[12:17] schestowitz[12:17] schestowitzAfter a year and a half since the last beta, Haiku R1/beta4 has been released. See Release Notes for the release notes, Press contact, for press inquiries and Get Haiku! to skip all that and just download the release (or upgrade to it from an existing install!)
[12:17] schestowitz
[12:40] schestowitz[12:40] schestowitzPerhaps the best example demonstrating the maturity of Meson is that I no longer do all the decisions. In fact most decisions and especially the code that goes with it is done by a diverse group of people. In fact I do very little of the actual development, I'm more of a product owner of sorts that can only nudge the project into certain directions rather than being able to turn the entire ship around on a dime. [12:40] schestowitz This is a bit sad, but absolutely necessary for long term survival of the project. It means that if one of those malevolent buses that seem to stalk software developers succeeded in hitting me, its effect on the project would not be all that big.
[12:40] schestowitz
[12:42] schestowitz[12:42] schestowitzA popular format for this purpose is base64. With Mua, we showed that we could achieve excellent speed using vector instructions on commodity processors (2018, 2020). However, base64 is a bit tricky.
[12:42] schestowitz
[12:52] schestowitz[12:52] schestowitzI use GnuPG to compute cryptographic signatures for my emails, git commits/tags, and software release artifacts (tarballs). Part of GnuPG is gpg-agent which talks to OpenSSH, which I login to remote servers and to clone git repositories. I dislike storing cryptographic keys on general-purpose machines, and have used hardware-backed OpenPGP keys since around 2006 when I got a FSFE Fellowship Card. [12:52] schestowitz GnuPG via gpg-agent handles this well, and the private key never leaves the hardware. These ZeitControl cards were (to my knowledge) proprietary hardware running some non-free operating system and OpenPGP implementation. By late 2012 the YubiKey NEO supported OpenPGP, and while the hardware and operating system on it was not free, at least it ran a free software OpenPGP implementation and eventually I setup my primary RSA key on it. This worked well [12:52] schestowitz for a couple of years, and when I in 2019 wished to migrate to a new key, the FST-01G device with open hardware running free software that supported Ed25519 had become available. I created a key and have been using the FST-01G on my main laptop since then. This little device has been working, the signature counter on it is around 14501 which means around 10 signatures/day since then!
[12:52] schestowitz
[12:53] schestowitz[12:53] schestowitzIn fact, its pretty easy to view your own LastPass data. And it shows that barely anything changed since I wrote about their encrypted vault myth four years go. Passwords, account and user names, as well as password notes are encrypted. Everything else: not so much. Page addresses are merely hex-encoded and various metadata fields are just plain text.
[12:53] schestowitz
[12:54] schestowitz[12:54] schestowitzThis makes it sound like decrypting the passwords you stored with LastPass is impossible. It also prepares the ground for blaming you, should the passwords be decrypted after all: you clearly didnt follow the recommendations. Fact is however: decrypting passwords is expensive but it is well within reach. And you need to be concerned.
[12:54] schestowitz