There are a fair number of dinosaur games

• Ark
• Jurassic World Evolution
• Paleo Pines
• Turok

https://store.steampowered.com/search?tags=5160&supportedlang=english&ndl=1

DRM has this same problem that I was referring to. Because Blu-ray players need to have a secret key to decode movies, attackers have been able to extract the keys. Same with DRM streaming 4K from video streaming sites like Netflix to phones. Attackers have rooted phones and extracted keys so that there is now software to download from Netflix in full 4K. I don’t know of a DRM that hasn’t been cracked.

What I meant with my second paragraph is that a government could secretly compel a respected camera company to hand over the keys. Then that government could deep fake photos to provide justification for actions and the photos would appear genuine due to the keys signing them.

How can a camera have access to the signing key and prevent an attacker gaining access to that key?

Also, this would give camera companies (and any entity with leverage over the camera company, including their government) the power to decide what images are ‘true’ in the public’s eye. Companies that control the keys would need to be good at securing the keys.

Even as a tool it lacks predictability / reproducability. If I give instructions to download a paint program, start a new canvas of 1920x1080 and use the gradient tool to go from red to green, you’re going to get the same result every time. If I instead told a class of students to ask an AI to generate a red to green gradient on a 1920x1080 canvas, the results would not be consistent.

I use AI, but it is a tool with flaws.

Taxes and maintenance wouldn’t be included in the mortgage. A new roof is expensive, so are HVACs, floors, etc. These things will need to be replaced. A rule of thumb is to budget 1% to 4% of the total house value per year. For a 400k house that could be up to $16k extra per year, or $1333 more per month than your mortgage. Those costs for maintenance and taxes don’t go towards paying down your principal so they aren’t directly gaining equity. With the rent and invest option, the investing is the counter to equity. When you sell your house you usually pay a realtor commission. There are a lot of factors to include when seeing if rent & invest is better than mortgage & buy.

That being said, I prefer to buy. I don’t plan on moving anytime soon.

Security Now https://twit.tv/shows/security-now

Every week there will be news topics, sometimes there are deep dives into technical topics.

Is this you? https://youtu.be/DhC1o_yc5GA

j/k, but eerily similar situation. Make sure your sister doesn’t feel trapped if she needs to get out someday.

But Wonder Woman and Steve hadn’t been invented yet either and they seem to work…

https://xkcd.com/2827/

They didn’t say how fast it stopped rotating and whether the moon flew out of orbit awhile back.

Bog if true!

I’m considering Zulip

https://zulip.readthedocs.io/en/latest/production/install.html

Do note, because it’s using email, the recipient and sender are not private, along with the time, and probably the relative size of the messages.

The specific content of each message should be private as long as the encryption is done well. I haven’t looked at it so I don’t know if it implemnts safeguards to verify who you’re messaging with (besides using the email address) and I don’t know if it uses PFS (Perfect Forward Secrecy) to protect against a key getting compromised.

https://github.com/rsmsctr/vaultwardenGuide

It doesn’t cover backups though. It uses Caddy instead of NGINX, and it uses DuckDNS to point a subdomain to your private IP address of your Vaultwarden server, so it will only be accessible in your LAN.

I’ve been researching zero-trust for my homelab recently and I’m considering OpenZiti instead of Cloudflare since I think it can all be self-hosted. The BrowZer from OpenZiti is especially interesting to me. The fact that I’m behind CGNAT is a hurdle though.

It ends up being a lot like FIDO or Passkeys but without having to store a separate key for each site. Each key is derived from your master key and the domain so they are all unique, to prevent tracking, but you still don’t have to save a separate private key blob for each site. There is also a recovery key built into the spec so that if your master key somehow gets out, you can use your recovery key to prove you’re the real person and regain your account to change the signin public key.

What about SQRL?

https://www.grc.com/sqrl/sqrl.htm