• 5 Posts
  • 62 Comments
Joined 3 years ago
cake
Cake day: December 25th, 2021

help-circle



  • The sanest option in terms of user practicality to me appears to be storing the private key on the server, maybe encrypted with the user’s password, and sending it to the user on successful login where it would be decrypted client side.

    That does seem reasonable, but it doesn’t solve the trust issue. The server might always send a modified script that just uploads the plaintext private key.

    That said it would still be useful in other ways. Like in a breach the data would be secure.














  • Is your system then actually low on memory then? This doesn’t seem to work for me, but then again even javascript sites aren’t going to eat 32gigs just like that.

    One theory that I tested, was that whether it was a scheduled BTRFS scrub in the background (basically reading all the data and checking for errors), but it doesn’t seem to have an effect when manually started.

    Another observation now that it’s running fine: At the time my fans never revved up to speed like they do now. Just stayed mostly silent. It really felt like it was accidentally using an integrated GPU, which I don’t have…