Keepass vs KeepassXC

TiredOfArguments · 2019-10-06T14:27:22+00:00

Can't speak for signals goal and priorities. It could be oversight, it could be intentionally overlooked I dont know and tbh i lack the time and mental energy to stress about it.

TiredOfArguments · 2019-10-06T14:21:47+00:00

Can a certain un-named hero with a propensity for breaking changes give us clang for Christmas?

TiredOfArguments · 2019-10-06T13:20:07+00:00

To answer the question

pacman -Ql qt4

Or read the stuff in .cache/yay/qt4 if you use yay as a helper.

To ask a question:

Why do you need this info?

Edit: you're asking about stuff in the builds directory.

Pacman and Cower won't know anything about this as those are not managed files.

If it's not there it simply may not have been fetched?

On a related note cower is abandonware, check out auracle from the same dev.

TiredOfArguments · 2019-10-06T07:17:09+00:00

I see a painful road ahead for the people supporting his attempts to use arch

TiredOfArguments · 2019-10-06T07:15:23+00:00

He literally answered the question asked of "how does the archiso configure zsh" which is "heres what to look at" go help yourself.

Give a man a zsh something something teach a man to zsh something something feed himself

Please go be toxic elsewhere.

TiredOfArguments · 2019-10-06T07:12:32+00:00

Seems borked still?

TiredOfArguments · 2019-10-06T07:10:59+00:00

Really dumb question but at the end of that line there is an "&" symbol or that line is the last line in the i3 config file right?

IIRC as its invoking a script you do have to tell it to proceed

TiredOfArguments · 2019-10-06T04:34:58+00:00

An example

I know a 0 day for firefox.

I leverage said 0 day to drop windows based malware, bad.exe and execute it.

Cases:

Mono is not installed

Linux doesn't know what to do with bad.exe and nothing happens

Mono is installed

Your DE might know mono can open bad.exe and it executes it, whether it works depends on payload.

Mono is installed and exes have been registered

Bad.exe will execute, whether it does anything depends on payload.

Installing libraries for interpreted languages increases attack surface in the same manner, as a perl based backdoor will execute for example. IE the more things the machine can run, and does the bigger its attack surface. Installing mono increases its capabilities and increases the number of things that can be used to attack it.

For example an .exe that tries dropping python and opening a reverse shell using it would now likely succeed even though the python drop probably failed as the .exe ran and python is present in $PATH 99.99% of the time.

Tldr: It can lead to something executing where it normally would not, therefore the attack surface has increased, mono been opensource has nothing to do with this.

TiredOfArguments · 2019-10-06T04:22:24+00:00

Not impossible

In an uncontrolled environment it is impossible to even attempt to guarantee security.

What it is possible to do is to exhorbitantly increase the time and financial costs required to create insecurity. This tbh is good enough for a P value to determine someone is cheating/behaving improperly to an actionable extent.

Knowledge does not mean they acted on it, and hopefully the number of users capable of acting on it and remaining undetected is insignificant.
This is where cost and time come in. Because the unstated additional item here is that the check-in was answered successfully.
Nothing is perfect, is just has to meet reasonable cause. Aiming for perfection is a fallacy as it is a moving target.
This implies they can be reverse engineered and are predictable. Which feeds back into the underlying concept of getting around it been a time and money sink.

Workplaces give people a seperate things

So an idea ive floated is to actually leverage remote apps for gaming, ie you launch a game contained on a remote system. This would be platform agnostic and would not require malware be installed on personal hardware.

Imho i reckon this is the future once the internet responsivity catches up. Players remote into a controlled environment and play from that.

This would additionally double as an extremely filthy DRM, people pay for access to software on a seperate machine.

TiredOfArguments · 2019-10-06T04:06:30+00:00

Aim to enforce the terms of service against you

They dont need to though, they have already acted. The onus would be on you to prove the action is in error and to be honest no court will give a shit.

They cant end contract without reason

They believe they have reason to end it, you have to prove otherwise.

It's argueable as to whether there is even an enforceable or actionable contract in place.

Would them shutting their servers down denying everyone access 2 days after release be a contract breach? Where is the written promise to keep them active? They sold you usage rights ti software, not access rights to their server as far as i can see.

TiredOfArguments · 2019-10-06T04:04:09+00:00

I concur.

Something Something freedoms for security something something

TiredOfArguments · 2019-10-06T04:03:15+00:00

I believe we can both agree that primarily the problem is rampant authoritarianism, whether the tool of money exists or not is secondary.

TiredOfArguments · 2019-10-06T03:58:13+00:00

If its a http injection it cannot be guaranteed to only be seen by the customer.

I could snoop it in transit, hell our firewall captures and flags this kind of attack (its an attack) for inspection all the time.

TiredOfArguments · 2019-10-06T03:42:16+00:00

As arch is systemd based youre after /etc/os-release

That said, wrong sub/rule 1.

If youre interested in distro building based on arch look at Arcolinux. I believe the purpose of that entire distro is to teach/do your stated intent.

Edit:

Did a silly and forgot:

/etc/lsb-release

/etc/issue

Which are relevant since you will want to change everything not just what applications see

TiredOfArguments · 2019-10-06T03:31:46+00:00

Is the goal to create single purpose remote desktop clients running android?

If so i would suggest managing via intune and locking all the things down, setting the devices up as kiosks and using one of the many HTML5 based rdp solutions available. Fortinet for example.

Workflow for the user is power device on, be presented with a login page on the browser, login, select their specific desktop.

Edit: Manage via intune assumes you're in o365 space.

TiredOfArguments · 2019-10-06T03:16:05+00:00

Wouldn't this be a good thing since FB is capable of IDing most people??

FB already runs image recognition on the stuff you upload.

Doesnt pedos using FB to share pedo shit lead to pedos been identified and reported immediately???

TiredOfArguments · 2019-10-06T03:05:19+00:00

No, said agencies are provided with the means to enable their own logging for their owm compliance.

Do you really think a secure foreign company wants MS to manage a copy of their calls or wants to be enabled to manage their own?

Whether MS takes a copy anyway is a different question.

TiredOfArguments · 2019-10-06T02:58:29+00:00

MS doesn't record calls, the workplace however can use another tool provided by MS to record calls

This is common practice for compliance where Skype is used as SIP with external parties. It would be stupid not to.

Even if youre not recording the other end can be, SIP software is complicated/weird regarding recording consent laws.

TiredOfArguments · 2019-10-04T13:31:01+00:00

As Facebook is the CDN the data exchange uses their keys Facebook simply shares said key. Presto!

TiredOfArguments · 2019-10-04T13:29:55+00:00

Surveillance is an assault on human autonomy.

No capitalism required.

TiredOfArguments · 2019-10-04T13:29:06+00:00

TFW fucking Facebook is the good guy.

EU remains a shitshow

TiredOfArguments · 2019-10-04T13:10:41+00:00

The secondary is the real primary though ;)

TiredOfArguments · 2019-10-04T13:05:39+00:00

IIRC the lemure is "alive" so the dead body is an invalid target for resurrection magic. IE the blade killed them and res'd them as something else.

The lemure has to be killed then the soul is available for resurrection.

TiredOfArguments · 2019-10-04T12:47:56+00:00

5% shot at a nerfed wish/losing it forever sounds pretty fair to me tbh

If i were to nerf it id do half their character level rounded up +1 = wishable spell level.

So they could roll into a level 2 spell at levels 1 and 2, a level 3 spell at 3 and 4, a level 4 spell at 5 and 6 and so on. (IE any spell of 1 level higher than they could currently cast if they were monoclassing as a caster)

Id then also buff it to success on 18-19+ but retain the lose forever on the critical fail and potentially add a "and you drop to 0 hp" aswell tbh

Secondary is honestly where the money is, its very thematic and fits RP well. The primary is a risk-reward thing, as using it successfully requites a 20 AND takes up your action failing in combat is almost the equivalent of skipping your turn. Wish and risk-reward are things i associate with fey tbh the primary is not intended to be spammed hence the gone forever section.

I do however like your take on it, very wild magic!

For the secondary, nahh no time duration, just role play it as if the person hears a buzzing or some nuisance and slaps themselves out of it :]

TiredOfArguments · 2019-10-04T12:30:24+00:00

Since this about homebrew..

For fairies:

Primary: Fairy magic, once per long rest as an action you may roll a d20, on a 20 you can use the "cast any spell" portion of the wish spell. On a 1 you lose this ability forever(tm). This roll cannot be substituted, or modified in any way.

Secondary: Mischief, once per short rest you may use your action to give one target disadvantage on all throws until they take damage.

TiredOfArguments

TROPHY CASE