From there, curate the info that will help you. Break available info into pieces. [Analyse] unknown unknowns … Show your work …

This is a perfect illustration of, “I decide to obtain more complete information.”

Thank you for confirming I’m not the only person who does this!

I fully agree with you that there are situations where some people are just impatient, and corners are cut

👍

a lot of neurotypicals often don’t like those people too

Unfortunately, that is not my experience.

the question isn’t “do I think this person will without a doubt be our top employee” or “WILL this person succeed” … the question is “Given the information at hand, do I think there is a higher likelihood of the person succeeding or struggling?” […] If I say yes, and they hire the person, and they don’t fit at the company, I can still just point to “they answered all the interview questions properly” and it’s not my fault things went poorly.

This is an instance of your case 1, which is not really what this thread is about.

You are not making sense.

Your list of cases can be paraphrased thus:

• Case 1: information known is incomplete, but sufficient.
• Case 2: information known is complete, and sufficient.
• Case 3: see case 1.

Yes, those cases are easy to deal with, even on the spectrum.

Hard cases are where information is insufficient, and consequences of the decision are serious.

Neurotypicals (& ADDers) facing genuinely insufficient information often prefer a decision regardless - instead of admitting they cannot yet make a sound one. They prioritise impatience over correctness; short-term over long-term.

That bias is a factor in much social, environmental, and economic harm.

• and those who rightly recognise that black swans exist?

You may enjoy unsound conclusions, but don’t project that inadequacy onto the rest of us.

The U.S. already witnessed the damage and chaos of a Trumpster Fire presidency.

After 4 years of progress under Biden, it voted for more damage and chaos.

Americans are humans, and humans are all too often short-termist, irrational, and destructive.

If that is what they meant, then that is what they should have said.

But it isn’t what they said, and therefore presumably isn’t what they meant.

Having studied formal logic, I’m well aware of what a tautology is. It is a statement logically equivalent to A = A.

Relevance here: a bad outcome is a bad outcome (regardless whether it happens now or later).

Some old people are the ones who pioneered climate research, renewable energy, de-growth, and environmental activism!

Without them, no-one would understand what exactly has gone wrong or what can be done about it.

Learn to distinguish people based on their individual actions (for which they are responsible), not their involuntary characteristics (such as age).

sometimes change needs to happen for better or worse

Change for worse is not a good thing.

Arguing otherwise is arguing against a tautology.

What are your main issues with Matrix?

Progress report 1

• I’m ruling out HMAC-SHA1, because:
  • Plain vanilla HMAC-SHA1 uses a shared secret. I don’t want the PC/server to have a copy of the credential. May also be susceptible to MITM/relay attacks.
  • Rolling-code HMAC-SHA1 only partially solves those problems.
  • Encrypted rolling code HMAC-SHA1 solves those problems, but I haven’t found a reliable source for using it with LUKS.
• If using systemd, pick FIDO2:
  • Avoids flaws of HMAC-SHA1.
  • Native support in systemd, so “future-proof”.
  • Wider support than OpenPGP. More HST vendors to choose from, including cheaper options than NitroKey or Yubikey: useful if each sysadmin (or colleague, or relative) needs an HST.
  • Compatible with QubesOS.
• Otherwise, OpenPGP:
  • Like FIDO2, solves HMAC-SHA1 flaws.
  • However:
    • smartcard-key-luks seems unmaintained on GitHub and on GitLab.
    • LUKS with OpenPGP isn’t well-documented for non-Debian-based distros.
• TBD: Clevis/Tang:
  • Remote/network-based unlocking.

Thank you for this! That thread is helpful in itself, and also links to other relevant resources - including by Lennart Poettering (controversial guy, but the canonical source on systemd).

their setup required a couple large antennas that the victim would need to stand in between. Not impossible, but you’d notice with each side being half a meter away.

So yes, it’s a technical risk, but not one that I’d bother putting much effort into avoiding. And the being able to use the key via NFC is probably worth the risk.

This was my conclusion, too, but I didn’t want to prejudice the discussion. Thanks for corroborating.

IMO, using a Faraday pouch isn’t “much effort”, and is therefore worth doing if the HST is being carried in unfamiliar/non-secure locations.

Even if you can [exploit NFC] at 1m, thats close enough that it can just be stolen from you.

Stealing the HST should not give the user a false sense of security. Not so dangerous.

Silently exfiltrating the private key (or data for a replay attack), OTOH, would leave the user with a false sense of security. Dangerous.

your link to rfidgate appears broken

Wfm. Here’s an archive link.

If it’s a server for self hosting you definitely don’t want anything that requires interaction at boot.

Depends on use-case. If you only plan to boot it when you’re physically present, it’s fine.

i believe a much better secure layer is something similar to what Novacustoms, Purism attempt to do: verify if somebody else not you try to access the laptop.

You’re thinking of Heads, which I agree is ideal for supported motherboards.

tang

Thanks. TIL about Clevis/Tang.

I can only see three ways to get FOSS firmware on your printer:

1. If someone reverse engineers the firmware to create a FOSS version.
2. If the Software Freedom Conservancy, who recently raised funds to tackle Bambu Labs’s license violations, finds a violation in BL firmware and succeeds in legally compelling BL to release the corresponding source code.
3. If you sell your BL printer and replace it with one that already has FOSS firmware.

I read them before writing my OP. I’m still not sure what you’re getting at.

I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.