• 1 Post
  • 34 Comments
Joined 8 months ago
cake
Cake day: January 25th, 2024

help-circle
  • One thing I can think of is an overzealous corporate security solution blocking or holding back your email purely for having an attachment, or because it misunderstands/presumes the cipher-looking text file to be an attempt to bypass filtering.

    Other than that might be curious questions from curious receivers of the key/file they may not understand, and will not be expecting. (“What’s this for? Is this part of the contract documents? Oh well, I’ll forward it to the client anyway”)

    Other than that it’s a public key, go for it. Hard (for me anyway) to decide to post them to public keychains when the bot-nets read them for spam, so this might be the next best thing?



  • The way I understand it, I think the real issue here is that Proton Drive should clear the sync state or identity when uninstalled. The identification of the PC should be unique to each install, so that when you reinstall it later it understands that it is now a “new” system needing to be reworked from scratch, and that the empty folder is awaiting initial download, not mass cloud deletion. Would that lead to multiple copies in the “Computers” backup section? Sure, but that can be a good thing too, or at least better than wiping the drive, and more easily remedied.




  • Sure does! Especially after you buy extra RAM, a faster CPU, and an AI accelerator so CoPilotana can learn all about you and play them for you! /s

    But seriously, a lot of it can be disabled with some initial tweaking and use of the policy editor, or one of those ShutUp tools to do it for you. After you trim it all out it’s usually fine, with the bonus of games not requiring obscure tweaks and usually just working.

    At the end of the day that’s what keeps people coming back or never leaving. The games are built for windows, run easily on windows, and the devs will support if it does not.

    For Linux you must learn something new, make continuous effort to tweak and correct issues, and find interactive support only on obscure Discords or Reddit because there aren’t even any good forums anymore.

    This is just about the games mind. Next we get into the accessory market, with the Windows based related softwares….




  • Something I like to consider, how different is your salary today compared to one from then? Do you, technically, make 4x as much now vs an 80s wage, in line with the 4x cost increase?

    Naturally, it’s still not going to be a great answer either, but I’ve learned to take things with a grain of salt and instead of comparing dollar costs from then and now, get a wage from the same time and convert it all to working hours.

    Example, my gramps liked to talk about 10 cent cheeseburgers at a time when they were a dollar. He also used to make about a dollar an hour compared to my $8/hr at the time. Yes, that means it’s not equal inflation between wage and cost(that’s the real problem), but at the same time they are both up and cheeseburgers were not as drastically more expensive than they used to be.

    Unless you want to rope quality into this then it’s just depressing…

    What I’m saying is, dollar for dollar, everyone gets hooked on seeing a platter meal so much cheaper than today and despairs. They forget the guy buying it also made near ten times less than you do at the time.

    TL;DR: My understanding: While not equal and unfortunately drifting apart, costs and wages both inflate. Weren’t wages almost as low as that food price at the time?



  • Since you mention setup instead of any manual install screwery, I’d say root(uid 0) is still very real, you just didn’t setup any login for it. Every time you sudo (substitute-user-do), you(probably uid 1000) are running that command as root instead of you. In fact, just sudo -i and you are now “logged in” as root.

    Edit: Missed the context. Should still be useful info but you probably are not accidentally remoting into an account you never setup the login for.


  • Raspbian is sometimes a compromise between security and usability, because it is designed to go into the hands of new users. It also used to ship with a default “pi/rasberry” login hardcoded and IIRC permitted root password login over ssh. Things experience users change or turn off, but needs to start friendly for the rest, you know?

    By doing this, they can take a step in the right direction by separating the root and login user, without becoming annoying asking for a password frequently as a newbie copies and pastes tutorial commands all week.

    And as I said it’s unlikely, even very unlikely, but just not impossible. Everything comes with a risk, I just believe it’s up to you, not me, what risks mean in your environment. Might be you’d like to have the convenience on the home dev server, but rather have as much security as possible on a public facing one.

    Or maybe you’d like to get really dialed in and only allow specific commands to be run without a password, so you can be quick and convenient about rebooting but lock down the rest. Up to you, really, that’s the power of Linux.




  • If you’ve got a VPS at your disposal, many of the homepage softwares I’ve tried over the years have some amount of caching to make them quite fast or even operate offline(“Homer” for one required me to deeply purge my cache as it would still appear when my site was offline…despite having replaced it long ago! 😂). Or, if you wanted to roll your own static HTML page, you can absolutely add a Service Worker for your own offline caching.

    That’s where I’m at now. I use a custom ServiceWorker static HTML for my homepage and tab page on all my devices. This page is a bouncer, checks if I’m at home or not(or if my local dashboard is offline) and either redirects me to the local homepage which has all my HomeLab services on it, or if it fails just tells me I might be abroad or offline and lists a few public websites.

    And yes, this works offline or over a shitty connection. Essentially the service worker quickly provides the cached page from the browser storage, then tries to take the time to check the live version. If it gets one, it updates the cache, if not, enjoy the offline version.



  • In Debian, you will want to modify your /etc/sudoers file to have the NOPASSWD directive.

    So where you find something like this in that file:

    %sudo ALL=(ALL:ALL) ALL

    Make it like this:

    %sudo ALL=(ALL:ALL) NOPASSWD:ALL

    In this example, powers are given to the sudo %group, yours might just say pi or something else the user fits into.

    Also, please note that while this is convenient, it does mean anyone with access to your shell has a quick escalation to root privileges. Some program you run has a shell escape vulnerability and gets a shell without a password, this means they also get root without one too. Unlikely to happen, sure, but I believe one should make informed decisions.