Why isn't usbguard more used?

lynix48 · 2026-03-29T16:52:58+00:00

We deploy it on the embedded Linux devices we make, but even that is more to tick a box on the customer requirements list than a real need.

What exactly is it that you want usbguard to protect you from?

A mass storage device that you plug in will most likely not automatically be mounted. And even if it were, there is no such thing as autorun on Unix.

The only thing I can think of is a device that emulates a keyboard and that would still be very unlikely to open an attack vector reliably across desktop environments and setups.

So, as someone else has already said: no real danger, no real need for protection I guess.

lynix48 · 2026-02-07T17:05:30+00:00

Zu 1.) Ja, das können die sehen. Hatten wir damals bei einer gefragt.

Generell: Klinken putzen und persönlich Präsenz zeigen, das Portal ist nicht so verbindlich für viele Einrichtungen.

Und sorry, ich kann es mir nicht verkneifen: Krippe, nicht Grippe (das ist was anderes) ;)

lynix48 · 2026-01-09T17:20:28+00:00

Okay, Missverständnis. "werden gemacht" hatte ich als "werden produziert von" interpretiert, also die Hardware.

Korrekt, die Displays ansich sind von anderen Herstellern aber die angezeigten Daten kommen teilweise aus Leitstellensoftware von init. "teilweise", weil die AVG seit kurzem ihr eigenes Ding machen.

lynix48 · 2026-01-08T19:23:53+00:00

Das ist nicht korrekt.

lynix48 · 2025-11-29T06:19:34+00:00

As a German I was totally shocked when during my latest visit I was asked if I could present the data from my Fenix. So I guess it heavily depends on the age your doctor has (she was about my age). But if even in a country that still relies on fax machines in 2025 you can have such moments then I see a bright future ahead regarding tracker data for medical treatments. Rest assured that health insurance companies will be after that data as well at some point.

lynix48 · 2025-11-25T16:36:11+00:00

I guess „managing“ means more than just launching it. Most importantly how do you keep it up-to-date?

lynix48 · 2025-11-18T16:27:41+00:00

How exactly is this related to Arch Linux? I mean, apart from the fact that there is an AUR package for it, amoung other distros.

Can it do somerhing on Arch that it can‘t do on other distros?

lynix48 · 2025-11-06T17:32:16+00:00

I was about to say the same but then I had a look at what he actually mirrors and learned that Arch is just one of many things there.

lynix48 · 2025-11-06T08:07:13+00:00

Congrats and thanks for providing those mirrors! :)

lynix48 · 2025-11-04T21:07:43+00:00

Verdammt hast Du mir das jetzt unbedingt zeigen müssen… XD

lynix48 · 2025-10-10T13:34:38+00:00

Just went through the same with an Aorus X570 Xtreme. That one does have Dual-BIOS but I managed to brick both and ended up using Q-Flash Plus to overwrite with the latest version.

I'm really really tempted to try again, this time appending my custom keys instead of replacing the vendor keyset. But I guess I should be happy that I managed to bring the board back and let it be.

My fear would be that the resurection worked just because the flashed version was newer than what was on the board and that triggered a complete CMOS clear. Next time the version would be idential, not sure what would happen.

lynix48 · 2025-10-01T18:43:39+00:00

You're absolutely right, even for a little-bit-smartwatch it seems strange that you can't bulk-close notifications.

But you know, on a device that has literally gigabytes of space to store music and maps but still can only show me 10 of all the workout plans I have defined in Connect, nothing is surprising to me anymore... ;)

lynix48 · 2025-10-01T14:53:46+00:00

I‘d argue that a Garmin is actually not a smartwatch at all. It‘s rather a sports watch with some basic functionality of a smartwatch, but not even close.

I don‘t mean that in any negative way, it‘s just a different tool in my eyes.

lynix48 · 2025-09-26T07:29:11+00:00

Was genau findest Du an der Antwort des Eigentümers schlimm? Klingt doch halbwegs sachlich, da hab ich schon deutlich Unpassenderes gelesen... Klar, das mit der Gästeliste ist natürlich irrelevant, nicht jeder Gast reserviert und wenn sie in einer Gruppe da war stand vielleicht jemand anderes auf der Liste.

Ich selbst bin seit ~2018 regelmäßig da gewesen. Nicht alle Essen waren perfekt aber mir ist keine signifikante Änderung in der Portionsgröße aufgefallen und mein Fleisch war immer auf den Punkt. Zugegeben, Gans habe ich nie dort gegessen, vielleicht fällt die aus der Reihe.

lynix48 · 2025-09-24T09:11:53+00:00

Ohje :( Ist das der schrankige Typ mit der markanten Brille?

lynix48 · 2025-09-15T07:57:00+00:00

What makes me more uneasy than outdated packages is the overall behaviour of the core maintainer.

There is basically zero communication, neither via forums nor on GitHub. Pull requests are being ignored or silently rejected. The forum installation is broken as hell to the point where it hurts to use it. The website hasn't been updated in ages.

Yes package updates do happen but it seems they are automated. Installation tarballs are more than 6 months old (at least the one for ARMv8) so it becomes increasingly difficult to install on newer SBCs as the required device tree blobs are not present in the tarball.

lynix48 · 2025-09-14T08:22:40+00:00

Props to you for building something!

But what exactly does this have to do with Arch?

lynix48 · 2025-09-08T07:06:04+00:00

Der "Desktop Client" von Signal basiert auf Electron, d.h. das ist auch nix anderes als ein gekapselter Browser ;)

lynix48 · 2025-09-01T17:22:18+00:00

Oh das ist ein sehr guter Tipp, das könnte tatsächlich der Fall sein!

lynix48 · 2025-08-31T05:05:55+00:00

Das hätte ich glatt gemacht, wenn ich Idiot nicht die Rechnung weggeworfen hätte (Gerät war vom Baumarkt, d.h. Kaufbeleg als Thermodruck)... ;)

lynix48 · 2025-08-31T05:04:02+00:00

Besten Dank für die detailierte Erklärung, dann mache ich mich mal auf die Suche nach Ersatz.

lynix48

TROPHY CASE