[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/mlp/ - Pony

Name
Spoiler?[]
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
Flag
File[]
  • Please read the Rules and FAQ before posting.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


[Advertise on 4chan]


Previous Thread: >>42619956
https://desuarchive.org/mlp/thread/42619956

Discuss:
>Work on any pony and/or tech related projects (You) are working on or learnt about recently.
>Post (You)r pony themed technology (desktops/rices, papes, new devices, software ponies)
>What software and technology do (You) use? (Email, Git, OSes, Messaging, Monero, etc...)
>>
File: file.png (384 KB, 659x358)
384 KB
384 KB PNG
>finally man up and decide to switch to freetube
>the same day all invidious instances are down
>/pts/ gets derailed
>>
>>42637044
Anon, you don't need invidious to use Freetube
source: literally me
>>
>>42637442
Local is broken too
>>
>>42637449
use external player
>>
>>42637451
Okay, that's a good start. The video is choppy however, and I don't seem to have any way of controlling the quality.
>>
>Windows 11 is four years old
wtf? It still feels new for my Debian brain
>Win10 LTSC enters EoL in about a week
WTF
>>
>>42637481
only LTSB 2015.
LTSB 2016 next year
LTSC 2019 in 2029 or something
2021 in 2032
2024 in 2036 or 2034, I don't fucking remember.
>>
File: the horror.png (256 KB, 1263x931)
256 KB
256 KB PNG
>>42637485
yeah just checked the WP, looks like it's just normalfag Win10 and the very first LTS build of Win10
>>
>>42637497
It all really depends on how quickly the software will be dropped since Windows is powered by third parties. Windows 7 had a better run from XP and Vista which were abandoned rather swiftly by around 2015-16 by everything major. 7 still gets updates from some software. I wouldn't trust them security wise though, even though nowadays all you need is a good adblocker since all viruses are now adware.
>>
>>42637520
>I wouldn't trust them security wise though
Anon, you can't trust security with proprietary shitware even if it appears supported
>>
File: IMG_20251007_224343_844.jpg (1.01 MB, 1920x1080)
1.01 MB
1.01 MB JPG
my puter for uni
>>
>>42638030
I like how the placement is done. It's as if AJ jumps across the Earth. Gotta appreciate how the chinks are using earlier season renders. That S1 Luna is beautiful
>>
>>42638030
>wangblows logo
your laptop must be scorched by the flame of freedum
>>
>>42638082
nta but Surface laptops aren't necessarily bad if you want ARM battery life but don't want to use Mac. Their build quality is also better than your average Dell or HP nowadays. The only issue I see for now is the lackluster ARM support for mainstream Linux distros like Mint on it.
>>
>>42638136
>The only issue I see for now is the lackluster ARM support for mainstream Linux distros like Mint on it.
windows arm also sucks
buying arm for general computing is a bad idea desu
>>
>>42638136
https://fedoraproject.org/kde/download

fedora kde has arm support

lol, you might be in luck that the best just works distro has support for it. oh and also gentoo too as well
>>
>>42638160
I don't like KDE.
>>
>>42638187
so go with gnome or some other spin, lol?
>>
>>42638191
I don't like Fedora.
>>
>>42638229
go for armian or arch then
>I don't like them
gentoo
>no
slackware arm
>also no
LFS
>nope
rape yourself
>>
>>42638234
I just want Linux Mint man. If I can't get it, I'll be using winshit 11 ltsc.
>>
>>42638234
nta but gentoo would be the second best choice after fedora for an arm notebook
>>
>>42638250
...if you want them to die after coompiling FireFox
>>
>>42638253
emerge --getbinpkg www-client/
firefox-bin

also, by configuring make.conf one can make gentoo only install binaries instead of source packages if the user doesn't want to compile
>>
>>42638260
>also, by configuring make.conf one can make gentoo only install binaries instead of source packages if the user doesn't want to compile
what's the point of running Genpoo then?
>>
>>42638247
>linux mint
it's basically ubuntu (it's literally based on it) with cinnamon
and iirc ubuntu has arm support

cinnamon is a really downdated looking desktop environment
>>42638266
to create your own system, it's like linux from scratch but with a package manager
>>
>>42638277
Ubuntu enforces snap which I don't like
>>
>>42638277
>cinnamon is a really downdated looking desktop environment
Cinnamon is literally the best GTK-based environment available right now
>>
>>42638282
ubuntu is garbage even without snaps, and systems using it as a base probably have a shaky future as they will eventually have to move to a debian base
>>42638287
qt is better imo
>>
>>42638316
>qt is better imo
Cinnamon being a based GTK environment doesn't contradict Qt's better quality
t. KDEchad
>and systems using it as a base probably have a shaky future as they will eventually have to move to a debian base
Mint has a rather stable Debian base "in case Ubuntu dies" kek
>>
>>42638247
atleast use win 10 why use win11?

>>42638277
also mint has no snaps and LMDE exists


I'm installing gentoo right now, although it is 30 past midnight in my timezone, much past my bedtime
>>>/g/106818514
emerge --ask sys-kernel/gentoo-kernel
just finished running finally
>>
>>42638401
10 has bad touch support
>>
>>42638401
win11 has winget. it actually has a useful powershell now. massive improvement for terminal users, even though I don't use windows but fedora kde instead
>>42638359
>Cinnamon being a based GTK environment doesn't contradict Qt's better quality
this lol
>>
File: 1622643738247.jpg (247 KB, 1992x2172)
247 KB
247 KB JPG
>>42638401
>ponyfag makes a thread on /g/
>there are 0 replies from the fags who make the rest of that board miserable to read
Interesting. Good luck with your install anon, maybe you'll be the blessed one who'll finally build the promised s/Linux/Lunix/g kernel.
>>
File: 2154253.png (1.35 MB, 2200x3600)
1.35 MB
1.35 MB PNG
page 10 bump
>>
>>42638578
>s/Linux/Lunix/g kernel
I just used whichever kernel management method it said was recommended for beginners in the handbook

also yeah /g/ is so bad I lurked it for the first time in a while yesterday and there was thread flood of ebassi which was kinda funny I guess but the other threads weren't interesting to read anymore. I guess overall it's a good thing because I end up spending my time doing more useful things

>>42638466
doesn't win10 also have winget, I never used it so I'm not sure I'm just waiting for XFCE to compile right now
>>
>>42637040
Oh no, brainfuck poner
>>
>>42639511
>doesn't win10 also have winget
Nope
>>
anon with the collection of ponified software come back
>>
File: ponifiedVlc.png (160 KB, 1104x779)
160 KB
160 KB PNG
>>
File: 'puting.png (245 KB, 1280x960)
245 KB
245 KB PNG
>>42638401
neat, you're doing LTO, graphite?
also here: PORTAGE_NICENESS="19" so you don't fry your laptop.
and here FEATURES="candy news fixlafiles unmerge-orphans parallel-install parallel-fetch sandbox usersandbox network-sandbox ipc-sandbox pid-sandbox"
so portage isn't complete vomit and sandboxes a few things you'll have to install those sandbox packages though
Finally, please for the love of Luna, Celestia and mom get eix and setup some aliases for emerge --update @ world and flaggie / whatever it's called nowadays. also don't use grub, it's not worth it. Limine is comfy, systemdboot works too hell even efi stub the whole thing just no more crusty grub
Oh and if they haven't fixed that debian-kernel magic number bullshittery if you're using the dist kernel you'll be in for a hell of a ride.
>>
>>42640216
>no mpv pony
...
>>
>>42640425
Name: Spinwave or Violet Loop

(A play on “media player” and the spinning playback circle motif)

Color Palette (based on MPV logo):

Primary coat color: Deep violet / plum (#9b59b6-like tone)

Mane and tail: Gradient of dark purple magenta white, mimicking the MPV logo’s glowing circular gradient

Eye color: Bright lavender or light pink, echoing the highlight ring

Cutie mark: A stylized play button inside a soft circular glow, referencing the MPV logo directly but pony-ified (rounded, magical shimmer around it)

Species: Unicorn

Why? Because MPV is sleek, minimalistic, and powerful — a unicorn horn can symbolize precision and control (like the command line or advanced playback features).

Personality / Theme:

Analytical, calm, and a little mysterious — often lost in thought “buffering” ideas.

Loves harmony (pun intended) — always finding the perfect rhythm in life.

Known for tinkering with enchanted devices and experimenting with magical “filters.”

Voice has a slightly echoing, modulated quality (like audio reverb).

Design details:

Horn glows faintly in rhythm with a pulsing animation — like MPV’s visualizer.

Tail and mane have soft, blurred edges — slightly ethereal, like an aura or shader effect.

Accessories: Wears sleek silver headphones or a floating glowing ring that follows her (the MPV circle motif).

Aura magic looks like a gradient shader — when she casts spells, a circular pulse radiates outward.
>>
>>42640485
sovl nuke I'm about to emerge and compile mpv literally right now
>>
>>42640398
what does that mean ponyGOD
also I'm already using GRUB it only works in the backup fallback mode thing lol I couldn't get it to work the normal way
>>
File: 1731514028288590.png (2.75 MB, 1098x1096)
2.75 MB
2.75 MB PNG
>>42640691
LTO is some GCC compiler optimization, same as graphite. It's mostly autism, so if you're with the default march=native and O2 useflags keep at it it's fine. though I recommend you don't use -march=native but -march=Ryzen or whatever the wiki says your processor needs. as native needs gcc to guess and that's extra work for nothing
Everything I sent you can put in your make.conf as is.
Portage niceness uses Unix nice to not run every compile job at full priority, so you can use your computer comfortably as it compiles stuff for you.
The features one is mostly quality of life and eye candy.
>>
>>42640691
As for grub, try Limine. It's really straightforward. The Gentoo wiki is also a fantastic resource, use it as much as possible for everything. I'd say it's even better than the arch wiki as it actually explains things and doesn't adopt the idea that you already know everything and just need a refresher.
>>
>>42640691
Finally here. https://wiki.gentoo.org/wiki/Portage_with_Git this will make portage faster to sync.
Sorry for spamming, it's been a few years since I used Gentoo.
>>
>>42640713
>>42640718
>>42640720
thanks will try to do all this tommorow
goodnight thread
>>
File: 305199.png (388 KB, 1800x700)
388 KB
388 KB PNG
>>
Bump
>>
I will try niri now that I have xfce to fall back on and maybe a few other de/wms too
>>
>yalter, creator of niri, no longer uses kirin for his pfp on github
:,(
>>
>>42642079
oh thats the only reason I was going to try it lol
>>
>>42642079
I wonder what was the reason for that change, whether some HR bullshit about looking unprofessional or something else.
>tfw biggest motivation to git gud is to become that guy who's decent in some tech niche and has "inappropriate" pony pictures as avatars
>>42642094
The Kirin (hot) is still barely there on the preview picture in readme.
>>
File: 1732596865116049.jpg (159 KB, 503x502)
159 KB
159 KB JPG
>>42637520
i am using win7 ultimate right now. Modern hardware, SSD, all drivers working and
my god it's so fast, firefox plus ublock for browsing, and supermium.
It buries XP because 64bit support but all the video editing and crap that takes hours on win10 are done so faster. Security is ok as long the network is safe and all bad services are off.
>>
>>42642370
why use win7 when linux and BSD exists
>>
File: pQGreI8ErB.png (770 KB, 1920x1080)
770 KB
770 KB PNG
I generally used Linux on this X260, but my autism got the best of me and I wanted a computer that could be plugged into a CRT TV through SCART HDMI adapter and have custom scaling. It's a bit odd to use W7 on a 2016 laptop, but it's fully supported so why not challenge myself and see how far can the baby duck OS go 5+ years after Microshaft discontinued supporting it. It kind of reminds me of the time when I used to daily drive a Pentium 4 PC with Windows XP and AGP ATi card by mid 2016 (although it was more horrid, W7 on the other hand is perfectly usable and smooth as butter).
>>
>>42643147
fair enough I only got one device I don't think of SOVL like that
>>
>>42643157
I've got two, a T470 and X260. I was very reluctant about moving it to Windows 10 LTSC, but I guess it won't hurt to have a spare Windows PC at home.
>>
File: 1746792043139160.jpg (1006 KB, 2228x2228)
1006 KB
1006 KB JPG
It is a little strange to have full speed on a 50hz TV but I guess today's computers and the signal converter aren't as restricted as a video game console that was purposefully downclocked to be able to play properly.
My Trinitron has been acting up since the last year and it needs a slap to correct the picture from time to time. I also have a Daewoo which works fine but has some color bleeding (I think that's what they call it?) And thus I settled on this chink CRT called Electro Co. Couldn't get any proper details about it, but I think it's from mid 2000s, maybe even around 2007-2008? It lacks the remote, but I was able to access the menu by pushing two buttons together and I adjusted the colors to be better. The OS is barely readable but what matters are the movies and games (Win 10 was less readable, I guess its font rendering is worse).
I don't think there is a way to manually scale your picture on any Linux DE though. This is where Windows for a change wins for me, as it practically gets dealt with overscan issues.
The tv has a few scuffs on the plastic, I'll try wiping them down but I think I might put on some stickers instead. I'm glad the glass is in perfect condition. I got this TV for free about 6 years ago, it was meant for the garage but it was never configured.
>>
File: 1649499857896.gif (476 KB, 441x443)
476 KB
476 KB GIF
>>42643147
>>42643555
>Kosz
but enough about your waifu
>>
File: 1745634952777352.png (124 KB, 1024x1024)
124 KB
124 KB PNG
>>42643559
Trixie isn't for everyone and I completely get that. She's an asshole just like me. She sometimes regrets it just like me. She's cool for that.
>>
File: DSC05472.jpg (3.94 MB, 4000x3000)
3.94 MB
3.94 MB JPG
>>42638030
sweet. which one? ive got the surface pro 7 and decked out in stickers (on the right)
>>
>>42638466
>>42639734
>https://learn.microsoft.com/en-us/windows/package-manager/winget/
>The WinGet command line tool is only supported on Windows 10 version 1809 (build 17763) or later
and 1809 is a windows build from 7 years ago, which i doubt anyone is even still on, but the latest versions of 10 (21H2 & 22H2) should support it. The difference is that w11 comes with it already and on 10 you have to manually install it.
>>42640485
cute mare! i really like her mane ^:)
>>42642370
>>42643147
based. i know very few people still using windows 7, especially maining. Only time I ever mained 7 was on an asus laptop a few years ago before upgrading it to 10 with a 7 skin due to the laptop not officially supporting w7 (officially advertised win8). I wonder if that spike in windows 7 users seen on statcounter will have some momentum behind it or not. A 2% to 9% jump is two months is some significance given w7 has been EOS for almost 6 years.
>>
>>42643562
NTA She has the cutest design in the show, that's it. I genuinely don't understand how anyone can like her. More power to you, if she makes you happy then I'm happy.
>>
>>42644100
It's the LCD version of surface 11. Got massive edu discount thanks to polish gov. After installing 11 ltsc works like charm
>>
>>42644240
very nice. i got mine off ebay for a decent price. i have 10 iot ltsc running on it like all my other systems, but the only downside of that is that the latest drivers for the surface 7 will only work on 22H2 and nothing else, so I cant use the official driver package
>>
>>42640485
This is just Amethyst Star
>>
Ante up!
>>
>>42644689
hello fellow xfce god
>>
>>42644689
blackjack spotted!
>>
we're up baby!
>>
>>42640691
I have a problem. I wanted to try KDE so I asked chatgpt like the retarded zoomer I am,
THEN I opened the docs while the command GPT told me is already running:

[7] default/linux/amd64/23.0/desktop/plasma (stable)
sudo eselect profile set 7
sudo emerge --ask --update --deep --newuse @world

but if I had read the wiki page I could've read the USE flags and changed the ones I care about before emerge-ing

it's so over ponybros
>>
File: 1679481810992581.jpg (279 KB, 1000x1308)
279 KB
279 KB JPG
>>
>>42648941
>dash cloud engineer
>clickops everything
>lazy as fuck
>asks celly to just throw more money towards marezure when stuff is slow
>"what's a kernel?"
>>
>>42647441
>sudo emerge --ask --update --deep --newuse @world
crashed during sleep or something I woke up and the screen was black and caps lock and num lock unresponsive,
I pressed fn to see if it makes any beeps but no luck I even got their stupid app to prepare for it,
so then I hoped it would beep on start up but it didn't beep it just booted normally
then I tried logging in to kde wayland and x11 neither works fully however x11 is "useable" well for debugging atleast
i'm running the same command and just going to use my laptop so it doens't go to sleep
I also took out and put back in the ram once emerge is done running I will then let it sleep and wait a while and see what it does
sudo emerge @world
>>
File: 1734796926820.jpg (1.85 MB, 3120x4160)
1.85 MB
1.85 MB JPG
>>42644355
/g/fwt has the instruction to upgrade 10 IoT LTSC to 22H2.
I know because I told them.
>>
>>42650805
Dear /mlp/pts/
I think I have been filtered but I don't want to install something else, I want to be a /g/entoopony

current problems:
KDE doesn't work luckily XFCE works just fine
I will try to use sddm instead of lightdm to see if that fixes anything
If that doesn't work I will recompile kde

>sudo emerge --ask --update --deep --newuse @world
this recompiled the linux kernel and didn't seem to fix kde so that's great I've been waiting 5 hours for it to complete

wpa_gui requires me to run:
wpa_supplicant -B -i wlp3s0 -c /etc/wpa_supplicant/wpa_supplicant.conf
each time I restart to be able to connect to wifi
>>
>>42651551
I'm installing NixOS, it's so over
postan from live iso
>>
>>42651837
posting from install
#filtered
I'll try again in mid december
>>
>>42651953
Just install Mint.
>>
>>42651999
that's bloated or something

nixos allows me to fresh install in like 20 minutes by saving one file to a USB and running one command post install and as long as I keep all data on NAS/USB drive I can move to a new device whenever I want
>>
File: 2818632.png (2.54 MB, 2000x2000)
2.54 MB
2.54 MB PNG
Install Debian
>>
>>42655673
I really wish that some mainstream Linux distro would take its version naming after ponies.
>>
File: 1673441548387.png (106 KB, 546x504)
106 KB
106 KB PNG
I wish you could change your filepicker more easilly, nemo takes ages when you open big directory for the first time after boot
>>
>>42657813
Is the directory on a HDD? Have you considered just hibernating your system?
>>
>>42657813
>pic
I imagine Twi would have this kind of "special" mind that finds great joy in filling address books with as much info about her friends as possible. Imagine, none of those fields empty.
>>
File: 1734111431207190.png (521 KB, 839x655)
521 KB
521 KB PNG
>no dash work called rainbowdash
>>
File: 2490266.png (543 KB, 2424x2473)
543 KB
543 KB PNG
>>42657833
>Is the directory on a HDD
Yes
>Have you considered just hibernating your system?
No, I forgot hibernation existed, I only ever used sleep mode. I'll try it, but man, that is such a hacky workaround
>>42657880
Kind of unrelated but I wonder if ponies would stay in the innocent 70s-90s era where security was sending passwords over plaintext with unlimited login attempts, their emails and contact info publicly on their hoof servers (finger protocol).

>Of course we send data in plaintext, how else would we read them later silly
>Why do you keep talking about sniffing on wires? They don't smell any good
>>
>>42659456
HDDs are a bothersome bunch considering that they go to bed whenever there's no activity (which is good for their health if they're not a CCTV drives!). I personally don't do anything about it, but if you must insist on 24/7 activity you're going to have to make some script that writes or reads from the drive every minute or so, so it stays up all the time.
I don't know how hibernation might actually affect the performance, but I believe that it might spin up the drive faster since the data on it is already somewhat cached as opposed to a full system reboot. I might be wrong on that however.
Good luck.
>>
>>42659530
Oh I think there was misunderstanding, I have my /home/ directory on the same HDD I doubt it goes to sleep ever, I don't think that's the problem. My problem is that nemo, the cinnamon filepicker, takes ages to list contents of the directory only on the first time I open it after boot. Then it caches it somewhere non persistent and all subsequent openings of the directory are much faster until I reboot PC
>>
>>42659456
If you HAVE to use a HDD, use an enterprise high capacity one.
Relatively speaking, they run so much faster.
>>
>>42650871
thats possible? i thought iot ltsc was capped at 21h2
>>
>>42659530
>they go to bed whenever there's no activity (which is good for their health
No, it's actually terrible for HDD longevity. Look it up, letting your hard disk run 24/7 will make it last longest. At the very least turn off spindown when idle (can be done with APM or EPC depending on the model).
>>
>>42662003
My bad. I've never had the need to do so and I've been using 3.5 drives on USB adapters since 2012. My oldest drive has over 40k hours on it. Generally everything is nice as long as it's not Seagate.
>>
>>42650805
Just use ufed for use flags, it's a lot easier.
>>42652009
Oh well, have fun with nyx, I know nothing about it short of the nyx file and flakes.
>>
Speaking of Gentoo, I spent the anni installing it. Took about a day give or take. Only thing that sucks dicks and got me to go back to arch out of sheer frustration was signing the Nvidia kernel drivers for secure boot.
Holy shit, the Kernel's sign-tool just sucks so hard it's unreal.
I am fully blaming the gentoo dist-kernel for this as well as my dumb as shit UEFI for not noticing the exact same db key and MOK key when I used mokutil was used to sign to god damn Nvidia modules.
>>
>>42662877
Based... wait... what'd ya watch the anni on?
>>
File: dashie.png (1.12 MB, 1500x1300)
1.12 MB
1.12 MB PNG
>>42663831
Thinkpad
brand new
>>
>>42663831
I have a tv and a pc, 'non. And mostly on Gentoo itself too.
>>
File: DSCF5696.jpg (869 KB, 4288x3216)
869 KB
869 KB JPG
i put a tube amp for my desktop speaker for the anni
>>
FreeTube works again!
>>
>>
>>42662877
Okay I figured it out.
Holy shit this is retarded.
I was using the bin kernel. And the bin kernel is a special snowflake that doesn't share private keys with nobody.
Of course this is never pointed out why this is a problem.
And the linux kernel only recognizes the key it had at build time to sign modules.
So you could either rebuild the kernel with your own private key to sign out of tree modules with (Fuck you NVIDIA) OR you have to enroll a special snowflake key as a MOK key via mokutils like on Fedora. And of course you absolutely have to figure out how to make shims work to get your uefi to acknowledge you want to add a mok key.
Fucking circus.
Anyway if any of you want help with secure boot or Gentoo holy Fuck at this point I know the entire wiki of this damn os.
>>
File: 1734402896710828.png (595 KB, 5000x5000)
595 KB
595 KB PNG
>>42664975
I switched to GrayJay already.
>>
File: 1737164451761936.png (644 KB, 5000x5000)
644 KB
644 KB PNG
>>42665361
>proprietary license
automatically worse than (now fixed) barely functional Freetube
>>
File: 2034156.png (488 KB, 2000x2000)
488 KB
488 KB PNG
>>42660636
I use HDD because it's much cheaper per TB, enterprise HDD sounds expensive I might as well go for SSD at that point. But like I said, the speed is usually not the issue it's only the first opening that takes ages
>>
RISEE MY THREAD
>>
>>42665224
What is the point of enabling secure boot though I just skipped it when I installed Gentoo

>>42664886
idk anything about speakers but this is sovl

>>42655673
I might consider testing or sid ev&oe I want Trixie
>>
File: 1746616568276060.jpg (77 KB, 800x1140)
77 KB
77 KB JPG
>>42668149
Autism.
Also I like the idea of everything being signed with my own key for security reasons.
>>
Lenovo Thinkpad L13 Gen3/i3-10110U/13"
£130

Lenovo T480S/i5-8250U/14"
£135

T480 i5-8350U £159

Lenovo X230/i5-3210M/DVD-RW/12"
£105

Lenovo X390/i5-8265U/13"
£115

Which one T480 T480S and X230 support libreboot, X230 is what rms used to use o algo and the L13g3 is newer + X390 wildcard
For a CS student (the greatest programmer that has ever lived)
>>
>>42668241
x230t to draw ponies, (and for maths lessons in your course), and canoeboot (libreboot with less binary blobs)
>>
>>42666244
Generally using HDD for OS is silly. 500GB SSDs are very cheap nowadays (albeit they're often without DRAM).
>>
>>42668164
>Autism.
That's fair. I used to want secure boot too, but I never bothered, and now since I've got sour grapes it got me wondering about the actual security benefits.
It's mainly supposed to defend against evil maids, right? Yet at the same time UEFI generally allows you to enroll your own keys. Is there anything actually preventing an evil maid from signing a malicious keylogging kernel with her malicious key and switching the keys enrolled in UEFI to allow boot?
>>
>>42668834
>Mainly protects against evil maid
Yup
>Is there anything preventing an evil maid from signing a malicious keylogging kernel
It prompts you out right, and you have to be in setup mode with zero key to completely compromise everything.
In short it's like installing graphene os. You have to allow the third party keys willingly and in a very obvious manner.
>>
>>42668866
>It prompts you out right
Where though? I admit I've never tried it but I fail to imagine how it could do so in a secure way.
>grapheneOS
If you mean the "this device is booting a different OS" message, that happens for anything that's not Google-signed. This message is only useful if you're expecting to boot stock android and are surprsed with graphene instead (doesn't apply here since you're already booting linux and not stock windows), or if you verify the hash shown on every boot to make sure it's unmodified grapheneos. And the only reason it shows the hash in the first place is because google's key is hardcoded in the TPM, whereas the point of secureboot is to be able to change microsoft's key over to your own.
>>
>>42668921
>Where though
You have to deliberately go to your UEFI bios settings, enable setup mode, and import the key for KEK, PK and DB. As for MOK, what I had to do here, you have to talk to the firmware directly and it will prompts you to import the key and enter a password for the key if it is password protected.
>Graphene
Oh no I didn't mean that message, meant graphene has to load its own signing key into the firmware (that's essentially what locking the bootloader does.
>>
>>42669038
Therefore yes you could fool the user into importing garbage, but you can't just do it without the user giving proper consent.
I'd argue it'd be even easier to just exploit existing secure boot keys if they have leaked.
Like MSI's did a bit ago, you could just sign your stuff with their keys and the bios wouldn't bat an eye. Hence why it's important to remove all default keys and reinstate only the ones you need for your OS.
>>
>>42669038
>You have to deliberately go to your UEFI bios settings
No no but my point is the evil maid will do all that.
Say your PC is out of your sight for a while while turned off. You come back to it and boot. Secureboot passes all checks and your kernel loads. You suspect there may or may not have been an evil maid operating while you were away, how do you check the kernel is actually untampered? Without going into your bios and re-checking which keys are enrolled there, because that's impractical to do on every single boot.
>>
>>42669060
Oh, you mean if someone shows up and does all of that.
Well, let's see, for the sake of argument let's say your bios is not password protected so anyone can show up and mess with it.
First: they'd have to boot from a flash drive, add their keys to your bios, which is already hard short of erasing yours to add more, but let's say somehow they add a kernel module with their mom key here.
They'd have to go to your PC, boot a flash drive, somehow access your unencrypted root, add a kennel module to load, rebuild your whole kernel + initramfs, reboot, enroll their MOK ke manually typing a password, reboot to your os to check it works and finally reboot enable secure boot in the bios and shutdown before you show up.

It's pretty unlikely. And it's not something you can do remotely at all. Plus it assumes you don't have other projections: like password limiting your bios, or encrypting your OS.
Overall, to me it's pretty much not gonna happen due to how complicated it is to pull off.
Not to mention you can outright tell the kernel to not approve any random key via SIG_ENFORCE so even if UEFI says it's all good your kernel can and will tell the module to fuck off (exactly the issue I had with the binary dist kernel)
>>
>>42669091
All in all, I'd say there's a way better solution to spy on you and it only costs you a wrench and a couple seconds of time.
Or you know, you can just tell the user: install my rootkit or else you're not playing vidya.
Or, just show up steal the laptop as it's unencrypted and run dreadpirtates style.
>>
>>42669091
>Well, let's see, for the sake of argument let's say your bios is not password protected so anyone can show up and mess with it.
CMOS battery can reset the password on 99% of motherboards, to be fair.
>it's not something you can do remotely at all.
Yeah but again isn't that the point of secure boot? How would somebody remotely overwrite your kernel?
>>
>>42669132
>CMOS can reset the password.
True, and it will reset your secure boot keys as well.
>How would someone remotely overwrite your kernel.
Without secureboot it's trivial. Just patch NTKERNEL.dll or have the user install some patch or something. Secure boot would prevent those patches to load without the user's explicit consent.
It's not a silver bullet by any means, but it makes any of those attacks dependant on you and you alone, which is a pretty good security measure.
>>
>>42669144
Oh I see, so the point is to prevent accidentally installing (or infecting) your kernel, honestly that makes more sense. So my original impression was wrong and so was this anon >>42668866

If you have unwanted software overwriting your kernel files, though, I do think you have a pretty severe problem already, such as unwanted software being able to overwrite and most likely also read your user files too. But maybe it can help against specific attacks, or against carelesness when installing things.
>>
>>42669165
Exactly! That's exactly the point.
>>42668866
But I am that anon, kek.

I guess I'll explain a little better. Because I'm noticing I am forgetting a bit. In my explanation.

What secure boot does is simply checking binary signatures when you boot. Nothing more nothing less.
Then implicitly it does other stuff:

But let's go over how the boot chain works:

UEFI > BOOTLOADER > KERNEL > USERSPACE

First your computer starts the UEFI then that looks for a bootloader. What secureboot does at this stage is verify the bootloader is signed by the keys you set.

Then the bootloader checks the kernel signature if it is setup to do so, 99% of the time, it is and leaves the rains to the kernel to do it's thing.
As an example this is how the apple tv first gen was hacked. The bootloader was checked by the firmware but itself the bootloader did not check for the kennel at all so you could just call a file boot.efi and it'd boot that without questions.

From that point the kernel then can choose to verify the modules it loads via SIG_ENFORCE so no unsigned modules you haven't personally approved load.

This whole chain makes sure everything is who they say they are, this is what I was pointing to when talking about evil maids.

Else, in its most basic state where only the bootloader and kernel are signed, all that happens is just tamper protection as you mentioned without any further security.
All in all, it's like TLS, verifying trust.

I hope this is a little clearer.
>>
>>42668576
I think one person has bought up every X230T and is selling them for the price of TWO X230 with libreboot and coreboot installed, where else can I look, I tried ebay and cex but cex only has 12 and 13 inch X230 for £105 and £150 with the higher spec i5 and bigger screen. Where can I buy "ewaste" so I can get it for like 2digits price instead of getting scammed on ebay

I think I'l just deal with the system freezing and stick with my original plan to get a Framework in mid december and install gentoo then

>>42669233
Perhaps I'll setup secureboot this time too
>>
>>42669471
Welcome to the autism, kek.
Else if you have a supported Thinkpad and you want to be mega autistic, you can try HEADS https://trmm.net/Heads/
>>
>>42669505
I have L15g1 with some sort of issues that the hardware scan in BIOS didn't detect (it happened across different distros, maybe I should test a BSD? but I don't want to spend much time on fixing it and I can use it for the next 2 months after which I can get a framework and maybe a x230T
>>
>>42669233
>this is what I was pointing to when talking about evil maids.
An evil maid is an attacker that has physical access to your PC, and can freely modify your data before you return. So my point regarding evil maids was, if the root of trust is in the key you've registered in the BIOS, the maid can just reset the BIOS, enroll her own key, and insert her self-signed malicious kernel into your boot partition, which then keylogs and exfiltrates your disk encryption key when you next boot. (Presumably the maid will also have cloned your encrypted data and can thus decrypt it all.)

ARM devices often have sealed or otherwise inaccessible TPMs, so overwriting the root of trust can be very difficult compared to a typical x86 mobo. For example on pixel phones, according to grapheneos,
>The verified boot public key flashed to the secure element can only be changed when the device is unlocked. Unlocking the device performs the same wiping of the secure element as a factory reset and prevents data from being recovered even if the SSD was cloned and your passphrase(s) are obtained because the encryption keys can no longer be derived anymore.
It's very rare for an x86 device to have a TPM that's this locked down or has this much control over the storage.

If there's no physical access, then the root of trust is mostly secure even on x86, but then an attacker has to have remote write access to your disk(s) in the first place to actually modify your kernel, and there are really not many attacks where someone can remotely insert a malicious kernel but can't simply exfiltrate your data. The only exception I can think of is if an attacker tricks you into specifically installing a malicious kernel module, so the attack wouldn't work for any other type of software, but if you're tricked then you'll just sign it with your secure boot key anyway.
>>
>>42669667
>The maid can just reset the bios, enroll her own key and insert her self signed malicious kernel into your boot partition
I agree, yes technically this is possible, but unlikely. If your bios doesn't have any password protection. But, you can just swap your kernel and expect that to work.
The attacker would have no idea about what arguments your kernel needs to boot such as: where is your rootfs, what file system it is, what modules do you need to boot? Etc, they would have to have accessed your pc physically before that to already know all of this. And build an identical kernel, not to mention needing to use root utilities to make that possible.

>Arm devices have sealed or unaccessible TPMs
Not really no, I fully agree with what graphene is saying, but it is the same for x86. Putting your device into setup mode is the same as doing a fastboot OEM unlock in practice.
That being said, yes if they clone your SSD and that is not encrypted then they can build this kernel and boot it on your system with your keys and you'll be none the wiser.

I am not sure where you're getting at?
To me if you have physical access to anything then it's GG for the attacker anyway? Could your explain what your grievance is with the UEFI TPM system?

If cloning your SSD is a factor then you can make your system immutable. That way you're fully mimicking android's security system:
Locked down root of trust
Immutable system
The only missing thing is wiping the system upon changing the root of trust
>>
>>42669735
Oh, one important thing, your keys DO NOT need to be on your system at all. Only the public keys, I think this is what you're having issues with, lel.
You should never store private keys on the system itself, of course then it's akin to leaving the keys on the door
>>
>>42669735
I have two issues:
a) You didn't know what an evil maid was, it's a standard attack name and doesn't have anything to do with kernel modules.
b) Secure boot on x86 seems to me like it gives pretty minimal security. What's the threat model where something could overwrite your kernel or load a malicious module, but doesn't simply have root access?

>I agree, yes technically this is possible, but unlikely.
Evil maids are indeed a pretty unlikely attack, which is why most people get by just fine without caring about them. Even without secureboot, you need to prepare a working kernel for the system, and then swap it out in the boot sector of the drive. To do this, you already need to figure out the rootfs, the boot options etc., secureboot or no. Practically speaking you can get them from the initramfs; encrypted boot can protect against this.

>I fully agree with what graphene is saying, but it is the same for x86. Putting your device into setup mode is the same as doing a fastboot OEM unlock in practice.
I've never heard of an x86 computer overwriting encryption headers of attached storage devices when putting them into setup mode.
>Could your explain what your grievance is with the UEFI TPM system?
On ARM, the encryption headers are stored in the TPM itself as far as I understand it, and cannot be realistically extracted by a normal person. On x86, the encryption headers (e.g. LUKS) are stored on the storage disk, so the protection grapheneos uses is impossible.
>To me if you have physical access to anything then it's GG for the attacker anyway?
To a certain degree yes, but it's a matter of threat models. A normal evil maid attack is possible for a particularly tech savvy attacker without major resources; if your roommate is a wizard and can craft a malicious kernel, he can swap it out on your PC, and secureboot won't stop him as discussed above. But for example on a graphene phone, you need access to electron microscopes to open up the TPM and physically access the key data in there, there is simply no way your roommate could pull it off no matter how tech savvy he is; you'd need to be personally hunted by CIA agents with a LOT of funding.

>>42669743
No, that's not relevant at all, you must be misunderstanding me completely if you think I thought you'd need to store private keys anywhere. I'm assuming your private keys are staying completely secure.
>>
>>42669818
>You didn't know what an evil maid was, it's a standard attack name and doesn't have anything to do with kernel modules.
I know what an evil maid attack is, anon. To me it's just not necessarily a physical access attack. The definition I always heard of it was mainly used in relation to tor, where it doesn't necessarily involve physical access.
That being said, your definition is absolutely correct, just stricter than what I thought, my apology..

>Secure boot on x86 seems to me like it gives pretty minimal security. What's the threat model where something could overwrite your kernel or load a malicious module, but doesn't simply have root access?
The main point behind it is to prevent tampering and giving root of trust. It is not a mean to deter attackers. Just like TLS ensures you don't get MITM'd secureboot aims to do the same.
I could direct you to googl.com and your browser wouldn't bat an eye if the cert I used was signed by an appropriate CA, same if secureboot was to load a binary signed with trusted keys.

My main point towards secureboot security is that, if you create private signing keys to sign binaries then enroll public keys inside the UEFI it becomes impossible for an attacker to boot unsigned code on your machine due to this chain of trust between UEFI, the bootloader and kernel, no matter how hard they try, unless they get your private key.
This however, as you mention, has its limits. Mainly the fact secureboot in itself does not wipe the rootfs if trust is lost as it simply does not have that capacity. And to me this lack of wipe is what distinguishes it, in practice. from what we see on android or iphones.

>Evil maids are indeed a pretty unlikely attack, which is why most people get by just fine without caring about them. Even without secureboot, you need to prepare a working kernel for the system, and then swap it out in the boot sector of the drive. To do this, you already need to figure out the rootfs, the boot options etc., secureboot or no. Practically speaking you can get them from the initramfs; encrypted boot can protect against this.
Indeed, secureboot, on its own is not enough, encryption is still necessary.

>I've never heard of an x86 computer overwriting encryption headers of attached storage devices when putting them into setup mode.
this is not doable without the kernel doing this work. UEFI cannot dictate this and it is up to the OS to do so. Basically your kernel should have an option to detect this change in secureboot keys. Or, like what windows does with bitlocker, prompt you to reenter your bitlocker key, not pin, on secureboot changes which is an acceptable compromise.

cont
>>
>>42669818
>On ARM, the encryption headers are stored in the TPM itself as far as I understand it, and cannot be realistically extracted by a normal person. On x86, the encryption headers (e.g. LUKS) are stored on the storage disk, so the protection grapheneos uses is impossible
yes and no, most times yes LUKS headers are on the target device, but it is possible to relocate them to the TPM theoretically, I have no tried this for disclosure, but I don't see why not.

>To a certain degree yes, but it's a matter of threat models. A normal evil maid attack is possible for a particularly tech savvy attacker without major resources; if your roommate is a wizard and can craft a malicious kernel, he can swap it out on your PC, and secureboot won't stop him as discussed above. But for example on a graphene phone, you need access to electron microscopes to open up the TPM and physically access the key data in there, there is simply no way your roommate could pull it off no matter how tech savvy he is; you'd need to be personally hunted by CIA agents with a LOT of funding.
That's where I lose you, anon. I don't understand how your savvy roomie would be capable of doing this with secureboot. As, again, the private key to sign modules is secure.

>No, that's not relevant at all, you must be misunderstanding me completely if you think I thought you'd need to store private keys anywhere. I'm assuming your private keys are staying completely secure.
Cool, I just wanted to make sure, kek. The private key should always stay secure
>>
>>42669961
>yes and no, most times yes LUKS headers are on the target device, but it is possible to relocate them to the TPM theoretically, I have no tried this for disclosure, but I don't see why not.
NVM I am full of shit, kek. I am doing just that with systemd-cryptenroll, disregard my previous post I suck cocks haha.
>>
Does this matter if I have a maid computer (always in my pocket, no one except me will ever have physical access.)
>>
>>42670066
It does unless it's a pony maid.
>>
ofc I am a pony maid, can I go without setting up secure boot? it seems like a lot of effort compared to just making sure I don't give anyone physical access to my device
>>
File: 1745412477262812.png (601 KB, 1200x1200)
601 KB
601 KB PNG
>>42670095
You don't need secure boot then, you already have pony boot, the best kinda boot
>>
>>42669941
>To me it's just not necessarily a physical access attack. The definition I always heard of it was mainly used in relation to tor, where it doesn't necessarily involve physical access.
I had never heard of it as a non-physical attack, but if it's actually used that way then fair enough, I may be the retard here.

>The main point behind it is to prevent tampering and giving root of trust. It is not a mean to deter attackers.
I don't get what you mean here. Isn't "preventing tampering" literally deterring attackers? If there are no attackers, what's the point of root of trust?
The point of TLS for example is very much to deter attackers. It has mechanisms to try to avoid rogue CAs (high barrier to entry, immediate expulsion on malicious behaviour), which are imperfect but generally good enough that it has worked out in practice so far.

>if you create private signing keys to sign binaries then enroll public keys inside the UEFI it becomes impossible for an attacker to boot unsigned code on your machine due to this chain of trust
I agree but my point is that
>if the attacker is remote
If he wanted to boot code, he'd have to run code first, but if he can run code on your machine why would he care about booting?
>if the attacker has physical access
This goes into the next point:
>That's where I lose you, anon. I don't understand how your savvy roomie would be capable of doing this with secureboot. As, again, the private key to sign modules is secure.
If the roommate has prepared a malicious kernel that would work for without secure boot, the steps to bypass secure boot would be
>reset CMOS if the bios is password-protected (not necessary otherwise)
>generate a keypair
>sign the malicious kernel with his own keypair
>enroll the malicious key into secure boot
>proceed with the normal attack, i.e. replacing the kernel in the boot sector, as he would have if secure boot wasn't there
Or actually I'm retarded, for that matter, he could just disable secure boot in the BIOS rather than changing the keys enrolled.

You would notice next time you upgrade the kernel and signing no longer works, but by that time your rommate has accessed all your bitcoin wallets and set up blackmail with your pony porn.

>>42669989
This is cool though, I hadn't realised this was an option. Is there a way to set this up to wipe the headers if the secureboot master key is changed or secure boot is turned off? That would actually make it pretty damn secure and would make secureboot worthwhile in my view
>>
>>42668576
>canoeboot
trannyware + canoe doesn't support anything past core 2 duo machines
>>
>>42670263
isn't it made by the same person as libreboot though (I believe the same person also makes vimuser.TLD i dont remember the tld) or are you saying I should use coreboot instead or that my boot doesn't matter and I should just get the best laptop/£
>>
>>42670263
https://vimuser.org/
>I am the founder and lead developer of the libreboot and Canoeboot projects
>>
>>42670389
>>42670400
Not him but libreboot is trannyware. It's a basement autistic type of tranny rather than a grooming activist type of tranny though so you do you.
>>
>>42670389
>>42670400
qrd
>Francis Rowe is a tranny
>hosted his castration operation on vimuser.org
>etc etc etc
>libreboot
>rms-certified bootloader
>Rowe made money by selling librebooted systems
>can't sell many because good luck finding laptops from 2008 lmao
>also in debt because of his castration
>so needs cash
>"minimized ME isn't a problem, m'kay?"
>creates osboot, libreboot with blobs
>later just changes libreboot to osboot
>sells modern laptops with his coreboot >>>distro
>Stallman and FSF stop recommending libreboot because blobs
>Francis makes canoeboot just to satisfy Stallman-pilled users
>>42670416
>It's a basement autistic type of tranny rather than a grooming activist type of tranny though so you do you
he supports Drew DeVault, nuff said
>>
>>42670427
I thought Drew "one of the greatest programmers that ever lived" DeVault was a /g/entooman doe
>>
File: soyjak phenotype.png (183 KB, 296x296)
183 KB
183 KB PNG
>>42670433
>/g/entooman
he's /u/ and reddit
>>
I will almost certainly be getting a Framework , two months from now

>>42670439
>he's /u/ and reddit
as in the Yuri board?
>>
>>42668241
The T480 is a solid machine. I think the S model might be shitty but I forgot for the T480 specifically, look it up.
L series looks gay, thinkpads can be pretty mediocre outside of the mainline business series.
X230 is IMO too old nowadays for serious programming, you can do better especially for the price. It's not quite unusable yet, especially for a student who won't be working on massive codebases, but I don't recommend it. You'll notice the slowness even on just modern websites.
I don't know anything about X390.

I recommend also checking benchmarks for the processors to see if there are big differences, e.g. I'm not sure how the L13G3 compares to the T480. If it's significant you might consider going for it, better CPU is nice for programming stuff.
Also check RAM, especially on newer models it's soldered so if you get an 8GB model you're stuck with that. On the T480 IIRC it's unsoldered (but look it up to double-check), so you can upgrade it, but if you need to do that factor an extra £30 or so into your price. Also factor SSD upgrades if needed/wanted (less than 1TB is annoying, though you could get by if it comes with a 500GB one and you really wanna penny-pinch).
>>
>>42670442
>as in the Yuri board?
yeah, he had it bookmarked
>>
>>42670427
>he supports Drew DeVault
Fair enough, I haven't kept up on the latest tranny drama
>creates osboot, libreboot with blobs
The fuck, isn't that just coreboot then? The entire point of his project was to deblob coreboot

>>42670433
No his entire personality is simping and white knighting for trannies and "marginalized folx".
>>42670442
>I will almost certainly be getting a Framework
If it's because of the current drama, hold off and wait a bit and see whether they hold steady, there's a very non-zero chance they'll give in to pressure and backtrack on this, bending the knee to the trannies.
In general framework is somewhat mediocre in my opinion, for the price you're very likely better off buying an almost-new thinkpad (T or P series). Only reason to buy one would be if they continue being based.
>>
>>42670453
>The fuck, isn't that just coreboot then? The entire point of his project was to deblob coreboot
He positions osboot/modern libreboot as "distro" of coreboot that's "easier to install"
(tbf he minimizes blobs, but anyone can use me_cleaner to do it themselves on corebooted systems)
>>
>>42670453
>If it's because of the current drama
no it's not because they contain hitler particles it's because I can get a significant discount on it, I was only considering the ThinkPads because of LibreBoot/CanoeBoot and they are rather cheap, but I never thought if there was a use case for librebooting? What is the use case except my bios is libre now?
>>
>>42670504
I don't want to spend a lot of money so the significant discount on the framework makes it the highest value compared to any other device even used thinkpads, is there really no use case for libreboot it's the only reason I wanted T480/X230T apart from the fact I have a thinkpad currently
>>
>>42670234
>Isn't "preventing tampering" literally deterring an attack
The point of secure boot alone is to verify that you're booting untampered binaries. That is all.
I realized I confused it / overreached it a bit by meddling it with measure boot. Which itself aims to prove to you you are indeed running the correct os drivers and possibly rootfs.
My apologies.
>The point of TLS
At its core TLS is just so signing and proving the website you are visiting is who they say they are not so much security, don't get me wrong the encryption is nice to avoid MITM, but it doesn't negate it.
For example if the website you are visiting is not terminating TLS then you're at the mercy of whoever is in between no matter if your browser shows a padlock.
This is exactly what cloudflare does, you connect to 4chan.org, but in fact you're going to cloudflare first and 4chan is forwarded to you.
Avoiding rogue CAs doesn't happen, the only way to do so is if the powers that be agreed on who they put in their cert bundles to the os.

>If the attacker can run code remote
Maybe your computer wipes itself on reboot, or you'd want higher privileges, that could be a factor to ensure the exploit is always present and harder to detect, see logofail for example, the os has no clue a out it as it's affecting the UEFI directly.

>Roommate
If your roommate resets your bios, that will wipe your keys. Then I agree with the strict secure boot definition of checking the binary that is booted this is an issue.

So, i apologize mixed secure boot and measured boot, I am using both.
On short: secure boot just checks identifies that is is. Measured boot enforces it.
>>
>>42670551
>This is exactly what cloudflare does, you connect to 4chan.org, but in fact you're going to cloudflare first and 4chan is forwarded to you
So my paranoid beliefs that I get when I see threads that seem targeted towards me, it is actually possible for a glowpony to go to CloudFlare and actually make a thread that only me and they can see (and archives I guess?).
>>
>>42670551
Now, for measured boot.
You remember that chain of trust mentioned of UEFI, bootloader and kernel?

This is exactly that. Each link needs to verify the other.
So, basically if your roommate makes a kernel and your UEFI boots it, that's cool and all, but your bootloader will not let it slide and won't boot it.
So the only way for your roommate to fuck with your PC would be to:

A) extract the drive and DD your porn
B) boot and mount your roots using their own bootloader + kernel.

And in this very precise situation it's GG for you.
Hence why you do need to utilize encryption and possibly tie the encryption key to your tpm chip that way he only can abuse your files if he is on your machine and didn't reset the tpm keys (which will make secure boot throw a fit in the first place so headache)
And finally, you can add a pin (password) to decrypt that tpm key in the first place.

In short: if you want to be le ebin haxxor known as 4chan

- use secure boot to verify your system
- use measured boot so everyone in the bootchaon verifies they're who they are (possibly make your roots immutable (read-only) with the kernek checking it's signature that way you can even fuck with tahy outside of /home/anon
- encrypt root with tpm LUKS + pin via systemd-cryptenroll or similar

And you're pretty much air tight.
This is exactly what android does security wise for its boot process.
- verified chain of trust
- immutable root
>>
>>42670558
Technically, but I doubt they care to place that phone call.
In any case now you know to not super trust TLS as the be all and all.
It's just a way to prevent unauthorized MITM, checking that you're talking to the right person on the end of the wire and encrypt your traffic between you and who you're connected to.

I encourage you to check the cert of the website you're connected to or use shodan.io to tell you more about who you're talking to when you go to preenhub.gov
>>
File: 1707468665712347.jpg (64 KB, 563x653)
64 KB
64 KB JPG
>>42668799
I do have SSD for /
Only /home/ is on HDD. One of the reasons being that lot of third party software doesn't ask and just dumps shitton of program data into ~/ and moving it later is huge pain
>>
File: 1845704.png (529 KB, 1024x1448)
529 KB
529 KB PNG
windows 10 is kil
ltsc chads rise up
>>
>>42670607
It's only a placebo.
>>
>>42670607
inb4 slop like BF6 instantly drops support for W10 to implement better spyware AC
>>
File: file.png (16 KB, 410x234)
16 KB
16 KB PNG
>>42666244
i purchased refurbished enterprise hdds from goharddrive and theyve been holding up pretty well. 2x 6tb WD/HGST drives for about $160. I keep them on 24/7 as part of my raid1 server, but i also make sure to keep a full backup of the server on an external drive as well in case of any malfunctions.
>>
File: file.png (224 KB, 1622x1022)
224 KB
224 KB PNG
>>42665361
>GrayJay
>>
>>42670630
even when windows 7 lost support in 2020 it took at least 2-4 years for most major programs to kick win7 out of support (at least from my experience)
>>
>>42670671
modern slop gaems devs make ACs so draconian they'll definitely drop support for systems with no TPM
>>
Also posted this in the "dumbass thread" on /g/ but it seems nobody has an answer there, so hopefully people here can give me some pointers:

>Because I can no longer gen NSFW on Civitai I'm looking for cloud GPU hosts that rent out by the hour/day (or at least not per month) and allow crypto without KYC. I know about Vast.ai but it uses Coinbase or Crypto.com and both require extensive KYC. If there is no cloud GPU host that allows KYC-less crypto I'm okay with tactics to fool the KYC check as well.

>Don't bother with "you're a pedo for wanting privacy" comments, I won't even dignify them with a response. The fact I was fine with genning on a filtered service like Civitai should say enough.
>>
>>42670729
I can't really recommend anything better than just getting into local gen. It can be done cheap if you get a laptop with RTX 4000 series.
>>
>>42670729
local gen + please ask AI questions in AI thread, they have better experience with this shit
>>
>>42670729
Me :)
I'll gen poni pics for ya. no seriously, just don't expect it to be that fast
>>
>>42670994
Not him but can you make rainbow dash and applejack, with rainbow dash doing some sort of speed training workout, and applejack doing training for bucking or if eqg is easier then rd on a treadmill/ race track and aj doing barbell squats.
I want to make something similar to /pts/ but instead of /g/ it's /fit/
>>
>>42671007
I guess, I'll see tomorrow. I'll try not to pollute this thread too hard, but gimme a prompt / prompts on ponepaste
>>
>>42671024
Something I can use for the OP image >>42671131
I have 2 more thread theme's ready but I'm struggling to figure out what I actually want to find so my OP image's aren't planned ahead
>>
>>42670729
>I know about Vast.ai but it uses Coinbase or Crypto.com and both require extensive KYC
You mean it requires an actual Coinbase account, or what? I've bought a 4chan pass with crypto before, and 4chan's Coinbase integration had an option where it would generate an address and you just send coins there from whatever source you like
>>
>>42670662
>2x 6tb WD/HGST drives for about $160
160 each or both? Anyway goharddrive looks really great. I'll certainly pay it a visit when my storage budget replenishes
>>
>>42671812
160 for both. i know serverpartdeals is another option as well
>>
my thinkpad t420 keeps freezing on me, it will disconnect from wifi and the caps lock button will start flashing, i don't think it's a battery problem because it even happens when i use the laptop without the battery and just plugged in
ive read online maybe the ram got knocked loose or something, maybe i just gotta add cpu paste or something? should i check my cpu somehow kek
>>
>>42671518
I read something to that effect on old archived posts on /g/ but I think someone mentioned this doesn't work anymore. Honestly though I have no idea, I have absolutely zero experience with crypto. I thought it'd be relatively simple to buy some with my bank account and then exchange it a few times to different crypto to anonymize it but it seems that's pretty much impossible nowadays because of anti-money laundering laws. I see people talking about meeting up with actual real people to exchange cash for crypto which is absurd.
>>
>>42672605
I mean you CAN
>a) buy crypto with your bank account (and passport, usually)
>b) exchange it to monero (optionally on a fiat-less exchange, if cash-operating exchanges are restricted in your cunt)
>c) move the monero around a bit and also split it into non-exact amounts (never just send back the exact amount you withdrew from an exchange, that makes it super obvious even if nobody can see the underlying transactions)
>d) move it back to the fiat-less exchange, switch it back to bitcoin or whatever, and pay
The thing is doing it truly anonymously doesn't really make much sense unless you also meticulously hide your IP, so everything from step c) onwards would have to be done through tor, and in particular if you buy a 4chan pass then using it would also need to be done over tor or at the very least a vpn else you're not anonymous at all.
And you might possibly also need a story for what you did with the crypto you bought, in case anyone ever comes asking, though for the $30-60 a pass costs it's very unlikely anyone ever will. "I lost it officer" (e.g. forgot wallet passphrase) is as good an excuse as any for the majority of cases.

I haven't checked in a while whether 4chan actually accepts normal crypto transfers, but generally just buying bitcoin on a KYC-ed exchanged, transferring it to your own wallet for a modicum of separation, and then sending that to 4chan should be good enough in most cases.
>>
>>42673635
I'm not doing anything illegal, so I'm not worried about 100% anonymity. I just don't want my pony porn linked to my identity, which would destroy my life regardless of it being legal if normies ever found out (which is very easily possible since places like Coinbase already have leaked KYC data before). So I'm not worrying about the FBI tracing down all my transactions, I'm only worried about the place I'm buying stuff from knowing who the person behind the transaction is. So if I do the following, should I be "safe" (assume I'm using Tor for all exchanges)?

1) Buy BTC with bank account on a site like RoboSats
2) Switch this BTC to XMR
3) Shuffle it around a bit with some tumbler or whatever it's called
4) Use the resulting XMR to purchase what I want (or send it to a different BTC wallet for places that don't accept XMR)

(Still don't understand how that would enable me to pay on a site like Coinbase but at least I'd be able to get a VPN/VPS.)
>>
>>42673944
At this point you should commission an artist, anon.
Better wank material too.
Bonus if they take BTC or XMR if you're scared about the artist telling everyone that you're a degenerate. It's your word against them after all.
>>
>>42674122
Nah, I like semi-realistic coom and only the top 1% of MLP artists ever even came close to what I'm able to make with AI.
>>
>>42673944
>>42674244
just don't coom doe
>>
>>42674422
Okay Visa. Have fun being irrelevant.
>>
>>42674545
Visa? what does that mean
>>
>>42674565
Visa Inc., founded in 1958, is an American multinational payment card services corporation headquartered in San Francisco, California. It facilitates electronic funds transfers throughout the world, most commonly through Visa-branded credit cards, debit cards and prepaid cards.
>>
>>42674611
Recently got rid of my Visa creditcard too (never really needed it except to identify to Gaypal ages ago). Still have a Mastercard debit card from my bank but can't really get around that and I'm only using that for "society approved" purchases anyway.
>>
>>42674611
>>42674658
Oh that makes sense lol because of the recent steam thing

Is it possible to live with no bank account (and no phone number)?
>>
>>42674755
Maybe, but it's probably a huge hassle.

It's better to have two (or more) identities: one for legit, socially accepted stuff, and another for things you prefer others not to know. Privacy tards who do everything as anonymously as possible paint themselves with a huge red cross, even when they probably don't even really have anything they need to hide (i.e. is against the law) they're just being too autistic about it.
>>
>>42674773
I feel like the no phone thing I can get away with just by saying, it hasn't contributed anything positive to my life in the last howevermany years I've had one but if I use something like XMPP or email no one would message me but when I think about it they don't now either so there is literally no negatives to not having a phone only positives (more privacy and presence and less anxiety)
>>
>>42674788
I owned a dumbphone until about last year. Need a smartphone for some stuff like secure login for my country's healthcare and stuff like that. Could still be using 2FA with SMS but that's not secure so in a quest for "privacy" I would be compromising on security where it is needed most (and any leak of information has WAY worse consequences than a company knowing what messages I sent to my mom).
>>
>>42670606
Someone write a fanfic on one of these.
>>
>>42674832
If your country supports standard protocols, you don't need a phone for them. Time-based authenticators use TOTP and e.g. Keepass supports it (and can run on computers).
>inb4 computer isn't a second factor
It is actually, the second factor is "something you have" (vs. "something you know" like your password), and in this case what you have is the keepass database file - this means that if your password leaks or is discovered, people still can't log in unless they also steal the file. It's the same logic as logging into a website on your phone and using the phone for the 2FA code. It's only slightly less secure because you're responsible for keeping the file safe, while on a phone the app typically locks it down quite well since phones are so restricted.
Another less common protocol is U2F which is the one that requires a hardware dongle, it's really quite secure and very cool and also doesn't require a phone.

The only reason to use a phone for 2FA is when the website requires a special app and does not work with any open standards, but that's 100% a website security issue and I refuse to use most of them. Except steam because I'm a good goy I guess.
>>
>>42674755
>no phone number
Basically depends on your social circle. If you only talk to people online you don't need a phone number. If you can convince your friends and family to be autistic you could use a smartphone with XMPP or matrix or something. If not though you might need a number.
>no smartphone
Now this is usually more realistic, though also hard to get perfect; there's usually 1-2 things that are very annoying without a smartphone. For me it was maps, so first I started using a SIM-less smartphone with OrganicMaps, but I live in a city so live traffic data from google is invaluable and it's the only big tech service I actually use on a regular basis.
>>
>>42674869
>If your country supports standard protocols
Yeah, they don't. It's an app or SMS, with no choice for standard TOTPs. Shit sux.
>>
>>42674882
IMO use SMS and sue them if there's a data leak, it's what I'd do at least.
>>
>>42674888
You can't sue the government here, or at least it doesn't do anything useful. They always get away with anything, especially if it "was an accident". It's not America. More importantly, suing doesn't mean shit if my most important private info is on the dark web.
>>
How long until inactive cock.li account's username can be re-registered I made a legendary username (@horsefucker.org) but re rolled the password in my password manager before saving it, so now I can't access it even though I made it and did the mining thing to activate email sending, I tried emailing the password reset from another cock.li account which was likely to have a similar fingerprint and I mentioned stuff in the privacy policy so admins could've checked db and saw it was me but I'm pretty sure the password reset email is never read assuming they even save emails sent to it. I can't believe that the email wasn't taken and I made it and lost it this way.

>>42674869
>steam
Steam and my banking app is the only apps from the app store on my phone the others I can't delete but I haven't played any games in months maybe a year now so I want to sell my account / inventory and then delete the steam app and maybe just get rid of my phone too
>>
>>42675119
>How long until inactive cock.li account's username can be re-registered
What does the website say? I've never heard of them ever becoming available again.
>>
>>42675134
Seriously? I guess I might as well post it:
pinkie@horsefucker.org
I was so suprised it wasn't taken
>>
I think I asked this already a few threads ago in /pts/ but which drawing software do you guys recommend for drawing on Linux, I'm on KDE right now and I am really liking it but in the past I have been a GNOME noob so I have Krita installed now and I will try it soon. Also is there an alternative to Paint.net for simple stuff with a mouse not a drawing with a pen/drawing tablet. I have a drawing tablet and as I have mentioned far too many times I will likely install gentoo or LFS on a framework 12 before 2026
>>
>>42675228
I tried the rest of the mane 6 and a few other mares and they were all taken
>>
File: 3437787.png (54 KB, 575x660)
54 KB
54 KB PNG
>>42675345
the closest alternative for paint.net ive found is pinta, but its not perfect and theres quite a few differences but again its the closest ive found.
>>
>>42675345
Not sure what you mean by "simple stuff with a mouse", but for scribbling on images or adding text for shitposting purposes, I actually often use Inkscape, which is a vector program. Otherwise I use GIMP for everything. I think Krita might be better if you're using a tablet, but otherwise they seem pretty similar—I just stick with GIMP because it's what I'm used to.

>I will likely install gentoo or LFS
Based, do it filly. I've never used LFS as my main OS, but going through the process is great for getting some understanding of how a Linux system and a C/C++ toolchain are put together (assuming you actually read the book and don't just blindly copy-paste the commands)
>>
>>42675345
I use kolourpaint for basic edits
>>
Damn, I'm so pissed by "modern" developpement.
I want to install wan2GP on my server using podman, ok.
Feeling fancy, let's do it "from scratch".
Grabs a debian:latest and play with a temporary container.
And here come the shitshow...
Between the project that need conda that needs to be installed almost automatically, the python lib that are managed by the OS and not pip, the opencv not working...
Fuck, why do they feel like it's compulsory to build uppon layers and layers of shit!?
apt install git gcc nano, and you should be good to go.
Heck, even python, but don't use pile of software just for the kick of it...
The more the time goes, the more developers ship their own computer (as an image) instead of a program...
Thanks for listening to an old man's rant...
>>
>>42675345
For vector drawing there's Inkscape.
>>
File: hello.mlp.pts.jpg (138 KB, 1920x1080)
138 KB
138 KB JPG
>>42676641
Wow this is nice

>>42676925
>simple stuff with a mouse
Something where I want to make an image but not a drawing the specific thing I wanted to make was a desktop background with my timetable
>LFS
Will update mid/late December might just do it in /pts/ instead of making a /g/ thread like when I installed gentoo

>>42677186
>>42678209
I'll search up Inkscape and kolourpaint too
>>
>>42677553
no that's mainly just python
>>
>>42679500
More like bad developpers using python...
Also, C have the library and build chain hell (use cmake, no use conan, wait, was it scons?)
rustranies have the cargo that solves everything... except "obsolete" code from a year ago.
Have a look at "copy party" [https://github.com/9001/copyparty]
You just grab the .py, run it, whatever your python version, and you are good to go.
Only "standards library" from pip.
And any AI project is a fucking mess where every version of everything is fixed...
Seriously, if you develop like this, just give a Dockerfile already, it will be easier for everyone.
Sorry, I'm still grumpy at the state of current software...
It's 2025, these should be solved by now...
>>
>>42680073
>More like bad developpers using python...
No, more like distributions shipping some python libraries, but not all and not always up to date, so some are only available from python's own package manager, but by default it's not well contained and can easily mix up installing things globally rather than per-project or even at least per-user. Running a package manager with sudo should never brick a system yet with python it's the worst thing you could do.
Venvs were then made as a shitty hack, I think they're finally kinda good nowadays but I remember the time when installing venv was a chicken and egg problem (I want venv globally because it's a system tool, but I can't install with sudo because my operating system will immediately spontaneously combust, etc.).

>C library
Awful for development but generally not too bad as an end user: OS packaging of C libraries is actually the standard way to distribute them, so there's no clusterfuck between OS libs and language package libs mismatching. C also supports static linking so if you're developing software using a less popular library that isn't often packaged you can just build it into your binary directly and end users are none the wiser.
>rust
Works mostly fine honestly, except when OSes try to re-create the python problem by packaging system versions, but rustup was actually built to work reliably unlike venv. I've never had a problem with old packages - if the software was written for old packages then cargo will download and build the old version just fine, and a dependency tree usually supports having multiple versions of the same package in it.
Actually I typically use uv for python venvs nowadays and it works quite well and it's written in rust of all things.

>copy party
Yeah if you develop with minimal dependencies then any language can be convenient to run, the average case does not consist of things like these though.
>>
>>42680133
>The system manage the libraries
But why!? Go damn fucking why!? It's not the role of the OS packet manager to keep track of languages libraries!
Also, except for major versions, programs should work without problem with any versions of the libs (or at very least a version >= not == )
venv was an answer to stupid developers to lazy to fix their code to work correctly.
If you program needs a fixed peculiar version of a lib, and don't work with at least more recent, you shat somewhere (I don't take in account loss of functionality)
pip and requerments.txt should be enough for anything and everything. You don't need 4 version of a lib on your system, and you definitely don't need nor want your OS to manage it.

>C
It "kinda" works, until you want to do cross platforms.
Even between linux distro, it's sometime a mess and you need to recompile everything.
Also, windows looking near the exe for shared libraries is very good and for me, lacks in linux.

>rust
I will be honest, I never touched rust. I wanted to one day, and when I saw all the tutorials were lgbtqi+bbqxxl, I just threw the sponge.
I should give it an other go.
But the "obsolete package don't work anymore", I eared it on the internet and from a colleague.

>copy party
But that's the point, you ftp server shouldn't come with a mail reader or play chiptunes.
And, look at it, it supports a lot of protocols, and works on python2 and 3...
I do understand it's an extreme example, and AI is the other side.
But still, somewhere in the middle should exist...
>>
>>42680230
>But why!? Go damn fucking why!?
If you mean python, I don't fucking know. I think that it came in the early era, like Perl, where people still thought the OS had to manage every package ever, since that was the norm with with C. Perl packages are also a fucking mess by the way, thankfully nobody uses perl nowadays. The OS itself also often integrates some python scripts for some reason or another and so requires some system python installation with at least some packages available for what it needs (also same with perl).

C is different because C was, from the start, THE OS language. The OS managed C libraries because the OS was built in C, managed the C compiler and the C standard library, and so it also managed the C packages for you and every other software. It worked (and still works) mostly fine as long as you stay in the same ecosystem. It's when the OS then tried to manage packages for other languages that had independent ecosystems outside of the OS that the shitshow started.

>Also, except for major versions, programs should work without problem with any versions of the libs
>If you program needs a fixed peculiar version of a lib, and don't work with at least more recent, you shat somewhere
Nigger you do realise that doesn't mean you shat somewhere, but the lib dev shat somewhere?
I agree that libs should normally be backwards compatible. But if a lib fucks this up and breaks compatibility, a program written for a previous version can't magically rewrite itself to adapt. Obviously you can update your program but if everyone always updated things to be compatible then there'd be no issue in the first place.
Semver itself is a relatively new concept, people used to version their shit willy-nilly. Even nowadays with semver some people are extremely lazy. Even people who try to follow it sometimes fuck up and break backwards compatibility unintentionally. And if the lib breaks things that's the lib's fault and there's nothing anyone else can do except pin the version and prevent it from updating.

>C "kinda" works, until you want to do cross platforms.
Yeah, that's another issue, but not really related to package management IMO.
>I will be honest, I never touched rust. I wanted to one day, and when I saw all the tutorials were lgbtqi+bbqxxl, I just threw the sponge.
Rust was initially built inside Mozilla which is tranny central. But by now it's been picked up by some tech corpos, and a lot of cryptobros, so it's possible to actually write rust without ever touching anything tranny-related.
>>
>>>/g/106910089
Why they hating on Jeff Geerling?
>>
>>42675345
Why install drawing software? If it's just for simple shitposts, you can edit images on Photopea without an account, which offers just as much as any slightly-older-but-still-usable Photoshop version. If anything, it's better than Gimp at least. I'm sure online drawing programs exist as well.
>>
>>42680975
No idea who that even is, nor do I care, but nu-/g/ is pretty much /pol/ with tech, so it's probably something moronic like "He's a Jew/tranny/MAGAtard/whatever"
>>
>>42682073
nat, but not even.
He may look/act a bit jewish (maybe he is, I don't know) but he just really like ARM and do lots of videos on it.
And granted, most of the videos are "X didn't work on raspberry pi, so I recompiled the linux kernel on my mac, and now it works! Barely."
But they can be as retarded as they want, at least Jeff puts his work as open source and helped quite some bit to bring pci-e to the raspberry pie.
>>
>>42682294
Yeah but /g/ has gotten SO bad that it's filled with conspiratards (and trolls falseflagging as them) who will say shit like "He supports <doesn't matter what>, so he's <some schizo theory why this is somehow very bad>"

It's always sobering to step out of /mlp/ and needing a moment to adjust to the state of the site nowadays.
>>
Don't die plz
>>
>>42681973
i want to learn to draw ponies eventually and the other is for making images like a functional wallpaper layout not an artistic one, just to layout important details and stuff

>>42682073
I'm probably going to only lurk /mlp/ from now on thanks to /pts/ and /ss/

>>42684243
thanks for bumping when I was asleep
>>
Does anyone know what makes Ubuntu and Fedora officially supported changes for Framework laptops. Can those changes be ported to Gentoo/LFS? Also is libreboot supported, + usecase for alternate boots or are they just a meme?
>>
>>42685133
Possibly it's just that they've committed to supporting those distros if you report issues to FW, so if some bugs happen they might forward them to those distros/help triage and prepare fix/etc instead of telling you to do that yourself. It's just an x86 computer, thankfully you don't need to cook a dedicated OS image for each model. I'd just check TLP vs power-profiles-daemon, they recommend not using the former on Ryzen boards for some reason, and iirc that's about it. Firmware updates are delivered via LVFS mostly, and that works on most distros I guess. I should fix EFI capsule updates on my setup, I use efistub without a bootloader so I need to do UEFI upgrades manually from a pendrive, because LVFS doesn't expect that configuration.
I run Arch with KDE on both of mine, the only things I'd complain about and consider Framework related is screen brightness sensor not working in KDE (not implemented, Gnome has that) and some issues with inner screen sometimes turning off or freezing on Zen4 boards. I'm not sure if Ubuntu or Fedora are free from those issues, they both ship recent kernels and this is considered to be some bug in amdgpu driver. It's just that - support from manufacturer when things go wrong, vs support from community of random nerds. I'm okay with the latter, if I was in enterprise IT I'd prefer the former.
Coreboot/libreboot/canoeboot/IWTBIRD are not available, except for that 12 gen Chromebook variant, and some prototype for Zen4 someone did. I suppose openSIL on consumer Zen6 will make that more feasible.
>usecase for alternate boots or are they just a meme?
Well, there's certain degrees of proprietary software one can accept. I appreciate Stallman and the like for being the living examples of how things should be, but personally I reluctantly accept living with some blobs with current hardware.
>>
>>42685184
>screen brightness sensor
Sorry, I meant environment brightness sensor used for automatically adjusting screen brightness. That's a cool feature, especially on macOS where it handles keyboard backlight too. But of course sometimes it's buggy there as well, if you sit next to a window and a bit of sunbutt lasers intermittently land on the sensor.
>pic rel
>>
>>42685133
In the vast majority of cases, official support on laptops means
a) these are the distros that the manufacturer tested, and
b) these distros come with all necessary drivers out of the box.
What this means in practice is that other distros basically weren't tested by the manufacturer so they can't actually explicitly say "we know this works", and that things like drivers and firmware as the other anon said might be less convenient to obtain in another distro. It should almost always be installable unless there's some very exotic hardware and the drivers/firmware are either closed source or not packaged for any other distro and unusually difficult to repackage/build yourself.
>>
>>42685133
>Can those changes be ported to Gentoo/LFS?
Most likely there are no changes. Framework doesn't own Ubuntu or Fedora and most likely would have a hard time convincing Ubuntu/Fedora devs to include Framework-specific patches. This is unlike System76/Pop OS, where System76 does own the distro and includes custom kernel patches to make their hardware work. (Fortunately it's pretty easy to take the kernel from one distro and use it with a different one.)
>>
>>42685184
>>42685195
>>42685209
>>42685215
Thanks everypony
>>
File: 1749226841909355.png (5 KB, 251x59)
5 KB
5 KB PNG
>OpenAG free implementation of Adrenaline Gamer, HL1DM mod is developed by Yalter
>who also made niri wayland compositor
I do enjoy intersection of Russians, ponies and Half-Life
>>
>>42637044
Use vorapis v3
>>
posting this through my t60p. my t420 has constant "kernel panics", and i spilled some water on it yesterday and now the mouse/left and right clicks wont work, even the trackpad's click function won't work
i plug in a usb mouse, and not even that, works
it can work, but i just have to rely on the keyboard, which obviously isn't ideal, no way i could do things like make music on it now
i think it finally shit the bed, after 3 years.
anyone else had to retire their thinkpad(s)?
>>
>>42686095
My L15g1 will be retired soon sadly, it has problems with waking from sleep it either black screens or freezes. Although the BIOS full system scan said everything just werks I am curious if it might be a software issue but I doubt that becasuse I'm pretty sure it happened on different OSes at least on Gentoo XFCE and NixOS KDE Wayland I sometimes have to restart my PC and on Gentoo it would make some BIOS beeps I posted about on /g/tpg/ but no one responded and the documentation just says to download some app to record the beeps which don't happen anymore so I gave up and am just going to live with the problems until I get a framework 12 + stylus this December
>>
>>42686095
>no way i could do things like make music on it now
https://vimeo.com/22798433
>>
>>42686095
>i just have to rely on the keyboard, which obviously isn't ideal, no way i could do things like make music on it now
You don't even need a whole keyboard for that. There are trackers that will run on a gameboy, which only has like 12 buttons total
https://www.youtube.com/watch?v=fKeDSBr_W7I
>>
File: 7272875.jpg (553 KB, 1340x900)
553 KB
553 KB JPG
>blogpostan
In case somepony else tends to forget, simple solutions for difficult problems can be good enough. I've spent a year of "ponified" K8s at home with no persistent logging because so many tools, platforms even to choose from. I've had Alloy, Loki, Minio and Grafana since March, which was supposed to be simpler and lighter than ELK, but Grafana started imploding every upgrade which quickly surpassed my ambitions to fix it properly, and Alloy was a mess to configure decently and didn't inspire confidence for this reason. I could migrate to their K8s monitoring chart, but I felt like it was getting too complicated for my home needs.
So now I'm on Fluent-bit and Garage (as S3 storage, to test instead of Minio). A little pony^W agent runs on each node, collects pod logs from files, adds basic extras like namespace and labels using tiny RBAC, then simply ships them as files to S3 every 10 minutes. The moment I'll actually need to check older logs, I'll just download JSONs from specific timeframe to my PC and brute-force through with jq and grep/ripgrep to find things in them. For some reason I used to feel like this wouldn't be sufficient, but today I've realized I don't actually look at older logs that often, I don't produce tons of logs, I don't really need indexing. This might give me just enough and require little maintenance in return.
Little ponies, little software solutions. Perhaps even the occasional simplicity of pony lives might become a subtle inspiration for hoomans.
>>
>>42688548
Yep. Lotta people assume they have "big data" or need "big compute" when actually they don't. I really like this paper, which features several fancy big data systems getting owned by 20 lines of code running on the author's laptop: https://www.usenix.org/system/files/conference/hotos15/hotos15-paper-mcsherry.pdf
>>
File: secretSanta.png (217 KB, 533x657)
217 KB
217 KB PNG
https://github.com/CHooverShrimp/fx-4chan
how do you think?
>inb4 dicksword

I also created an extra version for the cloudflare worker, but 4chan API blocks cloudflare and thus is useless.
>>
Who want to give ear scratchies?
>>
>>42690582
sovl
>>
>>42690582
I want to punch her face.
>>
>>42690692
why

>>>/g/106930795
lol
>>
>>42691327
I hate everything Microsoft
>>
>>42690582
Me.
>>
File: 1575582460497.png (19 KB, 242x253)
19 KB
19 KB PNG
>>42689468
Useful tool, has pony in readme, can't complain. Not for me as I don't link 4chins offsite, but I can see the value it provides. Thanks, anon.
>>
>>42688615
>Lotta people assume they have "big data" or need "big compute" when actually they don't.
Uh, I use AI, so yes I do. I mean, I know a lot of you Linux users don't really do any work on your computer besides tinkering with the OS but this doesn't go for most people. Most people let their computer work for them, not the other way around.
>>
I want to get back into Linux. I tried several distros years ago (started with Ubuntu but didn't like it, especially GNOME) but I stopped using them when one major bug wasn't fixed after literal years, namely the bootloader updating the UEFI boot code on EVERY update (thus greatly limiting the lifespan of the flash chip). Windows does this once, on install, and that's the only time it should happen since there is literally zero need to modify it every update (especially since there are no changes whatsoever). This was to me the biggest evidence that Linux will never be mature if such an easily fixable and serious bug remains for years because of kvetching on a bug tracker. Just fucking fix your shit, it's literally a day's work if even that.

Anyway, I'm digressing here, but I think Windows is better written than Linux (the core at least, not the shitty store apps and all that crap) but I just don't like their company's policies, and I like the idea of the source code being available of the OS I use so the people responsible can't sneak in shady anti-user shit. So my question is:

1) Has this braindead bug finally been fixed?
2) What is a good distro that
a) Does not use GNOME
b) Does not use Firefox, Chrome or Chromium by default (LibreWolf is acceptable)
c) Lets me install certain applications to their latest versions without having to wait for a new release of the entire distro (the biggest con of Linux IMO)

I know the last option can be done with application packages like Snap or whatever (I know there's several options and I'm sure one is the best but I don't care enough to worry about it) so it would need to support something like that at the very least for the browser, mail client and office suite (LibreOffice preferably).
>>
>>42694924
>1) Has this braindead bug finally been fixed
idk

>2) What is a good distro that
>a) Does not use GNOME
>b) Does not use Firefox, Chrome or Chromium by default (LibreWolf is acceptable)
>c) Lets me install certain applications to their latest versions without having to wait for a new release of the entire distro (the biggest con of Linux IMO)

NixOS unstable if you want to configure everything in one file (just remove the line that uses firefox by default and add your browser of choice (ungoogled-chromium or palemoon or librewolf?) then run one command to apply all the changes (sudo nixos-rebuild switch)) also with flakes you can use specific versions of any software you want it has a KDE installation live iso,

Gentoo if you want to spend time on your OS (compiling and configuring everything to the smallest detail) requires a lot of time so make sure to have a spare device with everything you need to work in case you mess something up on gentoo
>>
Bump.
>>
>>42695501
>>
>>42694924
What was doing it, since you say bootloader I'm assuming grub? You don't need that at all these days anymore (though a lot of distros still include it purely out of inertia). The kernel is itself a bootable EFI binary (assuming that feature is enabled, which it almost always is)
>>
>>42694924
unironically arch linux, just use archinstall, get limine or systemdboot so you don't have to deal with grub's absolute wretchedness and years of crust.
>>
>>42694924
>the bootloader updating the UEFI boot code on EVERY update (thus greatly limiting the lifespan of the flash chip)
Lol wut? How often are you updating your bootloader? You could update it once a week (which is already unrealistically often) and that flash chip would still outlive you

>2) What is a good distro that
>a) Does not use GNOME
>b) Does not use Firefox, Chrome or Chromium by default (LibreWolf is acceptable)
Why do you care what the distro defaults are? As long as the thing you want is packaged, you can always uninstall the default and install that instead.

>c) Lets me install certain applications to their latest versions without having to wait for a new release of the entire distro (the biggest con of Linux IMO)
Look for a "rolling release" distro
>>
>>42691510
>I hate everything Microsoft
based
>>
I am thinking of going smartphone and SIM free,
while using a spare smart or dumb phone as a "landline"
with a pay as you go sim so I don't even have to pay for anything
Then I can receive calls and messages for free (but not make any from that phone,well not for free at least)
>>
>>42696859
Seems silly
>>
>>42696926
what about it seems silly
>>
File: 7019065.png (321 KB, 1116x1514)
321 KB
321 KB PNG
>>42690692
But anon... she's so cute
>>
>>42696941
post moar
is there an internet explorer pony
>>
>>42696859
I've done that before. It's 100% viable if your social circle allows and if you don't need your smartphone for travelling (live traffic maps, live public transport updates, uber etc. are all smartphone-exclusive). The latter is what ended up killing it for me
>>
>>42697658
nice, which apps specifically stopped you, I can't think of any must haves for me personally that I can't do on a laptop except run tracking unless anyone knows a way to track runs with a laptop?
>>
>>42697716
>which apps specifically stopped you
Like I said, live traffic maps (specifically google maps, the only google product I voluntarily use) and uber for those rare occasions where you need it.
This is shit that is inherently cloud-based and there is zero alternative that doesn't involve a pozzed smartphone. If you ever need to take a cab, you either have a smartphone with uber and can do it, or you don't and you flat out can't, or have to hunt local cab agencies which can be a nightmare in foreign cities if there are even any around. Or you use public transport which again is vastly harder when you don't have google maps telling you directly where to go and a web browser in your palm for looking up "how to buy metro tickets in X city".
If I didn't travel outside of my city and didn't drive (and need live traffic) I'd probably get rid of my phone again.

Actually no, I'm not entirely correct, I still used to have a 10 year old phone (moto G from 2013), without a sim and mostly kept disconnected from the internet, which I used basically for Steam's auth codes. You can probably install some foss fitness/run tracking app on something like that if you want to. It'll also be usable as a GPS with offline maps (osmand or organicmaps), reader and music listener, though I still used a cheap kindle and a cheap chink $20 music player for those. If it's not connected to the internet it's probably fine unless you're hyper-paranoid about always on location tracking, in which case you can get some of those foss phones that offer hardware modem killswitches (e.g. pinephone pro is garbage as an actual full phone but it is, all things considered, a working pocket-sized linux PC with I think working waydroid for apps).
>>
>>42697843
The thing with phones is they emit signals even when you don't have a sim I think it's called IMEI and the cell tower providers can use it to track the precise movements of that phone which could be linked to your house, workplace/university, relatives houses, place of worship, your GP / hospital / dentist, etc... sensitive stuff.
>>
File: 6984641.png (265 KB, 1030x1092)
265 KB
265 KB PNG
>>42697374
Yes and firefox pony and Google chrome pony, they've been discussed in the past 2 threads
>>
File: cute firefoxpone.png (373 KB, 1208x1024)
373 KB
373 KB PNG
>>42697994
Yeah, she cute.
>>
>>42697994
whoops I think I asked the same question last time
>>
>>42641240
Man, I remember the old Google Doodles they used to do like this in the '00s. The old sarif logo was so nice
>>
>>42697994
Have more cute Firefoxpone
>>
>>42697873
Yeah, smartphones are basically tracking devices. You have to completely gut any and all useful features they provide for them to be anything close to private.
>>
>>42699927
should I keep a dumbphone with "faraday cage" (tinfoil) or just go with nothing like I plan now?

>>42699706
nice. do browser based crypto miners still exist?
>>
>>42702123
If your dumbphone is pretty old (like mine) it's either already stopped working or is going to soon anyway (because the frequencies are "needed" for 5G) so might as well go phoneless. I never take a mobile phone with me when I go outside (I never leave for very far anyway) and the only time when it was a bit annoying was when my father had a traffic accident (not caused by him) and I couldn't take pictures of the damage or make a call. If you can do without, try to go without, or just keep one around in a container for emergencies.

If you are going to go very far away though, like hiking in the mountains, you should always take one with you, including a solar powered battery.

I hope one day a solar flare will disrupt all electronic devices. It will be great fun to see the zoomers completely panic because they can't use Google Maps to tell them where to go for help.
>>
Since I am going to do mobile phone-less I was wondering if there was a way to track runs (pace and distance) using a laptop (Framework 12 specifically) if not does anyone have watch recommendations, I don't really like watches but then I could use it to track running pace, distance and I guess Heart Rate
>>
>tfw AWS is just a lot of squeaking and reeeeing anonfillies trotting around DCs
>>
>>42702792
I am also wondering, is there even a use case for tracking pace distance and HR, I could just roon
>>
>>42702792
>>42703438
Do you want, like, detailed updates or just general daily stats? You can just record your start and end time, and roon a pre-planned route that you can measure on a map, that gives you pace and distance. You could put this into any spreadsheet, though I'm sure there are also FOSS tracking utilities for this.
But if you want detailed health metrics, continuous pace measurement etc., then a watch or fitness band are actually useful. They generally don't connect to the internet directly but rely on their proprietary app for that, so find one that's compatible with GadgetBridge and doesn't require an initial internet connection for setup.
I heard Garmin watches are pretty decent for that. But also kinda pricy, and they're pushing amoled really hard so it's annoying to specifically find their transflective displays which actually have decent battery life. An alternative would be a random chink fitness band that's approved by gadgetbridge
>>
>>42703538
>Do you want, like, detailed updates or just general daily stats
I guess that's the question I need to think about, I wanted pace and distance because "it seems useful" and well everyone uses a run tracker but at the end of the day I don't need the data what I need is to roon and lift more. I'll keep the solar garmins in mind if I still decide to get one. Thanks anon
>>
>>42703438
>>42703654
forgot to remove my name lol
>>
>>42703654
Yeah you definitely don't NEED it, use common sense and just some manual recording with pen and paper to keep track of your progress
I think the main advantage of trackers is they give you your fitness data, like heart rate and breathing rate, so if you want to be hyper autistic you can minmax your fitness so you always roon right up close to your limit for max improvements but not so much that you do more harm than good. But I'm willing to bet that a large chunk of people using them don't bother and just use them as pretty stats.
The other big advantage of having stats is using them for motivation, number go up. This is very much up to you, for some people this might be the main thing helping them actually keep at it daily, for others it's completely unnecessary, if you're successful at just doing it without any extra dopamine memes then you don't need it
>>
>>42704837
Ok maybe I'll get it as a gift for myself if I hit a goal or something in the next few years I'm a noob at rooning rn anyways
>>
KDE Plasma is very nice
>>
File: at least it werks nao.png (90 KB, 362x336)
90 KB
90 KB PNG
After several hours of messing with GPU drivers and xorg settings, I finally figured out the reason my second display wouldn't work was because my trusty RX 580 doesn't support simultaneous DVI and HDMI output.
>>
>>42706180
>no art of Spike fucking Konqi
Sad!
>>
>>42706923
>dragon bussy
no
>>
>>42706561
Sounds like xorg bullshit, or you aren't using the amdgpu driver. From what i know both xorg and wayland rely on drm/kms and amdgpu exposes all display engines properly.
>>
>>42706965
Standard configuration for that board is 3x DP outputs and 1x HDMI. If anon has one with DVI out as well, I wouldn't be surprised if the manufacturer basically just wired a single output from the GPU to both the DVI and HDMI ports. The two are similar enough (that's why you can get passive HDMI<->DVI adapters)
>>
>>42706965
I've read something pretty similar to >>42707135 when I was trying to figure out how many ports I'll be able to use on my GTX750.
Except it was something about some ports sharing same clock and thus making it impossible to use some ports in some combinations. But I don't remember exactly, I just know that such limitations can exist
>>
>>42707226
>tfw video signal clock mare
>on time, mostly
>constantly describes pictures to the other mare in your monitor, her best friend
>they both get really confused and dizzy when one speaks out of order
>>
>>42706923
Be the change you want to see in the world
>>
>>42707266
Konqi is a male...
>>
I need more pony in my tech
>>
I think of switching to a dumbphone and keeping a smartphone for banking shit at home, turned off most of the time, only on when needed (my bank doesn't have a web version so I'm fucked). Which dumbphone is known to have OPUS support? I need muh music.
>>
File: 1665.jpg (21 KB, 460x460)
21 KB
21 KB JPG
>>42710476
You don't need a dumbphone
>>
>>42710476
I guess the Nokia's dumb phones do?
But seriously, why do you want to switch to a dumb phone?
I don't get the point?
Security: you are now using sms which is absolute dogshit, same for calls.
If it's tracking, the cells towers are still logging your IMEI / IMSI so no real point.
If it's surveillance from Google / apple, then yeah fair, but you could get a pixel and flash graphene on there or remove everything google from lineageOS (mainly DNS, NTP and geoip) that'd at least allow you to do everything a dumbphone can do, better, and more securely since you can use e2ee messengers with that.
>>
>>42710476
>I need muh music
Use a music player duh
>>
>>42710476
Speaking of if you want a music player I think shanling still has the M0 around? Else hibys are good too if you want something bigger.
>>
>>42710624
Or get a cheap smart watch like a bip6 that can connect to Bluetooth and play music too.
Plus it's a watch / fitness tracker and doesn't connect to the internet.
>>
>>42710476
unironically this >>42710485
and this >>42703538
I'm going no phone + no sim + eventually getting a solar garmin or similar (some of them support music too which you wanted, or just don't listen to music)
You can use SimpleX chat it works desktop only (unlike Signal) but normie contacts can still use the app on their phone

Speaking of lossless music
How do I convert all music files I have to a more compressed form (mostly FLACs) I have only a few hundred songs saved but it's like 10GB they are different file types not all flacs if not for that it would probably be one command in le terminal

>>42710625
>bip6
Interesting, does this require the Zepp app? It's a lot cheaper than the Garmins although worse battery life it has the 1 key feature I want, Built in GPS (that works without a mobile phone (smart or otherwise)) so I can track roon pace and distance and time, and I guess heart rate too
>>
>>42710736
How many different types can there possibly be? It may not be one command but maybe 4-5 commands should to it.
But also I wonder if ffmpeg can just intelligently transcode from any input to any output. If it can then you'd just specify the encoder options and use one command for everything
>>
>>42710736
>how do I convert all music I have to a more compressed form
ffmpeg -i Yourtrack.flac newtrack.opus you can change the bitrate with -b too if you want.
Or you can write a quick python script / ask ai to use bash + glob to find everything that looks like a music file (.mp3, .flac, .mlp whatever) and create a copy of your tree with all files converted to opus, python works well for that too, essentially automating that ffmpeg command i gave).
Else foobar as a pretty easy to use right click menu so you can point to your whole library and just convert it to opus it needs the free media encoder pack too.
>bip6
Nope you can use it perfectly fine with gadget bridge. Plus you can customize the watch face to whatever you want using their website for that and upload it to the watch without internet.
>>
>>42710760
>>42710773
thank you anons
>>
>>42708421
>implying this will change anything to some anons
>>
is KDE Linux a useable distro or just for testing KDE?
>>
>>42670606



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.