KaninchenSpeed @ KaninchenSpeed @sh.itjust.works

Posts

0

Comments

38

Joined

1 yr. ago

It's impossible for anything but the kernel (the user chooses) to know what software is running. Tpm and kernel features can be emulated and spoofed.

Tpm already has known exploits, which leads to it not being reccommended for disk encryption. A lot of not so old pc's don't even have a tmp 2.0 chip.

Secure Boot is useless for this because the user can just enroll their own keys. You can't prevent this, because you can just mod the bios. Replacing the stock secure boot keys is trivial using uefi-tool. Pretty much every motherboard only checks the bios signature when flashing, my prvious motherboard (<7 Years old) didn't even do that.

Also currently the only way for secure boot on linux is either using shim which the user can enroll thier own keys into or enrolling their own keys directly into the bios.

Many phone manufacturers tried forcing secure boot, and failed. I bypassed such attempts on 3 devices, the manufacturer of one of them tried to fix the exploits twice and still failed to do so.

Also how should the server know that the game itself wasn't modified to just emulate everything.

Even Intels attempt at preventing this with "secure computing" with sgx didn't work. See this: https://media.ccc.de/v/670321a9-75f4-4194-867d-a249aa01af0b

It's the same problem that electronic voting machines have, how does an external person/server know that the correct software is running on the computer? It's impossible.

Also aren't we using Linux because we want the freedom to run what ever we want on our computers?

Server side only anti-cheats are the only solution.

You need to change a setting in windows for remmina to work. I don't remember which one it was but I think it was some where in the remotedesktop settings.

I'm currently doing this to a Citroën C5 III (2015). The hdd in the old infotainment system broke, so I had a reason to do it, and adding a few features couldn't hurt.

It's a huge pain to get to find information about anything in this car and to get anything to work properly, but I hope it'll be worth it.

If you ever want to try it, here are the config files and commands from my bash history.

https://codeberg.org/KaninchenSpeed/c5-car/src/branch/main/gps

The geoclue file is set up for organic maps.

You can also run organic maps without flatpak, but you might need to compile it yourself.

I'm currently doing the same project.

To get gps to work on linux, you configure gpsd to get the data from your gps module and setup geoclue to get its data from gpsd. I lost the config files but I remember that I did the gpsd geoclue connection by echoing the gps data of gpsd into a netcat socket and connecting geoclue to it. Organic maps then automaticly gets its position from geoclue.

Im also working on a organic maps fork, which shows onscreen directions on linux.

I hope they add the ability to turn the computer on even if it is completely shut off. That would make keeping my family's computers updated much easier.

That's probably not possible, but you could do it with a microcontroller and a relay bridging the power switch.

I have not had luck with vr (oculus. I hear index does better).

Which oculus headset do you have? If its a Quest then ALVR is the way to go. The wired only ones dont really work. If you want to see your desktop in vr, then you can use WlxOverlay-S for that.

I use their blinds and windows with a Velux KLF 200 gateway. They work fully localy with homeassistant. Can reccommend.

I don't own a ryzen 5xxx but from my experience with a ryzen 3xxx in a laptop, its enough to run most games (at least that I play) at 1080p 60 at low to medium settings. So yea it's pretty good.

From my experiance with minecraft servers ryzen is the way to go.

I would recommend getting a used ryzen 5 5600g or ryzen 7 5700g i found some for less than 80€ on ebay. For the mainboard i would either get a cpu + mainboard combo or get it new as i haven't found any non broken used boards. Pretty much anything is fine, just look out for the number of pcie slots and the lane distribution between them and if it supports lane bifurcation (you need this if you want to add m.2 expantion boards) if you want to add a hba or network card later on and that the board has 4 ram slots. Get at least 32gb of ram, 64gb is better and get them as 2 sticks, so you can upgrade later, ddr4 is cheap now. Storage wise I would reccommend 2 sata ssds as boot drives and 2 nvmes (if the mainboard supports it) for data.

So as an example (only 1 boot drive) with the prices ive found:

U: used (ebay); N: new

This mainboard isn't itx, but you should find one that is for a similar price!

Software wise you can try out debian, truenas or something else, but try to use zfs. Im personally using debian on zfs root running minecraft servers in docker containers with docker-compose but running lodestone (a web ui for mc servers) would also be an option. Running nextcloud in a container is also pretty easy

I've experimented with ntfy, it works pretty well and is selfhostable. I don't know if it natively support mqtt though.

I use both IONOS for domains and webhosting and a VPS from Host Unlimited, they also offer webhosting, but I haven't tried it yet. I'm happy with both. Host unlimited apparently has a tier with unlimited mailboxes.

Volumes are horrible, how would I easily edit a config file of the programm running inside, if the container deosnt even start.

Bind mounts + ZFS datasets are the way to go.

Kwrite doesnt really exist on its own anymore. Its a slimmed down gui for kate now.

Your best bet is probably PostmarketOS, its not debian but alpine, but does support the phone and aparrently still gets some updates.

Theres a link on the page to the non T variant with flashing instructions.

https://wiki.postmarketos.org/wiki/OnePlus_5T_(oneplus-dumpling)

It should work as long as it can reach the internet

I'm not really a fan of cloudflare tunnels, but I guess thats an option too

You can't expose ports on mobile data. You can ether host the web server at home or on a vps or use something like tailscale.

You could try tunneling usb from the host into wine with usbip, but I have a feeling that this wouldn't work

I use traefik, but caddy should work too. I can share the docker-compose files I use later.