Bookmeat

joined 1 year ago

On .LAN domains, how to stop firefox switching to https (when it's not available) and stop complaining about self-signed certificates when it is available ? in c/firefox@lemmy.ml

[–] Bookmeat@lemmy.world 0 points 1 day ago

Install valid certs. Problem solved.

Not trying to clickbait but is this the end for kernel-level anti-cheat? in c/linux_gaming@lemmy.ml

[–] Bookmeat@lemmy.world 11 points 1 day ago (1 children)

It's about control. And monopolies love control (governments, too). If we let them, they'll take it and then we're screwed.

How is Android's share menu such garbage? in c/askandroid@lemdro.id

[–] Bookmeat@lemmy.world 6 points 2 days ago (1 children)

Don't even try to find your YouTube music or video play history in a rational way. It's in your profile! W T F .

What’s the deal with people/the media not making the big obvious comparisons between how we are treating Israel vs Ukraine? in c/uk_politics@feddit.uk

[–] Bookmeat@lemmy.world -4 points 2 days ago

Russia is the big bad bear. Palestinians are dirt. That's why it's different.

Not trying to clickbait but is this the end for kernel-level anti-cheat? in c/linux_gaming@lemmy.ml

[–] Bookmeat@lemmy.world 54 points 2 days ago* (last edited 2 days ago) (7 children)

It's probably going to move to hardware attestation similar to what Android and iOS are doing. This may or may not be a good thing.

Israeli forces mischaracterised events leading to fatal shooting of US activist, says Washington Post in c/world@lemmy.world

[–] Bookmeat@lemmy.world 24 points 3 days ago

Just write that they lied. They didn't mischaracterise anything.

Head of Israeli spy agency Unit 8200 resigns over 7 October failings in c/world@lemmy.world

[–] Bookmeat@lemmy.world 7 points 4 days ago

Taking the fall for Bibi's failings.

Kremlin warns of escalation if US allows Kyiv to hit Russia with long-range missiles in c/world@lemmy.world

[–] Bookmeat@lemmy.world 27 points 4 days ago (5 children)

For realisies this time! >:(

‘Do not store guns in your oven’: Loaded gun stored in oven fires multiple rounds after getting overheated in c/nottheonion@lemmy.world

[–] Bookmeat@lemmy.world 4 points 6 days ago

That's why we load them when we use them.

‘Do not store guns in your oven’: Loaded gun stored in oven fires multiple rounds after getting overheated in c/nottheonion@lemmy.world

[–] Bookmeat@lemmy.world 3 points 1 week ago (2 children)

Do not store a LOADED gun.

Ford Patents In-Car System That Eavesdrops So It Can Play You Ads in c/technology@lemmy.world

[–] Bookmeat@lemmy.world 28 points 1 week ago

Give me a free car and I'll test it out with this "service". I'm not buying a car that advertises to me.

The Pixel 9 Pro Fold perfectly highlights the big foldable problem – nothing is 'right' yet in c/android@lemdro.id

[–] Bookmeat@lemmy.world 4 points 1 week ago (1 children)

They made metric paper. Time to make metric phones.

16

Advice on encrypted storage (lemmy.world)

submitted 7 months ago* (last edited 7 months ago) by Bookmeat@lemmy.world to c/selfhosted@lemmy.world

9 comments fedilink

I currently have a storage server with the following config.

Multiple raid6 volumes (mdadm) -> aggregated into a lvm volume group -> lvm volumes -> encrypted with luks1 -> (no partitioning) xfs file systems mounted and used by the os

I have the following criteria: I want to keep software raid (mdadm) with multiple raid sets, xfs, and lvm. I don't mind using 2fa, but I don't want to just store my secret keys on a dongle attached to my PC because that seems to defeat the point of encryption at rest.

My questions:

Is there a better way to encrypt my data at rest?
Is there a better layer at which to apply the encryption?

I'm mostly unhappy with luks1 over a whole lvm volume and looking for alternatives.

--

Thank you everyone for these great responses! I'll be looking into these ideas :)