Badness Enumeration | PrivSec - A practical approach to Privacy and Security
h3ndrik @ h3ndrik @feddit.de Posts 3Comments 469Joined 2 yr. ago
Ah, I thought you were asking a general GrapheneOS setup question. I somehow missed the "for now". Now I get it, you want to know what you can do in the meantime... Well phones come with a load of bloatware. And I don't think you can get rid of the Google stuff on a normal phone, let alone on a Pixel. Not connecting it to a google account is a start. But it pings Google every few minutes and transfers data anyway. You can go through all the settings and disable all targeted advertising and cloud services. Apart from that I'm afraid there isn't much you can do. As far as I know the google services run with more privileges as "system-apps". And unless a phone is rooted, there is nothing that can be done on the device itself to prevent such an app from talking to the internet. Well you could use Wifi only and block everything with the firewall of your router. I don't now your threat scenario / what you want to protect against... Disabling everything and not having a google account tied to it might be enough. If you absolutely need privacy, disconnect the device from the internet, use it just to call people and use a Linux computer to access the internet... I think you have to compromise.
Install GrapheneOS, don't install the Google services package. Install as few proprietary apps as possible. Use free and open source apps, for example from the F-Droid repository. Mind that your carrier always knows where you are, because you're connected to a cell tower nearby. Choose a good carrier and forbid them to use or sell your data. (Or activate airplane mode.)
Also use a suitable browser like Mull. And no social media or "free" services that harvest your data. Instead get a mail provider and instant messenger from companies/projects that respect your privacy.
For Mint you could maybe repurpose the Debian instructions (install the firmware-iwlwifi package): https://wiki.debian.org/InstallingDebianOn/Dell/Latitude7490
But I guess it's a weird issue since Intel cards are usually well supported. So are most Dell laptops in general. My usual approach is to type in something like "wiki linux dell 7480" into google. There are very little specific info around which leads me to believe everything usually works out of the box.
In case the thing with the button holding and power cord doesn't work, check your BIOS settings if it's disabled somewhere and then check the logfiles. "dmesg" and the boot output might contain the exact issue.
I think opening a tunnel and forwarding the port through it and opening a port forward directly have about the same security implications. Both end up opening the same port and forwarding the same packets to the same computer. The only difference is with a tunnel there is an extra step in between that slows things down. In some edge cases it may be nice if people can't directly see your IP but just the one from the tunnel. But that doesn't matter if it's only for you and your friends. Might be a concern though if you're a big live-streamer and fear people DDoSing you. But then there are better alternatives. (for example paying $8 a month for a small VPS.) So I think a tunnel makes perfect sense if you can't get the port forward running. It just doesn't add anything to security.
Cloudflare might be a different deal though. They include DDoS protection and filter some attacks. I don't like cloudflare so I don't really know the specifics. I think it's bad for the internet that a good share of the overall traffic is tunneled over a single company's servers. And I myself don't need a middleman in my own services. But they certainly must have something to offer or they wouldn't be as popular as they are...
Sorry, 10.x.x.x is a private IP address range. That can't be reached from the internet.
Maybe try one of the services that display your IP like https://www.showmyip.com/ or the one mentioned earlier: canyouseeme.org , that one also shows your IP.
I have little info to work on. There are many different providers around the world with very different setups. Some are suitable for port forwarding, some arent. (You could sit behind a Carrier Grade NAT, which makes port forward difficult to impossible.) But you need to figure out your IP first.
All I can say, I run something like you describe... Nextcloud, a reverse proxy and a few other services. I did some port forwards, got a domain that points to my IP and it works fine.
Edit: I use YunoHost on my computer. Its a Linux distribution for selfhosting. I think its a good choice to get your feet warm or if you want a low maintenance setup. It includes Nextcloud and many other services.
But you have to figure out how to access your computer from outside. Either you get your IP and the port forward running, or you have to use a service like pagekite.net or you get a VPN running like almost everyone else here wants to convince you to use. I don't think a VPN is a good idea except if you only want to use it by yourself and not use all the collaborative features of nextcloud.
How have you tested this? You need to use the external IP address of your router (public ip) to open it. And you need to test that from another internet connection. Also make sure the browser is actually trying to open an http connection to port 80. Some modern browsers / addons try to prefer https on port 443 instead and that wouldn't be reachable. Does a ping work? What's the exact error message? The port forward could be wrong. Needs to be port 80 (TCP) towards the internal device where nextcloud runs, to the port where it runs on that machine (could be 80, too). It could also be blocked by your provider, or your specific provider doesn't allow port forwards. Or you ran into issues with the shift to IPv6 addresses. Maybe your provider has some strange setup. Try if you can ping your router from external first. And try the canyouseeme.org mentioned in the other comment. That's good advice.
There are also heavy mats available in the hardware store, to put your washing machine on.
Some of my favorites were Star Trek Armada II and Star Trek: Voyager - Elite Force.
If you want to learn machine learning, you could maybe play around with the examples recognizing single digit handwritten numbers with that MNIST dataset or something in that kind of league.
I think training an LLM that can be somewhat useful will be way out of scope with the RAM and computing capabilities such a laptop has to offer. Maybe correct grammer if you don't care to wait for a long long time. Something with the level of intelligence of autocomplete. But definitely not coherent or intelligent or answering your questions.
You could rent a VM in the cloud. Services like runpod.io or vast.ai offer you a proper GPU for like $2 an hour. There is also Amazon, Google, Azure, Lambda...
Yes. That needs to be implemented. It's a bit annoying that Lemmy is still missing that much moderation and usability features.
Threads accounts will be available on Mastodon and other services that use the ActivityPub protocol.
We should open a feature request. An additional license selection field upon posting on Lemmy, or a default setting to license every post and comment from a user account would be awesome. And free/libre culture fits well within this ecosystem.
Threads accounts will be available on Mastodon and other services that use the ActivityPub protocol.
Seriously doubt that. If I pirate a book, game or TV series and don't read the copyright, it's still illegal. Same should apply to other written text like on a website.
Nice stock images and text. Now I'd need a button to export it and load it with a nice static site generator like Hugo.
Threads accounts will be available on Mastodon and other services that use the ActivityPub protocol.
And it's how federation is supposed to work. Either you want to send your content to other instances or you don't. But federation is the wrong tool if you want to stay alone. You can defederate and block them if you don't like their terms.
Threads accounts will be available on Mastodon and other services that use the ActivityPub protocol.
I think even the Fediverse as is, has done an alright job with that.
That would be the most important question.
(I usually don't advertise for using Linux in a VM on Windows. There are use-cases for that. But it combines the downsides of Windows with the limitations of your VM software and issues on Linux (for example the proprietary NVidia drivers and whatever they do to pass through parts of the hardware, or weird stuff VirtualBox does). And it can make it slow(er) to unusable in some cases. None of that has anything to do with Linux, but people try it that way and blame issues on Linux, when it's really the VM software's fault. (Or you ticked the wrong config checkbox.)
A better way to do it would be trying a live image on an USB stick, testing performance and then looking for performance issues within your whole virtualization stack if you absolutely have to use Linux within a VM. This is certainly possible. I usually dual-boot. Or do it the other way around, Windows inside a VM on a Linux host. But I don't really use Windows, so I'm not a good example.)
Maybe you want one of the turnkey solutions. There are several solutions that offer you a NAS box with everything pre-configured and a management web-interface. Assembling a RAID and creating a network share is just a few clicks with those. And they should come with documentation.
I don't really know which one is best. There is openmediavault, unraid, EasyNAS, TrueNAS, ...
I agree. Configuring everything yourself, Learning about RAID, filesystems, networking and file servers on an operating system you're not familiar with is some work. And although Linux has adapted quite some Windows-workflows, setting up Samba isn't necessarily the right-click - properties - share you learned from using windows.
For security cameras there are solutions like Frigate which can be installed in a container.
100% agree. Software RAID is the thing you want as a consumer. Doesn't need to be ZFS. mdraid is another good and well tested option for the traditional way of using RAID.
You're not really helpful because you misunderstood what they're trying to do. Look at the Thingiverse link. They want to place a camera in front of the meter. Not disassemble it or touch the meter at all, except for attaching a mount that holds that camera. Not touching a meter (just barely touching the casing) and pointing a camera at it should be allowed in most countries.
But you're right, you shouldn't mess with your meters. Or rewind the mileage on your car, or swap price-tags in the store. That's all fraud and not allowed.
Btw, we have meters that have a magnet inside of the dial, so you can read it with a reed-switch.
And what is the alternative to an Adblocker? No Adblocker?