“Have an evil megacorp’s gaslighting robot invade your safe space instead!”

The article does not mention mountains. Mountains are often more suited to trains than planes, cf. Switzerland.

The article does quote Anna Hughes of Flight Free UK, who echoes my sentiments: “The reality of decarbonising travel will inevitably be travelling a lot less, investing heavily in rail, and only then electrifying the flights that remain.”

France’s short-haul flight ban is excellent and more countries should adopt it.

As for “counterpoint”, no-one here disagrees with decarbonising island routes rail can’t serve. Still, I’d favour sail or electric fast ferries over aircraft where possible.

I’m all in favour of decarbonisation.

Still, the physics mean aviation will never be as energy-efficient as high-speed rail.

Governments and others should overwhelmingly invest in the latter. It has higher RoI.

https://youtu.be/OejpzwzHLho

I think they should grant asylum to people with legitimate asylum claims.

Some “non-spy Russians” have legitimate asylum claims. Some do not.

For a beautiful moment after reading the headline, I thought this must be an uplifting piece about European weather systems.

Then reality set in 🫠

International coverage: https://www.reuters.com/world/europe/ukraine-accuses-russia-war-crime-after-video-shows-drone-hunting-market-vendor-2026-08-04/

What are your main issues with Matrix?

Kdenlive is the top-ranked FOSS video editor on AlternativeTo.

I agree with that ranking, having also tried 5 or 6 of the other entries on the list.

Progress report 1

• I’m ruling out HMAC-SHA1, because:
  • Plain vanilla HMAC-SHA1 uses a shared secret. I don’t want the PC/server to have a copy of the credential. May also be susceptible to MITM/relay attacks.
  • Rolling-code HMAC-SHA1 only partially solves those problems.
  • Encrypted rolling code HMAC-SHA1 solves those problems, but I haven’t found a reliable source for using it with LUKS.
• If using systemd, pick FIDO2:
  • Avoids flaws of HMAC-SHA1.
  • Native support in systemd, so “future-proof”.
  • Wider support than OpenPGP. More HST vendors to choose from, including cheaper options than NitroKey or Yubikey: useful if each sysadmin (or colleague, or relative) needs an HST.
  • Compatible with QubesOS.
• Otherwise, OpenPGP:
  • Like FIDO2, solves HMAC-SHA1 flaws.
  • However:
    • smartcard-key-luks seems unmaintained on GitHub and on GitLab.
    • LUKS with OpenPGP isn’t well-documented for non-Debian-based distros.
• TBD: Clevis/Tang:
  • Remote/network-based unlocking.

Thank you for this! That thread is helpful in itself, and also links to other relevant resources - including by Lennart Poettering (controversial guy, but the canonical source on systemd).

their setup required a couple large antennas that the victim would need to stand in between. Not impossible, but you’d notice with each side being half a meter away.

So yes, it’s a technical risk, but not one that I’d bother putting much effort into avoiding. And the being able to use the key via NFC is probably worth the risk.

This was my conclusion, too, but I didn’t want to prejudice the discussion. Thanks for corroborating.

IMO, using a Faraday pouch isn’t “much effort”, and is therefore worth doing if the HST is being carried in unfamiliar/non-secure locations.

Even if you can [exploit NFC] at 1m, thats close enough that it can just be stolen from you.

Stealing the HST should not give the user a false sense of security. Not so dangerous.

Silently exfiltrating the private key (or data for a replay attack), OTOH, would leave the user with a false sense of security. Dangerous.

your link to rfidgate appears broken

Wfm. Here’s an archive link.

Thanks! I didn’t know they were normally made of composites.

Looks like there are some ways (1, 2) to reuse/recycle the latter, but I agree wood would be better for this.

Aren’t turbine blades usually aluminium? How is wood more “recyclable” than that?

I read them before writing my OP. I’m still not sure what you’re getting at.

I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.

I agree about needing a backup hardware token (or paper recovery key) to restore access if the primary hardware token is lost or broken.

Also agree about requiring a passphrase.

Any specific recommendations on protocol or setup steps?

Which of the 4 recipes I posted are you referring to as “this”?

Thanks, please post relevant steps if you have specific recommendations.

Is this James Hetfield?