Just some Internet guy

He/him/them 🏳️‍🌈

  • 2 Posts
  • 732 Comments
Joined 2 years ago
cake
Cake day: June 25th, 2023

help-circle
  • Keyboard shortcuts in general.

    • Alt + left right (previous/next page in browsers)

    • Windows + 1 (2, 3, …) on Windows and KDE focuses the window at that position in the taskbar

    • Alt + Tab to switch windows (hold shift to go backwards)

    • Windows + Tab to switch windows within the same application (like, all browser windows if you’re in a browser)

    • Alt + 1 (2, 3, …) on Windows/Linux usually selects the corresponding tab

    • Ctrl + Tab to cycle through tabs like Alt-Tab does for windows (hold shift to go backwards)

    • In most browsers or things with a URL/go to bar, Ctrl+L will focus that. No need to click the address bar, Ctrl+L, example.com, Enter.

    • In Discord and Slack, you can press Ctrl+K to open a box to quickly type a channel/DM name to go to it quickly

    • If you have them, the Home/End/PageUp/PageDown keys are actually pretty useful. Press Home instead of scrolling all the way back up.

    • F1 is usually help

    • F2 is usually rename

    • F3 is usually search


  • The main issue you’ll run into is nicher proprietary software being hard to install, but that’s what containers are for. The main one I see is if you need to install some proprietary VPN client it gets annoying, but since you’ll be running a VM anyway you can do some network trickery. My work’s antivirus only works on Ubuntu and RHEL, proprietary kernel modules so it’s got to be at least one of those kernels.

    Linux is Linux, nothing’s impossible to solve even with Bazzite’s immutability. Worst comes to worst you make your own images and it’s not that hard, you basically just fork it on GitHub and let the CI do its thing.

    But do you have time to fiddle to make it work and take the risk, or do you want to play it safe? How confident are you with Bazzite’s more advanced topics?




  • The guy gives a ton of “I don’t care about anyone’s use cases except mines” vibes too. Also called Gnome and KDE teletubbies DEs when I mentioned xcomposite being an important feature. Basically considering the widely known issues around multimonitor vsync and mismatched resolutions and all as basically not real issues with Xorg.

    XLibre is 100% a political fork because the guy claims Xorg is deprecated by a big tech conspiracy pushing inferior software onto users. There’s nothing wrong with wanting to continue Xorg’s legacy but come on we don’t have to pretend Xorg is this perfect thing that always works. Xorg has been hated for decades for a reason. This xkcd exists for a reason: https://xkcd.com/963/







  • It’s derived by both a key from the TEE and the PIN/password.

    The reason for that is so you need both the user’s correct password, and the TEE to agree to hand out the key, which it may refuse to do if there’s been too many attempts. When you factory reset it just generates a new key, instantly making all the previous data permanently inaccessible. The TEE will also wipe the key if you unlock the bootloader or try to break in the wrong way.

    It’s still only roadblocks though, extract the key from the TEE and you have unlimited attempts on what are usually weak 4-6 digit PINs. It’s not a lot of tries. Then you better hope you had a good password.


  • Biometrics are worst than a pin in a situation where your phone us hooked up to Cellebrite, because most likely they can just take your fingerprints, or make you press the sensor by force. Or even worse with facial recognition, because they can just wave the phone in front of you to unlock it.

    It’s generally not super good otherwise either, at least not as a reliable way to derive an encryption key while being tolerant enough to damaged skin and positioning and all.

    Biometrics are a good compromise for daily convenience: most people care about if they lose their phones or it gets stolen, and a thief will just factory reset it and flip it especially of the full qwerty keyboard pops up. Biometrics are still usually backed by a PIN or password, so biometrics makes it bearable to use a strong password since you only need to enter it once every couple days. And that password is the encryption key, so in BFU state you’re safe.



  • What do you want the UI for? For configuration it’s usually meh because it’s the kind of thing you configure by config file, often generated config files even. For stats it’s where it gets interesting, usually third-party options like Grafana is used along with something like Prometheus to collect the metrics.

    When it comes to easy configuration, newer options go for the zero configuration angle rather than a nice UI to configure it. Just need some Docker tags and Traefik automagically configures itself, so the UI is just for viewing information.



  • Few of them for most use cases, especially a VPS. My server have a couple of IPs each mapping to a different VM, they can all claim 22/80/443 as you’d expect, but that’s just basically the same as having a bunch of VPSes anyway.

    It’s useful for some other uses like, I might want to dedicate an IP for VPN exit that doesn’t expose any services.

    Another use is sometimes you just want two things to stay entirely separate, even if on a technical level it could work with a reverse proxy. It can eliminate some class of exploits like request smuggling.

    One use case I’ve had for a customer is they have a system that can only do TLSv1.0, which is wildly obsolete and exploitable. So that particular API endpoint was served from a secondary IP, that way I can continue to enforce TLSv1.2+ on the primary IP. It’s possible with some reverse proxy magic with HAproxy, but I could also just make a new server block in the existing NGINX bound to that IP and call it a day.


  • Í wonder if visualizing what you read slows people down.

    Not really, I can read very fast too and also visualize it at the same time, like full blown movie. I think it’s more indicative of information processing abilities in general: I can generally keep up watching lectures at 3x speed and notice things on screen almost instantly too.

    I’m super efficient at filtering information too: I’ll look at a paragraph in some documentation and immediately see “If you’re in X special case, then…” at the 5th sentence in the middle of the paragraph when skimming through documentation. Or of course skipping details I don’t care about.


  • I consider this one to be my public/serious account, so, eh why not, it adds a face, a personnality. And I think I look cute on it. Due to the origin of my nickname, it’s realllly not that hard to find out who I am. Facebook ruined the anonymity aspect a decade ago, so I just live with it. And it’s a little bit more recognizable than just the username. For anonymity I have alts.

    It has some downsides though, like people telling me I look like I got my dick chopped off. I’m cis, my dick is perfectly intact. Come on guys it’s just hair dye lol.