Illecors

@Illecors@lemmy.cafe

Calculator Manipulator

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Illecors,

Probably. Germany is having a bit of a fever with a fsr right party.

VPN to home network options

I currently have a server running Unraid as the OS, which has some WireGuard integration built in. Which I’ve enabled and been using to remotely access services hosted on that server. But as I’ve expanded to include things like Octopi running on a Pi3 and NextcloudPi running on a Pi4 (along with AdGuardHome), I’m trying to...

Illecors,

Plug your pies into wireguard. Problem solved.

Illecors,

That’s… Not at all how it works.

Don’t worry, you’re one of today’s lucky 10000!

Launcher on android is just that - an app to launch other apps. Other apps can and do run in the background, without ever being explicitly launched. Think play services, location provider, wifi connection manager, etc. Since google runs its stuff at the highest level - nothing can hide from it. Other apps, like netflix, utilise internal telemetry. Assholes like facebook push the boundaries to the limit and collect literally every input of every sensor to have as much data about your environment as possible.

TL;DR - custom launcher cool, but no cure.

Illecors,

Just in case you’re not a troll - host it yourself. It’s federated, like lemmy. You don’t need to be able to program.

Is it actually dangerous to run Firefox as root?

I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the...

Illecors, (edited )

I don’t know the specifics on Fedora’s installer, but normally that question is about disabling root account, not logging into a DE.

Not sure what else to elaborate here. There’s a bunch of code that is not tested to be run as root. A whole class of exploits becomes unavailable, if you stick to an unprivileged user.

Say there’s some exploit that allows some component of KDE to be used to read a file. If it’s running under an unprivileged user - it sucks. Everything in user’s homedir becomes fair game. But if it runs as root - it’s simply game over. Everything on the system is accessible. All config, all bad config, files of all applications (databases come to mind). Everything.

Illecors,

Is it actually dangerous to run Firefox as root?

Yes, very. This is not specific to Firefox, but anything running as root gets access to everything. Only one thing has to go wrong for the whole system to get busted.

usually logged into KDE Plasma as root.

Please don’t do this! DEs are not tested to be run as root! Millions of lines of code are expected to not have access to anything they shouldn’t have and as such might be built to fail quietly if accessing something they shouldn’t in the first place. Same thing applies to Firefox, really.

Illecors,

Do I need to disable compression on my swap subvolume?

wiki.archlinux.org/title/Btrfs#Swap_file

Is there anything else I should keep in mind for fstab if I want to, say, not keep track of my Downloads folder when snapshotting?

Just create a separate subvolume for it. Snapshots do not work recursively, so it will be left alone.

Mount options also only take effect on the first mount of the device. Since it looks like you only have 1 btrfs device - only / needs the options, really.

Illecors,

This is really cool! Thanks for sharing!

Good luck web devs (lemmy.world)

Alt text:Twitter post by Daniel Feldman (@d_feldman): Linux is the only major operating system to support diagonal mode (credit [Twitter] @xssfox). Image shows an untrawide monitor rotated about 45 degrees, with a horizontal IDE window taking up a bottom triangle. A web browser and settings menu above it are organized creating a...

Illecors,

I remember seeing the video of this. The guy was doing it for shits and giggles, but it ended up looking great!

Illecors, (edited )

Do yourself a favour and don’t host it, yet. Lemmy is not quality software. You have 3 options here:

  • pay someone to take care of it for you
  • learn more about computer management and computers in general, first; then host it
  • ignore the first two options, which will inevitably lead to your instance crashing and burning

Best of luck!

Illecors, (edited )

Most of them.

  • Debian world - apt sucks. For something with a sole purpose of resolving a dependency tree, it’s surprisingly bad at that.
  • Redhat world - everything is soooo old. I can see why business people like it, buy I rarely, if ever, agree with business people.
  • Opensuse world - I’ve only tried it once, probably 15 years ago. Didn’t really know my way around computers all that much at the time, but it didn’t click and I’ve left it. Later on I found out about their selling out to Microsoft and never bothered touching it again.
  • Arch - it was my daily for a year or two. Big fan. It still runs my email. At some point the size of packages started to annoy me, though. Still has the best wiki. I’ve never really bothered with the spinoffs, as the model of Arch makes them useless and more problematic to deal with.

I’ve got the Gentoo bug now. For the first time I genuinely feel ~/. A lean, mean system of machines :)

Illecors,

Yes, it can be done. Not to the point of deleting your key (that makes no sense - you need the key), but ssh-agent is what you want. Add it to your shell config and it will only ask to be unlocked once per however often you define.

I have this function defined and called:


<span style="color:#323232;">function ssh-agent-setup() {
</span><span style="color:#323232;">    # SSH agent
</span><span style="color:#323232;">    pid_file="$HOME/.ssh/ssh-agent.pid"
</span><span style="color:#323232;">    SSH_AUTH_SOCK="$HOME/.ssh/ssh-agent.sock"
</span><span style="color:#323232;">    if [ -z "$SSH_AGENT_PID" ]
</span><span style="color:#323232;">    then
</span><span style="color:#323232;">      # no PID exported, try to get it from pidfile
</span><span style="color:#323232;">      SSH_AGENT_PID=$(cat "$pid_file")
</span><span style="color:#323232;">    fi
</span><span style="color:#323232;">
</span><span style="color:#323232;">    if ! kill -0 "$SSH_AGENT_PID" &> /dev/null
</span><span style="color:#323232;">    then
</span><span style="color:#323232;">      # the agent is not running, start it
</span><span style="color:#323232;">      rm "$SSH_AUTH_SOCK" &> /dev/null
</span><span style="color:#323232;">      >&2 echo "Starting SSH agent, since it's not running; this can take a moment"
</span><span style="color:#323232;">      eval "$(ssh-agent -s -a "$SSH_AUTH_SOCK")"
</span><span style="color:#323232;">      echo "$SSH_AGENT_PID" > "$pid_file"
</span><span style="color:#323232;">
</span><span style="color:#323232;">      >&2 echo "Started ssh-agent with '$SSH_AUTH_SOCK'"
</span><span style="color:#323232;">    fi
</span><span style="color:#323232;">    export SSH_AGENT_PID
</span><span style="color:#323232;">    export SSH_AUTH_SOCK
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;">ssh-agent-setup
</span>

This way it stores the unlocked key in memory until the end of the session.

Illecors,

I get the same issue all the time lately. Search, click link, go back - clicked link gone, different results shown.

Broke a partition. Is there any way of saving it?

While I was switching distros, I accidentally broke a partition. I’m almost certain that all the data is there, but it doesn’t have a filesystem (I used ext4). Is there anything I can do to fix it, similar to changing the file extension without changing the contents. PS: It’s a data partition. I was trying to resize it,...

Illecors,

You can try fdisk.

If the partition table is there - create a new partition at the exact same location, of the exact same size.

If the partition table is not there - create *the exact same type (mbr vs gpt) partition table, then do the first if.

Fdisk should tell you that it found a filesystem signature. Do not wipe it.

Illecors, (edited )

Pulled pork. And then I wonder why I don’t do it more often, and then remember that I prefer homemade one, and then I realise :::: spoiler ain’t nobody got time for that :( https://i.imgflip.com/1f0umb.jpg

Illecors,

That is definitely not the point of this post.

Illecors,

I personally only run pihole and ublock origin. Pihole takes care of the most stuff, ublock picks up the leftovers where domain blocking is not good enough. I’d like to believe this saves some juice on battery powered devices, but I’ve never actually measured it nor noticed it.

Illecors,

What’s a fucking trumpet?

My ubuntu installation broke completely

I think that installation was originally 18.04 and I installed it when it was released. A while ago anyways and I’ve been upgrading it as new versions roll out and with the latest upgrade and snapd software it has become more and more annoying to keep the operating system happy and out of my way so I can do whatever I need to...

Illecors,

Honestly, for a long term usage like this a rolling release distro is better. I’ve never not had massive issues upgrading ubuntu release to release, but I’ve only ever had minor ones on arch and pretty much nothing on gentoo. Arch is bleeding edge, so can’t recommend it to you all that much and gentoo has some learning curve initially. But I’ve heard good things of whatever rolling names are from fedora and opensuse.

Illecors,
  • LUKS
  • Btrfs
  • sway
Illecors,

Hasn’t made life hell, but the general dumb following of compliance has left me baffled:

  • users must not be able to have a crontab. Crontab for users disabled.
  • compliance says nothing about systemd timers, so these work just fine 🤦

I’ve raised it with security and they just shrugged it off. Wankers.

Illecors,

People have used the following to scam, lie, commit fraud, etc

  • physical money
  • digital money
  • cryptocurrency
  • whatsapp
  • facebook
  • twitter
  • email
  • sms
  • phonecalls
  • etc

I don’t think it’s the privacy bit that makes people do shit things.

What are your thoughts on fiber through the city?

After 16 years of living in my city, they will finally have city-wide fiber internet. I’m pretty stoked because the fastest internet I could possibly have is a WISP at 50gbps down and 10gbps up. Now I will finally have gigabit but it’s through the city, and I’m wondering if they will be more strict on illegal content...

Illecors,

All the possibilities are up to your vpn.

Illecors,

A friendly reminder that this prick saying something doesn’t make it true.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #