Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)TH
TheButtonJustSpins @infosec.pub
Posts 71
Comments 795
Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication
  • Okay, so it's just like Yubikey-type stuff? I've thought about that before but it seems very risky - they recommend you get two and set both of them up so you have a backup, but that would require all websites to support that, right?

    I'm down for using BitWarden, though, if I can substitute it for physical keys.

  • Dev rejects CVE severity, makes his GitHub repo read-only
  • Recurring incidents like these raise the question, how does one strike a balance?

    Relentlessly reporting theoretical vulnerabilities can leave open-source developers, many of who are volunteers, exhausted from triaging noise.

    On the flip side, would it be ethical if security practitioners, including novices, sat on what they thought was a security flaw—so as not to inconvenience the project maintainers?

    This was already answered in the article: verify your security findings. Make a POC that actually exploits the vulnerability, then submit it with your report.

  • [Question] What should I look for in a mini PC to upgrade
  • I like getting Bee-link boxes - they can be upgraded to 64gb RAM, have plenty of CPU, and can have two drives. I run Proxmox on them and make VMs that then run my services in docker.

    There's been a lot of talk about N100s as well. I haven't looked into them much, but I assume they should be similar. Looks like their max memory is 16gb. I'd stick with Bee-link.

  • vlc.py -- setting the time in a song sets the song stuttering and it doesn't really recover
  • Okay, I actually do need to seek. However, something about going out over bluetooth instead of over the headphone jack has made it work, so.. no idea, but there you go. (Or maybe it's something else that I did, but, either way, it's working, so.. cool.)

  • How 0% APR credits make money?
  • In addition to what everyone else in this thread has already covered, the credit card issuers benefit from you having that card in your wallet because they charge the merchant for every transaction. So you're having the merchant pay the credit card company with every swipe, in exchange for whatever benefits the card provides to you.

  • vlc.py -- setting the time in a song sets the song stuttering and it doesn't really recover

    This happens if I use set_time or set_position. Is this typical, or am I just not doing it right?

    This is on a Pi Zero 2 W, so not the most powerful, but should be able to handle this.

    These are the relevant bits of how I'm setting up the player:

    ``` self._vlc = vlc.Instance() self._player = self._vlc.media_player_new() self._list_player = self._vlc.media_list_player_new() self._list_player.set_media_player(self._player)

    playlist = self._vlc.media_list_new() for index in self._play_order: playlist.add_media(self._vlc.media_new_path(self._songs[index]))

    self._list_player.stop() self._list_player.set_media_list(playlist) self._list_player.play() ```

    And trying to seek is just this:

    self._player.set_time(_s_to_ms(seconds))

    Any ideas would be greatly appreciated!

    3
    What would you consider your threat model?
  • Also as a side note I hate how lots of places just assume you want to download their shitty spyware ridden apps or hand over your phone number or an email.

    Or want notifications. No, recipe site, I don't want desktop notifications from you.

  • Bent RAM Clip

    I've somehow managed to bend a RAM clip so it can't clip anymore because it's blocking itself. I haven't been able to bend it back. Any suggestions?

    5

    RPi 0W - How to stop long-running action

    cross-posted from: https://infosec.pub/post/12005873

    > I have a Keybow MINI hooked up to a Raspberry Pi Zero W, and I'm using Python to respond to events. I have one button that kicks off playing a song on a passive buzzer, and I'm wondering if there's a way to have a button press stop the song before it completes.

    0

    RPi 0W - How to stop long-running action

    I have a Keybow MINI hooked up to a Raspberry Pi Zero W, and I'm using Python to respond to events. I have one button that kicks off playing a song on a passive buzzer, and I'm wondering if there's a way to have a button press stop the song before it completes.

    5

    Silly 16 question

    Do anyone else's wrist hairs get caught in the little gap between the frame and the trackpad/spacers?

    8

    Keybow OS

    Does anyone know if it's possible to have events from the Keybow keyboard cause effects on the Pi Zero W running the keyboard instead of outputting to another machine? Or do I need to go with a different OS and figure out the handling of the keys myself?

    3

    Linux Mint battery tuning for Framework 16

    cross-posted from: https://infosec.pub/post/11305365

    > Anyone have a list of changes that they've made to increase battery life? I've got about three hours (with 80% limit in BIOS, which I might get rid of), so I'm sure there's a lot that can be changed.

    0

    Linux Mint battery tuning for Framework 16

    Anyone have a list of changes that they've made to increase battery life? I've got about three hours (with 80% limit in BIOS, which I might get rid of), so I'm sure there's a lot that can be changed.

    7

    Not asking for password after hibernate?

    I just hibernated my laptop and then brought it back up, and it went straight into LMDE without asking me for a password on a lock screen. That seems.. like weird behavior. Is there something I can set to fix that?

    3

    Fingerprint reader in LMDE 6 with Cinnamon?

    Anyone been able to set up a fingerprint reader in LMDE 6 with Cinnamon? I can use fprintd-enroll and fprintd-verify successfully, but it doesn't show up in pam-auth-update so I don't know how to add it to the login screen or the terminal.

    0

    Linux Mint (LMDE 6) drivers for Framework 16?

    I know the drivers come in the distro package manager, but, is there a set straight from AMD? Trying to use Brave causes freezes and black screen flashes, which I'm pretty sure is a driver thing.

    16

    Star Wars: Galaxy's Edge - Outpost Control

    Is there any way to complete the Outpost Control job? It's that only (non-First Order) job I haven't completed, and I'm not sure how to. I thought maybe I'd need to install and retrieve the skimmer, but I did that today and it didn't progress the job chat.

    Edit: I've tried installing defenses on every panel, but that also didn't work. Next time I'm on planet, I'll try installing the skimmer and leaving it long enough to gather some credits.

    Edit2: Okay, I think maybe it doesn't actually complete until one faction gains control of the outpost for the day, and not enough people play for that to happen. Damn.

    0

    Integrated Login?

    So, I have a bunch of services behind Authelia, utilizing LDAP hosted on my NAS. I log in once and it carries through my other services that are secured by Authelia, which is great.

    However, since my wife rarely visits these services - mostly when I send her links - she has to log in basically every time. I've contemplated putting our laptops on a network login backed by the same LDAP, though I haven't started researching how to do that yet. If I do, though, is there a way to have the laptop login integrate with Authelia or another solution to prevent login prompts?

    I know I could do it with Windows and AD, but we're both on Linux, so that complicates things a bit.

    3

    Cycle movie extra?

    Is there a way to set a movie extra to repeat endlessly? There's a fireplace feature that can cycle on the DVD but I'm not sure how to make it do that in Jellyfin. I have it in there as an extra.

    0
    homelab @lemmy.ml TheButtonJustSpins @infosec.pub

    Is this a good deal?

    www.ebay.com Asrock Rack EPYCD8 motherboard+ AMD EPYC 7642 48c/96t CPU +64G(4*16)2133P RAM | eBay

    1X Asrock Rack EPYCD8 motherboard. 1 x AMD Epyc 7642 cpu. 4 x 16 G 2133P DDR4 ECC (in total 64G). AMD EPYC™ 7642. CPU AMD EPYC™ 7002/7001 series processor family. AMD EPYC™ 7002 Series. ASRock Rack Instant Flash.

    Asrock Rack EPYCD8 motherboard+ AMD EPYC 7642 48c/96t CPU +64G(4*16)2133P RAM  | eBay

    It seems good based on the price of just the CPU. If it's good, what kind of server case would it need?

    13

    Has anyone set up RAID 1 on a Framework laptop? (Might not be possible until Framework 16?)

    cross-posted from: https://infosec.pub/post/5442742

    > Hello! I am doing some if-I-die planning, and I want to create a machine that is separate from my current homelab that can a) host paperless-ngx and b) be used with keyboard/mouse/monitor if needed. I want it to replace my current paperless-ngx instance that's hosted in my lab. > > Ideally, I'd want two SSDs in RAID 1, possibly with a third drive for the OS? I'll be backing up to my NAS and from there to the cloud, but I want to separate this machine from the rest of my infrastructure and still be able to have reliable access to the documents on it. > > In theory, I could just sync the files to a USB drive and tell her to grab it if anything should happen to me, but finding the right files while stressed without the metadata stored in paperless wouldn't be the nicest thing to make her do. > > tl;dr: What should I buy to build a homelab-in-a-box that can be attached to my homelab normally but also function separately as a PC.

    1
    homelab @lemmy.ml TheButtonJustSpins @infosec.pub

    Advice on building a small PC/server

    Hello! I am doing some if-I-die planning, and I want to create a machine that is separate from my current homelab that can a) host paperless-ngx and b) be used with keyboard/mouse/monitor if needed. I want it to replace my current paperless-ngx instance that's hosted in my lab.

    Ideally, I'd want two SSDs in RAID 1, possibly with a third drive for the OS? I'll be backing up to my NAS and from there to the cloud, but I want to separate this machine from the rest of my infrastructure and still be able to have reliable access to the documents on it.

    In theory, I could just sync the files to a USB drive and tell her to grab it if anything should happen to me, but finding the right files while stressed without the metadata stored in paperless wouldn't be the nicest thing to make her do.

    tl;dr: What should I buy to build a homelab-in-a-box that can be attached to my homelab normally but also function separately as a PC.

    7

    [Solved] Another lost TV show question

    Edit: This is Being Erica. Thank you, @[email protected] and @[email protected]!

    So, I watched a TV show a while ago and have forgotten what it's called and can't find it. Anyone have any ideas on this one?

    • Woman is going through something rough and a person gives her a card and is like come talk to me
    • That person functions kind like a therapist but there's something mystical going on
    • There are doors that go to other places
    • Her therapist retires after a season or two
    • She starts helping others in the same way
    • There's a bartender that does the same thing at some point

    Maybe not much to go on, but I'm hoping someone recognizes it.

    7

    Proton Calendar?

    Is there a calendar that I can use with Proton Calendar? It looks like the official one is for Google, Outlook, and 365.

    (Preferably for the Bills.)

    4