OpenBSD admin and ports maintainer

  • 1 Post
  • 20 Comments
Joined 6 months ago
cake
Cake day: May 29th, 2024

help-circle

    • Use a fork of Firefox (librewolf), or a different open source browser
      • even if you modify Firefox to remove all telemetry, Mozilla are bad actors, and will update to add new telemetry like Anonym or Cliqz by default after an update. Unless you really trust your package maintainer, use a fork or a different browser
    • Force a common useragent
    • Disable javascript everywhere, or use a browser without javascript, whenever possible
      • trying to defend against fingerprinting with javascript enabled is futile, even things like your number of cpu threads (navigator.hardwareConcurrency), list of fonts, and variations in canvas rendering can be used in fingerprinting
        • tor browser is the only project I know of that can come close to avoiding fingerprinting with javascript, but even then you’re advised to avoid using javascript with tor browser
      • use 3rd party clients for things like youtube that would normally need javascript




  • Every piece of hardware I’ve used past 2010 or so seems to have just gotten worse and worse, I honestly think I’m cursed.

    2013 (? can’t quite remember), Sager gaming laptop with sli gpu config, gpus drew too much power for the battery (I believe), leading to black screen and reboot. Company feigned ignorance, ran unrelated tests on RMA, Socially awkward at the time and was scared to ask for a refund. Convinced to this day it was a scam.

    2015, desktop computer I built randomly powers off during usage, no errors, not the power supply, unsolved to this day.

    2020-2022 5 cheap ebay thinkpads, all with one hardware problem or another. My beloved T60p was the last to go.

    2022-present Framework laptop, ports suffer intermitent failure, webcam microphone stopped working. Replaced webcam/microphone, works for a day, breaks again. Unsolved.

    2022-preset Steam deck, had to RMA 3 times for various hardware issues, works now, but the right trigger still rubs against something but I can live with it. Spilled coffee on the left trackpad so it’s sticky; that’s my fault though so I can’t blame it on the curse.



  • Set your system-wide DNS to a provider in a country with better privacy laws. I use quad9. Disable DNS over HTTPS (DoH) in Firefox if you have it enabled, as it sends DNS queries to cloudflare, which may be even worse than sending your DNS queries to your default ISP servers (also disable DNS prefetch). If you’re hosting a DNS server, you can also set up a DNS blocklist if you use something like unbound or unwind.

    I would get away from proton, they’re too popular and too much of a target, and most critically they fucked over a climate protestor, and then removed “we do not keep any IP logs” from their privacy policy. If they’re willing to lie about that, what else are they willing to lie about? If you want a fun project, set up your own mail server. Easy (relatively speaking) to do on OpenBSD with a cheap VPS provider like buyvm. Password manager is easy enough to write yourself with an openssl script, or you can use some other open source password manager if you hate scripting. Storage should be cheaper on a VPS than whatever proton is providing, and you can even host your own VPN (though this has potential to be easily routed back to you unless you serve multiple users with your VPN).

    Disable javascript everywhere you don’t need it. I use qutebrowser, and javascript is disabled by default, and I only reluctantly enable it per-domain when I absolutely have to.

    Use 3rd party open source clients for propietary apps, or move to open source ecosystems (like lemmy!).

    I would get off of Android all together, and switch to a real Linux phone, if you can tolerate the jank. I don’t trust Google not to put a backdoor in the Android kernel (which forked all the way back at Linux 2.something). You could also try switching to a dumb phone, but those still run some amount of spooky blackbox software and I wouldn’t totally trust it from any major phone manufacturer.





  • Why do people always ask this kind of crap?

    Fuck you too. 👍

    It will contain software that is also centrally licenced so that your boss doesn’t have to figure out how to pay for thousands of dollars of software, they can just tell IT to bill a licence for software X to your cost centre at $13.75 a month.

    To think they could be paying nothing for better software instead.

    It will contain company sensitive data which will usually be encrypted by bitlocker, whose keys are stored with your domain account.

    As soon as you need to decrypt that data, you’re at best trusting that data to the NT kernel if you use a memory filesystem.

    It will have a domain login that is your corporate identity which will usually require multi factor authentication.

    I’ve never heard the terminology domain account. Does it prevent you from using a different OS?

    It will have the usual Teams/Outlook/SharePoint stuff with a centralised calendar and contacts for your company, and likely security classifications for all the communications you do through it, allowing you to join groups, accept invites to restricted groups, and limit access, all linked to your domain account.

    I’d be surprised if there wasn’t some way to get some of these to work on not-windows / not-macos. Either a webclient or Pidgin, the everything client :)

    It will probably have OneDrive, synced to a corporate server, again, linked to your domain account.

    https://github.com/abraunegg/onedrive

    And finally, your work laptop does not belong to you. Wiping it and installing Linux plus Wine and keeping company sensitive data on an unmanaged device will attract the ire of HR.

    If your HR is that cancer I’d try looking for a different company. If they are scared of “unmanaged” devices why are they using a spyware OS.

    Your IT department won’t give a crap. But they also won’t help if anything doesn’t work, such as trying to join a domain to access allllll those domain-linked features with an unauthorised device.

    You shouldn’t be using Unix in production unless you know how to use Unix, I agree.







  • I dislike the paradigm that there are “techy people/programmers” and “tech illiterates/non programmers”. Anyone can develop the skills to properly use unix interfaces given proper training; and I know that’s true because the whole world used to run (mostly) unix on the desktop before corporate took over. Unix doesn’t need to be windowsified/macosified to get people to move over; people need to unlearn the interfaces corporate has brainwashed them with for generations. There are so many more interesting user interfaces than just what Windows and MacOS provide; graphical or otherwise.