Couldn’t find anything with less pixels, please save to disk and remove resolution yourself ❤️

  • brokenlcd@feddit.it
    link
    fedilink
    arrow-up
    128
    ·
    6 months ago

    I mean, if we want to get pedantic, nothing it’s stopping a virus from bringing it’s own drivers or a whole ass windows vm to pass the usb over ( i rememver the was something of the sort for windows using a windows xp machine for a botnet) It’s as always just a matter of how willing are you.

        • rwhitisissle@lemy.lol
          link
          fedilink
          arrow-up
          58
          ·
          6 months ago

          I had a problem and then I tried to solve it by installing a snap package. Now I have two problems.

          • bl_r@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            15
            ·
            6 months ago

            I was doing a group project in college where we had a Linux server running some of our custom software. I asked a group mate who worked in IT to self-sign some certs so we could get https up and running for our next sprint demo.

            He installed a fucking snap package to do it via certbot. On fucking RHEL. And that server was not hosting an internet-accessible service. And he didn’t know why I lost my mind.

            • brokenlcd@feddit.it
              link
              fedilink
              arrow-up
              14
              ·
              6 months ago

              Basically a “lemme get the flame thrower real quick so i can hammer that nail in for ya”

            • rwhitisissle@lemy.lol
              link
              fedilink
              arrow-up
              7
              arrow-down
              1
              ·
              edit-2
              6 months ago

              Not sure why you were enabling HTTPS for a project that was not hosting an internet-accessible service, really. By which I assume you mean the service doesn’t have a publicly accessible web based UI or API component. What were you trying to access and how? The only scenario I could think of for this would be that your custom software relies on HTTPS for secure communication within its own internal network (such as on a VPN) to send sensitive data back and forth between services. In which case that feels like overkill for a college course, since you shouldn’t have any genuinely sensitive data that you need to secure if it’s just for testing and demonstration.

              • bl_r@lemmy.dbzer0.com
                link
                fedilink
                arrow-up
                7
                ·
                edit-2
                6 months ago

                It was a project requirement, PHI was processed by it, so yes, it needed a secure connection. I now realize I should have used mutual auth, but hey, I only learned about that after that project

                We never sent actual data to it (the actually sensitive data used for training never left a secure VM), but the point of the course was to act like we were. Plus, setting up an nginx reverse proxy is simple, setting it up and getting certs from some ssl commands is a 10 minute task that appeases the project manager/professor with minimal effort.

            • ricecake@sh.itjust.works
              link
              fedilink
              arrow-up
              2
              arrow-down
              2
              ·
              6 months ago

              I’ll be honest, I’ve had times where there’s the “simple” solution, and “the solution I remember off the top of my head”, and 10/10 the one that’s happening is the one that I remember because I just did it last week.

              I have no desire to google the arguments for self signing a cert with openssl, and I cannot remember which webserver wants the cabundle and the public cert in the same file. If I had done it even kinda recently I’d still remember what to poke in the certbot config.

              • bl_r@lemmy.dbzer0.com
                link
                fedilink
                arrow-up
                4
                ·
                6 months ago

                If you have no desire to do rudimentary googling for a group project in college, that sounds like you aren’t a very helpful teammate. Last time I generated certs I used the first stack overflow result and was done in minutes, there’s no excuse.

                • ricecake@sh.itjust.works
                  link
                  fedilink
                  arrow-up
                  2
                  arrow-down
                  1
                  ·
                  6 months ago

                  This is confusing to me, because the point of the request seems to be “get a certificate”, not “get a self signed certificate generated by running the openssl command”. If you know how to get the result, it doesn’t really matter if you remembered offhand the shitty way or the overkill way.

                  Is it really more helpful to say “I remember how to do this, but let me lookup a different way that doesn’t use the tools I’m familiar with”?

              • ѕєχυαℓ ρσℓутσρє@lemmy.sdf.org
                link
                fedilink
                arrow-up
                2
                arrow-down
                1
                ·
                6 months ago

                Just say no if you don’t want to do something. I don’t understand why people think fucking shit up in the guise of helping is more acceptable than admitting that you can’t (or maybe just don’t want to) do something.

                • ricecake@sh.itjust.works
                  link
                  fedilink
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  6 months ago

                  Do you think that, in this example, using certbot is fucking shit up, or breaking something?

                  The thing about overkill is that it does work. If you’re accustomed to using a solution in a professional setting, it’s probably both overkill and also vastly more familiar than the bare minimum required for a class project that would be entirely unacceptable in a professional setting.

                  In OPs anecdote, they did get their certificates, so I don’t quite see your “intentionally fucking things up” claim as what’s happening.

          • brokenlcd@feddit.it
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            6 months ago

            You can say what you want i still prefer appimages to snaps, old school windows stile ftw

    • r00ty@kbin.life
      link
      fedilink
      arrow-up
      12
      ·
      6 months ago

      Work laptop, it stays closed, and I use my two screens connected to it. After Covid, everyone wanted video calls. Nope, I’m not getting the laptop out from the back of the desk for you.

      Anyone hacking the webcam can get a view of the base of the laptop.

    • steal_your_face@lemmy.ml
      link
      fedilink
      English
      arrow-up
      29
      ·
      6 months ago

      ⠀⠀⠘⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡜⠀⠀⠀ ⠀⠀⠀⠑⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡔⠁⠀⠀⠀ ⠀⠀⠀⠀⠈⠢⢄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⠴⠊⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⢸⠀⠀⠀⢀⣀⣀⣀⣀⣀⡀⠤⠄⠒⠈⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠘⣀⠄⠊⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀ ⣿⣿⣿⣿⣿⣿⣿⣿⡿⠿⠛⠛⠛⠋⠉⠈⠉⠉⠉⠉⠛⠻⢿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⡿⠋⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢿⣿⣿⣿⣿ ⣿⣿⣿⣿⡏⣀⠀⠀⠀⠀⠀⠀⠀⣀⣤⣤⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠙⢿⣿⣿ ⣿⣿⣿⢏⣴⣿⣷⠀⠀⠀⠀⠀⢾⣿⣿⣿⣿⣿⣿⡆⠀⠀⠀⠀⠀⠀⠀⠈⣿⣿ ⣿⣿⣟⣾⣿⡟⠁⠀⠀⠀⠀⠀⢀⣾⣿⣿⣿⣿⣿⣷⢢⠀⠀⠀⠀⠀⠀⠀⢸⣿ ⣿⣿⣿⣿⣟⠀⡴⠄⠀⠀⠀⠀⠀⠀⠙⠻⣿⣿⣿⣿⣷⣄⠀⠀⠀⠀⠀⠀⠀⣿ ⣿⣿⣿⠟⠻⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠶⢴⣿⣿⣿⣿⣿⣧⠀⠀⠀⠀⠀⠀⣿ ⣿⣁⡀⠀⠀⢰⢠⣦⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⣿⣿⣿⣿⣿⡄⠀⣴⣶⣿⡄⣿ ⣿⡋⠀⠀⠀⠎⢸⣿⡆⠀⠀⠀⠀⠀⠀⣴⣿⣿⣿⣿⣿⣿⣿⠗⢘⣿⣟⠛⠿⣼ ⣿⣿⠋⢀⡌⢰⣿⡿⢿⡀⠀⠀⠀⠀⠀⠙⠿⣿⣿⣿⣿⣿⡇⠀⢸⣿⣿⣧⢀⣼ ⣿⣿⣷⢻⠄⠘⠛⠋⠛⠃⠀⠀⠀⠀⠀⢿⣧⠈⠉⠙⠛⠋⠀⠀⠀⣿⣿⣿⣿⣿ ⣿⣿⣧⠀⠈⢸⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠟⠀⠀⠀⠀⢀⢃⠀⠀⢸⣿⣿⣿⣿ ⣿⣿⡿⠀⠴⢗⣠⣤⣴⡶⠶⠖⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡸⠀⣿⣿⣿⣿ ⣿⣿⣿⡀⢠⣾⣿⠏⠀⠠⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠛⠉⠀⣿⣿⣿⣿ ⣿⣿⣿⣧⠈⢹⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣰⣿⣿⣿⣿ ⣿⣿⣿⣿⡄⠈⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣴⣾⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣧⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣷⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣦⣄⣀⣀⣀⣀⠀⠀⠀⠀⠘⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⡄⠀⠀⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣧⠀⠀⠀⠙⣿⣿⡟⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠁⠀⠀⠹⣿⠃⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⡿⠛⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⢐⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⠿⠛⠉⠉⠁⠀⢻⣿⡇⠀⠀⠀⠀⠀⠀⢀⠈⣿⣿⡿⠉⠛⠛⠛⠉⠉ ⣿⡿⠋⠁⠀⠀⢀⣀⣠⡴⣸⣿⣇⡄⠀⠀⠀⠀⢀⡿⠄⠙⠛⠀⣀⣠⣤⣤⠄⠀

  • DarkenLM@kbin.earth
    link
    fedilink
    arrow-up
    40
    ·
    6 months ago

    The safest laptops to use: The old ThinkPads still holding on through hopes and dreams.

    • valkyre09@lemmy.world
      link
      fedilink
      arrow-up
      7
      ·
      6 months ago

      I think I saw videos of you last week on one of those revenge porn sites. You were going to town on yourself. I’m guessing you didn’t send the bitcoin?

  • ichbinjasokreativ@lemmy.world
    link
    fedilink
    arrow-up
    22
    ·
    6 months ago

    Get a laptip with a real hardware switch for the cam and the mic. Best peace of mind knowing that they’re really off. Neither tape, nor the non-electrical built-in plastic sliders do that.

    • aname@lemmy.one
      link
      fedilink
      arrow-up
      12
      ·
      6 months ago

      You still have to trust the manufacturer that it really turns the webcam off, not just the webcam light.

    • r00ty@kbin.life
      link
      fedilink
      arrow-up
      5
      ·
      6 months ago

      I’d like a proper hardware light. Something physical such that the camera cannot send the image back to the board without the light being on. And yes, a physical cutout switch would definitely be nice.

    • brokenlcd@feddit.it
      link
      fedilink
      arrow-up
      3
      ·
      6 months ago

      Either buy a sticker cover with a slider or get lenovo laptops that have that builtin; even though the slider is confusionary since when it’s closed it’s a red dot. Im sure that there must be other brands that integrate it as well

      • ichbinjasokreativ@lemmy.world
        link
        fedilink
        arrow-up
        5
        ·
        6 months ago

        The problem with those is that it’s often just a piece of plastic, so the microphone isn’t cut off from power. The webcam sees noching, but sound is unaffected.

          • ichbinjasokreativ@lemmy.world
            link
            fedilink
            arrow-up
            4
            arrow-down
            1
            ·
            6 months ago

            It’s more about privacy. Windows might access your mic to get more data on you for advertising, wouldn’t be anything new.

            • Synapse@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              6 months ago

              I am joking of course. I am a privacy freak myself:

              1. All my computers run Linux
              2. I self-host all what I can and encrypt as much as I can by myself too
              3. On desktop, Mic and Cam are connected to a USB hub with individual switches such that they are powered ON only when I need them
              4. Laptop is a Framework 13 with HW switches for both Cam and Mic

              There is something about the webcam switch on the Lenovo from work, that I like better than the Framework: The switch also physically blocks the camera. It makes me feel more safe and it’s actually much more intuitive to understand when it is disable. On Framework, the switch shows either red or black, but I never know what is enable and disable. Is it red for “Careful, it’s active !” or red for “Disable” ? (It’s Red=Disable, Black=Active).

  • cmnybo@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    22
    ·
    6 months ago

    I don’t even have a webcam on my desktop. My Thinkpad has a sliding cover on its webcam that stays closed when I’m not using it.

    • Psythik@lemmy.world
      link
      fedilink
      arrow-up
      5
      ·
      6 months ago

      I simply don’t own a webcam. Last time I actually had a use for one was sometime around 2003. That said, I’m still fucked because I made the mistake of buying a phone that uses the camera as the light sensor.

  • TurdMongler@lemmy.world
    link
    fedilink
    arrow-up
    17
    ·
    6 months ago

    What about Intel ME, Microsoft Pluton, the one for AMD. The secret chips that have direct access to your hardware. Basically a blackbox. Same with cellphones. SoC.

    • renzev@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 months ago

      the one for AMD

      It’s called PSP (Platform Security Processor), iirc

      And to answer your question:

      • Old-ass thinkpad as daily driver: Acquired
      • RPI Pico: Acquired
      • SOIC Chip programming clip: Acquired
      • Motivation to get off my ass and actually flash libreboot and me-cleaner: In progress…