[-] monovergent@lemmy.ml 2 points 2 hours ago

In my opinion, the reward for rooting LineageOS is pretty limited for having to risk one of the more important aspects of the Android security model, since the base system is already decently clean. If you want to go the extra mile, you could try installing the LeOS GSI, which strips out the remaining pings to Google servers (see LineageOS column of the table).

Definitely double check if the build you use has anything weird configured, but modern LineageOS (and Android in general) should already have good encryption by default. Not sure if LineageOS already has a way to toggle per-app network access, but if not, take a look at RethinkDNS, does a fine job without root.

Not much you can do about the unlocked bootloader, but as long as you aren't being targeted by some agency, sticking to trusted sources like F-Droid for apps will go a long way. I have a similar approach with two phones and minimal personal data stored on each, so I'd personally approve of those elements.

Faraday cage might be of interest with regard to the iPhone since those can still function as their own AirTags even when powered off. But modern phones are surprisingly sensitive to signals so the slightest imperfection, especially in cheap Faraday bags, could give you away. While you're at it, make a threat model to see if Faraday cages are necessary for your needs.

[-] monovergent@lemmy.ml 1 points 13 hours ago* (last edited 13 hours ago)

Same, too many clocks, all getting out of sync, and some on power strips that get turned off periodically.

[-] monovergent@lemmy.ml 8 points 13 hours ago

I was thinking something on those lines the other day. We like to say that Linux revives old computers, and I wouldn't for a second consider putting Windows back on them, but I also have a case of hardware support so close, yet so far. I've two old laptops with nvidia chips from before the days of Optimus switiching, so you are forced to use the dGPU. Believe me, I wasted a whole weekend trying to make them use only integrated graphics. It was fine while they were supported under the proprietary nvidia driver, but as soon as support ended, nouveau became the only option and it absolutely crippled 3D performance, even on very old titles. Meanwhile, Windows still supports the old 340 driver needed for those graphics chips.

Mostly comes down to hardware vendors not bothering with Linux support and open-source in general. Which leaves support for affected devices down to volunteers having time to reverse-engineer a driver from scratch. To be clear, I don't blame nouveau at all. It must have been a ton of work to even get the nouveau driver to its current state.

[-] monovergent@lemmy.ml 1 points 1 day ago

Do you use a physical SIM? I'm fairly sure any carrier-unlocked phone will also work with your Tracfone service if you move the SIM over. You'll need to find a way unlock the bootloader before rooting, uninstalling system apps, or installing any custom ROM. That will be difficult with retail Tracfone phones since they are decently locked down.

If you're on a budget too small for a Google Pixel, I'd suggest looking at the LineageOS compatibility list and finding a carrier-unlocked unit you like. If for some reason you must use a phone you can buy from Walmart, take a look at Universal Android Debloater to disable some of the pre-installed bloat and the Rethink DNS firewall to block internet traffic to the stuff you can't remove.

[-] monovergent@lemmy.ml 2 points 1 day ago

I have heard those terms in the past, albeit not too often

[-] monovergent@lemmy.ml 73 points 1 day ago

Another common mozilla L

[-] monovergent@lemmy.ml 6 points 1 day ago

Back in the early 2010s, I bought a new PC with Windows 8 on it. Hated the way it looked and the way it worked. I wanted my Start menu and Aero and Classic themes back. Led me to learning about Linux. But uxTheme and Classic Shell kept me happy for a couple more years.

Then I got a laptop with Windows 10. Felt my heart rate spike as I went through the settings and found out how much more hostile to user choice and privacy Microsoft had become. When the semi-annual updates kept undoing all my hard work debloating Windows, I decided it was time to begin using Linux in earnest.

At first, I had a dual-boot setup and jumped around between Ubuntu, Deepin, Arch, etc. Found myself booting into the Windows partition less than once a month, at which point I moved it out onto its own drive. Distro-hopping went on for about a year, after which I decided that Debian met all of my needs. Continued DE-hopping for about another year until settling on XFCE with Chicago95. Brought me enough joy to make a standardized setup in a VM, which I have since cloned to all of my computers except for the Windows laptop I keep around for work.

[-] monovergent@lemmy.ml 2 points 2 days ago* (last edited 2 days ago)

Mixed bag. I'm lucky enough that most of my work can be done on a Linux machine. Workplace does require us to bring our own devices, but the policy is extremely lax, no need to install any monitoring software or the like. Which lets me have a Linux desktop chilling on my desk.

But I do have to keep a laptop with Windows around. We sometimes have to work with overcomplicated Office documents that break on alternatives like LibreOffice or the occasional piece of proprietary software that needs direct USB access, which Wine cannot yet provide.

[-] monovergent@lemmy.ml 1 points 2 days ago

New local. I'm only subscribed to a handful of communities.

[-] monovergent@lemmy.ml 3 points 3 days ago

It's definitely one of the ways I fidget when alone.

I don't know if it's related, but my problem is that sometimes I think my head is upright but it ends up being tilted a bit in photos.

[-] monovergent@lemmy.ml 27 points 4 days ago

A luxury car complete with touchscreens, back when a touchscreen was magical and revolutionary. Car maintenance and privacy concerns have taught me to love the very opposite, a 90s Chevy.

[-] monovergent@lemmy.ml 10 points 4 days ago* (last edited 4 days ago)

My uncle has worked many years in IT and sometimes lectures me on digital privacy and security. But I got a glimpse of his phones and computers, it was disappointing. Bogus security apps and optimizations and a refusal to update Windows. Probably different situation with OP's father, but quite emphasizes the importance of continuing education.

37
submitted 3 weeks ago by monovergent@lemmy.ml to c/privacy@lemmy.ml

Friends and I are considering some travelling around the world, including perhaps a trip to China. There is much negative press on the state of digital privacy in China, but what exactly should I pay attention to if I do visit? If I am your typical privacy enthusiast with a GrapheneOS phone and Linux laptop, how might I prepare for the trip privacy-wise? I'd also love to hear any firsthand experience as to which concerns are myths and which ones are real.

32
submitted 1 month ago* (last edited 1 month ago) by monovergent@lemmy.ml to c/linux@lemmy.ml

Got my hands on a Dell Latitude ON module. Turns out it's nothing more than a 2 GB flash module that fits in a mPCIe slot and is wired to the USB lanes. Shows up as /dev/sdb.

I do have a couple of old laptops that don't have a secondary SATA drive slot, but do have open mPCIe slots with USB lanes (no mSATA lanes). The Latitude ON module would allow for a dual drive system, albeit a rather crappy one. What would you put on a secondary internal drive if it were limited to 2 GB and USB protocol?

14
submitted 2 months ago by monovergent@lemmy.ml to c/privacy@lemmy.ml

For several years, I've entertained the idea of creating an online portfolio, but it's remained only an idea since I am not sure what I should put on it. What's a good way to decide what goes on the personally-identifiable portfolio and what should remain under pseudonyms?

21
submitted 2 months ago by monovergent@lemmy.ml to c/linux@lemmy.ml

In the interest of maximizing battery life, I've set up suspend-then-hibernate on my laptop. Using a discrete window manager, so I have a systemd unit that locks the screen when I close the lid. After an hour, it automatically goes into hibernation.

All is well, until I have to boot up from hibernation. I'm prompted to unlock LUKS, then I'm hit with a redundant lock screen once resumed. I've tried setting up systemd units referencing suspend-then-hibernate.target and hibernate.target, but I can't get it to kill the screen locker when resuming from hibernation only, so I don't have to type in my password twice. Is there any way to have systemd discriminate between the suspend and hibernate parts of suspend-then-hibernate?

26
submitted 2 months ago* (last edited 2 months ago) by monovergent@lemmy.ml to c/degoogle@lemmy.ml

Earlier post for context: https://lemmy.ml/post/35496495

TL;DR: Don't buy Huawei or Honor phones if you need bootloader unlocking capabilities. Even on units without a carrier lock. I couldn't unlock my Honor 90 Lite.

While the following comes from my experience attempting to unlock the bootloader on an Honor 90 Lite, it likely also applies to recent Huawei smartphones. Honor shares a great deal of its codebase with Huawei as it was a subsidiary spun off several years ago.

Unfortunately, a visible OEM unlocking toggle under the developer options does not guarantee bootloader unlocking in practice. It is up to the bootloader itself to accept unlocking commands, which manufacturers can patch out or severely restrict.

Prior to 2020, users could fill in a form on the Huawei/Honor website that provided the 16-character code required to unlock the bootloader. Instead of

fastboot flashing unlock

Huawei/Honor bootloaders require

fastboot oem unlock [16-CHAR CODE]

However, the form has since been discontinued, leaving us with

  • Exploits for certain models with Kirin and Qualcomm SOCs
  • Various paid and proprietary unlocking services
  • Brute-force tools for models without known exploits

Since my phone does not have a known exploit and I don't feel like handing over my money to unlocking services with characteristically shady-looking websites, I am left with the latter option.

Brute-force with Luhn algorithm

For some time, the unlock codes were 16-digit numerical strings which were related to the IMEI and satisfied the Luhn algorithm (the same algorithm used as a rudimentary checksum for credit card numbers). This greatly narrows down the number of codes to be tried, such that I exhausted the entire space of 16-digit codes satisfying the Luhn algorithm in 45 minutes using the following Python scripts.

https://github.com/vcka/huawei-honor-unlock-bootloader

The better-known of the two Python scripts, this works mostly as intended, but does not stop once the space of 16-digit codes are exhausted, instead continuing up into 17-digit codes and beyond. However, an unlock code longer than 16 digits has never been attested.

https://github.com/borisgrigorov/bootloader-brute-force

This script did not appear in my initial search and didn't work out of the box on account of expecting a specific error message and stopping execution otherwise. However, it proved a friendlier script than the former with a quick patch and stopped once all 16-digit codes valid under the Luhn algorithm were exhausted.

Huawei/Honor are also known to require 16-digit alphanumeric codes, paritcularly on later models. Adding just the uppercase alphabet would make for a 16-character base-36 code, effectively conveying the information in a 25-digit base-10 code. Searching through this space would take about 800 million times longer. By the time this finishes, I can only hope that humanity has moved on past locked bootloaders. So I ditched any effort of extending the scripts to include alphabetic characters.

Trying both scripts with both IMEIs yielded no working unlock codes, so onto our next options.

Brute-force without Luhn algorithm

But what if it's still a 16-digit code, but it just doesn't add up according to the Luhn algorithm? How much longer would that take? The following C programs claim to be the fastest brute-force unlockers, neither of which use the Luhn algorithm.

https://github.com/Martazza/Huawei-Bootloader-Unlocker

The simpler and more well-known of the two, this simply increments up from 1000000000000000, testing each code along the way. At a rate of 200 guesses per second, my computer and phone would have burned through a good chunk of the world's remaining coal reserves by the time this finishes, even without accounting for alphabetical characters. So this is a no-go.

https://github.com/B83C/huawei_bootloader_unlocker

This optimizes upon the code of the former, incorporating portions of the fastboot source code to suppress unnecessary output. However, it appears to get stuck after guessing only 8 codes. I'll guess why in a bit.

Previously reported successes and time required to unlock

There are reports of the scripts utilizing the Luhn algorithm working on Huawei and Honor devices from around 2018 and 2019. Those attempts required continuous brute-forcing anywhere from several hours to several days. So why was my computer, featuring an i7-9700 also from 2019, able to iterate through all codes accoring to the Luhn algorithm in only 45 minutes? I am not certain, but my theory is that my phone had been silently discarding attempted codes without ever taking the time to evaluate them. The program from B83C is the only one to check the USB connection status and 8 attempts may have been the cutoff for my phone. I didn't bother with further testing. And unless someone manages to guess several million codes per second, at which point USB I/O would become a bottleneck, Martazza's code is of little practical use.

If it had taken longer to search through possible codes, my phone would have died during the process as it did not take in enough charge to sustain itself in fastboot. Fortunately, fastboot is kind enough to wait until the phone is ready again after disconnecting, charging, and reconnecting.

Other things that didn't work

  • fastboot reboot fastboot: bootloader seems to double as fastboot for Huawei/Honor devices. fastboot with a white background and plain orange text doesn't seem to take any commands.
  • Recovery menu accessed by holding volume up during boot: OTG upgrade does not allow choosing a file. USB upgrade allows the phone to show up under adb devices, but there is no dialog to grant permission.
  • mtkclient: tried every button combination I could think of during power-up, but could not enter BROM mode
  • Honor Suite: Just a dumbed-down syncing tool that requires admin privileges on Windows, no option anywhere related to bootloader unlocking. Worse yet, it doesn't even detect the phone in fastboot mode, even though the phone suggests opening Honor Suite when in fastboot.

Addendum: for thoroughness, shorting the internal test point to ground and plugging in USB brings the phone into "META MODE", after which the screen stays black. The phone is unresponsive to all commands I could think of and requires a power cycle, after which the RTC resets to the default date and time.

  • and adb reboot edl and similar commands: simply does a normal reboot. fastboot edl seems to exist, but is prohibited from running.

Just to be clear: I could not unlock the bootloader of my Honor 90 Lite (CRT-NX1). Gotta love how we have to worry about things like Cellebrite cracking our precious data in a matter of hours while concerted efforts have done little against the accursed little bootloader.

46
submitted 2 months ago* (last edited 2 months ago) by monovergent@lemmy.ml to c/asklemmy@lemmy.ml

I'm fine immediately after showering, but it's a mini-snowstorm if I go through my hair in the morning having showered the night before. Been that way for years, but far better than it was back when I used "anti-dandruff" shampoos that just made it worse. Hair is short, doesn't feel oily or only slightly. Happens across a variety of shampoos I've tried, though I'll admit I haven't looked beyond the 3-in-1 body wash shampoo combos. Sorry if this is a bit unappealing. Anyone else have a sort of "baseline" amount of dandruff? Or found a solution to this?

UPDATE: Thanks everyone for the helpful replies! It was eye-opening to learn that it's not always just "dandruff". Turns out it was the 3-in-1 soap all along. I finally got myself a proper bottle of shampoo (sulfate free wasn't much more expensive so I went for that) and realized that tight feeling when my hair dried was dry scalp. Super satisfying now that I can run my hand through my hair and eyebrows without getting an avalanche in my face.

234
submitted 2 months ago by monovergent@lemmy.ml to c/privacy@lemmy.ml

Screenshot 1

Screenshot 2

Screenshot 3

25
submitted 2 months ago by monovergent@lemmy.ml to c/linux@lemmy.ml

When I moved to Coreboot, I also elected to encrypt my /boot partition, which is decrypted by the GRUB payload of Coreboot. I mostly worked on this by trial-and-error, which resulted in the workflow:

  1. GRUB unlocks /boot
  2. Keyfile in /boot opens /
  3. Partition for /boot is listed in /etc/crypttab, with another keyfile to unlock /boot again from within Linux
  4. /boot is mounted via /etc/fstab

Steps 3 and 4 always seemed inelegant to me, but after doing systemd-analyze, I realized how much those steps consume when booting (9 sec).

My questions:

  • After GRUB unlocks /boot and boots into Linux proper, is there any way to access /boot without unlocking again?
  • Are the keys discarded when initramfs hands off to the main Linux system?
  • If GRUB supports encrypted /boot, was there a 'correct' way to set it up?
  • Or am I left with mounting /boot manually for kernel updates if I want to avoid steps 3 and 4?
50
submitted 2 months ago* (last edited 2 months ago) by monovergent@lemmy.ml to c/asklemmy@lemmy.ml

My performance is passable and my motivation is mediocre at work. I swear it was my dream job at some point, but I can't help but feel like it's become a slog. It makes my family proud and pays the bills comfortably though.

It's only recently settled in me that laziness isn't the word for it. I've found that I'll work my ass off for something if I'm genuinely and deeply passionate about it. Like the hobbies that cut into my time for sleep.

This has lead me to frequently daydream about "following my passions" and becoming self-employed instead of sticking with the conventional, safe career I previously envisioned. Living a life that brings me more joy. I've fantasized about making and selling gadgets. Perhaps becoming a content creator to promote those gadgets. All the things that bring me joy, but I have little time to do alongside my current job.

But I only have so much saved up and I'm lacking connections with those who have more resources. And in this economy, I don't know when I'll have another chance at my current job if I end up realizing that it was better. Will monetizing my hobbies inevitably ruin them? The grass looks greener on the other side, but will I go back to thinking the same once I'm on the other side? Or have you or someone you know pursued a genuine passion, made it a career, and never looked back?

2
submitted 3 months ago by monovergent@lemmy.ml to c/asklemmy@lemmy.ml

I'll usually first notice it sometime in the afternoon, a stale, rubbery, maybe sour smell on my hands, especially the fingertips. Like a weak version of the smell that develops after wearing rubber gloves, even though I hadn't touched gloves all day. Quite annoying and makes me want to grit my teeth. Washes off with soap and water 9 times out of 10, but I'm also not bothered enough to do anything about it until I bundle it with a trip to the restrooms. I've never been able to trace down the source and it's been that way through school, work, and since at least 10 years ago in general. Anyone else experience this or know what might cause it?

1

Doesn't affect usability, but I am curious if other people see the timestamps (i.e. '6 hours ago') next to posts and comments in another language before the page fully loads in.

In my case, the timestamps show up in Chinese (or Japanese Kanji?) and are replaced with English once the page fully loads. Am using Librewolf, have CJK fonts installed, and system is set to English, if that is relevant.

22
submitted 3 months ago* (last edited 3 months ago) by monovergent@lemmy.ml to c/privacy@lemmy.ml

Considering the aforementioned options for my next phone, but I've heard mixed reports on their compatibility with carriers in the US. Has anyone here gotten either to work reliably in the US and how good is the signal if it's missing some cellular bands? I'm currently on a T-Mobile MVNO, but am open to switching to whichever carrier that might work best.

view more: next ›

monovergent

joined 2 years ago