Michael Altfield 🛡️

@MichaelAltfield
2K Followers
7.4K Following
209 Posts
🐧 #Linux Hacker. 🔑 #Security Guru. I write articles about #opsec, #privacy, and #devops. 💙 #OpenSource 💾
Websitehttps://michaelaltfield.net
Tormichaelahgu3sqef5yz3u242nok2uczduq5oxqfkwq646tvjhdnl35id.onion
PGP0465 E42F 7120 6785 E972 644C FE1B 8449 4E64 0D41

PSA: you can't delete photos uploaded to #lemmy. So don't (accidentally) upload a nude to lemmy. That would be bad 😱

https://tech.michaelaltfield.net/2024/03/04/lemmy-fediverse-gdpr/

Oh, and if you delete your account? It doesn't delete your uploaded photos. And good luck getting your instance admin to delete it; it requires a manual db query, api call, and — oh, none of this is documented? Welcome to my #fediverse #GDPR nightmare 💣🤯

Nightmare on Lemmy Street (A Fediverse GDPR Horror Story) - Michael Altfield's Tech Blog

Is the fediverse GDPR-compliant? A horror story of uploading sensitive PII to lemmy and the numerous bugs that blocked its removal.

Michael Altfield's Tech Blog

Guide to Finding & Subscribing-to Popular #Lemmy Communities

https://tech.michaelaltfield.net/2023/06/11/lemmy-migration-find-subreddits-communities/

Lemmy is a fedderated #reddit alternative that's exploding as users migrate from reddit

Guide to Finding Lemmy Communities (Subreddits) - Michael Altfield's Tech Blog

Guide showing how to discover and subscribe to popular communities (subreddits) when migrating from reddit to lemmy

Michael Altfield's Tech Blog

Secure Boot to Heads: A brief history of #Linux Boot Integrity

https://tech.michaelaltfield.net/2023/02/16/evil-maid-heads-pureboot/

How @[email protected] uses the TPM for trusted boot measurements #infosec

Trusted Boot (Anti-Evil-Maid, Heads, and PureBoot) - Michael Altfield's Tech Blog

This post will help to provide historical context and demystify what’s under the hood of Heads, PureBoot, and other tools to provide Trusted Boot. I will not be presenting anything new in this article; I merely hope to provide a historical timeline and a curated list of resources. Intro The Librem Key cryptographically verifies the system’s integrity and flashes red if it’s detected tampering I’ve always felt bad about two things: Because I run QubesOS, I usually disable “Secure Boot” on my laptop I travel a lot, and I don’t have a good way to verify the integrity of my laptop (eg from an Evil Maid that gains physical access to my computer) To address this, I have turned to Heads and PureBoot — a collection of technologies including an open-source firmware/BIOS, TPM, and a USB security key that can cryptographically verify the integrity of the lowest firmware (and up the chain to the OS). While Purism has written many articles about PureBoot and has some (minimal) documentation, I found they did a lot of hand waving without explaining how the technology works (what the hell is a “BIOS measurement”?). So I spent a great deal of . . . → Read More: Trusted Boot (Anti-Evil-Maid, Heads, and PureBoot)

Michael Altfield's Tech Blog

Just discovered that my old #cycling blog is the #1 site on the #darknet (when sorted alphabetically) 🤔😂

Source: Ahmia's .onion Directory https://ahmia.fi/address/

@[email protected]

Considering #crowdfunding your hardware idea? 🤔💡

https://tech.michaelaltfield.net/2022/10/20/crowd-supply-review/

Here's my behind-the-scenes breakdown of the 16-month campaign to kickstart my #startup selling @BusKillin via Crowd Supply 🚀

Crowdfunding on Crowd Supply (Review of my experience) - Michael Altfield's Tech Blog

A behind-the-scenes look at my experience crowdfunding $18,507 on Crowd Supply for an open-source hardware dead man switch security cable.

Michael Altfield's Tech Blog