• 0 Posts
  • 35 Comments
Joined 2 years ago
cake
Cake day: July 29th, 2023

help-circle


  • Same, I enjoy the classic shared library and package system which I still feel is superior to flatpak versions in most cases, even ignoring the technical aspects of each.

    Tried silverblue once and it just felt more like android to me, and I even found myself using RPM layers almost immediately for core things that dont ship as Flatpak because its infeasible.

    Plus Bazzite has its own release schedule which I feel like slightly removes the benefit of Fedora kernels being cutting edge, with critical packages updated almost as fast as Arch.

    The good thing though is that it’s much more dummy proof, so I would feel comfortable letting anyone use it with zero experience, whereas I only recommend Fedora to those who have an inherent interest in Linux.




  • This one is funny because it 100% still exists somewhere, but I haven’t had the chance to verify it again.

    Okay so basically its a data recorder box (ex: brainbox) that connects to a bunch of industrial sensors and sends the data over the network with your preferred method.

    Builtin firmware gives you an HTTP webui to login and configure the device, with a user # and password.

    I think the user itself had a builtin default admin which was #0, which everyone uses since there wasn’t really much use for other users.

    Anyway, I was looking at the small JS code for the webui and noticed it had an MD5 hashing code that was very detailed with comments. It carefully laid out each operation, and explained each step to generate a hash, and then even why hashes should be used for passwords.

    Here’s the kicker: It was all client side JS, so the login page would take your password, hash it, and then send the hash over plaintext HTTP POST to the server, where it would be authenticated.

    Meaning you could just mitm the connection to grab the hash, and then login with the hash.

    I sat there for like 10 minutes looking at the request over and over again. Like someone was smart enough to think “hey let’s use password hashing to keep this secure” and then proceeded to use it in the compleltly wrong way. And not even part of like a challenge/handshake where the server gives you a token to hash with. Just straight up MD5(password).

    It was so funny because there were like a hundred of these on a network, so getting a valid hash was laughably easy.

    I never got to check if this was fixed in a newer firmware version.



  • They technically already did this with Android which all ship custom kernels and closed source driver blobs.

    Of which Google successfully lobbied the government to keep foreign competition out, which has lead to the soft death of AOSP as everyone else has forked into a new OS or accepts google’s terms to use their gapps suite.

    Best thing about Linus is that he immediately tells these megacorps to f off every time they make a PR with even a remotely questionable purpose.

    If they really want to achieve something technical without scrutiny, there’s FreeBSD right there. Implement it and make a future PR if it actually improves something.

    Otherwise, critical choices within the Linux kernel will affect everyone, and could very easily lead to abuse without any proper moderation.

    Google already has a hit order out on JPEGXL simply because they know that AVIF will save them on cloud storage cost, so they’ve effectively banned it from the browser space since they own Chrome and have enough leverage over Firefox.





  • Ubuntu and Docker.

    Really? Netplan alone disqualifies Ubuntu as a “friendly stable starter distro”, and I can guarantee you that your guide will somehow become outdated with a single new Ubuntu release, or some poor soul who accidentally selected an LTS release.

    Docker doesn’t matter as much, but there’s a reason beyond just FOSS licensing why podman exists.

    Would highly recommend Debian instead.

    I started on Ubuntu similar to this many years ago and both the server and desktop experience was not fun at all.




  • I kinda hate to agree with the other suggestions here, but entry level and even dedicated NAS products are pretty expensive for providing something you can very easily DIY for significantly cheaper even with the latest hardware.

    Was in a similar boat and just ended up taking an old HP desktop and added some cheap HDDs. I ended up playing around with proper Fedora for some LVM cache tricks and running some other services, but the common suggestion for this is SnapRAID and Nextcloud.




  • There’s more *arr tools that aren’t aggregator automation tools than there are aggregator automation tools.

    Also It was only funny when using an existing words like "sonar, “radar”, “lidar”. Jellyseerr is dumb, even Jackett was pushing it.

    I guess it makes it somewhat easier to associate them as part of a group of software, but now we have stuff like Homarr that is entirely unrelated, but still a useful tool.


  • mlg@lemmy.worldtoSelfhosted@lemmy.worldProxmox or Docker?
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 months ago

    Proxmox or even just lazy old KVM GUI for anything that needs to be deployed manually in a VM (Home Assistant, WIndows VM, etc.). Otherwise you can even just spin up whatever manual service you want to run on an LXC container or bare metal host with the correct security settings with systemd and selinux if you want to be extra careful.

    Docker/Podman (the superior one lol) is just an automated deployment system in container form (like Ansible). It great for automated deployment without having to manually configure the installation process and worry about upgrades, changes, etc. You can even easily create your own images on the fly just for the purpose of having it run a single service inside a container.

    Proxmox equivalent would be like using Terraform/OpenTofu to deploy VMs to do the same thing. Its possible, but just not that common because of the reduced overhead with containers, and well supported deployment images with docker/podman specifically.

    Generally speaking, I’ve seen proxmox used more in lab environments were you want to emulate something like a complete network of machines whereas docker/podman has become the defacto server deployment platform.

    You’re just much more likely to find software with a published docker container and default docker compose script than the same thing in Terraform or even K8s/K3s.


  • mlg@lemmy.worldtoLinux@programming.devWhat was your first distro?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    4 months ago

    Brand spanking new Kali linux after it was redone from Backtrack.

    Thought I was cool for 5 seconds until I saw the Kali forums tearing into the thousands of idiots like me who hadn’t touched Linux before but somehow managed to jump through the sketchy Debian installer to load an OS with a metric ton of offensive security tools that none of use knew how to use.

    Eventually played with Ubuntu for home use, disliked it, tried Debian which was nice for server, saw Linus Torvalds uses Fedora for user friendly experience, and ended up there.