mhr 😷 @0xmrtn@infosec.exchange

The fediverse is a public forum.

Your posts are only as secure as the admins of every instance that your home server federates with, in terms of private and followers-only messages.

If you're going to talk about sensitive information, keep it to Signal or other secure 1-on-1 channels.

Assume that everything you post to the fediverse, is being scooped up by multiple gov agencies around the world.

The Milan scrape was only notable because they made their findings public.

If a university scraping feeds did it, it's safe to assume other, bigger organizations have been doing it for much longer.

Quick question: ages ago I put my #gpg key on a #yubikey and that works well for some time now. But now I have a little problem: Even though I have my yubikey inserted my secret key cannot be read by #gpgtools until I enter "gpg --card-edit" on the terminal. I can just quit card-edit, afterwards the key gets recognized correctly. Any ideas what I can do so my key is working without interaction when the yubikey is inserted? What happens when I open "card-edit"? Boosts welcome!