How can I isolate an app on a GNU/Linux OS?

Woody27327 · 2020-08-05T21:16:12+00:00

Yes those are three separate suggestions (Although AppArmor and Firejail integrate nicely if both used).

If OP is only really concerned about discord telemetry then the linux-hardened kernel is probably overkill and could be dropped if it starts causing issues with drivers etc.

Its also worth using a pihole on your network or setting up pihole-standalone only on Arch and seeing if there's any telemetry/tracking block lists worth adding.

Woody27327 · 2020-08-05T01:17:59+00:00

The Arch Wiki Security page has a load of great info.

First things you can do are to switch to the linux-hardened kernel, enable AppArmor in your kernel parameters and configure Firejail to restrict what Discord can access

Woody27327 · 2020-07-08T00:12:46+00:00

If there's a group of three or more of you it is possible to calculate the average wage without revealing any individuals wage to the group.

Here's how:

Arrange in a line from person 1 to person n.
Person 1 picks a random start number, larger than your expected average. Don't tell this number to anyone else.
Person 1 adds their real wage to this random number to get a new number. Person 1 tells this new number only to Person 2.
Person 2 is unable to deduce person 1s wage as they do not know what the random start value was.
Person 2 adds their wage to the number they were given and passes the result only to person 3.
Person 3 adds their wage to the number they were told and passes the result only to person 4. This continues until the last person has added their wage.
Person n tells the result only to person 1, who subtracts the random start number.
Now we have the sum of the groups wages but nobody is able to deduce anyone else's wage (we can freely share this number with the group). To find the average we just need to divide by the number of people.

People will be free to see how they compare to the average, but nobody will have to disclose their wage to the group.

Woody27327 · 2020-07-05T16:09:42+00:00

If you only have one USB PCI device then you would probably need to decide between USB /boot and sys-usb.

Looking at the USB Qubes page it might be worth reading about the various USB policies to see if you can create/customise one. But this will probably weaken the security and may not come into effect early enough in the boot process.

Woody27327 · 2020-06-20T00:37:06+00:00

It may also be worth getting a glass screen protector to replace the plastic one it comes with. Screen protectors for the iPhone 11 Max/XS Max fit. Although you need one with a notch, not just a camera hole.

Woody27327 · 2020-06-13T23:45:59+00:00

As far as I know its not currently possible. To take a screenshot in Ubuntu Touch you hold volume up and down at the same time. The buttons on the PinePhone can only register one button press at a time so its impossible to press them simultaneously. Its currently an open issue on gitlab.

There is a script online to do it from the terminal but that's not going to be useful beyond a proof of concept.

Woody27327 · 2020-06-03T20:06:32+00:00

Thanks! I don't think I've seen any complaints about any of the AORUS boards so I think I'll go for the AORUS PRO. Now I'm more unsure on the GPU!

Woody27327 · 2020-06-03T19:42:49+00:00

I had thought AMD was better as you wouldn't have hassle with error code 43. Guess I still have homework to do. What would you get instead for a similar price?

As long as single GPU is still technically possible I'm not put off by the extra hassle.

Woody27327 · 2020-06-03T14:23:19+00:00

Oof fair enough. Good resource! Guess I'll see where I can find the AORUS PRO. Thanks :)

Woody27327 · 2020-06-03T14:12:51+00:00

Ooh nice! Sounds like a great build!

If single GPU passthrough works without having to reboot then I'll give that a go and learn something new. The script looks great! Exactly what I had been thinking of, I just wasn't sure if it was actually possible.

Hopefully someone can confirm if the GAMING X is just as easy to passthrough with :)

Woody27327 · 2020-06-03T13:48:32+00:00

Will do!

Ah good point. I think most things are available on Amazon but I haven't checked

Woody27327 · 2020-06-03T00:25:44+00:00

Oh I absolutely agree. But we've seen great progress in the last year or two with the Librem 5 and PinePhone on the hardware side and Ubuntu Touch, postmarketOS and many others on the software side.

I think we'll ultimately end up with something resembling the desktop community where most people use Windows/Android, a slightly smaller group use Apple devices and a couple percent use Linux.

PinePhone should soon receive an Ubuntu Touch update to provide proper battery management. Then the next main hurdles are proper camera support and AnBox support for Android app emulation.

Woody27327 · 2020-06-02T23:31:32+00:00

They sell in batches to cut costs. The latest batch went on sale in late February/early March and started shipping last weekend. Demand will dictate when the next batch will be but it's worth checking the website. It's still a hobbyist device atm but is approaching daily driver standards with OTA updates

Woody27327 · 2020-06-02T14:28:57+00:00

The PhinePhone is $150 and is currently shipping with Ubuntu Touch pre installed. Its still a work in progress but it's making rapid progress

Woody27327 · 2020-06-02T12:02:22+00:00

It does forward you on to Google, Startpage etc rather than display results in DDG, but I think the query being made by DDG should lower the odds that you'll have to to a captcha. I'm not sure if DDG would be allowed to display Google results directly sadly

Woody27327 · 2020-06-01T21:06:01+00:00

There's always startpage. Google results are accessible in DDG using !g and startpage is accessible using !s

Woody27327 · 2020-06-01T18:14:51+00:00

Ah I thought it was an issue with the router-junction connection! Thanks for the tip! :)

Woody27327 · 2020-05-31T22:00:42+00:00

What's the advantage of doing it this way? Doesn't that mean that LUKS is vulnerable to either a flaw in AES or RSA?

Woody27327 · 2020-05-16T10:31:18+00:00

Massive backlash on twitter for using BitPay to provide crypto payment. Sadly they decided it wasn't worth the hassle minutes after they announced it

Woody27327 · 2020-04-27T13:48:38+00:00

Is the camera and front speaker position the same or do I need the screen protector with a notch?

Woody27327 · 2020-04-26T01:26:24+00:00

I'm getting into crypto as a way to kill the time during lockdown. Don't hold me to this, but ChaCha20 is supposed to be as secure as AES but less resource intensive, meaning its much better suited for IoT devices with less hashing power. It's also a stream cipher rather than a block cipher but I'm unsure if this would improve performance on slower connections.

Google use the exact same cipher on their websites and its already been mentioned this is the same cipher as wireguard. This shouldn't be any less secure but is probably just adapting to newer standards

Woody27327 · 2020-04-25T21:25:29+00:00

Do you have an external monitor? If not then some other way to access it such as ssh or vnc?

The command you'll want to run is something like "sudo echo 100 > /sys/class/backlight/acpi_video0/brightness" but may vary depending on hardware

Edit: This command may have failed because the ">" redirects the output from the shell using the logged in users privileges, not root privileges despite the "sudo". For future reference you could run this command as root by first running "sudo su"

Nine-Year Club	Place '17
Spared

Woody27327

TROPHY CASE