• 1 Post
  • 525 Comments
Joined 2 years ago
cake
Cake day: July 9th, 2023

help-circle




  • The user does have to log in again to access the second TTY. I don’t know exactly what Hyprland’s settings do, but “allow_session_lock_restore” doesn’t sound like something you want turning on randomly while an attacker is sitting trying to access your computer. It’s very possible the crash itself was caused intentionally by the attacker in that case.

    Edit: Nevermind “allow_session_lock_restore” is just for saving open windows and stuff, so not really an issue. Restarting the lock screen however is very much not something you want to do while trying to keep an attacker out of your computer.














  • The trusted 3rd party in this case is actually multiple 3rd parties. There’s several options for trusted timestamping just like there’s multiple trusted root CAs for SSL. Since the timestamping service is free and public, anyone can use it to sign anything, even self-signed certificates. There’s no mechanism to deny access, at least for this portion.

    There’s always a risk the root CAs all collude and refuse to give out certificates to people they don’t like, but at least so far this hasn’t been a problem. I don’t have a better solution unfortunately. If we could have a 100% decentralized signing scheme that would be ideal, but I have no idea how you would build such a thing without identity verification and some inherit trust in the system