Spyke

Replies

privacy

Comment on

The Most Dangerous VPN of All Time (Onavo)

Reply in thread

The other reply is a good answer, but also dropping a video with no context or explanation is a hallmark of content spammers and growth hackers.

Even if looking like a crappy kind of poster isn’t enough to dissuade someone from just dropping a link and fucking off, providing some context and input to how and what the link will do and what it means as a post in the particular community is a lot better behavior and starts a conversation as opposed to doing nothing.

linux

Comment on

An update on rust-coreutils in Ubuntu

Reply in thread

The mit license allows someone (some company) to modify the open source codebase and sell the result without making their modifications public.

It allows the software equivalent of the enclosure of the commons.

If there was a particularly large or significant and widespread codebase —like for example the coreutils— that was used everywhere and mit licensed, a company could make their own slightly different coreutils without publicizing the differences and use their position in the market to enclose the commons of knowledge about the use of that software. Such a situation would lead to a fractured feature ecosystem and confusion around best practices. In that environment, the biggest and most popular software distributor would benefit because their product would be most common and therefore the best target to design around.

I know there’s a lot of “coulds” and “woulds” in that sentence, but that’s exactly what happened in the 80s and 90s with the ostensibly open source Unix codebase and the reason why the gpl was invented.

linux

Comment on

Can the GNU/ Linux Foundation Fork Android and Maintain it?

Could that happen? No. A massive amount of android development comes from employees paid by google to do it. What amount of resources should be siphoned away from linux/gnu stuff to support android developers? None.

Is it possible though? No. Android is a proprietary binary blob core (idr if kernel is the right term) with a bunch of open source stuff wrapped around it. For gnu, that part would have to be rewritten and that’s too big a job to take on.

Should it happen? Again, no. There are already plenty of alternatives to google branded android. Just use those.

Even if you were to wave a wand and make the android custodians according to your will, play services, the thing google is restricting, is still googles thing.

privacy

Comment on

People online say old computers are prime candidates for repurposing into routers, is that actually a good idea security wise?

You’re getting bad advice.

If you don’t expect to actually be shuffling packets back and forth or doing any kind of quality of service or vpn or really anything then the pi will be the better choice just barely because of its super low power consumption at idle. In that situation you would be at idle enough to actually justify using the pi. It would suck in the same way that using a pi for stuff usually sucks but you could justify it maybe.

If you plan to have a bunch of hosted stuff, a seedbox, qos, manage vpn connections and especially upgrade your lan to 1gb + later on down the line, the mini pc will actually be more efficient per cycle. In that circumstance you’d be at idle less, and the mini pcs more powerful processor, wider bus and expandability would make it less of a bottleneck presently and down the road.

Risc CPUs like the arm in the raspberry pi are really good at not doing anything, or doing a really small subset of things (it’s in the name!), but x86 is great at doing some stuff and being able to do a wide variety of stuff with its big instruction set. If you raise an eyebrow at my claim, consider that before gpus were the main way to do math in a data center it was x86. If the people who literally count every fraction of a watt of power consumption as billable time think it’s most efficient it probably is!

With ~08+ CPUs ability to turn cores and functions off at the clock tree and communicate back and forth with the os to orchestrate and coordinate it, there’s not as much daylight between the power usage of a pi and a mini pcs as some of these comments might make you think.

The long and the short of it is that you’ll most likely have a better time using the mini pc than the pi and claims that it’ll bankrupt you with power bills are greatly exaggerated.

In terms of privacy, I’d go for the mini pc. All your packages are most likely going to be open source, but the x86 stuff gets more scrutiny and isn’t as “magic blobby” as the arm world is.

Source: I have used over twenty different pi variants including knockoffs, wrote for microcontrollers before they were called sbcs, host a bunch of services on x86 which are monitored for their power usage using a power distribution controller by my lovely wife who keeps an eagle eye on the bills and I literally registered an account because people were telling you the wrong thing on the internet.

If you wanna verify that for yourself, get a cheap plug em in power meter and try both units running the package you choose under some artificial load like managing qos between a device streaming 4k and one torrenting 50 different Linux isos.

privacy

Comment on

Any way to make iOS more private?

You have many options:

First things first, disable biometrics and turn on lockdown.

Turn on automatic updates and stay up to date. The 26.3 update had significant security fixes in it!

Install your privacy respecting VPNs app and mdm shim. Use their dns (especially if it has an adblocker (mulvad)).

Figure out how to keep a backup code on paper and use that to turn on advanced data protection (adp). This will allow you to have e2ee with no backdoor on your iCloud stuff.

Go to settings > privacy and security and do a security checkup. It’ll walk you through which apps have access to what and when.

Don’t install extra shit. There’s good sandboxing in iOS but every app is another tracking vector.

Turn off location services unless you need it.

Turn off siri, also in Face ID and passcode scroll to the bottom and turn off access control center when locked (or just remove the airplane mode control). That keeps someone from turning on airplane mode and defeating stolen device protection when they snatch your phone.

Settings > privacy > all the way at the bottom: wired devices allow when unlocked

There’s probably more I’ll remember later. It’s easier if I know what you’re trying to get privacy from. Big difference between 4th amendment stuff and the advertisers you unknowingly invite into your home.

privacy

Comment on

Prusa Printers Firewall Logs

Reply in thread

Anything that connects to the network needs a synchronized clock with other devices it directly communicates with in order to make sure it’s not being subjected to timing attacks. This has been standard practice for 25 years, maybe more, in the end user world because some high profile computer screw ups made use of it. People with weird systems, off the gridders of olde and ppl still on dial up in the teens had some interesting problems to solve when generally all ISPs got drug kicking and screaming to the table by os updates that made synchronized clocks a non negotiable requirement.

linux

Comment on

Moving to Linux, need help about homelab distro

Eventually proxmox will be the right choice for you. Right now it’s not because you’re not skilled or knowledgeable enough to be able to navigate it.

That is not a dig or a slight, it’s a very powerful and complex package built on top of an already powerful and complex package.

Just do containerless normal person Debian then when everything’s running how you’d like and you’re ready you can migrate to proxmox.

The big benefit of doing that instead of jumping into proxmox with both feet immediately is that you’ll be learning more and be able to solve your own problems as you get to the point of using proxmox.

privacy

Comment on

How can I avoid proprietary software on school & company computers?

I cannot stress enough how bad of an idea it is to try and use a boot or portable apps usb.

Schools and companies are generally very alert about that kind of thing due to many many high profile incidents of malware, ransomware, data exfiltration etc, and also all the movies and tv shows.

Bring your own device is the only way. Bring your own network is often a necessity, so be prepared to tether your phone to your device for internet access.

You also probably want to look normal too. Swallow your pride and use a mac when you do this and no one will bat an eye. Break out the duct taped together thinkpad at your own risk.