Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
porktree
Mar 23, 2002

You just fucked with the wrong Mexican.

Lain Iwakura posted:

For what it is worth, there isn't really a good option for KeePass on iOS but I have been using the shared clipboard option when I am at home--I have no idea about its risk of use here.

This has been a recommendation to me but I have yet to test:
https://www.kyuran.be/software/kypass/

Ive been using Kypass for several years and am pretty happy with it. Ive yet to find a good linus (ubunto) client.

Adbot
ADBOT LOVES YOU

Surprise Giraffe
Apr 30, 2007
1 Lunar Road
Moon crater
The Moon
So I managed to watch bootleg attack on titan for a fees hours without switching ublock on and now I'm getting input lag at random intervals. Its been going about 2 weeks without any real change. I've run the bleeping computer favorites - rkill, mbam, adwcleaner, ccleaner (new clean ver. Lol) hitmanpro and eset etc. as well as windows defender of course. Really had no joy except a PUM RogueKiller caught in beta mode which I removed. That got rid of the lag for a couple hours this morning but now its back.
I would just wipe and reinstall win 10 but I have no key for it. Is there anything I can actually do besides that? General opinion is nope, nuke it but wanted to check.

Kassad
Nov 12, 2005

It's about time.
Just nuke it, Windows 10 is functional without a key. The only limitations are an overlay popping up after a few hours and not being able to change the wallpaper.

Surprise Giraffe
Apr 30, 2007
1 Lunar Road
Moon crater
The Moon

Kassad posted:

Just nuke it, Windows 10 is functional without a key. The only limitations are an overlay popping up after a few hours and not being able to change the wallpaper.

Fair enough. I can't wipe the drives as you can't create an iso to reinstall from keylessley but I'll use the built in feature and cross me fingers. Cheers

Khablam
Mar 29, 2012

Unless you're a very unique snowflake, your license is verified against the hardware and it'll activate fine.
You can help this along by logging in from a microsoft account on the PC first and linking them.

Just use the reset option, or if you want to reinstall from a clean disk just skip the license key and activate once you're booted.

Input lag like that is often because someone is mining buttcoin on your PC and cpu or GPU is at 100%.

Surprise Giraffe
Apr 30, 2007
1 Lunar Road
Moon crater
The Moon
Wondered if it was mining but %s are normal at all times. I don't know, I'll just get on and get rid

uPen
Jan 25, 2010

Zu Rodina!

Surprise Giraffe posted:

Fair enough. I can't wipe the drives as you can't create an iso to reinstall from keylessley but I'll use the built in feature and cross me fingers. Cheers

I'm like 90% sure you don't need a key to download the win10 ISO from Microsoft.

https://www.microsoft.com/en-us/software-download/windows10

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
Let's not forget that Windows 10 ships with a "nuke everything and reinstall windows from scratch" button

Geemer
Nov 4, 2010



uPen posted:

I'm like 90% sure you don't need a key to download the win10 ISO from Microsoft.

https://www.microsoft.com/en-us/software-download/windows10

I'm like 100% sure that I used my android phone to download an actual ISO instead of the media creation tool without a key from that site.

Cup Runneth Over
Aug 8, 2009

She said life's
Too short to worry
Life's too long to wait
It's too short
Not to love everybody
Life's too long to hate


I looked up Refresh my PC and it apparently has a "Reset my PC" counterpart which is identical to :pt: if you choose to delete all your files. So I did that with a full drive format and then restored my files from my backups with File History. Pretty painless.

buglord
Jul 31, 2010

Cheating at a raffle? I sentence you to 1 year in jail! No! Two years! Three! Four! Five years! Ah! Ah! Ah! Ah!

Buglord
I keep hearing stuff about Gmail being insecure and that advertisers can skim words off your messages to sell things or whatever. Is any of that remotely true, and is there any case where the average end user should move to something with more privacy, like Tutanota or something?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

buglord posted:

I keep hearing stuff about Gmail being insecure and that advertisers can skim words off your messages to sell things or whatever. Is any of that remotely true, and is there any case where the average end user should move to something with more privacy, like Tutanota or something?
Gmail is owned and operated by an advertising company, a company which exists to sell advertisements at you.

Carbon dioxide
Oct 9, 2012

buglord posted:

I keep hearing stuff about Gmail being insecure and that advertisers can skim words off your messages to sell things or whatever. Is any of that remotely true, and is there any case where the average end user should move to something with more privacy, like Tutanota or something?

ProtonMail is another secure one.

Dylan16807
May 12, 2010

buglord posted:

I keep hearing stuff about Gmail being insecure and that advertisers can skim words off your messages to sell things or whatever. Is any of that remotely true, and is there any case where the average end user should move to something with more privacy, like Tutanota or something?
As far as storing things on a server goes, google is pretty secure.

And they claim they don't use email contents for ad targeting anymore.

Still an ad company though.

SeaborneClink
Aug 27, 2010

MAWP... MAWP!

Dylan16807 posted:

As far as storing things on a server goes, google is pretty secure.

And they claim they don't use email contents for ad targeting anymore.

Still an ad company though.

This is only true for paid GSuite accounts.

:lol: if you think they're not targeting ads on their free platform(s) by default.

Mr Chips
Jun 27, 2007
Whose arse do I have to blow smoke up to get rid of this baby?
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8475

"A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files. An attacker who successfully exploited the vulnerability could execute arbitrary code.

To exploit the vulnerability, an attacker would have to convince a user to download an image file."

That's a vague description - does anyone have any specific info on how this one actually works? The CVE database entry doesn't have anything public yet.

Jabor
Jul 16, 2010

#1 Loser at SpaceChem
If details are still embargoed, anyone who knows for sure probably isn't going to drop all the deets here.

But usually this sort of thing is "the component used to generate thumbnails (e.g. for the file explorer) fails in an exploitable way if the file is malformed".

Jabor fucked around with this message at 03:22 on Sep 12, 2018

Mr Chips
Jun 27, 2007
Whose arse do I have to blow smoke up to get rid of this baby?
I'm sort of hoping that it is something exciting like "any image loaded in any application, including any web browser, triggers this RCE".

geonetix
Mar 6, 2011


I think we’re not still in the time of “there’s some vbscript in the exif tag let’s run it” but let’s see when the embargo is lifted

dis astranagant
Dec 14, 2006

"Someone took the TIFF spec literally again"

yoloer420
May 19, 2006

buglord posted:

I keep hearing stuff about Gmail being insecure and that advertisers can skim words off your messages to sell things or whatever.

Advertisers can target you based on a variety of mechanisms, this is true. Google won't give that information or your details to the advertisers though. That would be against Google's interests because then advertisers could target you directly, without continuing to pay Google.

You can generally trust Google to protect their income source, which thankfully means not handing out people's personal info.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

yoloer420 posted:

Advertisers can target you based on a variety of mechanisms, this is true. Google won't give that information or your details to the advertisers though. That would be against Google's interests because then advertisers could target you directly, without continuing to pay Google.

You can generally trust Google to protect their income source, which thankfully means not handing out people's personal info.
You mean like Facebook?

Pile Of Garbage
May 28, 2007



yoloer420 posted:

Advertisers can target you based on a variety of mechanisms, this is true. Google won't give that information or your details to the advertisers though. That would be against Google's interests because then advertisers could target you directly, without continuing to pay Google.

You can generally trust Google to protect their income source, which thankfully means not handing out people's personal info.

Yeah but if they ever did find a way to make more money by handing out people's personal info then they'd probably do it.

Jose Valasquez
Apr 8, 2005

SeaborneClink posted:

This is only true for paid GSuite accounts.

:lol: if you think they're not targeting ads on their free platform(s) by default.

They announced they weren't using email scans for advertising purposes anymore last year

https://blog.google/products/gmail/g-suite-gains-traction-in-the-enterprise-g-suites-gmail-and-consumer-gmail-to-more-closely-align/

quote:

G Suite’s Gmail is already not used as input for ads personalization, and Google has decided to follow suit later this year in our free consumer Gmail service. Consumer Gmail content will not be used or scanned for any ads personalization after this change.

Katt
Nov 14, 2017

Is 7-zip a good way to encrypt sound files?

I have my business phone set to record phone calls because they can be useful in case of disputes. The recordings are uploaded to google drive.

These recordings should be saved for up to 7 years for legal reasons but I'd rather not have all my business related phone calls available to some future hacker or someone who nicks my computer or phone.

Proteus Jones
Feb 28, 2013



Yes, I believe it has AES-256 (for sure AES-128).

Just make sure you use a reasonably complex passphrase.

Storm One
Jan 12, 2011

Pyromaniac Ida posted:

Is 7-zip a good way to encrypt sound files?
I don't know about anything wrong with 7-zip but why not GnuPG?

gpg --symmetric FILE

Katt
Nov 14, 2017

Storm One posted:

I don't know about anything wrong with 7-zip but why not GnuPG?

gpg --symmetric FILE

I'll take whichever works and is the least complicated.

Khablam
Mar 29, 2012

Just use 7-zip, it does have AES256 and if the source are WAV you'll end up compressing them decently as well.
Generate a long key in KeePass.

B-Nasty
May 25, 2005

7-Zip does do key stretching (couple hundred thousand rounds of SHA256 IIRC), but it doesn't allow you to increase the number of rounds for more modern hardware. Definitely choose a nice long key as the passphrase.

Katt
Nov 14, 2017

B-Nasty posted:

7-Zip does do key stretching (couple hundred thousand rounds of SHA256 IIRC), but it doesn't allow you to increase the number of rounds for more modern hardware. Definitely choose a nice long key as the passphrase.

Like passwordpasswordpasswordpassword?

RFC2324
Jun 7, 2012

http 418

Pyromaniac Ida posted:

Like passwordpasswordpasswordpassword?

that's too obvious. i recommend "correct horse battery staple"

super sweet best pal
Nov 18, 2009

Pyromaniac Ida posted:

Like passwordpasswordpasswordpassword?

Mushroom Mushroom
e: Mushroom Mu5hr00m

Paperhouse
Dec 31, 2008

I think
your hair
looks much
better
pushed
over to
one side
I couldn't find a relevant thread so I thought this was as good as any

Recently my external hard drive has sometimes started taking a couple of tries to connect and show up when I plug it in. Should I be worried? It's a few years old. When I plug it in it always lights up, but sometimes it needs to be unplugged and then plugged in again for my computer to register it

Lain Iwakura
Aug 5, 2004

The body exists only to verify one's own existence.

Taco Defender

Paperhouse posted:

I couldn't find a relevant thread so I thought this was as good as any

Recently my external hard drive has sometimes started taking a couple of tries to connect and show up when I plug it in. Should I be worried? It's a few years old. When I plug it in it always lights up, but sometimes it needs to be unplugged and then plugged in again for my computer to register it

It's 99.9% unlikely to be anything malicious.

Carbon dioxide
Oct 9, 2012

It might be a faulty USB cable or something.

Endymion FRS MK1
Oct 29, 2011

I don't know what this thing is, and I don't care. I'm just tired of seeing your stupid newbie av from 2011.
What is everyone's thoughts on Bitwarden? I currently use Dashlane as my manager but I see Bitwarden more and more

Last Chance
Dec 31, 2004

Endymion FRS MK1 posted:

What is everyone's thoughts on Bitwarden? I currently use Dashlane as my manager but I see Bitwarden more and more

I'm letting others test this one until it gets popped somehow or ends up being okay

Guest2553
Aug 3, 2012


I'll have a few weeks worth of work travel coming up, hitting about a dozen cities across North America over a couple months. My lovely laptop is coming along for the ride and I'd like to keep my banking info/porn habits to myself. I also have a non-IT background but want to get better.

I was thinking of imaging my hard drive to encrypted external storage before every flight and backing up any files I worked on. I'd also have file and image backups at home before leaving, so data should be safe and available even if the laptop isn't. Is this procedurally worthwhile, or are the better things I should be doing?

Adbot
ADBOT LOVES YOU

B-Nasty
May 25, 2005

Guest2553 posted:

I'll have a few weeks worth of work travel coming up, hitting about a dozen cities across North America over a couple months. My lovely laptop is coming along for the ride and I'd like to keep my banking info/porn habits to myself. I also have a non-IT background but want to get better.

Are you running Windows? The laptop most likely has a TPM, so just enable Bitlocker on your disk drive and you're done. Obviously, for backups, use whatever service/USB stick method you want. Bitlocker can also encrypt USB drives.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply