*NIX enthusiast, Metal Head, MUDder, ex-WoW head, and Anon radio fan.

  • 0 Posts
  • 33 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • The amount of software available in the package manager, without adding external repositories, exceeds that I’ve seen in any other distro I’ve used. Even with epel, I feel like others fall short.

    The ability to modify the build time flags of software while still using the package manager is also huge. I hate when ffmpeg doesn’t have speex support because some upstream dev figured it was a corner use case.

    It’s me, I’m the target demographic. I’m the one asshole who wants to build ffmpeg with speex support, clamav without milter support and rxvt WITHOUT blink support.

    There are some pretty great userspace helpers too. Things to ensure your kernel is always built with the same options. Things to upgrade all your python or perl modules to the new interpreter version for you. Tools for rebuilding all the things based on a reverse dependency search.

    Slotted installs are handled in a sane, approachable, and manageable way.

    The filesystem layout is standards compliant.

    I recall someone on /r/Gentoo saying something like “Gentoo is linux crack, when you get a handle on it, nothing compares.”

    When I boot my laptop into fedora/arch/mint/etc (or really any non-bsd based distro), I feel like I’m using someone else’s laptop. There are a bunch of git repos under /usr/src for the software I wanted that wasn’t in the package manager. I need to manage their updates separately. Someone else has decided which options are in this very short list of GUIs. I’m using whatever cron daemon they chose, not the one I want. Why is there a flat text log file under /var/db/? Why won’t you just let me exist without any swap mounted? $PATH is just a fucking mess.


  • Korthrun@lemmy.sdf.orgtoBash@lemmy.mlread user input problem
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 months ago

    Wild, I get syntax error: unexpected end of file when I run your code, so just that alone is very confusing.

    When you’re inside foo here, STDIN is the pipe. Once I fix this syntax error that you somehow dodge and add some extra debugging, you can get a better picture of what’s going on here:

    foo() {
            read -r -p "delete $name (default is no) [y/n]?  " choice
            choice="${choice:-n}"
            echo "\$choice: $choice"
    }
    
    printf "%s\n" "foo" "bar" "baz" "eggs" "spam" | while read -r name; do
            printf "Got name '%s'\n" "$name"
            echo calling foo
            foo
    done
    
    Got name 'foo'
    calling foo
    $choice: bar
    Got name 'baz'
    calling foo
    $choice: eggs
    Got name 'spam'
    calling foo
    $choice: n
    





  • Korthrun@lemmy.sdf.orgtoPrivacy@lemmy.mlUse a password manager
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    9 months ago

    I saw the lack of arm and facepalmed but I was half asleep poo posting so got over it :p (fixed now!)

    I’ve been using this device for ~5 years now, so my memory is a little hazy on it, but I’m pretty sure for the particular device I prefer (which is to say, I have nfc what the setup is for other vendors, which could be greatly superior) the AES-256 key used for encryption isn’t generated until you setup your first card.


  • How would any company, regardless of geography have the secret I generated? This is a stand alone hardware device. They seller is not involved at all once I’ve received my package.

    Could a sophisticated/well resourced actor clone the smart card they stole or you lost? Sure, brute force attacks are brute force attacks. At least you’d know your device and card are stolen. Now you’re in a race to reset your passwords before they finish making 500 clones of the smart card they stole.

    Hypothetically I could blackmail someone at LastPass and have a backdoor is installed for me.

    Someone could bust down my door while I have it connected and unlocked and just login to all my things. ¯\_(ツ)_/¯


  • That will vary from vendor to vendor. In the case of the one I like there are a few relevant things.

    The password db is stored encrypted on the device. Accessing the passwords requires all of:

    • the device
    • a smartcard with a particular secret on it
    • the 4 digit hex pin to unlock the secret on said smartcard, which is what is used to decrypt the db

    Three PIN failures and the smart card is invalidated.

    That sort of covers “stolen” and “lost + recovered by a baddie”. Your bad actor would need to have their hands on both physical pieces and guessed the 4 digit hex code in 3 tries.

    As far as a user recovering from a lost or failed device or smart card goes, you can export the encrypted version of the db for backups, which I do to a thumb drive I keep in my document safe. I do the same with a backup smart card. So that and a backup device or purchasing a new one if yours fails or is lost/stolen.

    In the super “just in case” move, I also keep a keepassdb on said thumb drive. In case my device fails and it’s just not possible to get a new one. Kind of like keeping two cloud providers in case LastPass goes bankrupt or something.



  • Korthrun@lemmy.sdf.orgtoPrivacy@lemmy.mlUse a password manager
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    9 months ago

    So many folks talking about which software they use, and how they sync it between devices etc.

    You all know there are hardware password keepers right? They present to your devices as a usb and/or bluetooth keyboard and just type out the user/password that you select. They have browser plugins to ease the experience. Now your password is not even stored on the device you’re using to perform your login and it will work on any modern device even without internet access.

    Oh and no subscription fee to cover the costs of cloud infrastructure.



  • Same here. Reference, particularly sheet music and cooking recipes work fine for me digitally.

    I can sit at the computer and read social/news media for hours with no problem, but the way ebooks are displayed tires my eyes very quickly for some reason.

    While I don’t have this issue with the e-ink/e-paper stuff, I’ve never owned one. I also appreciate that physical books are often much harder to damage and will work without electricity.



  • Bouncing around between two for the most part.

    I’m mostly playing Guild Wars 2, enjoying saving the world from demonic invasion in what has so far been a pretty great expansion IMO and I am a bit of a hoor for some of the new cosmetics.

    When I need a break from the rough grind, I jump into a super duper rough grind by firing up ol Leaf Blower Revolution. Idle game my ass, I’m clicking more than 5 cookie clicker players combined! There are still leaves everywhere!


  • An absolute lack of consideration in regards to chat etiquette. Man now that I think about it, it’s chat threads/notification in particular.

    People who carry on side conversations in threads. You’re giving everyone else who has participated in the thread the choice of “disable notifications for this thread and risk missing something relevant come back around, or get a notification for every single side message they’re sending”. Especially when someone is chiming in like 4 hours later. “Glad you guys got this sorted out”. Yes, all 12 of us on-call people in this thread needed to get that message direct to our phones at 3a.m. 4 hours after the outage has been resolved. Thanks for that. Very fucking helpful. High value communication.

    People who will not use threads. I don’t need a new fucking notification every 20 seconds because you guys are deciding to have a chat about e-bikes. Make a goddamn thread or use a room made for chit chat, we’re all on the same team, we’re all in on-call positions. I’m paid to respond when this thing makes a noise. I am NOT comfortable muting the team channel.

    It’s addressed elsewhere in these comments, but +1 to folks who just message you “hi”. Go get stabbed.

    On the topic of notification fatigue:

    People who will just not finish a thought.
    
    Before hitting their enter button.
    
    So they end up like doing this thing.
    
    Where you get a notification every 15 seconds, because they are just absolutely addicted.
    
    To their enter key I mean.
    
    They are addicted to thier enter key.
    
    their*
    
    Oh.
    
    I guess I could have just edited that message instead of sending the correction with the thing.
    
    Asterisk? Asterisx? I forget what it's called.
    
    LOL.
    
    Anyway, that thing.
    

    Also, when I’m helping you I am 100% going to stop what I am doing every time I get a message and read the message. There’s no way for me to know whether or not you’re messaging me “Oh never mind, I had a typo” or “here is more relevant info to make your work easier”. That message may very well have immediate impact on what I’m doing, and affect the course I take. Of course I’m going to stop what I’m doing to read it. So maybe don’t wait 5 minutes to send me the message “k” after I kindly, thoughtfully provide you with the status update “I think it’s the fizzibob, let me verify in the logs real quick” of my own volition so that you are not only aware of what’s going on, but don’t have any question as to whether or not your question is still being looked at.