[-] moonpiedumplings@programming.dev 5 points 4 months ago

Here's my main argument for more private services (I try to make all my arguments short).

According to a study done by proton, a single company makes a minimum of $200 dollars off of each person, each year. Of course, they probably gain more money via clandestine deals or the government buying data directly to get around the 4th amendment.

But that money, doesn't go solely to the companies dedicated to collecting data, or those parts of other companies. It goes to lobbying the government to strip away privacy further.

And then I have two endings, depending on the situation:

  1. Of course, I recognize that in today's connected world, I can't get privacy unless I go live in the woods. But I can decrease the amount of money companies make off my data, which I do like.

  2. Organizations like the EFF, lobby on the other side, for more privacy for us. But they are opposed by when massive companies like google also lobby. So when I deny google $100, that's money they can't use to lobby anymore. Rather than thinking of it as denying google money, think of it as making a donation to the EFF, that they use to ensure our rights are in place.

[-] moonpiedumplings@programming.dev 5 points 5 months ago* (last edited 5 months ago)

Firstly, this blog is mostly SEO spam and is probably one of the worst written articles I've ever seen. The article itself is more keywords than content. Even the headline is garbage, persisting after reboots is a normal feature of almost all most malware types, including rootkits. In fact, I'd say a lot of cybersecurity blogs are like this, hyping up mundane malware that presents no special threat for the clicks.

But I'll break this down anyways.

The first bit about the dynamic linker, means doing things like restricting the files an app has access to, in order to prevent manipulation of how code libraries and modules are loaded, in order to prevent the injection of a malicious library. This can be done within the system, and often is by default, like how sudo refuses to load libraries it doesn't like.

The second bit is literally just recommending you require a password to do admin things. Of course, there's a lot more nuance to it. Access controls, controlling what user on a system has access to what can become a lot more fine grained, but for the kinds of malware that these articles report on, an admin password will stop them.

[-] moonpiedumplings@programming.dev 5 points 6 months ago

https://linuxsurvival.com/

This is a linux terminal tutorial, but in the style of a text based rpg.

[-] moonpiedumplings@programming.dev 5 points 7 months ago* (last edited 7 months ago)

You're probably going to end up on Jitsi meet, but I'm also going to drop a recommendation for bigbluebutton.

I recently noticed that it was integrated into the open source Learning-Management-System Canvas, which every school I have gone to so far uses.

Although bigbluebutton doesn't seem to explicitly support e2ee (but maybe this counts for something), if you are already using Canvas, BigBlueButton definitely worth looking at.

I really, really wish people at my school would use the integrated bigbluebutton instead of using zoom, especially given I've seen people occasionally have issues with authentication for zoom, but all of that stuff is handled with bigbluebutton because it's fully browser based and integrated into Canvas.

[-] moonpiedumplings@programming.dev 5 points 7 months ago* (last edited 7 months ago)

Maybe not some obscure ones, but here are some lesser known ones:

Talos Linux. It's an immutable operating system designed specifically to deploy kubernetes.

OpenSuse Harvester Think Proxmox, but instead of VM's and LXC containers, it's VM's and Kubernetes.

XCP-NG is a RHEL based distro designed for managing Linux virtual machines using the xen hypervisor, as opposed to KVM. Think Proxmox, but RHEL and Xen (also no LXC). However, it does not come with a web ui out of the box, you have to deploy it yourself. Technically, XCP is a Xen distribution, since Xen is a kernel with nothing but a hypervisor that runs under the main distro, but the primary management virtual machine is RHEL based, and uses Linux.

Speaking of Proxmox, Proxmox is technically a Linux distro.

SnowflakeOS is a project that aims to bring a GUI focused experience to NixOS.

TurnkeyLinux (site is loading very, very slowly for me right now) is not a single distribution, but rather a set of debian based distributions that are designed to be turnkey appliance virtual machines that contain and host a specific app. To deploy the app, all you have to do is set up the virtual machine.

Now, here are some not-linux, but interesting distros:

SmartOS. They ported KVM to unix, and also can use Linux syscall translation (similar to wine) to run apps in containers as well. There is also Bhyve. It's a very interesting hypervisor platform.

OmniOS is similar. Bhyve, KVM, and Linux syscall translation in containers.

[-] moonpiedumplings@programming.dev 5 points 7 months ago

Debian with the docker convenience script.

They seem to be moving away from this, and it's not longer the first option on their install page

On their debian page

Use a convenience script. Only recommended for testing and development environments

Also, it should be noted about the first option they recommend, Docker Desktop, that Docker Desktop is proprietary.

I recommend just getting the docker.io and docker-compose from debian's repositories.

[-] moonpiedumplings@programming.dev 5 points 8 months ago* (last edited 8 months ago)

I don't really get how this question pertains to F-droid specifically.

But, in networks that are more locked down, they can use stuff like deep packet inspection to figure out what traffic is happening, and automatically block it. Socks is a protocol explicitly for proxying, and runs over TCP. Depending on the setup, deep packet inspection can catch it.

On the other hand, disguising traffic as HTTP/HTTPS makes it very, very hard to detect that someone is doing something other than visiting an innocuous website.

At the high school I went to, they had Deep Packet Inspection set up to such a level that they could automatically detect and block VPN connections. Wireguard and OpenVPN would be caught basically instantly, and then you would be kicked off of the internet for 10 minutes. Although very extreme, a "10 minutes no internet" punishment is nothing in comparison to prison time or any number of extreme punishments authoritarian countries can come up with.

To get around the school firewall, I set up a web proxy called Metallic: https://github.com/cognetwork-dev/Metallic/ . This is basically a website, that lets me access other websites from within that website, and it's very, very difficult to block because of that nature.

[-] moonpiedumplings@programming.dev 5 points 11 months ago* (last edited 11 months ago)

I attempted to find evidence to support this.

I found one reddit post claiming this, but they themselves did not provide any evidence.

freedom of religion is a human right bruh i did not say anything but i believe in god the banned me and claimed i was being homophobic 1. i said nothing about it 2. stfu even if i was

​Not exactly the most compelling piece of evidence, and this was all I could find.

[-] moonpiedumplings@programming.dev 5 points 1 year ago* (last edited 1 year ago)

I use this too, and it should be noted that this does not require wireguard or any VPN solution. Rathole can be served publicly, allowing a machine behind a NAT or firewall to connect.

[-] moonpiedumplings@programming.dev 5 points 1 year ago* (last edited 1 year ago)

By a twitch streamer vtuber: https://github.com/cyberkaida/reverse-engineering-assistant

An AI assistant that hooks into Ghidra, explaining what things do.

https://the-guild.dev/blog/judging-open-source-by-github-stars

On phone rn, but I'd love to see someone run the fake star checking project at projects like this.

If you have multiple firefox profiles, then you have to create an sync account for each one if you want to sync. Not a good idea if you have 5 profiles, some of them using a main email (like a corp or school) that won't be around forever.

Being able to sync multiple profiles with only one account is convenient for me.

view more: ‹ prev next ›

moonpiedumplings

joined 2 years ago