[-] IratePirate@feddit.org 1 points 2 days ago* (last edited 2 days ago)

I rarely find myself defending banks, but here we go. ;) They will argue (as I do) that it is gross negligence on the side of the customer not to keep software updated. And if they can prove that you were using outdated software (which will be simple, based on the logs connected to your account): no, they need not cover any damages arising from you not keeping up to speed on security updates. That's part of your due diligence.

1

Like many self-hosters, I've looked upon the recent price hikes for storage in utter disbelief. Faced with paying double the price of what I paid only last year for new hard drives, I dug around my hardware stash and came across about a dozen of old 2.5" 320-500 GB drives which I had saved from the dumpster once, but never deployed. After all, they were too slow to be used as PC system drives and too small in storage size for any meaningful use in a server. Now seemed like a perfect time to look for a way to put them to good use after all. And I found it in mergerFS.

For anyone not familiar with it: in spite of its name, mergerFS is not a filesystem in the sense that in order to deploy it, you'll need to reformat any drives (although this wouldn't have been a problem for my use case). Instead, you can theoretically take a bunch of drives (JBOD) and string them together with no modification to their filesystem, keeping existing data intact. It is agnostic of the filesystems present on the drives, meaning you can even combine volumes formatted with, say, ext4, btrfs, and xfs. All drives will show up in your filesystem as a single volume, and - depending on the policies you configured - store some data on this and some data on that drive. Since data isn't striped, the drives will remain individually legible, i.e. there's no need to rebuild all of them after a drive fails.

Speaking of drive failure: while mergerFS itself does not come with RAID, you can add SnapRAID to the mix for parity-based RAID (although it's not real-time RAID; parity data must be written on schedule, so it's not for mission-critical data that is frequently being updated and rewritten).

Combined, these two technologies allow me to have my cake and eat it too:

  • I can put drives to use that would otherwise be rotting in a drawer.
  • I can avoid additional cost - both financial and ecological. (The energy bills won't increase by much, either, because most of the energy comes from solar cells on the roof.)
  • I can always flexibly tack on more drives, regardless of size.
  • I can have the added data security of a RAID, but at the price of very few (if any) of its drawbacks (e.g. no drives of equal size needed).

If this was news to you - maybe you want to give it a shot too. (I don't consider myself a very advanced user and I found it dead simple to deploy.)
If you're already running mergerFS and SnapRAID, feel free to showcase your use case and setup!
If you found any of the above incorrect or misleading, feel free to correct me.

[-] IratePirate@feddit.org 2 points 3 days ago* (last edited 3 days ago)

True, app installations don't happen very often for me either, but I don't see the harm in keeping Aurora around for it.

Regarding critically typically apps do warn you when it's the case, including financial apps. Usually if it's truly critical they'll stop working until you do update.

Typically these notifications are there to let you know that your app is terribly outdated and about to run into a breaking change (incompatibility between app and web-backend), not for security issues. I think it's very ill-advised to wait for something like that to happen, but you do you.

[-] IratePirate@feddit.org 2 points 3 days ago

More installations through Aurora and, more critically, updates. Depending on what app we're talking about, this may be critical, particularly for financial apps.

[-] IratePirate@feddit.org 6 points 3 days ago

Aurora : ... the[n] uninstall it.

Why though?

151
submitted 1 week ago* (last edited 5 days ago) by IratePirate@feddit.org to c/degoogle@lemmy.ml

I just had an encounter of the turd kind with a banking app that I want to share.

I'm in the process of migrating to a new degoogled phone (GrapheneOS) and upon installing the app in question via Aurora Store, it gave me an error message, saying it had not been installed from a "trustworthy" source. It would, therefore, refuse to start and tell me to install it from the Play Store. (For anyone curious: it's the Consorsbank app, and the issue is well-known at this point.)

In spite of being on GOS, I was faced with the prospect of

  • installing Play Services Framework (sandboxed or not, I don't want that shit)
  • installing the Play Store (sandboxed or not, I don't want that shit)
  • logging in to the Play Store (I definitely don't want that shit!)

only to run a damn app.

I eventually used USB-debugging and ADB to trick the app into thinking it had been installed from the Play Store. LINK to the ADB command, translated into English

//Edit: I have just installed the first update through Aurora - unsure whether I'd have to go through the whole procedure again. I did not. Apparently, the "installed from" property is untouched by and persistent throughout updates, meaning: spoofing the installation source once is enough.

So even though everything is running fine now, this doesn't feel like a victory. For the first time in a long while, I feel I have come head to head with a piece of tech that was not just maladapted for my janky way of running things and just needed some tinkering. This was outright malicious, refusing operation and trying to force me to use services I want nothing to do with. It only gave me the option to either give in or walk away and stop using their services. Now, I don't mind doing that for non-essential things. I don't have big tech-owned messengers, I don't have social media (save Lemmy) and all the other stuff people these days feel they cannot live without.

Banking, however, is a different kind of beast. Banking is essential. Second factor authentication is usually done via apps these days. And if this kind of thing becomes normal for banking apps, and Google keeps locking down Android so hacks like the above won't be accessible any more, things are looking grim.

Tonight has left me with more questions than answers. Is Android still the 'right' ecosystem? What are the alternatives if this thing becomes more wide-spread? How do we combat this? Put pressure on banks to keep technologies open? Revert to physical second factor generators, until those become phased out by banks as well?

[-] IratePirate@feddit.org 27 points 2 weeks ago

Meta: "That's the point!"

[-] IratePirate@feddit.org 33 points 3 weeks ago

To be fair, I don't trust European companies with it either. As the saying goes: "Where there's a trough, there will be pigs." Want to keep your data safe? Keep it.

[-] IratePirate@feddit.org 50 points 3 weeks ago

“We’ve been trying to resolve this for over a month, and getting nowhere. Support is non-existent,” Windscribe said in its post. “Anyone know a human with a brain that still works at Microsoft and can help?”

Microslop. The word is Microslop, for reasons you have just experienced first-hand.

32
submitted 3 weeks ago* (last edited 3 weeks ago) by IratePirate@feddit.org to c/degoogle@lemmy.ml

I've been using a degoogled customROM on a Pixel phone for years now. As a camera app I've been using firewalled Gcam, i.e. the official Google camera app, but forced to be offline.

Since the phone and the custom ROM have reached end of life, I need to switch to a new phone, and I'm considering a FairPhone.

Hence, I'd like to ask all users of degoogled FairPhones: which camera app do you use, and how well does it work as compared to stock?

[-] IratePirate@feddit.org 22 points 1 month ago* (last edited 1 month ago)

Google isn’t just making agents more efficient, there’s a bigger vision to build a system where websites are disassembled into its component parts, and reassembled by AI systems (Google and others) to best serve each individual user.

How long until this does not only "reassemble" pages, but also changes their content? Prescription medicine dosage got skewed because the agent hallucinated (5mg, 50mg, 500mg - doesn't matter, right?). Information on vaccines shifted to full-on anti-vaxx conspiracy bullshit because it was "what the user was actually looking for" and "research shows it improves user experience". References to the Epstein files got redacted by AI because it was trained to ~~censor results~~ provide politically neutral information.

[-] IratePirate@feddit.org 47 points 1 month ago* (last edited 1 month ago)

Rapist mentality all the way. How fitting they're all either owners of or owned by to the rapist in the White House.

[-] IratePirate@feddit.org 28 points 1 month ago

Not true. If you happen to be a pedophile billionaire, the U.S. is a safe haven for people like you.

[-] IratePirate@feddit.org 40 points 2 months ago* (last edited 2 months ago)

"Apple News underrepresents made-up "news", according to - checks notes - this study we've made up."

[-] IratePirate@feddit.org 25 points 2 months ago* (last edited 2 months ago)

You're not wrong. But as you said yourself, this only applies to your own hardware. Some of us do engage in this weird thing called "going outside", with some taking it as far as not only going there to touch grass, but also meet other people (gross, I know).

In these situations, even I, an individual who has

  • a private e-mail that is exactly that: private (through aliases and strict protocols as to who gets the root address)
  • a physical mailbox mostly clean of ads because advertisers either do not get my address in the first place, or they get a friendly letter telling them where to shove their catalogues
  • adblocker plugins in every browser
  • hosts-based blocking on top of that and
  • a network-wide DNS-based adblocker just for good measure,

even I, builder, king and prisoner of this privacy fortress, am exposed to ads when I occasionally leave it.

I see ads when my kid asks me to read out to him the contents of that colourful banner above the parking lot.

I see ads when I watch cable TV with my parents and they just let the ad break wash over them like a jovial stream of diarrhea.

I see ads when I go shopping and I cannot focus on my own thoughts because only a few metres away there's an ad screen loudly announcing the technological marvels of Buddy's Fully-automatic Butt Crack Scratcher to the world.

In these situations, I really feel the contents of that OP. I feel the brazen attempt to steal my attention when all I want is to be present. I feel the insult to my intelligence because some twat in marketing decided I'm unable to or unworthy of making my own decisions. And I feel the need to quell this frivolous invasion of my time and headspace.

And that's why, in these situations, I take the liberty to turn off the shop's TV while I'm there. I take my parent's remote, mute the ad diarrhea and strike up a conversation. And I promise the kiddo to read him something proper once we get home, but not one of those stupid ads.

(We recently pulled up in front of another giant ad banner, and the little guy went: "Dad, that's just another one of those stupid ads, right?" Imagine how proud dad was, seeing that another system-wide adblocker had been installed...)

Thanks for coming to my TED talk!

view more: next ›

IratePirate

joined 3 months ago