cyberwolfie

@[email protected]

This profile is from a federated server and may be incomplete. Browse more on the original instance.

cyberwolfie,

Oh, I found Dolphin to be a superior experience to File Explorer in Win 10. I had a particular hatred for how it would, when copying files inside a OneDrive folder and trying to instantly rename them, decide to mark the entire name field after about one second (when sync of new file is complete), causing me to erase everything I wrote in that second and having to start naming it again. In my last job, this occurred on a very frequent basis.

cyberwolfie,

I use Fluent Reader Lite. Fits my established workflow of consuming RSS-feeds well.

cyberwolfie,

Have they been cross-posting 1:1 between Mastadon and the platform formerly known as Twitter so far?

cyberwolfie,

Agreed. I recently did this (first time making a torrent-file) to transfer a set of 45 min videos to a friend, and will probably prefer this way of doing it in the future.

Best practice for duplicating Borg backup repo?

I am currently hosting Nextcloud on Linode using the AIO Docker container. I am very happy with how this works, but the running costs is more than I would like to spend on this. I am running a 4 GB Linode (anything less would cause severe lag in the Web UI), with 2x100GB block storage (one for data and one for the Borg backup)....

cyberwolfie,

Not a requirement that it is E2EE, as the Borg repo is already encrypted. Guess my knowledge of these services is biased towards E2EE from previous research for use cases where that was a requirement.

Thanks for the tip, hadn’t hard about Backblaze before. Very reasonable pricing. Would a good strategy then be to schedule rclone to have it synced, or are there other ways that would be better?

cyberwolfie,

Hm, after the initial upload, it shouldn’t really generate much traffic if I can only manage to upload the diff, so it might not be much of an issue for me. I am not yet really familiar with tools like rsync and rclone, and also don’t know how the changes are stored in the Borg repo (e.g. if I move a 1 GB file from one folder to another, does that get picked up as a 1 GB change by the syncing tools?), so I would need to do some more research to see if that would be achievable.

Hetzner also looks nicely priced, but it would’ve been nice if I could choose an even cheaper tier with less storage, as 1 TB is quite overkill for this particular use case. I could of course use it to backup other things.

cyberwolfie,

What are you looking for in a host?

cyberwolfie,

Learn Linux TV is number one for me - his Linux Crash Course has been an immense help in getting started using Linux for me.

cyberwolfie,

Having recently set sail again after a more than a decade-long hiatus, I am definitely having a much better experience. All streaming services have been booted, and my TV has been disconnected from the internet. Replaced with a mini-PC running Linux and serving Jellyfin (and Freetube for accessing YouTube ad-free). Still have an active Spotify subscription, but I am already using it a lot less than before. Will be phasing it out as my music collection becomes more complete. Purchased my first albums from Bandcamp recently - first direct purchase of music in over a decade. Bad timing with the Bandcamp acquisition though, hoping it doesn’t go tits up, and if so - here’s hoping to a good alternative to get proper ownership over DRM-free music while giving me an opportunity to pay and support those musicians I like who are not already filthy rich.

cyberwolfie,

I have been using this combined with Fluent Reader Lite for Android and a self-hosted FreshRSS-server to sync my feeds. Just recently found a workflow that works well for me: I will browse my feeds on my phone once in a while (very productive bathroom breaks…), showing only unread stories. I star any story I want to read later, mark the rest as read. With Fluent Reader on Linux set to only show starred, and I can then pick and choose whatever story I want to read from there on a bigger screen. Whenever I go some days without checking, I will just mark all spammy news outlets as read without checking the 400 unread stories.

cyberwolfie,

Cool, I’ll check it out. I am not experiencing any issues with Fluent Reader with my use case though.

Better control over Bluetooth connections?

I’m running Calyx OS (which for my device is on Android 13 at the moment). I would like to have better control over which Bluetooth-connections my phones attempts to connect to when enabled and which it does not. Right now, it seems to try to connect to whatever it was connected to last, even though it is no where near me. I...

New Fedora Slimbook 14" joins the Fedora Slimbook 16" - Fedora Magazine (fedoramagazine.org)

We heard your feedback during the launch of the Fedora Slimbook 16 and, along with the folks from Slimbook, bring you the new Fedora Slimbook 14, a smaller, lighter, cheaper with even better battery life, version of the Fedora Slimbook, powered by an Intel CPU and GPU (unfortunetely no AMD version soon).

cyberwolfie,

I have an InfinityBook Pro 14 Gen 7, with the RTX 3050 Ti laptop, 2x2TB SSD, Intel i7-12700H and I believe also a 53 Wh battery (did not go for the battery edition with increased capacity, but instead the storage edition).

Even when using the integrated Intel GPU, the battery life is quite bad. With any kind of browser activity, I get about 2-2.5 hours. If I only do reading in Zotero with dark mode, I get up to 5 hours. For my use case, it is fine, but I could not have used this if I was dependent on working with no access to a power outlet.

Otherwise I am quite happy with Tuxedo though, and their support is usually very good. I hope they will succeed long term if they can also continue to improve on their products.

cyberwolfie,

I love Linux since switching nearly a year ago. Yet, I still once in a while find myself in situations where I screw up and I think to myself “Oh, I’m glad this is not my work computer”. If you have no experience with Linux from before, maybe you should consider getting a personal laptop, install Linux on that, and get comfortable using it before transitioning your business to it. That way, the first time you accidentally uninstall your desktop environment (I managed to do this not once, but twice…), it is not 10 minutes before an important client meeting.

cyberwolfie,

Wayland by default

Having an Nvidia-card, should I be worried about this? So far I’ve read so many “Nvidia bad, Wayland no work” posts that I have just stayed clear waiting for a final confirmation that everything is smooth sailing.

cyberwolfie,

Ok, thanks - so if I understand correctly then, it is listening on port 22 as a default, and not accepting traffic on any port.

That brings of the question: wouldn’t I be better off changing the SSH-port? And is that so easy as to uncomment the #Port 22 line in the config file and changing the port number to something random, and saving that somewhere? Would I then be able to connect by running ssh [email protected]:, or would I need to do anything else to successfully connect?

cyberwolfie,

Yes, this is something I did when setting up the server some time ago, and as a step in the process I rebooted the system after changing the config.

cyberwolfie,

Yes that’s the right way to block root login. An added filter you can use the ‘match’ config expression to filter logins even further.

Not sure what you meant about the ‘match’ config expressions here. Could you elaborate a bit further?

If you’re on the open network, your connection will be heavily hit with login attempts. That is normal. But using another service like Fail2Ban will stop repeated hits to your host.

Hehe, yeah, I’ve noticed… The reason I get a little anxious whether I did this correctly, is that 95% of the login attempts are to root, so I want to make sure it is disabled. I have set up Fail2Ban, but I am using default settings, which may be a bit laxer than they need?

I’ve also been advised and considered moving to ssh keys, but I have not gotten to that yet.

Ssh listens on port 22, as soon as a connection is made the host moves the connection to another port to free up 22 for other new connections.

Makes sense. One question that comes from this is: is it possible to disable that? I would never need two ssh-logins at the same time on my server. And the second question is what I asked above regarding whether I should change the port ssh listens to in order to reduce unwanted malicious login attempts?

cyberwolfie,

Just keep in mind that security through obscurity is not considered secure in itself.

Do you consider it to not be a helpful measure to take at all?

I have fail2ban configured - since it is reading from the auth.log, I guess I would not have to make any changes to the configuration there to have it work with a new port?

cyberwolfie,

Yes.

cyberwolfie,

Alright, cheers - I’ll leave it be as well then :)

cyberwolfie,

Edit: oh, you’re talking about the high port OP is wondering about. That’s just the source port, which is chosen randomly by the client OS when making a connection. Using port 22 (or any other port below 1025) as a source port would require root privileges on the client and would also conflict with the SSH server that could be running there. Still, it has nothing to do with SSH “moving connections over”

Ah, I see, so the port numbers shown in auth.log are all client side ports. I guess I thought that the listening port would be in the log and assumed that the port listed there would be it, but when I read the lines again, it clearly says “from ip.ad.dr.ess port 12345”

cyberwolfie,

Thanks - I’ll look more into that to see if I can make any rules that would make sense for my use case.

cyberwolfie,

Never heard that song. For me, the most famous number would be 32 16 8.

cyberwolfie,

But maybe that’s because I’m from Germany. Here the concept of privacy is something most people like, at least in real life and in untechnical situations.

My experience from interacting with Germans is that you are above-average privacy conscious, which I find very admirable and gives me some level of hope that it is possible to gain some general awareness on these topics also in my country and elsewhere. Why do you think it is so?

FlorisBoard | FOSS keyboard that respects your privacy (florisboard.org)

I came across everyday topic on Techlore Discussions about free and open source keyboards for Android and discovered this little gem. It is FlorisBoard, a virtual keyboard for Android which respects privacy of the user. I can sigh with relief and finish my search for that singular keyboard for typing stuff on the go....

cyberwolfie,

Genuine question: is there any way for any keyboard application to be privacy disrespecting if their internet access is blocked off by a firewall?

cyberwolfie,

Do you know if there is any way to check and potentially also block inter-app communications like that?

cyberwolfie,

That looks very similar to mine, except I don’t have AAC and aptX. I guess the WH1000MX5 only supports SDC and LDAC? As far as I know, I need to use the Headset Head Unit to get microphone input. After a system update some time back, it would switch automatically if I e.g. was on a Signal call. Prior to this, I would have to switch manually to get microphone input.

By the way, I am not entirely sure if I am running PulseAudio or PipeWire, as I get the confusing output below, but it seems to be PulseAudio. Is it likely to improve things if I were to switch to PipeWire?


<span style="color:#323232;">$ pactl info | grep "Server Name"
</span><span style="color:#323232;">Server Name: PulseAudio (on PipeWire 0.3.80)
</span>

As for my Windows issue, it seems LDAC is not natively supported in Windows 10, so I guess it is using SDC. Could my problems simply be that I am trying to stream a too high bitrate? I will need to recheck my settings for stream quality.

cyberwolfie,

Hm, yeah. Just checked in macOS, and it is using AAC there. So lack of AAC on my Linux device would mean it is not available here for some reason then I guess, and not an issue with the headset?

I can’t seem find a way to check the same on Windows 10 without using a third-party tool, and since this is a work computer, that is not an option for me. My guess is then that it uses SDC. Seems like AAC is supported natively in Windows 11 though, and the device is scheduled for a Win 11 install soon. Hopefully that will resolve the issue for me during work hours.

For now it seems to work better under Linux with LDAC though, which is my main use case. I swear I’ve had issues with this before, but I just streamed an entire album of high-bitrate FLAC tracks without issue now. Hopefully it stays this way.

cyberwolfie,

Don’t you love when you give in and go to get help for something and you can no longer reproduce it after you ask?

It’s almost like it’s a law of nature…

cyberwolfie,

Tested with four different machines, one running Linux, two using Windows 10 and one with macOS. Seems to be a codec issue where Linux and Windows defaulted to SBC and macOS to AAC (where it did not occur). Changing to LDAC on Linux helped, although I am certain I had issues with this before with that codec. On Win10 I have no wiggle room as it is my work machine, and I seem to need third party software installed to change.

cyberwolfie,

It happens in my home office, my living room and my actual office. So where I spend 95% of my time with them. So if that were the case, I’d be very disappointed.

As for comfort - I find they are too tight and my head will start hurt (on top) after some time. Loosening them alleviates this somewhat, but they will drag more down on my ears which I find uncomfortable.

cyberwolfie,

Rechecked this now, and it’s at about 5% now. The statistics seem a bit weird to me, unless there are some big seasonal changes. Your 12% was recorded in June and July. Maybe with less business activity during these months, the Windows share plummets in favor of home users who are more prone to use Linux.

cyberwolfie,

EU is doing a lot of good work to protect the privacy of citizens against corporate surveillance, but continues to propose regulation that would increase government surveillance. News such as this is good, as it seems to show that there are protection measures within the EU to stop such legislation from being effectuated. Another example is the Data Retention Directive, which was first passed back in 2006, but then later declared invalid by the European Court of Justice in 2014. However, while the intent when it comes to corporate surveillance seems aligned with the public interest, the intent when it comes to government surveillance is not. Such privacy violating proposals will continue to be proposed.

I certainly do not have a good overview over all of this. We are completely beholden to the great work of pro-privacy organizations and corporations to keep exerting pressure and making these pieces of legislation known and understandable to the public. But unfortunately, most people can’t even begin to consider the implications of such overreach, which is why the “protect the children”-rhetoric is so effective - “I am not doing anything illegal and thus have nothing to hide, so if we can protect the children from abuse by removing encryption which is only something criminals use anyway, I’m fine with that”. I am clueless to how I can best contribute here, but I am luckily seeing a shift among friends and family in the awareness on these topics.

cyberwolfie,

Oh, I think this is very difficult. First of all because it is not a single reason why a future where privacy has eroded is a very bad thing, but rather many different reasons. This makes it difficult to know where to start, as it will depend on the person you are talking to what they are more receptive to. Concepts such as security, privacy, secrecy and anonymity are often confused. You have different actors you would want protection from, including corporate and governmental entities.

I don’t think most ordinary people you meet will be bad faith actors though, but I do think many tend to take offense if you are outspoken against something that is proclaimed to be about protecting children. Why wouldn’t you want to save children?

Some of the reasons below, but not an exhaustive list. As I said, difficult to know where to start.

  1. You do have something to hide, even though you might not be doing anything illegal (to your knowledge). Most people dislike people staring into their living room from the street, and will install curtains or other ways to prevent it. Most people closes and locks the door when they go to the toilet. Most people do not say every single thought they have out loud. I think the disconnect comes from people not actually knowing what data is collected, and even if they do, they do not understand how this data can be used / misused to learn things about you or manipulate you, and the privacy threat of having this data stored anywhere even if it is not being used (i.e. risk of data leaks). In terms of manipulation, I think that the story on how Facebook nudged people to vote in the Scottish referendum highlights the creepy influence such a company can have on society, and this was already in 2014. Who’s to say the owners of such platforms will not use it to sway elections their preferred way by using such nudging tactics on the population they want to vote, and not on the ones they’d rather stay home. We shouldn’t have to trust that they don’t abuse such a power.
  2. What today might be perfectly legal, might not be legal tomorrow. Case in point are the draconian abortion laws implemented in various states of the US. Facebook had to comply with government requests to hand over chat logs..
  3. What today is illegal, should perhaps not be illegal. We do not want 100% law enforcement, as that would mean that we consider today’s laws final, however we are constantly evolving our laws. A recent example is legalization of weed in the US. How many have been incarcerated and had their lives ruined on charges related to weed? Yes now the same activities are in many states considered legal. Or homosexuality? Sodomy laws are not a very distant past in many countries (and still exist in other places of the world). If you had Apple or Google scanning your phones and flagging you to law enforcement for illegal activities. Effective mass governmental surveillance (and corporate surveillance that can be passed on to law enforcement) could potentially send countless people to jail on charges that could be legalized in just a few years.
  4. Building an infrastructure for mass surveillance is not future-proof. You might trust your government not to misuse it today, but what about after next election? There are countless examples of less-than-democratic forces gaining power in Western democracies in recent years. We need strong protections against potential oppression/suppression, and not just soft protections that are easily swept aside.
  5. We are dependent on journalists and whistleblowers exposing wrongdoing in our society. Lack of tools that ensure privacy and anonymity prevents this.
  6. Even if our societies are not oppressive regimes today, many around the world are. Political opponents and resistance groups in such regimes need ways to protect themselves. Otherwise authoritarianism will have an too easy time to crack down on dissidents, making organized opposition impossible.
cyberwolfie,

I’m on a Fairphone 4 with CalyxOS

cyberwolfie,

Bootloader is relocked after flashing Calyx on an FP4. Are you saying that isn’t actually the case?

cyberwolfie,

Ok. My understanding is that Calyx only supports devices that allows relocking, which essentially means Pixels, FP4 and some Shift-device (according to their documentation). So I become a bit confused when it is claimed that it cannot be done at all in Calyx, and that this is some big truth that its users (me included) are not privvy to.

calyxos.org/docs/guide/device-support/

qBittorrent network interface bind not working?

I am using ProtonVPN, and have (or so I thought) set up qBittorrent to bind to the network interface that ProtonVPN is using (tun0). The connection symbol turns red if I turn off the VPN, and downloads will stop. However, when checking the torrent address on ipleak.net, it seems that this bind is not working properly - my real...

cyberwolfie,

That was the case until the recent update to the Linux GUI client. I had to change the network interface bind in qBittorrent because the proton0-one stopped appearing. I assumed they had just made some changes, but could this mean that something is faulty with my install?

cyberwolfie,

I’m using the Torrent Address Detection tool, which I assume is checking the IP broadcast by my torrent client.

cyberwolfie,

That is unfortunately not available in the Linux client.

cyberwolfie,

How could I check this?

cyberwolfie,

tun0 goes away when I am disconnected, so I don’t think anything is keeping it open. I noticed that connections in Proton VPN were set to UDP, so I changed this to TCP and this seems to have worked. Will still want to do more testing to be sure.

I don’t seem to have v3 installed, by the way. The old GUI tool seems to have been uninstalled when upgrading, and the CLI tool I unisntalled myself.

cyberwolfie,

Yeah, that is true - I didn’t formulate that quite well. This also happens to me when the kill switch is enabled, as it is disabled when I disconnect. However, it would not disable itself if I simply lost connection, which is in the case where I most want the leak protection. In the other cases, I could make sure to always quit qBittorrent before disconnecting from the VPN. Not ideal, as it would be easy to make a mistake.

cyberwolfie,

Hm, I don’t see any IPv6 addresses anywhere, even on ipv6.ipleak.net

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines