monovergent

u/monovergent@lemmy.ml
78 posts · 825 comments

Recent posts

Recent comments

on Encryption help · c/privacy · 2 pts · 10h

If those are your only copies, do buy extra HDDs first thing so you have at least a backup. Preferably then a third copy since otherwise, for a moment, only one copy would exist as you copy encrypted data back to the original drives. Technically, there are ways to encrypt in-place, but don't ever do that when it's your only copy of the data.

Overall, it would look like creating an empty partition on the new drive, creating an encrypted container on said partition (this intervening level differentiates it from an unencrypted data partition), creating the filesystem (formatting as ext4, btrfs, etc) within said container, and copying data into the encrypted filesystem.

LUKS is the best-supported encryption system for Linux. As an avid user of LUKS on nearly all of my internal and external drives, I highly recommend reading the Arch wiki entry: https://wiki.archlinux.org/title/Dm-crypt/Device_encryption. Section 4 teaches setting up the encrypted partition. Once everything is in place, most graphical file managers can handle detecting and opening the encrypted drives as well.

For non-boot drives, I've always used rsync to copy data over. If you use btrfs, then a btrfs scrub afterwards to double-check the copied files. I've never tried to see if I could rsync a root partition and leave it in a bootable state. Though I do have a way to migrate a non-encrypted root partition to encrypted without reinstalling, that's a whole rabbit hole you are welcome to ask me about.

Get a feel for LUKS before you set up the root partition with encryption though, perhaps by setting up an encrypted install in a virtual machine. Recovering a non-booting encrypted install of Linux takes only a few extra commands compared to a non-encrypted one, but if you mess up encryption and lose the key, no amount of commands will save you. So before doing anything I mention here, always have backups.

Would like it more than Signal ideally. But it's hard enough already to get people over to Signal. Couldn't justify how much battery its notification service drained for the few contacts (all nerdy close friends) I had there. That was over a year ago so I'm interested to hear if they fixed the power consumption issue.

Many moons ago I'd struggle to fall asleep quickly, but now I can whenever I want. Even more effective if I think about a task on my todo list I'm dreading.

I don't want to say that it's due to the pandemic, but it definitely became a thing for me during the pandemic.

Side-effects: does not imply that I use this ability to establish a good sleep schedule. Zero productivity on trains and planes; first-class service is wasted due to being conked out.

Which leads me to the question: would you find visual genAI more acceptable if it weren’t commercial?

For sure. I couldn't tell you where inspired, but new, work ends and theft begins, or how model training would be funded without commercial incentive. But I would be more comfortable knowing that companies have not ripped potential profits straight from every artist the model had been trained on.

And I like this kind of discussion. What's bothered me before have been the jabs at the mere presence of AI without deeper discussion as to what qualifies as theft. I haven't found myself buying art even before such AI models. I wouldn't buy or sell images that I know are AI generated. And I pay the electric bill for locally-generated ones as if I were doing any other novelty activity like gaming on my PC. I'm curious, what would you think of local models that can be acquired for free?

For anonymity alone, no. You ought to at least aspire to live the nomad lifestyle first and put up with its challenges, then enjoy whatever anonymity comes from it as a bonus.

If you don't mind apartment living, you could consider the arrangement I had at one point. Private landlord who didn't run background checks, accepted payment in any reasonable form, many tenants, communal mailbox without apartment numbers or names required. Internet, utilities, etc. all rolled into rent and not individually metered. Might be harder to find but they exist.

on What do you want most? · c/asklemmy · 4 pts · 60d

To clear my bucket list of food I want to try. Many items require travelling abroad, so I don't think it'll be completed anytime soon.

As others have said, no because Google's components have very good backward compatibility and will come for your device on its stock OS.

I had other vendors in mind when I first read your question. In a sense, older ones could spy less as a side effect of vendor telemetry servers going dark over the years. Samsung also wasn't as rampant with their spying back then. But either way, such phones would have been long without any security updates.

on *Permanently Deleted* · c/asklemmy · 3 pts · 60d

Bottled water in general. If it's tap water, never with ice, especially at the beginning since whatever pathogens around will be enriched in the ice maker if the establishment isn't cleaning it regularly. If I'm around long enough, maybe a week, I'll probably find out whatever precautions the locals take with the tap water and follow suit.

It's generally fine in major US cities, but do check. It could be anywhere from Flint Michigan water to unregulated well water to being somewhat famous for its purity in the case of NYC. I've lived a few years in a town where the water doesn't pose a health hazard, but the bad taste made everyone buy filters.

on X11 vs Wayland · c/linux · 7 pts · 60d

As someone who has used X11 and Wayland, it doesn't matter for the typical user. If you, like me, have a penchant for some smaller desktop environments like XFCE or window managers, you will be stuck with X11, but many are already working on porting to Wayland.

Couple edge cases for gaming, namely screen tearing on some X11 configurations and certain Nvidia hardware running into issues on Wayland. For multi-monitor or high DPI users, Wayland handles per-monitor DPI and fractional scaling far better than X11. Maybe a couple more edge use cases for remoting into the desktop, but Wayland support is also improving quickly on that end. In any case, Wayland is by design more secure than X11.

it should use the encryption passphrase to auto unlock the keyring after the autologin

It doesn't, hence the need to remove the password. Password only comes back every once in a while, rather than every login. Maybe a bad combination of desktop environment/session manager? LightDM with XFCE in my case.

Meanwhile, I'm fighting to get rid of the password on the keyring each time it comes back by itself. For context, my root partition is encrypted, so it's not a huge deal if the keyring stored on it doesn't have its own password, I think. I set up autologin to avoid a duplicate password, but since the session manager no longer unlocks the keyring, the keyring must have no password else I get a password prompt all over again. There's probably a more elegant way, but I've yet to find it.

Trying to get coreboot to run on the nvidia variant of the ThinkPad T510. I guess it boots now, but I'm probably going to shelve it if I can't get rid of the random freezes this weekend.