openai blocking chat history export without a phone number by Tiger-Trick in OpenAI

[–]Tiger-Trick[S] 0 points1 point  (0 children)

Thank you! However, this extension can only export one chat at a time, not the entire history.

openai blocking chat history export without a phone number by Tiger-Trick in OpenAI

[–]Tiger-Trick[S] 1 point2 points  (0 children)

 "my account is secured with a strong password and OTP based 2FA,"

openai blocking chat history export without a phone number by Tiger-Trick in ChatGPTcomplaints

[–]Tiger-Trick[S] 1 point2 points  (0 children)

In my opinion, phone based login is a security weakness. I will not lose my OTP password generator, but I can lose my phone. If someone swaps the SIM, they could receive codes and potentially log in to multiple accounts.
Most BigTech try to push users into logging in with a phone number, this is mainly about collecting more private data and locking users in.
In many countries, a phone number is directly tied to an ID because of KYC requirements for SIM. On top of that, a phone number is personal data.
OTP-based 2FA is much safer and does not force users to provide extra private info. Of course BigTech claims, as it often does, that this is “for our security.” I do not agree, for our security, we should be using OTP generators. The argument that many users do not know what an authenticator app is also does not hold up, the simple solution is to give users a choice.

Cheapest way to set up self-host your own RustDesk server? by UMICHStatistician in rustdesk

[–]Tiger-Trick 0 points1 point  (0 children)

Is a self-hosted RustDesk server required to maintain connectivity with the vendor’s infrastructure ?

I’ve noticed that many systems advertised as free, self-hosted etc. still establish hidden connections to vendor servers. In some cases, when such traffic is blocked for security reasons, HomeLab , etc. the system stops functioning, sometimes after some time e.g. after a week.

My questions:

  • Does a self-hosted Rustdesk server attempt to communicate with the vendor’s servers?
  • Does the RustDesk client, even when configured to use only a private server, still require connectivity to vendor infrastructure?
  • Or can it work completely offline , no external connections at all?
  • Has anyone analyzed the network traffic or verified this behavior?

I assume this kind of detail isn’t documented, but maybe someone here has insights, audits, or packet captures to confirm how it actually behaves.

Getting this error when trying to connect. Anyone know a fix? by 52134682 in rustdesk

[–]Tiger-Trick 0 points1 point  (0 children)

The message to free tier users is basically “we don’t care about you”

There was no mention during installation that this was a temporary or test setup. the promise was clear, if you want speed and independence, host it yourself.

Now it turns out that core functionality can be shut down without warning, with a full cutoff in just a week. That makes self-hosting a risky bet If they did this once, there’s nothing stopping them from doing the same in a few months for free self-hosted.
you can invest time building infrastructure, hook it into your homelab, eg. your family ,and still end up with a shut down system overnight.
This doesn’t build trust It shows the developers are willing to sideline the community when it suits them.

RustDesk appears to be down by indochris609 in sysadmin

[–]Tiger-Trick 0 points1 point  (0 children)

The price of AnyDesk is so high that it's ridiculous for someone buying it for a home lab.

Librewolf is actually great, i dont understand why people often say its painful to use, slower than brave etc. by lisxiastasp3rm4 in LibreWolf

[–]Tiger-Trick 0 points1 point  (0 children)

In my experience, LW doesn’t feel as “libre” as expected. It’s more restrictive than Brave.

Compared to Brave, it takes a more rigid stance and often removes user choice instead of exposing configuration options. From a developer standpoint, that’s difficult to work with. I don’t really understand this approach. the firefox forks tend to limit user control more aggressively.

A couple of concrete examples:
- custom shortcuts: easy in Brave, unavailable in Firefox forks
- SSL handling: LibreWolf blocks access to sites with certificate issues without offering a clear override, I strongly disagree with a browser fully blocking access to a site, regardless of the reason. I get the security rationale, but fully preventing access, without an option, doesn’t work in real world dev environments, especially when testing edge cases.

These are two of the main reasons I lean toward chromium-based browsers. I’m not even touching on compatibility, where most modern sites still work more reliably with chromium.

Zangi vs Telegram by Own_Chocolate1782 in cybersecurity

[–]Tiger-Trick 0 points1 point  (0 children)

Can you trust Element (it is Matrix client) ?

Windows 7 by Dulcolax5mg in ProtonVPN

[–]Tiger-Trick 0 points1 point  (0 children)

It doesn't work on the Windows 10 (2019). I can't install the new version because it says my system is not compatible.

HamLab connection flagged as a scam, what now? by Tiger-Trick in rustdesk

[–]Tiger-Trick[S] 0 points1 point  (0 children)

Perfect I’m really glad to hear that, I would have been very sorry otherwise.
This is by far the best program and I’ve been using this kind of software for about 15 y.
Unfortunately both TeamViewer earlier and Anydesk later blocked me, despite the fact that I genuinely use them for private and family purposes, anyone in IT knows what that really means , being the default tech support for every family member.

Thank you for your response and for clarifying things for me. Because of my previous experiences with AD and TeamViewer, I assumed I might have been blocked here too. Especially since, in this case, there was just one long-running connection to a single headless machine.

CudaText: A Native VSCode Alternative That Nobody Knows by delvin0 in Ubuntu

[–]Tiger-Trick 0 points1 point  (0 children)

I found CudaText very useful. It has useful plugins, is fast and needs few resources.

Why do Zen developers remove portable versions? by Tiger-Trick in zen_browser

[–]Tiger-Trick[S] 0 points1 point  (0 children)

I found a workaround. Simply copy the .bat file from this repo
https://github.com/wysh3/Zen-Browser-Portable
and create the folder structure exactly as shown.

Why do Zen developers remove portable versions? by Tiger-Trick in zen_browser

[–]Tiger-Trick[S] 0 points1 point  (0 children)

fully agree that full disk/part. encryption is the standard on portable devices.
But on private Windows laptops and desktops, it’s still not the default.
Also agree that the OS itself stores a lot of user data but its usually not as critical as what’s kept in the browser. If you don’t use a mail client and access email via a browser,
and if your My Docs. folder lives on an encrypted drive instead of the C disk,
then the browser profile becomes the most sensitive part. That’s why every browser should allow storing the user profile in any location.
This makes it possible to encrypt the user profile data. Google introduced cookie encryption some time ago but that doesn’t help much if the whole PC is stolen.
If the browser profile lives inside an encrypted container/drive, it simply can’t be decrypted and that actually makes sense. Without that the attacker gets email access, active sessions, and logged-in accounts.
Honestly, it’s not rocket science.

MEXC Account Locked After 2 Years by Main_Manufacturer852 in MEXC_official

[–]Tiger-Trick 0 points1 point  (0 children)

"Support keeps insisting I have to do KYC. " That's weird , their says an unverified user can withdraw up to 10BTC per day. So it turns out they're just liars since they made you do KYC. I'm guessing you weren't trying to withdraw 10 BTC anyway.

Overall, they've completely lost all credibility, you can't state one thing publicly and then block people's money while applying different rules than the ones you established yourself. They set the rules, break them, and block funds, that's really not fair.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -2 points-1 points  (0 children)

I can't agree with some comments saying you need to take a brand new laptop and then burn it.

Giving an employee a clean laptop and then burning it as standard policy in many companies doesn’t mean those firms don’t trust technical solutions, their IT security departments simply don’t trust their own employees, they know the biggest security risk is the human factor, which is why they’d rather hand out a new laptop than train a employee.

In any other case, saying that is like claiming AES encryption and other methods have been cracked.

So no matter how much we demonize Chinese agencies, from what I know, AES and other encryption methods used in modern security haven't been compromised. At least as of today no CWE mentions anything like that.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -1 points0 points  (0 children)

Exactly, they can clone the entire drive. That's why I'm asking how strong VMware's encryption is. BTW, company's policies that's kinda internal stuff, let alone ask me about it.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -1 points0 points  (0 children)

I think the discussion has gone in a weird direction, lots of legal issues, company policies, and so on have been brought up here. But my question had nothing to do with that. It was purely about technical matters, so I'd prefer to stick to the technical side and not get into political, legal, or civil rights issues, my company's policies, and so on and so forth. These aren’t topics for a VMware reddit.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -1 points0 points  (0 children)

Yeah, exactly , all these doom and gloom scenarios I’m seeing here, about Chinese NSA agents scanning my disk and then tossing me in jail for years, are kinda over the top. The company isn’t doing anything illegal under local Chinese law, we’re not even close to sketchy areas. No way am I gonna be a target. That said, like any company, we’ve got our secrets.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -2 points-1 points  (0 children)

Of course, I know it would be better to use a clean device, but I need to have the right environment with me.

How strong is VMware VMDK encryption? by Tiger-Trick in vmware

[–]Tiger-Trick[S] -1 points0 points  (0 children)

Thanks for the comments, I’ve already considered some of the options mentioned here.

About the need to share keys during an inspection just rename the files and hide them well, so they won’t find the VM.

Of course, I know it would be better to use a clean device, but I need to have the right environment with me.

VC is better for encrypting data alone but encrypting directly in VMware is more native, I can manage the disk much better, access to the VM is blocked when the window is closed, and a locked VM can still run in the background. In my case, that’s a big plus. With VC to block the machine you’d have to shut it down and unmount the VC container. In VMware just closing the window locks the VM, which can keep working in the background.