• 2 Posts
  • 60 Comments
Joined 5 months ago
cake
Cake day: September 22nd, 2024

help-circle


  • Owning a domain for yourself and having a provider send/receive email on your behalf is a common choice, and it has its own benefits such as being able to migrate to other providers easily. As long as you renew your domain properly, it should be fine. Though do note that only you would use that domain, so anyone would know it was you who sent that email.

    Owning a domain for yourself AND handling email sending/receiving can be challenging because there’s a chance your email gets filtered as spam, and the receiver doesn’t get what you sent. It’s also possible that your server goes down, and the email sent to you doesn’t arrive properly, though the email server usually try to send again a number of times before giving up.

    If you are confident about setting a server, I can personally recommend Mailcow. As long as you set up SPF, DKIM, DMARC, it should pass most spam filter including Gmail. If you don’t want to deal with the potential headache, getting a provider to send/receive emails for you is a good choice too.











  • Did mandatory service, and no, it shouldn’t be a thing. It’s not that you would be fighting in the frontline that it sucks (it is a possibility, but doubt it would happen any time soon), it’s that you can’t do much during that period that makes it annoying, and you’re paid below min wage for it. It also imposes restrictions on you before you complete your service in case you try to avoid it. You also do it during the 20s, and that’s just a waste of time.







  • The hardest part would be how to trigger the kill-switch periodically without showing it to your adversary whilst keeping it easy. Having your device queried directly would be a dead giveaway. My idea without involving people would be as follows:

    1. Set up a program that syncs files to a remote third-party cloud
    2. Sync it to a directory that frequently changes when you use your device (your docs, for example)
    3. Have a server that queries the third-party drive for that synchronised directory
    4. If there are no changes, trigget the alarm

    But since this plan relies on the secrecy, it’s kind of ruined now. That, and I think your threat model is a bit too extreme.