• 0 Posts
  • 198 Comments
Joined 2 years ago
cake
Cake day: July 29th, 2023

help-circle

  • I think he’s over blowing the 5 dollar wrench method.

    Unless you live in a place where human rights are disregarded like every possible moment, they’d probably only resort to torturing you to gain access if they believe you are somehow connected or have ancillary evidence that points to you. IE that darkweb dude they tortured in Turkey to gain access to his encrypted laptop containing incriminating evidence.

    Otherwise they’ll just do a preemptive raid hoping that it leads to new information.

    Like right now border patrol has been forcing foreigners to show data on their mobile devices to see if you have any roasted vance memes so they can turn you away. But in many cases, it has been done because they already had you flagged as posting or sharing roasted vance memes online.

    Of course you could also always be in a craphole country where they’ll torture you anyway, regardless if they have any reason to believe you are connected to something, but simply due to the fact that you opted to use FDE or any practical security scheme.



  • It takes a little more effort to setup, but the alternative to syncing a local keystore db like KeePassXC would be vaultwarden, which is a self hosted open source Bitwarden server that gives you all the features of Bitwarden and has full compatibility with all the clients.

    Spinning it up is actually very easy, you just have to decide if you want to integrate SSL via a reverse proxy setup or just use the builtin webserver for HTTPS.


  • They technically already did this with Android which all ship custom kernels and closed source driver blobs.

    Of which Google successfully lobbied the government to keep foreign competition out, which has lead to the soft death of AOSP as everyone else has forked into a new OS or accepts google’s terms to use their gapps suite.

    Best thing about Linus is that he immediately tells these megacorps to f off every time they make a PR with even a remotely questionable purpose.

    If they really want to achieve something technical without scrutiny, there’s FreeBSD right there. Implement it and make a future PR if it actually improves something.

    Otherwise, critical choices within the Linux kernel will affect everyone, and could very easily lead to abuse without any proper moderation.

    Google already has a hit order out on JPEGXL simply because they know that AVIF will save them on cloud storage cost, so they’ve effectively banned it from the browser space since they own Chrome and have enough leverage over Firefox.


  • This actually reminded me of an actual instance of this I discovered for a family member.

    Their 2.4Ghz devices would just randomly drop connections at seemingly random times, and changing the router didn’t fix anything.

    So I fired up bettercap to take a look, and lo and behold it was a GE “smart” oven that would spam advertise its SSID with beacon frames on an interval and would block traffic because all the other devices would see a busy channel.

    The funniest thing is said family member specifically decided against using the oven wifi feature because he already knew it was not going to be useful or even reliable, but he had no idea the wifi feature was left on which was causing all the packet drops.

    Upon further investigation, we realized he actually did turn it off, but because the tap button was basically at elbow height, it was super easy to accidentally bump and flick back on.

    Conclusion is that some GE ovens double as a crappy WiFi jammer lmao.









  • gg ez ease of use feature, which is hilarious because that’s exactly where smishing attacks come in. People are actually more willing to give out the OTP than their actual password, so it definitely less secure.

    I think this started out as a decently good idea, like sign in with a device type of feature (think QR code from an authenticated device), but then along the way someone just went “screw it” and changed it to an OTP.

    Even in 2025 password managers are rare, people still reuse the same 8 character password everywhere, and people fall for low effort scams. So someone thought “if they’re gonna be insecure anyway, lets just make it so they never have to use a password and sync it to their phone or email”.


  • TP-Link is excellent for cheap switching hardware which a ton of vendors overprice for the same quality. Its your OG made in China deal that works pretty well for the price.

    Otherwise, you should skip it as a router and instead opt for either a better AIO, or put in the 2 minutes of extra effort to get a cheap ethernet router and a separate AP because AIOs are still overrated in 2025 for the price per quality.

    Not to mention that 5 GHz channels are getting clogged these days even on the DFS channels which people shouldn’t be using all the time. I know its not possible for a lot of people, but you’re really better off on even bargain basement maximum cheapo Cat-5e cables.

    Gb WiFi speeds and MuMIMO not gonna matter when you have CSMA/CA throwing a metric ton of RTS and CTS packets causing increasing amounts of retries as you add stations.

    Probably worst scenario is if you’re living in an apartment surrounded by like 50 stations within range. No amount of 802.11 magic is gonna give you a stable connection.





  • Ubuntu and Docker.

    Really? Netplan alone disqualifies Ubuntu as a “friendly stable starter distro”, and I can guarantee you that your guide will somehow become outdated with a single new Ubuntu release, or some poor soul who accidentally selected an LTS release.

    Docker doesn’t matter as much, but there’s a reason beyond just FOSS licensing why podman exists.

    Would highly recommend Debian instead.

    I started on Ubuntu similar to this many years ago and both the server and desktop experience was not fun at all.