vvv

@vvv@programming.dev
2 Post – 96 Comments
Joined 1 years ago

Macy's now has a Toys Я Us branded toy department.

I don't know. I'm typing this in a razr 40 ultra with a shattered outer screen. on one hand, it sucks that it's shattered. on the other hand, I'm happy it has a second screen as a point of redundancy?

it's awful and I hate it. I generally prefer not to have a shared identity across communities, and there's no way to create a usable discord identity without a phone number.

17 more...

just to add a little more explanation to what the other posters are suggesting.... a hard drive, from the perspective of your OS is very very simple. it's a series of bytes. for the sake of this example, let's say there are 1000 of them. they are just a series of numbers.

how do you tell apart which numbers belong to which partitions? well there's a convention: you decide that the first 10 of those numbers can be a label to indicate where partions start. e.g. your efi starts at #11 and ends at #61. root at starts at #61 and ends at #800. the label doesn't say anything about the bytes after that.

how do you know which bytes in the partions make up files? similar sort of game with a file system within the bounds of that partion - you use some of the data as a label to find the file data. maybe bytes 71-78 indicate that you can find ~/.bash_histor at bytes 732-790.

what happened when you shrunk that root partions, is you changed that label at the beginning. your root partion, it says, now starts at byte #61 and goes to #300. any bytes after that, are fair game for a new partion and filesystem to overwrite.

the point of all this, is that so far all you've done is changed some labels. the bytes that make up your files are still on the disk, but perhaps not findable. however - because every process that writes to the disk will trust those labels, any operation you do to the disk, including mounting it has a chance to overwrite the data that makes up your files.

this means:

  • most of your files are probably recoverable
  • do not boot the operating system on that drive, or any other that will attempt to mount it, because you risk overwring data
  • before you start using any data recovery tools, make a copy of the raw bytes of the disk to a different disk, so that if the tools mess up you have an option to try again

ONLY after that is done, the first thing I'd try is setting that partion label back to what it used to say, 100gb.. if you're lucky, everything will just work. if you aren't, tools like 'photorec' can crawl the raw bytes of the disk and try and output whatever files they find.

good luck!

1 more...

grep -r exists and is even more faster and doesn't require passing around file names.

grep -r --include='*.txt' 'somename' .

(obligatory I'm not a network surgeon this is likely not perfectly correct)

The article mentions network interfaces, DHCP and gateways so real quick: a network interface usually represents a physical connection to a network, like an Ethernet port or a WiFi card. DHCP is a protocol that auto configured network routes and addresses once a physical connection is established, like when you jack in via an ethernet cable, it tells you the IP address you should go by, the range of IP address on the network you've connected to, where you can resolve domain names to IP addresses. It also tells you the address of a default gateway to route traffic to, if you're trying to reach something outside of this network.

You can have more than one set of this configuration. Your wired network might tell you that your an address is 10.0.0.34, anything that starts with 10.0.0. is local, and to talk to 10.0.0.254 if you're trying to get to anything else. If at the same time you also connect to a wireless network, that might tell you that your address is 192.168.0.69, 192.168.0.* is your local network, and 192.168.0.254 is your gateway out. Now your computer wants to talk to 4.2.2.2. Should it use the wireless interface and go via 192.168.0.254? or the wired one and use 10.0.0.254? Your os has a routing table that includes both of those routes, and based on the precedence of the entries in it, it'll pick one.

VPN software usually works by creating a network interface on your computer, similar to an interface to a WiFi card, but virtual. It then asks the OS to route all network traffic, through the new interface it created. Except of course traffic from the VPN software, because that still needs to get out to the VPN provider (let's say, at 1.3.3.7) via real Internet.

So if you're following along at home, your routing table at this point might look like this:

  • traffic to 1.3.3.7 should go to 10.0.0.254 via the wired interface
  • all traffic should go to the VPN interface
  • traffic to 10.0.0.* should go to the wired interface
  • all traffic should go to 10.0.0.254 via the wired interface
  • traffic to 192.168.0.* should go to the wireless interface
  • all traffic should go to 192.168.0.254 via the wireless interface

whenever your os wants to send network packets, it'll go down this list of rules until one applies. With that VPN turned on, most of the time, only those two first rules will ever apply.

If I'm reading the article correctly, what this attack does, is run a DHCP server, that when handing out routing rules, will send one with a flag that causes, for example, the last two rules to be placed at the top of the list instead of the bottom. Your VPN will still be on, the configuration it's requested the OS to make would still be in place, and yet all your traffic will be routed out to this insecure wireless network that's somehow set itself as the priority route over anything else.

3 more...

something to consider here... Firefox lazy-loads out of focus tabs when you start it, so if you're a tab hoarder, it's nice for just the one active tab per window to load when you start the browser.

I'm not sure that you can get it to do the same with "out of focus" windows. or maybe I have a tab hoarding problem.

2 more...

Another way of writing '10'

... but there is a way, and it has been proven.

One of the more memorable physics classes I've had went into the history of discoveries that led to our understanding of relativity. The relevant story here, starts with how sound travels though air.

Let's say you're standing at the bottom of a building shouting to your friend peeking out a window on the 5th floor. On a calm day, that friend will hear you at pretty much the same time as someone standing the same distance away, but on the street. However, if it's windy, the wind pushes around the air through which the sound of your voice is traveling, the friend up in the window will have a slight delay in receiving that sound. This can of course be verified with more scientific rigor, like a sound sent in two perpendicular directions activating a light.

Scientist at the time thought that light, like sound, must travel though some medium, and they called this theoretical medium the Aether. Since this medium is not locked to Earth, they figured they must be capable of detecting movement of this medium, an Aether wind, if you will. If somehow the movement of this medium caused the speed of light in one direction to be faster than another due to the movement of this medium, measuring the speed in two directions perpendicular to each other would reveal that difference. After a series of experiments of increasing distances and measurement sensitivities (think mirrors on mountain tops to measure the time for a laser beam to reflect), no change in the speed of light based on direction was found.

Please enjoy this wikipedia hole: https://en.m.wikipedia.org/wiki/Michelson%E2%80%93Morley_experiment , and please consider a bit of caution before you refer to things as facts in the future!

1 more...

Be careful, if you get a .pizza, you are only legally allowed to spend the donations on pizza.

The value proposition of old or used android phones as SBCs is insane! You've probably got some in your drawers, or can at worst buy some carrier locked ones for 30$. You get a device with better compute than a raspberry pi, with a screen, cameras, speakers, flashlight and battery attached!

Personally, I use them to run and monitor my 3d printers.

4 more...

just to give you the term to search for, these types of applications are called snippet managers. for example, https://snibox.github.io/

there's a ton of them around. I don't have a particular one that I recommend, since it's not something I use in my workflow.

like this?

firefox sync has worked pretty great for me, across all devices. I don't self host it, but seems like once again, they've gotten it to the point where you can.

5 more...

I use Firefox on all my devices and couldn't be happier with it. I especially love how sync works: there's options to both pull tabs from other devices, and push to them. Quite frequently I'd be just browsing on my phone and send a tab over to my laptop to deal with/read/act on when I'm sitting down at a bigger screen.

Further, in terms of safety, having a large display built into your dash showing you navigation is much better than a small device you jerryrig onto a vent or something. It's easier to see via your peripheral vision, and won't put you in a situation where you need to go find it off of the floor when it falls off.

4 more...

Geocaching is free and usually lots of fun in cities. It's like a big database of dead drops - people hide small containers with pieces of paper to sign, and post their GPS coordinates online. Frequently they're hidden near points if interest, as well so you might find some cool shops or bars as a side effect.

I'll take it over QuickTime

Everything else wrong with Gmail and Google aside, those are the least reasonable complaints? You can use labels as folders. You can also disable conversation grouping, but I doubt you go more than a week before turning it back on.

2 more...

I have a stupid little script for this:

#!/bin/sh

setres() {
  output=$1
  width=$2
  height=$3

  xrandr --output $output --brightness 0 --auto
  xrandr --delmode $output better
  xrandr --rmmode better

  xrandr --newmode better $(cvt $width $height | tail -n1 | cut -d'"' -f3)
  xrandr --addmode $output better
  xrandr --output $output --brightness 1 --mode better 
}

setres "$@"

3 more...

That's the other one. The Rabbit thing is $200, which, not that I would buy one, is not too unreasonable for an AI tamagotchi

I've been very happy with roku tvs at home and a roku stick "to-go". Very simple interface with minimal ads that you can block.

I don't get it, who in their right mind hosts development stuff on a Windows clunker?

Same question, but Subversion. Switch to git. Import your repos with git-svn.

1 more...

I personally disabled the feature on my phone when it popped up as available. I don't have much of an interest in contributing to a weird surveillance network.

2 more...

Likely relevant John Oliver about these types of scams: https://youtu.be/pLPpl2ISKTg?si=WYsqiiQ4f3U6ZoIe

yep. they're still here. they got smaller, and we call them "tracking pixels" now.

it's just an image, which, server side, you can count the number of times it got loaded. easy to embed and no js required.

2 more...

Very important distinction. When the apple vr battery dies, or the software fails, you're suddenly blind.

3 more...

It might be an attention thing. With an emoji in a post your eyes are drawn towards the cute colorful picture before you l've read the content of the post. Emoticons on the other hand don't stand out as much, but serve a similar purpose: punctuate a thought with an emotion (=

dd if=image.img of=/dev/disk/flashdrive is usually all you need

3 more...

I can see it happening if it becomes an "appliance", similar market to what the home assistant green doodad is going for. "put this shiny blue cube full of hard drives into your kitchen, and join the identiverse! it also comes in purple!"

The password to my password manager: a few randomly chosen words that will definitely just sound like nonsense dementia-talk probably.

For bonus points, you can use fdroidcl to reinstall your fdroid apps from a list when you reset your phone!

Mandatory pull requests + approvals within a team are a waste of everyone's time.

21 more...

Your two factors shift to possession of your password vault + knowledge of the password to it. You're okay IMO.

You also still get the anti-replay benefits of the OTPs, though that might be a bit moot with TLS everywhere.

Not a security scientist, but in my interpretation, it's the "categories" of the factors that matter. Ideally, you use some two of three of:

  • something (only) you know - generally represented by passwords
  • something (only) you have - most commonly represented by some device. you prove that you have the device by providing a token only that device can generate.
  • something (only) you are - generally represented by biometrics

the goal then is maintaining the "only"s.

if you tell someone your password, or they see you type it in, or they beat it out of you with a wrench, it's no longer something "only" you know, and it is compromised.

if you use the same password on two websites, and one website is compromised, the password is compromised.

OTPs from a key fob or yubikey or something are similarly compromised if the device that provides them is left out in public/lost/stolen/beaten out of you with a wrench.

biometrics are again, are compromised if it's not "only" you with access to them - someone scans you face while you're asleep, or smashes your finger off with their wrench.

having multiple factors in the same category, like having two passwords, or two otp tokens, or two finger prints, doesn't significantly improve security. if you give up one thing you remember, it's likely you'll give up more. if one fob from your keychain is stolen, the second fob on that keychain is of no additional help.

you can start shifting what categories these things represent though.

if you write down your password in a notebook or a spreadsheet, they become thing you have.

OTPs can become something you know if you remember the secret used to generate them.

knowing many different things is hard, so you can put them in a password vault. the password vault is then something you have, which can be protected by something you know. so although your OTPs and passwords are in one place, you still require two factors to get access to them.

you still need to protect your "only"s though. and don't put yourself in situations where people with wrenches want your secrets.

I can't believe they didn't with go with BatShIt. it's right there! they were SO close!

"Bringing together all of our AI offerings, we introduce Copilot-Copilot!"

You can disable chrome in it's app settings!