• 0 Posts
  • 8 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • This. Unless you want to go through the hell of multiple redundant architecture to deal with updates breaking things and backups. If you are The only person who is maintaining the multiple services that you’re running the backup feature alone is the reason to go with Proxmox. Upgrade to a lcx container didn’t go like you thought it would, roll back the backup, 30 sec and done. Also making liberal use of alpine have made it smooth and simple.







  • I think the issue that they are trying to make is that there are modern ways of protecting the keys with hardware level security, that aren’t being used. As someone who works in AppSec this is all too common. All it takes is one library in an application to be popped (doesn’t have to be signal), and security keys end up leaked. If it isn’t already, I’m sure that signals keys will be included in exfil scripts.

    Tools like TPM and SecureEnclaves (TrustZone,etc) mean that malware, and other nasties have a higher bar that they need to meet.