@modem_down@thebrainbin.org

modem_down @modem_down@thebrainbin.org · Aug 06, 2026

Would this photo of the MIT sailing pavilion be a better banner?

Or do you prefer the tacking diagram?

0

modem_down @modem_down@thebrainbin.org · Aug 05, 2026

Former dairy farm to become 'climate resilient' nature reserve

Cross posted from https://leminal.space/post/38378085

0

modem_down @modem_down@thebrainbin.org in technology · Aug 03, 2026

Replying to @Greg@lemmy.ca

I feel the same way, but can you explain how a VPN would help achieve that in the face of Google’s proposed developer verification scheme?

0

1

0

modem_down @modem_down@thebrainbin.org in technology · Aug 03, 2026

Replying to @Greg@lemmy.ca

How would that help you? The article says, "unverified apps will only be easily installable in the sanctioned countries where verification doesn’t exist." So even if you used a VPN to trick Google into thinking you live in a sanctioned country, you wouldn't be able to distribute apps to those countries without breaking sanctions.

0

1

0

modem_down @modem_down@thebrainbin.org in selfhosted · Aug 01, 2026

Replying to @talkingpumpkin@lemmy.world

If it's a server for self hosting you definitely don't want anything that requires interaction at boot. Depends on use-case. If you only plan to boot it when you're physically present, it's fine.

0

modem_down @modem_down@thebrainbin.org in selfhosted · Aug 01, 2026

Replying to @mazzilius_marsti@lemmy.world

i believe a much better secure layer is something similar to what Novacustoms, Purism attempt to do: verify if somebody else not you try to access the laptop. You're thinking of Heads, which I agree is ideal for supported motherboards.

0

modem_down @modem_down@thebrainbin.org in selfhosted · Aug 01, 2026

Replying to @esc@piefed.social

tang Thanks. TIL about Clevis/Tang.

0

modem_down @modem_down@thebrainbin.org in linux · Jul 31, 2026

Replying to @eldavi@lemmy.ml

I read them before writing my OP. I'm still not sure what you're getting at. Perhaps you could say what you mean, instead of initiating an oblique guessing game.

0

1

0

modem_down @modem_down@thebrainbin.org in selfhosted · Jul 31, 2026

Replying to @talkingpumpkin@lemmy.world

Yes. Here are some common self-hosting scenarios: Home server containing family files: scans, photos, device backups, ... Office server containing business files: sensitive documents, device backups, ... Web or email server containing websites, Fediverse instances, emails, etc In all those cases, full disk encryption (FDE) is a sensible precaution to protect the data in case the server is physically stolen. Linux is probably the most common OS kernel for self-hosting. On Linux, LUKS (Linux Unified Key Setup) is probably the best FDE system. It's mature and reliable. But anyone self-hosting a Linux server with LUKS FDE is faced with the question of where to store the keys. Hardware security tokens (HSTs) are widely considered a safer place for keys than SSDs, HDDs, or USB storage. They follow the smartcard principle: a private key can be written to an HST but not read from it (security vulnerabilities excepted). Instead, they implement cryptographic algorithms to prove possession of the private key. So, anyone self-hosting a Linux server with LUKS FDE should strongly consider storing their private key(s) on an HST. However, there is more than one way to do that. Hence the question in my OP.

0

1

0

modem_down @modem_down@thebrainbin.org in selfhosted · Jul 31, 2026

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or... ##luks ##nitrokey ##yubikey ##security ##linux ##sysadmin ##fde Hover or focus to reveal Sensitive

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283 Which approach do you think is better, and why? FIDO2 HMAC-SHA1 OpenPGP (alternative guide) Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

0

2

0

modem_down @modem_down@thebrainbin.org in linux · Jul 31, 2026

Replying to @eldavi@lemmy.ml

Which of the 4 recipes I posted are you referring to as "this"?

0

1

0

modem_down @modem_down@thebrainbin.org in linux · Jul 31, 2026

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or... ##luks ##nitrokey ##yubikey ##security ##linux ##sysadmin Hover or focus to reveal Sensitive

Which approach do you think is better, and why? FIDO2 HMAC-SHA1 OpenPGP or this Or do you think there is an even better way to use a hardware security token to unlock drives with LUKS full disk encryption?

0

8

1

0

modem_down @modem_down@thebrainbin.org in climate · Jul 30, 2026

Drought leaves Swiss border lake popular with tourists all but drained

Drought leaves Swiss border lake popular with tourists all... Hover or focus to reveal Sensitive

Lake Brenets, a long, winding lake on the Swiss-French border, is all ‌but drained and has been unnavigable for more than a week amid a prolonged drought that has hit waterways across Europe. The lake is normally thronged with campers, swimmers and canoeists in the summer, while three boat companies typically ferry thousands of tourists across it each season. But this year it is virtually deserted as water levels in the River Doubs, which ⁠feeds it, have fallen sharply following months of scant rainfall and three successive heatwaves, the latest of which is still under way.

0

modem_down @modem_down@thebrainbin.org in fdroid · Jul 30, 2026

Replying to @noahraketic@infosec.exchange

@noahraketic@infosec.exchange Thanks. I looked it up. I guess you mean What We Talk About When We Talk About Malware. To me, it seems fair. Google is demanding that Android developers contractually undertake to never distribute "malware or other harmful applications", without defining what those terms mean: With the absence of any formal definition, standard, or guideline, it implicitly states: …and “malware” means whatever we say it means. The F-droid post points out that ADV, Google's new Android component, acts against the interests of users and developers. In this sense, it meets Google's intentionally vague definition of malware. Moreover, users were effectively tricked into installing it without informed consent, in the guise of an ordinary update. In this sense, it was distributed like a Trojan horse.

0

1

0

modem_down @modem_down@thebrainbin.org in fdroid · Jul 30, 2026

Replying to @noahraketic@infosec.exchange

@noahraketic@infosec.exchange How and where did F-droid lie?

0

1

0

modem_down @modem_down@thebrainbin.org in linux · Jul 29, 2026

Replying to @ranzispa@mander.xyz

it’s the only way! TBF I was trying to follow the docs, aber ich spreche kein Deutsch.

0

modem_down @modem_down@thebrainbin.org in linux · Jul 28, 2026

Replying to @modem_down@thebrainbin.org

I overlooked this line from the docs: Benötigt werden cmake, git, libgd und libusb - bei manchen Distributionen (z.B. Ubuntu) sind die Header-Files in separaten Paketen "libusb-dev" die ggf. noch nachinstalliert werden müssen. I should have done sudo apt install libgd-dev libusb-1.0-0-dev before attempting compilation.

0

2

0

modem_down @modem_down@thebrainbin.org in linux · Jul 28, 2026

Ptouch-print compile error: Could not find GD library

Ptouch-print compile error: Could not find GD library #cmake #ubuntu #brother #p-touch Hover or focus to reveal Sensitive

Trying to install ptouch-print: $ git clone https://git.familie-radermacher.ch/linux/ptouch-print.git Cloning into 'ptouch-print'... Fetching objects: 794, done. $ cd ptouch-print/ $ ./compile.sh Found GD: NO CMake Error at cmake/FindGD.cmake:109 (MESSAGE): Could not find GD library Call Stack (most recent call first): CMakeLists.txt:13 (find_package) -- Configuring incomplete, errors occurred! So I thought maybe libgd was not installed, but it is, so where am I going wrong? $ apt list --installed | grep libgd3 libgd3/noble,now 2.3.3-9ubuntu5 amd64 [installed]

0

2

1

0

modem_down @modem_down@thebrainbin.org in technology · Jul 27, 2026

Replying to @Semi_Hemi_Demigod@lemmy.world

@GrapheneOS@grapheneos.social everyone seems to be clamouring for the same thing: add "duress profile" to the roadmap. Keep up the good work.

0

3

0

modem_down

Posts

Would this photo of the MIT sailing pavilion be a better banner?

Former dairy farm to become 'climate resilient' nature reserve

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

Unlocking LUKS with NitroKey/Yubikey: FIDO2, HMAC-SHA1, or OpenPGP?

Drought leaves Swiss border lake popular with tourists all but drained

Ptouch-print compile error: Could not find GD library

Remote instance

Media