[-] fl42v@lemmy.ml 1 points 15 hours ago
[-] fl42v@lemmy.ml 0 points 1 day ago

In my case it was soundcore's app (no, openscq30 didn't work), so it had a need for network access to update the firmware, for example, I just didn't want to give it at the moment. As for being poorly made, also not exactly: as I've mentioned, android gives this permission by default, and it's reasonable to assume it stays so. Graphene basically "breaks userspace" here.

[-] fl42v@lemmy.ml 5 points 1 day ago

I remember some particular apps not liking that one. Basically it exposes the permission that's otherwise always granted, and if the developers didn't make a catch all for network errors, the app crashes. Mobile data usage → allow network access favors better in that regard.

[-] fl42v@lemmy.ml 4 points 1 day ago* (last edited 1 day ago)

As always, the answer is "depends". It shouldn't hurt unless you're dual-booting windows (they used it last year as a weapon in their "mess up grub" game), but, Imo, it's worth the trouble if:

  • your data is also encrypted -- otherwise one just removes the HDD/SSD and reads what they need;
  • you provision your own keys -- to not depend on Microsoft signing shims for you;
  • you delete the already provisioned keys -- Microsoft signed a few vulnerable things, like one kaspersky's (iirc) live CD with grub not locked down, so one can boot up literally anything anyway;
  • you lock down grub or whatever bootloader you're using -- otherwise you become that vulnerable live cd;
  • you password lock the uefi -- otherwise one can simply disable the secureboot;
  • your vendor's implementation isn't terribly buggy -- iirc, some MSI laptops would just ignore all the discrepancies.

So, a lot of ifs, and a necessity to store the uefi password somewhere safe, as those may be a pita to reset.

As for standalone stuff -- idk, it might protect you from malware injecting itself into the bootloader or something, but given there's likely no chain of trust (I.e. the bootloader doesn't check what it bootloads), it can move in on some later step.

[-] fl42v@lemmy.ml 1 points 3 days ago

This, but backtrack 5 (the one just before kali). On a laptop that'd take several eternities to brutforce an md5 🤣

[-] fl42v@lemmy.ml 7 points 5 days ago

Reminded me one of the vids of f4mi, although that ladiy's approach is far more beautiful. Basically, she took advantage of ai scrapers relying on subtitles and YouTube allowing for pretty advanced styling of those very subtitles to insert garbage that only bots will see.

To those interested in the details, https://www.youtube.com/watch?v=NEDFUjqA1s8 (selecting a working invidious instance is left as an exercise for the reader)

[-] fl42v@lemmy.ml 8 points 6 days ago

Quite simple, actually. If you want to do a thing that violates a law, you modify the law to allow the thing.

439
submitted 4 months ago by fl42v@lemmy.ml to c/linuxmemes@lemmy.world
78
submitted 4 months ago* (last edited 4 months ago) by fl42v@lemmy.ml to c/linuxmemes@lemmy.world

Well, technically anywhere from 5 to 40, but I still have a nice chance to grow old before libreboot starts building. Also, still slower than dial-up.

76
submitted 6 months ago* (last edited 6 months ago) by fl42v@lemmy.ml to c/technology@lemmy.world

While the whole exchange must've sucked for them, I've found their reaction extremely amusing at times, especially the carpet banning for life of everyone within a country/state to the offending party. But hey, that'll definitely show AMD how to hire those coreboot developers

[-] fl42v@lemmy.ml 358 points 10 months ago

All clothes are no-iron clothes if you DGAF enough :)

34
submitted 10 months ago by fl42v@lemmy.ml to c/asklemmy@lemmy.ml

Out of curiosity, I've been watching a few restorations of those spectrums, and I've noticed the keyboards having a rather peculiar construction, judging by today's standards. They have 2 springs, the small one, as far as I understand, presses the membrane layers together, and the larger one returns the key into neutral position once the key is released.

I personally haven't used any spectrums, yet I've encountered the very same construction on a keyboard of a Russian clone of said machines (namely, zx atas), and to this day I haven't touched anything worse... The only way I can describe it is like trying to type on a piece of raw meat.

So, if anyone here had a chance to type on the original spectrums, was it this bad? I suspect otherwise since I haven't heard of crowds of people requesting PTSD treatment, but the whole thing still somewhat bothers me 😅

44
submitted 11 months ago by fl42v@lemmy.ml to c/android@lemmy.world

Just thought I'd share. Probably nothing new or fancy, but may help some of you find a way to repurpose devices that aren't worth repairing into home servers or something: e.g. op5 I've used has better CPU compared to raspberry pi 4, can run linux (postmarketos, albeit with some caveats), and costs less if bought with broken display (or nothing if you have one lying around)

153
submitted 11 months ago by fl42v@lemmy.ml to c/opensource@lemmy.ml
24

Decided to share an older "project" of mine - ms sculpt wireless to wired conversion (also, it runs qmk, so we get all its features). A sensible person would order a custom pcb (such projects exist on the web, take a look if you're interested), but I went with removing all the components except from the ribbon cable connector, sending the PCB smooth, gluing a piece of discount card to isolate the traces, gluing a Chinese rp2040 on top, and wiring all the necessary traces to it. No, it wasn't fun. Yes, it works.

Bonus: when I disassembled it now I found out the type-c wasn't soldered well and decided to separate from the board:

ResizedImage_2024-04-08_18-20-32_2

So, here we go: using phone as a poor man's microscope (note: also, still works)

ResizedImage_2024-04-08_18-20-32_1

The end result kinda doesn't give it out, so whatever (insert your frontend -- backend jokes here)

ResizedImage_2024-04-08_18-36-32_1

75
submitted 1 year ago* (last edited 1 year ago) by fl42v@lemmy.ml to c/lemmyshitpost@lemmy.world
[-] fl42v@lemmy.ml 117 points 1 year ago

Incorrect: the backdoored version was originally discovered by a Debian sid user on their system, and it presumably worked. On arch it's questionable since they don't link sshd with liblzma (although some say some kind of a cross-contamination may be possible via a patch used to support some systemd thingy, and systemd uses liblzma). Also, probably the rolling opensuse, and mb Ubuntu. Also nixos-unstalbe, but it doesn't pass the argv[0] requirements and also doesn't link liblzma. Also, fedora.

Btw, https://security.archlinux.org/ASA-202403-1

123
submitted 1 year ago by fl42v@lemmy.ml to c/linuxmemes@lemmy.world
655
540
127
If it works... (lemmy.ml)
[-] fl42v@lemmy.ml 127 points 1 year ago

This is good, but I prefer this

[-] fl42v@lemmy.ml 138 points 1 year ago

Should've installed linux 🤷

[-] fl42v@lemmy.ml 151 points 1 year ago

Yeah, those mailing lists used to have some quite funny stuff; my favorite so far is smth along the lines of "whoever thought this was a good idea should be retroactively aborted".

But, on the other hand, damn it's toxic. Should've really sucked to work on the kernel back then.

view more: next ›

fl42v

joined 2 years ago