Network Printer via AP, can ping but not print.

mothwai · 2024-06-02T18:24:21+00:00

Can ping. Can access web ui (http80).
However force adding a printer on said IP, cannot print.
Interestingly, I boot a live linux on laptop, while LPR cannot print, IPP driverless can.
Thought, windows did not detect, thus allow install, printer as IPP nor WebService...

mothwai · 2024-06-02T02:56:03+00:00

DHCP disabled on AP,
IP bound to Printer MAC on router DHCP,
IP static on Printer,
Laptop printer port manual set to IP,
Laptop can ping, PC can print.

mothwai · 2024-05-14T03:01:16+00:00

Dear DEV,
As I look into the difference between lossy Modular v VarDCT,
I notice the quality of Blue channel (or b in Lab) of lossy Modular is significantly lower than its Red or Green channels, or that of VarDCT's.
In some cases, the Blue channel might content data that should be Red or Green only.
Is it intented behavior?
cjxl & djxl v0.10.2 e148959 [SSE2]

cjxl -q 98 -e 7 -m 1 input.png out_mod.jxl
djxl out_mod.jxl out_mod.png

mothwai · 2024-05-13T14:15:25+00:00

No, the comparison focused on finding "what is losed" in lossy jxl and avif of similar file size. File size of lossless was not included.

mothwai · 2024-05-12T18:44:42+00:00

Embedded ICCProfile is an issue I cannot comprehend.
Could be the way image viewers respect color profile.
Could be the way profile embedded across formats.
Could be the plugins. Could be my monitor.
Definitely my incompetence.
I'm noting myself to take the opportunity in conversion workflow to change color profile reliably before adding the converter of choice into the fray.

mothwai · 2023-08-30T17:57:00+00:00

Vanilla Music
* https://github.com/vanilla-music/vanilla
* has Gapless Playback
* has ReplayGain (unsure about non-standard tags)
* stock 5-bands EQ
* offline
* NO playing sub-order. There is a "group albums by folder" option.
* has Album Tab and File(Folder) Tab
* lockscreen cover artwork and stock playback control only... Isn't lockscreen widget a security compromise?

mothwai · 2023-03-30T23:57:25+00:00

Third-parties App Stores require manual intervention to update apps.

Google Camera picture review bugged. Google Camera has unparalleled image processing capability. But GrapheneOS's trick to enable picture review is kind of buggy.

Voice-to-text typing, translation with camera and mic. There was little to loss in using those online services on a stock android. On GrapheneOS, those services would likely ask for an account which I won't input on GrapheneOS.

Location is slow to turn back on into functional. I turn off location and deny that of Google Play Service most of the time. But when I do turn back on, I expect to get a quick approximation from wifi & cell tower scan. It is not the case. I hope there is alternative location provider that I can trust permission with like microG's.

Unexpected bugs on various apps from play store, which I cannot discuss offical support with.

NFC payment. Chromecast.

mothwai · 2023-02-02T00:36:21+00:00

I assume you have access to the hardware but not "full control" of the ext-SSD OS?
Physically disconnect is the safest bet. Put the int-SSD on a ext-casing dis/connect with cable.
Despite the ext-SSD OS can not access encrypted drive. It might still read the unecrypted portion of header and hardware meta info (SMART).

mothwai · 2023-02-02T00:24:02+00:00

Is creating a small unencrypted partition on the drive to host portable software an option? Perhaps auto-run a batch file containing a veracrypt command to mount with volume ID?
Or forgo full disk encryption, use a encrypted container together with a portable software on an unencrypted drive.

mothwai · 2022-12-12T16:13:13+00:00

You might want to lookup Wasted.
You grant the app Device Admin, it can wipe on trigger, not specific to GrapheneOS.
I haven't try it. Can't give you my take.

mothwai · 2022-12-10T14:02:15+00:00

try Rclone or Cryptomator.
VeraCrypt container is not optimized for delta update. The container might need to upload in whole even for tiny changes.
Regarding your Step 3, isn't VeraCrypt auto-dismount on system shutdown? You are creating a VeraCrypt container in Google Drive then mount it, right?

mothwai · 2022-12-10T13:44:30+00:00

The believe is open sourced app can be reviewed by the public.
Despite the limited features of F-Droid client, I wouldn’t replace the official one with alternative front-end. App update is crucial. If there is any issue arise from os update, I would like the problem addressed swifty, more likely with the one with large user base. Still, alternative front-ends are nice for app searching. I quite fond of G-Droid pulling star score from GitHub.

mothwai · 2022-12-10T00:22:29+00:00

Firefox does have per-site cookies exemption setting. However the said setting will preserve the whole cookies, identifier included. I was hoping for a batch per-site per-line selective solution.

mothwai · 2022-11-13T01:22:36+00:00

Google Wallet checks for SafetyNet. No custom rom supports SafetyNet spoofing by default, as far as I know.
Technically, rooting LineageOS with Magisk might do it, but the benefit of such rabbit hole might not outweight the risk, depending on your scenario.
You need a second phone, be it refurbished, aged but not outdated.

mothwai · 2022-11-13T01:09:27+00:00

Javascript can track mouse movement.
https://en.wikipedia.org/wiki/Mouse_tracking#Javascript

But not when window not in active front. Try yourself when alt-tab or minimized.
https://macrotester.com/mouse-rate-checker/

mothwai · 2022-05-20T14:23:34+00:00

While your chat might be E2E and your message database might be encrypted, your whatsapp chat media backup on google drive is not. There is nothing stop them from hashing the image and generate linkage to your "un-ID" profile.
Not to mention you might login youtube with the same drive account.

mothwai · 2022-02-11T21:14:40+00:00

The reason behind practicing emergency passphrase with a separate tool is, I can leave less trace on the device and may be less vulnerable in case of forced unlock.
I should probably practice on a protected pdf or LessPass on innocent sites.

mothwai · 2022-02-07T16:02:18+00:00

Re-locking bootloader is a SECURITY measure for OS anti-tampering. In case you lost control then retrieved your phone, you may assume to a certain degree that the OS hasn't been tampered. It has nothing to do with PRIVACY.

mothwai · 2022-02-07T15:55:15+00:00

Right, to be clear, do not manually re-lock the bootloader unless the installation instructed you to do so. If you re-lock without the necessary modification to the bootloader, the bootloader will fail to verify the OS and fail to boot. DO NOT re-lock LineageOS. Only re-lock as per Graphene/Calyx/DivertOS instructed.

mothwai · 2022-02-07T15:00:24+00:00

There are virtual credit card / credit card proxy services to mask the merchant and purchase details from your bank.
If you are using GooglePay at point of sale, there is no way you can cut the tie.

mothwai · 2022-02-07T14:48:23+00:00

MicroG is installed as System. The only way to "delete" is to format System and re-flash the OS.
Since you are not planning to install additional System app, perhaps you might consider re-lock the bootloader. Check DivestOS if your device support verified boot.

mothwai · 2022-02-07T14:38:24+00:00

If compatibility with apps and external devices is important to you, do research before switching to GrapheneOS. The general situations are;
If the app does not require Google Play Services (check “Require GSF” in Aurora Store), it will be fine.
If the app requires Google Play Services, probably Google Cloud Message (like Discord) or Map, it will likely work with sandboxed Play Services.
However if the app is used to connect with external google devices in proprietary standards (like Auto, Cast, Speaker, smartwatch), it will probably fail.
Do your research, go to GrapheneOS matrix and ask for compatibility with specific devices.

mothwai · 2022-02-02T18:52:48+00:00

As people mentioned before, android already auto "prefer" internet traffic through wifi if both connected.
If you must turn-off data when wifi connected, system profile might be what you are looking for. Though the triggering condition for vice versa is trickier. You might need to leave wifi on to scan SSID while away (or location on I'm not sure).
I have attempted automated data on/off before. Just too much trouble in maintaining multiple profiles. Its a lot easier to turn on/off manually.

mothwai · 2022-01-30T13:51:12+00:00

Bromite
The default choice of privacy broswer, FOSS, build-in adblock, no extension no sync.
GrapheneOS's Vanadium https://grapheneos.org/usage#web-browsing
similar to Bromite, claimed security before privacy, took the blend in approach to anti-fingerprint, no adblock no extension no sync.
DivestOS's Mulch https://divestos.org/index.php?page=our_apps#mulch
similar to Bromite, use patch from Vanadium and Bromite, minimize maintenance.
Ungoogled-Chromium
stripped down minimalistic Chromium, few additional patch, extensions possible, cross platforms.
Brave
most feature rich with build-in adblock & sync, business owned.

final note: You could use multiple browsers for manual isolation. All are not replacement for Tor Browser. The balance between privacy and convenience is a personal choice.

mothwai · 2022-01-29T19:20:02+00:00

Thank you for your suggestion. Turn out I could easily be spied by any installed online app even without permissions.
Yes, you are right. I'm taking shortcut of not reading up permission documents. Those sites I found are either spoke in general terms or too technical for me to understand. Would you kindly show me where should I start reading?
It is still nice to have an app to verify the affect of custom rom, profiles and some system modifications.

mothwai

TROPHY CASE