with a filesystem (and someone had measled in an evil .exe). Can't really remember who had this problem, but I think it was #<span class=\"tag\"><a href=\"https:\/\/social.umeahackerspace.se\/tag\/maxtor\" rel=\"tag\">Maxtor<\/a><\/span> or someother.","url":"https:\/\/social.umeahackerspace.se\/notice\/191749","status_net":{"notice_id":"72047"},"inReplyTo":{"objectType":"note","id":"http:\/\/sn.jonkman.ca\/notice\/772203","url":"http:\/\/sn.jonkman.ca\/notice\/772203"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"maxtor"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"http:\/\/sn.jonkman.ca\/user\/2"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72047","source":"ostatus"}},"published":"2015-02-20T15:37:53+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"https:\/\/social.umeahackerspace.se\/notice\/191749"},{"actor":{"id":"http:\/\/sn.jonkman.ca\/user\/2","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","status_net":{"avatarLinks":[{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-48-20170904220604.jpeg","rel":"avatar","type":"image\/jpeg","width":48,"height":48},{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-24-20170904220611.jpeg","rel":"avatar","type":"image\/jpeg","width":24,"height":24}],"profile_info":{"local_id":"2495"}},"image":{"url":"https:\/\/status.hackerposse.com\/avatar\/2495-original-20170904220420.jpeg","rel":"avatar","type":"image\/jpeg","width":96,"height":96},"objectType":"person","summary":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","url":"http:\/\/sn.jonkman.ca\/bobjonkmanformer","location":{"objectType":"place","position":"+43.60009-80.54970\/","lat":"43.60009","lon":"-80.5497"},"portablecontacts_net":{"preferredUsername":"bobjonkmanformer","displayName":"Former Bob Jonkman -- Please use the new server at https:\/\/gs.jonkman.ca","note":"Don't use this account! Subscribe to me at https:\/\/gs.jonkman.ca\/bobjonkman\/","addresses":{"formatted":"Elmira, Ontario, Canada"},"urls":[{"type":"homepage","value":"https:\/\/gs.jonkman.ca\/bobjonkman","primary":"true"}]}},"content":"@<span class=\"vcard\"><a href=\"https:\/\/quitter.no\/luanaspinetti\" class=\"url\" title=\"luanaspinetti\"><span class=\"fn nickname mention\">luanaspinetti<\/span><\/a><\/span> We've got to use application layer !<span class=\"vcard\"><a href=\"http:\/\/sn.jonkman.ca\/group\/348\/id\" class=\"url\" title=\"Cryptography (crypto)\"><span class=\"fn nickname group\">crypto<\/span><\/a><\/span>. We can no longer trust transport layer security like https (Thanx, Lenovo!) or hardware security like smart cards (Thanx, GCHQ!)","generator":{"id":"tag:status.net,2009:notice-source:ostatus","objectType":"application","status_net":{"source_code":"ostatus"}},"id":"http:\/\/sn.jonkman.ca\/notice\/772203","object":{"id":"http:\/\/sn.jonkman.ca\/notice\/772203","objectType":"note","content":"@<span class=\"vcard\"><a href=\"https:\/\/quitter.no\/luanaspinetti\" class=\"url\" title=\"luanaspinetti\"><span class=\"fn nickname mention\">luanaspinetti<\/span><\/a><\/span> We've got to use application layer !<span class=\"vcard\"><a href=\"http:\/\/sn.jonkman.ca\/group\/348\/id\" class=\"url\" title=\"Cryptography (crypto)\"><span class=\"fn nickname group\">crypto<\/span><\/a><\/span>. We can no longer trust transport layer security like https (Thanx, Lenovo!) or hardware security like smart cards (Thanx, GCHQ!)","url":"http:\/\/sn.jonkman.ca\/notice\/772203","status_net":{"notice_id":"72044"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"crypto"}]},"location":{"objectType":"place","position":"+43.60009-80.54970\/","lat":"43.6000900","lon":"-80.5497000"},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/quitter.no\/user\/7872"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/group","id":"http:\/\/sn.jonkman.ca\/group\/348\/id"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"http:\/\/sn.jonkman.ca\/conversation\/474200","notice_info":{"local_id":"72044","source":"ostatus"}},"published":"2015-02-20T15:07:33+00:00","provider":{"objectType":"service","displayName":"Hacker Poesy","url":"http:\/\/status.hackerposse.com\/"},"verb":"post","url":"http:\/\/sn.jonkman.ca\/notice\/772203"}],"links":[{"url":"http:\/\/status.hackerposse.com\/conversation\/72044","rel":"alternate","type":"text\/html"}]}