Illecors

@Illecors@lemmy.cafe

Calculator Manipulator

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Illecors,

Just in case you’re not a troll - host it yourself. It’s federated, like lemmy. You don’t need to be able to program.

Illecors, (edited )

I’m lucky enough to be in a company where Windows is banned by the CEO. Granted, there are 4 (I believe) exceptions, but the vast majority of employees have an Ubuntu workstation and everyone has a macbook. A bit of a shame this macbook thing, really. A 2 grand thin client to ssh into my desktop when working remotely :D

The exceptions being client testing envs.

Illecors,

Subbed!

What non-SMS non-Apple app can I use to "text" my younger kid on their iPad

Hi! My less-than-10-year-old has their own iPad (registered under my apple id) and wants to be able to “text” with the rest of the family. Most of us are not Apple people though: Android phones, using some combo of SMS, Discord, and Signal. The little one doesn’t have a phone, so I think that prevents us from signing them...

Illecors,

Simplex.chat might work for you.

Illecors,

This is really cool! Thanks for sharing!

Illecors,

What about the old friends csh and tcsh?

VPN to home network options

I currently have a server running Unraid as the OS, which has some WireGuard integration built in. Which I’ve enabled and been using to remotely access services hosted on that server. But as I’ve expanded to include things like Octopi running on a Pi3 and NextcloudPi running on a Pi4 (along with AdGuardHome), I’m trying to...

Illecors,

Plug your pies into wireguard. Problem solved.

Illecors,

I don’t have something specific to read, my statement comes from questioning the declared permissions by apps. Why would, say, facebook - an app that, essentially, downloads and uploads content via http, need access to location, gyro, contacts, texts, call history, making calls, microphone, etc? Also, while I can’t prove it, as someone who works in computing I can guarantee there are undocumented/buggy/testing APIs and just straight up bugs that companies with enough resources can and do find and abuse. Cambridge analytica has only strengthened my view on this.

Illecors,

That’s… Not at all how it works.

Don’t worry, you’re one of today’s lucky 10000!

Launcher on android is just that - an app to launch other apps. Other apps can and do run in the background, without ever being explicitly launched. Think play services, location provider, wifi connection manager, etc. Since google runs its stuff at the highest level - nothing can hide from it. Other apps, like netflix, utilise internal telemetry. Assholes like facebook push the boundaries to the limit and collect literally every input of every sensor to have as much data about your environment as possible.

TL;DR - custom launcher cool, but no cure.

Illecors,

I didn’t add it to any lists, but to the network interface itself. You know the output of ip a? The one pihole listens on (wg0 in my case, because wireguard) has something like, say, 10.0.0.1, but also 8.8.8.8. So when a DNS packet is spit out by chromecast to go to 8.8.8.8 UDP port 53 - my pihole happily answers that request. You could also do a separate unbound instance on a new virtual interface with a quad8 ip and just forward everything to pihole, if you fancy.

Illecors, (edited )

Being locked into googles DNS gives me problems

I solved that by adding an 8.8.8.8 ip to my pihole interface. Because of how TCP/IP works, this has the fewest hops and is, therefore, the one to be used. I’m blocking all outbound DNS traffic for good measure.

Is it actually dangerous to run Firefox as root?

I have a few Linux servers at home that I regularly remote into in order to manage, usually logged into KDE Plasma as root. Usually they just have several command line windows and a file manager open (I personally just find it more convenient to use the command line from a remote desktop instead of directly SSH-ing into the...

Illecors,

Is it actually dangerous to run Firefox as root?

Yes, very. This is not specific to Firefox, but anything running as root gets access to everything. Only one thing has to go wrong for the whole system to get busted.

usually logged into KDE Plasma as root.

Please don’t do this! DEs are not tested to be run as root! Millions of lines of code are expected to not have access to anything they shouldn’t have and as such might be built to fail quietly if accessing something they shouldn’t in the first place. Same thing applies to Firefox, really.

Illecors, (edited )

Sorry, this is very much a PEBKAC issue. This is a excerpt from my tmux config:


<span style="color:#323232;"># Start windows and panes at 1, not 0
</span><span style="color:#323232;">set -g base-index 1
</span><span style="color:#323232;">setw -g pane-base-index 1
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Use Alt-arrow keys without prefix key to switch panes
</span><span style="color:#323232;">bind -n M-Left select-pane -L
</span><span style="color:#323232;">bind -n M-Right select-pane -R
</span><span style="color:#323232;">bind -n M-Up select-pane -U
</span><span style="color:#323232;">bind -n M-Down select-pane -D
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Shift arrow to switch windows
</span><span style="color:#323232;">bind -n S-Left  previous-window
</span><span style="color:#323232;">bind -n S-Right next-window
</span><span style="color:#323232;">
</span><span style="color:#323232;"># No delay for escape key press
</span><span style="color:#323232;">set -sg escape-time 0
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Increase scrollback buffer size from 2000 to 50000 lines
</span><span style="color:#323232;">set -g history-limit 50000
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Increase tmux messages display duration from 750ms to 4s
</span><span style="color:#323232;">set -g display-time 4000
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Bind pane creation keys to reuse current directory
</span><span style="color:#323232;">bind % split-window -h -c "#{pane_current_path}"
</span><span style="color:#323232;">bind '"' split-window -v -c "#{pane_current_path}"
</span>

I hope the comments are self explanatory.

Scrolling works with Ctrl+b Page Up/Down. There are other shortcuts, but this is probably the most obvious. q to quit scrolling.

Ctrl+b d to detach from a session. tmux a to attach. As always, many options are available to have many named sessions running simultaneously, but that is for a later time.

Illecors, (edited )

I don’t know the specifics on Fedora’s installer, but normally that question is about disabling root account, not logging into a DE.

Not sure what else to elaborate here. There’s a bunch of code that is not tested to be run as root. A whole class of exploits becomes unavailable, if you stick to an unprivileged user.

Say there’s some exploit that allows some component of KDE to be used to read a file. If it’s running under an unprivileged user - it sucks. Everything in user’s homedir becomes fair game. But if it runs as root - it’s simply game over. Everything on the system is accessible. All config, all bad config, files of all applications (databases come to mind). Everything.

Illecors,

I would suggest having an nginx as a reverse proxy (I prefer avoiding a container as it’s easier to manage) and the have your services in whatever medium you prefer.

Illecors,

https://imgs.xkcd.com/comics/ten_thousand.png

Illecors,

Separate. That’s the whole point of containerisation! Otherwise you’re just doing a regular deploy with extra steps

Good luck web devs (lemmy.world)

Alt text:Twitter post by Daniel Feldman (@d_feldman): Linux is the only major operating system to support diagonal mode (credit [Twitter] @xssfox). Image shows an untrawide monitor rotated about 45 degrees, with a horizontal IDE window taking up a bottom triangle. A web browser and settings menu above it are organized creating a...

Illecors,

No idea what it was, sorry. One of the youtube recommendations at the time.

Illecors,

I remember seeing the video of this. The guy was doing it for shits and giggles, but it ended up looking great!

Illecors,

Probably. Germany is having a bit of a fever with a fsr right party.

voxel, (edited ) to linux
@voxel@infosec.exchange avatar

Hey 👋 dear Linux Community,

I'm still kinda new to Linux (started using this year 😅) I already made it to my main OS, even if I still missing some things which I used on Windows, anyway. What I wanted to ask you guys, what recommendations do you have for Linux Mint (Cinnamon)? In terms of security, optimization, (a way to make the UI looking modern ;-;) and privacy? I would be very interested in what you do guys to optimize your Linux setup :) I'm pretty technical, so there is nothing which could overwhelm me (probaly).

Thx! 🤍

@linux

Illecors,

A tiling window manager and tmux. I don’t like window decorations, I think they’re a waste of precious screen real estate. And tmux… Well. It’s like pringles.

Illecors,

Do I need to disable compression on my swap subvolume?

wiki.archlinux.org/title/Btrfs#Swap_file

Is there anything else I should keep in mind for fstab if I want to, say, not keep track of my Downloads folder when snapshotting?

Just create a separate subvolume for it. Snapshots do not work recursively, so it will be left alone.

Mount options also only take effect on the first mount of the device. Since it looks like you only have 1 btrfs device - only / needs the options, really.

Illecors,

Glad I could help! Just to make things a bit clearer - this is a btrfs thing. Other FSes behave differently.

Illecors,

I’ve only got a few years on Gentoo - how has your journey been? You must’ve started with stage 1!

Illecors,

No, that’s normal. Might look strange for a native english speaker, but it definitely normal in othet languages.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #