#gnulinux

canoodle@nerdpol.ch

web cms - wordpress still dominating - second comes no cms

https://w3techs.com/technologies/overview/content_management/

https://w3techs.com/technologies/overview/content_management/

What is interesting, that 33% of all website creators, decide to not use any CMS at all (static HTML/manually editing it).

there is even a trend of creating cms inside wordperss, “cms inside the cms” so to speak, with plugins such as Enfold, elementor.com and wpastra.com

#linux #gnu #gnulinux #opensource #administration #sysops #web #html #php #css #javascript #cms #wordpress #wix #joomla #drupal #typo3

Originally posted at: https://dwaves.de/2022/07/12/web-cms-wordpress-still-dominating-second-comes-no-cms/

lorenzoancora@pod.mttv.it

Mozilla Firefox is slow even if hardware acceleration is enabled?

Try enabling gfx.x11-egl.force-enabled in about:config to force the use of EGL1 and then restart the web browser.
If this works, enabling layers.acceleration.force-enabled can boost your performance even more by enabling OpenGL alongside EGL. 2
This also works on Flatpak if the security permissions are correct (use Flatseal3 if needed).

Tags: #linux #gnulinux #sysadmin #gpu #gpu-linux #gpuacceleration #egl #opengl #x11 #xorg #mozilla #firefox #hack #flatpak #flatseal

https://www.khronos.org/egl/
https://flathub.org/apps/details/com.github.tchx84.Flatseal
https://linuxreviews.org/HOWTO_Make_Mozilla_Firefox_Blazing_Fast_On_Linux


canoodle@nerdpol.ch

Hardware Review - TUXEDO InfinityBook S 14 Gen6 is the same as System76 Lemur Pro Laptop Notebook and USB-C to LAN dongles benchmark

So Tuxedo sells System76 hardware or has some sort of cooperation to create "dedicated" GNU Linux hardware? pros: great looks good speeds (i7+16GB of RAM + NVMe (upgraded it to 1TB NVMe) outdoor capable screen battery runtime aprox 5h (heavily depending on[...]

#linux #gnu #gnulinux #opensource #administration #sysops #hardware #notebook #laptop #review #tuxedo #system76

Originally posted at: https://dwaves.de/2022/07/06/hardware-review-tuxedo-infinitybook-s-14-gen6-is-the-same-as-system76-lemur-pro-laptop-notebook-and-usb-c-to-lan-dongles-benchmark/

canoodle@nerdpol.ch

GNU Linux bash - notebook laptop test battery runtime script

how long (many hours) will this notebook-laptop battery last? some sensors/softwares report/calculate things like this... 5days on one charge is a very very optimistic estimate for most intel or amd based notebooks (even for RISC/ARM based notebooks-laptops that would be AWESOME, most[...]

#linux #gnu #gnulinux #opensource #administration #sysops #hardware #battery #test #script #bash #scripting #scripts

Originally posted at: https://dwaves.de/2022/07/08/gnu-linux-bash-notebook-laptop-test-battery-runtime-script/

canoodle@nerdpol.ch

Hardware Review - USB to NVMe adapter - Asus USB 3.2 Gen 2 Type-C M.2 NVMe SSD to USB Adapter also known as "Rog Strix Arion" vs Inateck M.2 NVMe 2 USB Adapter

the idea was:

  • the user has computers, that allow for easy harddisk or NVMe swaps
    • installation X is on NVMe1, installation Y is on NVMe2
  • or the user want’s to reinstall on a new harddisk, USB connecting the old harddisk, to restore files to the new harddisk

for this just as USB-SATA adapters an USB-NVMe adapter had to be found.

So gave the “Rog Strix Arion” by ASUS a shot.

  • the pros:
    • makes NVMe work like an USB Stick
      • it says “initialize your blank ssd before use” (the terms NVMe and SSD start to get confusing)
      • but it is also possible to read an already “initialized” (partition table, formatted) NVMe
        • but it might be not the ideal choice for that use, more USB-Stick-NVMe kind of use
    • fast
    • solid heavy metal casing that distributes heat (those NVMe chips can become pretty hot)
    • nice LED light show
  • cons:
    • open and closing it could be less of an effort

how to open this thing?

the user needs a pin.

hm…. and this won an Design Award in 2020?

Imho this makes things too complicated, as if there is no pin, there is no possibility to easily swap NVMes in and out of the NVMe-USB adapter.

benchmark performance:

USB 3.0 connected, it is fast. no doubt about it. ~430MBytes/sec kind of fast.

time <a href="https://dwaves.de/2020/11/13/gnu-linux-basic-harddisks-benchmarks-ssds-kingston-skc600512g-vs-samsung-ssd-850-pro-vs-samsung-ssd-860-evo-vs-samsung-ssd-870-evo-1tb-ntfs-vs-ext4-how-fast-are-virtual-harddisks/">/scripts/bench/bench_harddisk.sh</a>
=== harddisk sequential write and read bench v1 ===
starting test on the device that holds the current directory the user is in
no need to run it as root

========== writing 3GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 5,87549 s, 365 MB/s

real    0m5,919s
user    0m0,000s
sys 0m1,927s
========== reading 6GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 4,94441 s, 434 MB/s

real    0m4,993s
user    0m0,000s
sys 0m2,000s
========== tidy up remove testfile ==========

real    0m10,983s
user    0m0,001s
sys 0m3,997s

So Asus planned for the user to install an NVMe and then use it like a USB Stick (no user will ever change the FlashChips of an USB Stick?)

also closing the device seems to be pretty hard… as the mechanism does not want to snap (again, this actually WON an design award? “The looks are great, who cares if it works” kind of award?)

Ok it is possibly, that the case closes properly with other NMVes, but the KINGSTON SA2000M81000G (some parts of it might be “too high”?) X-D

Inateck M.2 NVMe 2 USB Adapter

so bought the “inateck” adapter for half the price of the ASUS Adapter.

binary comment

  • 10 Gbit/s
  • USB 3.2 Gen 2
  • Type C & Type A Cable included (nice!)
  • while changing NVMes is also not sooo comfortable (detaching/attaching cooling pad and metal plate, but simply with the bush of an button (orange square above) it can be opened)
    • at least this time the NVMe “fit’s in”
  • the speed is 2x twice as fast as the ASUS Adapter…

<span style="color: #00ffff;">
time /scripts/bench/bench_harddisk.sh</span> 
=== harddisk sequential write and read bench v1 ===
starting test on the device that holds the current directory the user is in
no need to run it as root

========== writing 3GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 3,44557 s, 623 MB/s

real    0m3,493s
user    0m0,000s
sys 0m1,885s
========== reading 6GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 2,0635 s, 1,0 GB/s

real    0m2,104s
user    0m0,000s
sys 0m0,787s
========== tidy up remove testfile ==========

real    0m5,676s
user    0m0,002s
sys 0m2,745s

# rerun
real    0m5,406s

#linux #gnu #gnulinux #opensource #administration #sysops #hardware #review #nvme #usb #asus #Inateck

Originally posted at: https://dwaves.de/2022/06/14/hardware-review-usb-to-nvme-adapter-asus-usb-3-2-gen-2-type-c-m-2-nvme-ssd-to-usb-adapter-also-known-as-rog-strix-arion-vs-inateck-m-2-nvme-2-usb-adapter/

linuxmao.org@diaspora-fr.org

Éditorial de juillet 2022

#art #art_libre #artiste #artlibre #cc-by-sa #chanson #copyleft #creative-commons #creative_commons #creativecommons #culture #culture-libre #culture_libre #culturelibre #francophone #français #gnu #gnu-linux #gnulinux #gpl #informatique-musicale #informatique_musicale #informatiquemusicale #libre #libre-art #linux #linux-mao #linux_mao #linuxaudio #linuxmao #logiciel-libre #logiciel_libre #logiciellibre #mao #mao-linux #mao_linux #maolinux #musicien #musiciens #musique #musique-libre #musique_libre #numerique #productionmusicale

Un pote m’a prêté un bouquin traitant du chamanisme. C’est un recueil de textes traitant de ce sujet dont les premiers datent du XVIème siècle.

Parmi ceux-ci, le récit de l’ethnomusicologue Dale A. Olsen, en 1975, décrit de quelle façon les chamanes de la tribu Warao, au Venezuela, parviennent, durant les rituels de guérison, à modifier leur état de conscience à l’aide de la seule musique (chant, calebasse et crécelle), sans aucun recours à des substances hallucinogènes.

C’est donc, après négociations, muni d’un enregistreur professionnel de l’UCLA ainsi que d’un magnétophone portable grand public que le scientifique enregistra une séance dont, selon le chamane, une des finalités serait de détruire les machines de l’homme blanc.

Quelques semaines après la cérémonie, la machine professionnelle fut définitivement endommagée par des coulées d’acide provenant des piles et l’enregistreur amateur se mit à déchirer les bandes magnétiques.

Le chamane peut donc aussi bien, par l’entremise des esprits avec lesquels il entre en contact par la transe musicale, guérir que détruire.

Alors, cet été, restons bien vigilants, nous autres chamanes de l’écran et du clavier. Il ne faudrait pas que nos mélodies chamboulent la planète par maladresse ou inadvertance.

Mais je suis bien certain que vous saurez apporter joie et bien être plutôt que ruines et destructions.

On compte sur vous…

canoodle@nerdpol.ch

Hardware Review - USB to NVMe adapter - Asus USB 3.2 Gen 2 Type-C M.2 NVMe SSD to USB Adapter also known as "Rog Strix Arion"

the idea was:

  • the user has computers, that allow for easy harddisk or NVMe swaps
    • installation X is on NVMe1, installation Y is on NVMe2
  • or the user want’s to reinstall on a new harddisk, USB connecting the old harddisk, to restore files to the new harddisk

for this just as USB-SATA adapters an USB-NVMe adapter had to be found.

So gave the “Rog Strix Arion” by ASUS a shot.

  • the pros:
    • makes NVMe work like an USB Stick
      • it says “initialize your blank ssd before use” (the terms NVMe and SSD start to get confusing)
      • but it is also possible to read an already “initialized” (partition table, formatted) NVMe
        • but it might be not the ideal choice for that use, more USB-Stick-NVMe kind of use
    • fast
    • solid heavy metal casing that distributes heat (those NVMe chips can become pretty hot)
    • nice LED light show
  • cons:
    • open and closing it could be less of an effort

how to open this thing?

the user needs a pin.

hm…. and this won an Design Award in 2020?

Imho this makes things too complicated, as if there is no pin, there is no possibility to easily swap NVMes in and out of the NVMe-USB adapter.

benchmark performance:

USB 3.0 connected, it is fast. no doubt about it. ~430MBytes/sec kind of fast.

time <a href="https://dwaves.de/2020/11/13/gnu-linux-basic-harddisks-benchmarks-ssds-kingston-skc600512g-vs-samsung-ssd-850-pro-vs-samsung-ssd-860-evo-vs-samsung-ssd-870-evo-1tb-ntfs-vs-ext4-how-fast-are-virtual-harddisks/">/scripts/bench/bench_harddisk.sh</a>
=== harddisk sequential write and read bench v1 ===
starting test on the device that holds the current directory the user is in
no need to run it as root

========== writing 3GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 5,87549 s, 365 MB/s

real    0m5,919s
user    0m0,000s
sys 0m1,927s
========== reading 6GB of zeroes ==========
0+1 records in
0+1 records out
2147479552 bytes (2,1 GB, 2,0 GiB) copied, 4,94441 s, 434 MB/s

real    0m4,993s
user    0m0,000s
sys 0m2,000s
========== tidy up remove testfile ==========

real    0m10,983s
user    0m0,001s
sys 0m3,997s

So Asus planned for the user to install an NVMe and then use it like a USB Stick (no user will ever change the FlashChips of an USB Stick?)

also closing the device seems to be pretty hard… as the mechanism does not want to snap (again, this actually WON an design award? “The looks are great, who cares if it works” kind of award?)

#linux #gnu #gnulinux #opensource #administration #sysops #hardware #review #nvme #usb #asus

Originally posted at: https://dwaves.de/2022/07/04/hardware-review-usb-to-nvme-adapter-asus-usb-3-2-gen-2-type-c-m-2-nvme-ssd-to-usb-adapter-also-known-as-rog-strix-arion/

canoodle@nerdpol.ch

Rant: PHP & DokuWiki update upgrade problems - too much complexity: fixing one thing, while breaking another - why updates are hated

Nobody likes rants… just as Updates are (sometimes) hated, but (sometimes) necessary.

This is how (probably) the slogan: “never touch a running/working system” originated.

Once a system was fully tested (all used cases worked), an update came along a old functionality was not functioning anymore.

For security reasons: all machines/systems directly or indirectly exchanging messages with the wild west internet need to stay as up to date as possible.

the pros:

(+) First of DokuWiki is a nice software, it’s cool that it can do a lot of fancy stuff such as LDAP (?) if the user needs it.

(-) What is not cool, to have a lot of plugins installed per default, instead of starting with a bare minimum of software needed (software minimalism) and let the user add the software the user absolutely needs, because “too much software” pre-installed tend to make systems fail.

This time it happened in a “complex grown over years software” “tripple” upgrade situation:

  • php8 is out
  • DokuWiki “upgrade plugin” needs updating
  • DokuWiki itself needs updating

… things fell apart at the 1st step already, resulting in a still readable, but pretty ugly (missing CSS) version of what it was before.

culprit: with a stylesheed was not being properly generated:

url: http://localhost/projects/lib/exe/css.php?t=dokuwiki&tseed=djf83jhdfuz38odhfzho3z80ehilf

<br />
<b><span style="color: #ff9900;">Warning</span></b>: Undefined array key "speech" in <b>/path/to/dokuwiki/lib/exe/css.php</b> on line <b>83</b><br />
<br />
<b><span style="color: #ff0000;">Fatal error</span></b>: Array and string offset access syntax with curly braces is no longer supported in <b>/path/to/dokuwiki/vendor/marcusschwarz/lesserphp/lessc.inc.php</b> on line <b>761</b><br />

DokuWiki authors added the work of this author (https://www.maswaba.de/lesserphpdocs/) for whatever reason and { curly brackets } (now deprecated) were not updated in time to [ square brackets ].

As simple as that.

In the beginning: all the user wants is an easy editable file based wiki (it’s even there in the Dokuwiki slogan “it’s better when it is simple”)

Why exactly is this CSS compiler needed/active per default in the first place?

Has DokuWiki grown into unnecessary complex “bloatware” of over 5000 files?

<span style="color: #00ffff;">wget https://download.dokuwiki.org/out/dokuwiki-8186df5bcf8bba07ff8638254a75b094.tgz
tar fxvz dokuwiki-8186df5bcf8bba07ff8638254a75b094.tgz</span>
<span style="color: #00ffff;">find ./dokuwiki |wc -l</span>
<span style="color: #ff6600;">5579 files</span>

(much less than some PHP frameworks… but still a lot of files… with a lot of moving parts… all potential points of failure…)

violating UNIX K.I.S.S and leading to software failures

More complexity = more errors = less maintainability.

DokuWiki has gained functionalities of questionable qualities, such as the very faulty and thus pretty useless and annoying SPAM detection mechanism.

(every Wiki should be login & .htaccess protected, how to activate the DokuWiki (per default disabled) login screen, is the #1 most visited page of this blog X-D, already enough SPAM protection… so completely unnecessary to add such faulty functionality)

Even worse: @the-official-DokuWiki-forum, the forum software triggers admins (that are unable to read and blindly trust this faulty SPAM detection mechanism, that basically detects EVERY URL as spam) to block the user’s (maybe useful) contributions aka “overblocking”.

Be Brave New Web World.

Only solution: write your own tools that respect UNIX K.I.S.S principle and are therefore easy to fix and maintain and actually work, fast 🙂 (using minimal resources)

DokuWiki updates-upgrades: how it is supposed to look and work like:

how to fix this mess:

==== howto fix ====
<b>Warning</b>: Undefined array key "speech" in <b>/path/to/dokuwiki/lib/exe/css.php</b> on line <b>83</b>
(usually php-warnings are disabled, but if warnings are enabled, it will mess up the css's format)

=== in file: /lib/exe/css.php

== in line: 82 to 87

= change, from:
        // load user styles
        if(is_array($config_cascade['userstyle'][$mediatype])) {
            foreach($config_cascade['userstyle'][$mediatype] as $userstyle) {
                $files[$userstyle] = DOKU_BASE;
            }
        }
= change, to:
        // load user styles
        if(array_key_exists($mediatype, $config_cascade['userstyle']))
        {
            if(is_array($config_cascade['userstyle'][$mediatype])) {
                foreach($config_cascade['userstyle'][$mediatype] as $userstyle) {
                    $files[$userstyle] = DOKU_BASE;
                }
            }
        }

==== howto fix ====

<b>Fatal error</b>: Array and string offset access syntax with curly braces is no longer supported in <b>/path/to/dokuwiki/vendor/marcusschwarz/lesserphp/lessc.inc.php</b> on line <b>761</b>

=== in file:
/vendor/marcusschwarz/lesserphp/lessc.inc.php

== line: 761
= change, from:
   $subProp[1]{0} != $this->vPrefix)
= change, to:
   $subProp[1][0] != $this->vPrefix)

== line: 2762
= change, from:
   if (!is_string($tag) || $tag{0} != $this->lessc->mPrefix)
= change, to:
   if (!is_string($tag) || $tag[0] != $this->lessc->mPrefix)

== line: 2816
= change, from:
   if ($tag{0} == $this->lessc->vPrefix)
= change, to:
   if ($tag[0] == $this->lessc->vPrefix)

#linux #gnu #gnulinux #opensource #administration #sysops #dokuwiki #when #upgrades #fail #upgrade #complexity #unix #kiss

Originally posted at: https://dwaves.de/2022/06/30/rant-php-dokuwiki-update-upgrade-problems-too-much-complexity-fixing-one-thing-while-breaking-another-why-updates-are-hated/

canoodle@nerdpol.ch

PHP & DokuWiki update upgrade problems - too much complexity: fixing one thing, while breaking another - why updates are hated

Updates are hated, but sometimes necessary.

This is how (probably) the slogan: “never touch a running/working system” originated.

Once a system was fully tested (all used cases worked), an update came along a old functionality was not functioning anymore.

For security reasons: all machines/systems directly or indirectly exchanging messages with the wild west internet need to stay as up to date as possible.

the pros:

(+) First of DokuWiki is a nice software, it’s cool that it can do a lot of fancy stuff such as LDAP (?) if the user needs it.

(-) What is not cool, to have a lot of plugins installed per default, instead of starting with a bare minimum of software needed (software minimalism) and let the user add the software the user absolutely needs, because “too much software” pre-installed tend to make systems fail.

This time it happened in a “complex grown over years software” “tripple” upgrade situation:

  • php8 is out
  • DokuWiki “upgrade plugin” needs updating
  • DokuWiki itself needs updating

… things fell apart at the 1st step already, resulting in a still readable, but pretty ugly (missing CSS) version of what it was before.

culprit: with a stylesheed was not being properly generated:

url: http://localhost/projects/lib/exe/css.php?t=dokuwiki&tseed=djf83jhdfuz38odhfzho3z80ehilf

<br />
<b><span style="color: #ff9900;">Warning</span></b>: Undefined array key "speech" in <b>/path/to/dokuwiki/lib/exe/css.php</b> on line <b>83</b><br />
<br />
<b><span style="color: #ff0000;">Fatal error</span></b>: Array and string offset access syntax with curly braces is no longer supported in <b>/path/to/dokuwiki/vendor/marcusschwarz/lesserphp/lessc.inc.php</b> on line <b>761</b><br />

DokuWiki authors added the work of this author (https://www.maswaba.de/lesserphpdocs/) for whatever reason and { curly brackets } (now deprecated) were not updated in time to [ square brackets ].

As simple as that.

In the beginning: all the user wants is an easy editable file based wiki (it’s even there in the Dokuwiki slogan “it’s better when it is simple”)

Why exactly is this CSS compiler needed/active per default in the first place?

Has DokuWiki grown into unnecessary complex “bloatware” of over 5000 files?

<span style="color: #00ffff;">wget https://download.dokuwiki.org/out/dokuwiki-8186df5bcf8bba07ff8638254a75b094.tgz
tar fxvz dokuwiki-8186df5bcf8bba07ff8638254a75b094.tgz</span>
<span style="color: #00ffff;">find ./dokuwiki |wc -l</span>
<span style="color: #ff6600;">5579 files</span>

(much less than some PHP frameworks… but still a lot of files… with a lot of moving parts… all potential points of failure…)

violating UNIX K.I.S.S and leading to software failures

More complexity = more errors = less maintainability.

DokuWiki has gained functionalities of questionable qualities, such as the very faulty and thus SPAM detection mechanism.

(every Wiki should be login & .htaccess protected, how to activate the DokuWiki (per default disabled) login screen, is the #1 most visited page of this blog X-D, already enough SPAM protection… so completely unnecessary to add such faulty functionality)

Even worse: @the-official-DokuWiki-forum, the forum software triggers admins (that are unable to read and blindly trust this faulty SPAM detection mechanism, that basically detects EVERY URL as spam) to block the user’s (maybe useful) contributions aka “overblocking”.

Be Brave New Web World.

Only solution: write your own tools that respect UNIX K.I.S.S principle and are therefore easy to fix and maintain and actually work, fast 🙂 (using minimal resources)

how to fix this mess:

==== howto fix ====
<b>Warning</b>: Undefined array key "speech" in <b>/path/to/dokuwiki/lib/exe/css.php</b> on line <b>83</b>
(usually php-warnings are disabled, but if warnings are enabled, it will mess up the css's format)

=== in file: /lib/exe/css.php

== in line: 82 to 87

= change, from:
        // load user styles
        if(is_array($config_cascade['userstyle'][$mediatype])) {
            foreach($config_cascade['userstyle'][$mediatype] as $userstyle) {
                $files[$userstyle] = DOKU_BASE;
            }
        }
= change, to:
        // load user styles
        if(array_key_exists($mediatype, $config_cascade['userstyle']))
        {
            if(is_array($config_cascade['userstyle'][$mediatype])) {
                foreach($config_cascade['userstyle'][$mediatype] as $userstyle) {
                    $files[$userstyle] = DOKU_BASE;
                }
            }
        }

==== howto fix ====

<b>Fatal error</b>: Array and string offset access syntax with curly braces is no longer supported in <b>/path/to/dokuwiki/vendor/marcusschwarz/lesserphp/lessc.inc.php</b> on line <b>761</b>

=== in file:
/vendor/marcusschwarz/lesserphp/lessc.inc.php

== line: 761
= change, from:
   $subProp[1]{0} != $this->vPrefix)
= change, to:
   $subProp[1][0] != $this->vPrefix)

== line: 2762
= change, from:
   if (!is_string($tag) || $tag{0} != $this->lessc->mPrefix)
= change, to:
   if (!is_string($tag) || $tag[0] != $this->lessc->mPrefix)

== line: 2816
= change, from:
   if ($tag{0} == $this->lessc->vPrefix)
= change, to:
   if ($tag[0] == $this->lessc->vPrefix)

#linux #gnu #gnulinux #opensource #administration #sysops #dokuwiki #when #upgrades #fail #upgrade #complexity #unix #kiss

Originally posted at: https://dwaves.de/2022/06/30/php-dokuwiki-update-upgrade-problems-too-much-complexity-fixing-one-thing-while-breaking-another-why-updates-are-hated/

canoodle@nerdpol.ch

gnu linux - bash console - animated ascii art - sl steam locomotive

just one of those programs, that make users smile 🙂

written in C 🙂

compile it from src

or go

<span style="color: #00ffff;">lsb_release -d</span>; # tested on
Description: Debian GNU/Linux 11 (bullseye)
<span style="color: #00ffff;">su - root</span>
<span style="color: #00ffff;">apt update</span>
<span style="color: #00ffff;">apt install sl</span>

#linux #gnu #gnulinux #opensource #administration #sysops #ascii #art #bash #locomotive

Originally posted at: https://dwaves.de/2022/06/28/gnu-linux-bash-console-animated-ascii-art-sl-steam-locomotive/

canoodle@nerdpol.ch

Rant: One day either JavaScript or AutoComplete will start ww3

which pretty much reads like:

it probably has to do with: https://wiki.mozilla.org/ServerJS/Introduction

(used in firefox and/or thunderbird?)

(checkout this search for more javascript rants X-D)

one day either JavaScript or Autocomplete will cause the 3rd world war:

now imagine Biden and Putin are texting:

Biden: Dear Putin, very sorry what happened in the past.

But no worries, we will invade you for dinner.

Putin: Invade?

Biden: Sorry autocomplete. Invite you for dinner.

#linux #gnu #gnulinux #opensource #administration #sysops #javascript #js #argh #wtf #ahoh

Originally posted at: https://dwaves.de/2022/06/25/rant-one-day-either-javascript-or-autocomplete-will-start-ww3/

canoodle@nerdpol.ch

One day either JavaScript or AutoComplete will start ww3

which pretty much reads like:

it probably has to do with: https://wiki.mozilla.org/ServerJS/Introduction

(used in firefox and/or thunderbird?)

(checkout this search for more javascript rants X-D)

one day either JavaScript or Autocomplete will cause the 3rd world war:

now imagine Biden and Putin are texting:

Biden: Dear Putin, very sorry what happened in the past.

But no worries, we will invade you for dinner.

Putin: Invade?

Biden: Sorry autocomplete. Invite you for dinner.

#linux #gnu #gnulinux #opensource #administration #sysops #javascript #js #argh #wtf #ahoh

Originally posted at: https://dwaves.de/2022/06/25/one-day-either-javascript-or-autocomplete-will-start-ww3/

canoodle@nerdpol.ch

One day either JavaScript or AutoComplete will start ww3

it probably has to do with: https://wiki.mozilla.org/ServerJS/Introduction

(used in firefox and/or thunderbird?)

one day either JavaScript or Autocomplete will cause the 3rd world war:

now imagine Biden and Putin are texting:

Biden: Dear Putin, very sorry what happened in the past.

But no worries, we will invade you for dinner.

Putin: Invade?

Biden: Sorry autocomplete. Invite you for dinner.

#linux #gnu #gnulinux #opensource #administration #sysops #javascript #js #argh #wtf #ahoh

Originally posted at: https://dwaves.de/2022/06/25/one-day-either-javascript-or-autocomplete-will-start-ww3/

canoodle@nerdpol.ch

Russia's Conti working on exploits for Intel ME BMC AMT IPMI - Intel ME the biggest security fuck up in computing history - sue Intel

“The biggest network security threat today is a remote code execution exploit for Intel’s Management Engine.”

“Every computer with an Intel chipset produced in the last decade would be vulnerable to this exploit, and RCE would give an attacker full control over every aspect of a system.

If you want a metaphor, we are dinosaurs and an Intel ME exploit is an asteroid hurtling towards the Yucatán peninsula.” (https://hackaday.com/tag/intel-me/)

Intel might have installed – over the course of at least a decade (to this day?) a closed source backdoor in your computer’s firmware, that might never receive updates and is hard to remove.

Once this backdoor is fully cracked, everyone (Russia, China and North Korea) can use it.

Having remote control over a server down to the BIOS is a neat feature.

https://dwaves.de/2018/12/03/intel-bmc-java-jviewer-kvm-remote-control-with-linux-and-intel-mainboard-s2600cwr/

Hackers think so too.

Because a firmware is sometimes hard to update.

BIOS-UEFI updates need to be as easy to install than OS updates.

There are even parts of Intel ME that can not be updated at all (yet) because they are encrypted & signed and the system won’t start if they are missing (security by obscurity).

another dramatic way to put it:

The biggest network security threat today is a remote code execution exploit for Intel’s Management Engine.”

“Every computer with an Intel chipset produced in the last decade would be vulnerable to this exploit, and RCE would give an attacker full control over every aspect of a system.

If you want a metaphor, we are dinosaurs and an Intel ME exploit is an asteroid hurtling towards the Yucatán peninsula.” (https://hackaday.com/tag/intel-me/)

Currently the OS must be hacked or USB access (“physical access equals root access”) before it is possible to malware very deeply in the system = having this guy say: “only solution” “shredder mainboard”

But it might be just a matter of time, until new attack vectors are found, that allow exploit over network, maybe even in the security-nightmare language that every browser runs: JavaScript? X-D (just turn it off globally thanks!)

https://www.golem.de/news/conti-ransomware-gruppe-arbeitet-an-exploit-fuer-intel-me-2206-165848.html

(Conti is a hacker group associated with Russia)

https://www.golem.de/news/security-das-intel-me-chaos-kommt-2003-147099.html

https://www.golem.de/news/security-hackern-gelingt-vollzugriff-auf-intel-me-per-usb-1711-131065.html

Intel ME: Will Intel deliver updates? I hope so. Otherwise: Seriously sue intel to put your IT hardware at danger of being destroyed PERMANENTLY.

As it has happened with those KA-SAT satellite modems.

solutions anyone?

Yes multiple hard one’s.

  • try turning AMT BMC Intel ME off in the bios
    • some BIOS even allow to disable Intel ME permanently
  • on some systems BMC can be disabled with a jumper on the motherboard
  • Flash GNU Linux to the BIOS! (CoreBoot, LibreBoot with the Lenovo x60s no problem, with newer notebooks / PCs probably more effort)
  • “Just use AMD”, yes better but according to this video only a partial solution?

intel needs to work with it’s damaged customers to fix this mess

Or be sued for every hack and every ransomware attack and every downtime and every destroyed motherboard.

seriously.

open source backdoors instead of closed source backdoors!

ok ideally no backdoors at all?

“Intel had already found the vulnerability (CVE-2019-0090) itself last year, described only as a privilege escalation and tried to fix a possible attack vector.

According to PT, however, there are probably other attack vectors and the real problem in ROM still remains, as this part cannot be updated.

This is the preliminary culmination of an embarrassment on the part of Intel, which the manufacturer is trying to sell as security.

By now at the latest, Intel should mothball the concept of a proprietary ME and work on the open hardware security chip that Google

“Customers, users and Intel would be the winners.”

translated from: https://www.golem.de/news/security-das-intel-me-chaos-kommt-2003-147099.html

“Together with partners, Google has announced the Open Titan project.

The goal is a completely openly designed chip based on RISC-V, which is to be used as root-of-trust in many different devices.”

https://www.golem.de/news/open-titan-google-startet-oss-projekt-fuer-hardware-security-chip-1911-144816.html

links:

https://www.rapid7.com/blog/post/2013/07/02/a-penetration-testers-guide-to-ipmi/

#linux #gnu #gnulinux #opensource #administration #sysops #cybersec #itsec #cyber #intel #intel-me #intelme

Originally posted at: https://dwaves.de/2022/06/10/russias-conti-working-on-exploits-for-intel-me-bmc-amt-ipmi-intel-me-the-biggest-security-fuck-up-in-computing-history-sue-intel/

canoodle@nerdpol.ch

The Deep Fake Crisis destroying trust in online conferencing - From Fake Klitschko conferences to Fake Tom Cruise videos - "Massive challenge for Europe" - is technology "neutral"?

update: major of Berlin fooled by Klitschko LIVE deep fake video conference (actually not so funny)

  • it would mean: do not trust phone calls, even if the number is shown as “police” “doctor” “friend”
  • trust no video conference
  • what can be trusted?

https://www.youtube.com/watch?v=CDMVaQOvtxU

https://www.youtube.com/watch?v=CDMVaQOvtxU

how deep fakes work:

  • computer program analyzes facial expressions of person A in footage
  • computer program then applies this, to make the facial expressions of person B, look like person A
    • (it is easier for the program to generate good results, if person A and person B look alike, but in the future not even this might need to be necessary)
  • this is great news, for fake news, but bad news, for truth, as it adds to confusion of the masses (land of confusion)
  • that means, for authenticity, other ways to truly identifying a person in a video have to be found

“Massive challenge for Europe”

‘A “massive challenge for Europe” is when citizens are confronted with disinformation through misleading or openly false information. AI could exacerbate the effects of such “hybrid threats”, as such lies and propaganda could be brought to the people en masse “without technical expertise”. Trends in “deepfake technology” also increased concerns here. According to reports, criminals have already taken advantage of such procedures. AI is also likely to play into the hands of “traditional organized crime” and terrorists.”‘

  • ‘5G also poses problems for investigators’
  • ‘more difficult to identify SIM cards and their users and to eavesdrop on or locate them afterwards’
  • ‘mandatory end-to-end encryption could make eavesdropping even more difficult’
  • ‘virtualization of networks with the new standard does not taste good to the law enforcement officers’

auto translated from: https://www.heise.de/newsticker/meldung/KI-5G-und-Krypto-Europol-warnt-vor-disruptiven-Technologien-4547719.html

https://www.heise.de/news/Europol-Deepfakes-drohen-zum-Standardwerkzeug-Krimineller-zu-werden-7069235.html

#linux #gnu #gnulinux #opensource #administration #sysops #fake #fakenews #news #deepfake #berlin #major #video #conference #fakes

Originally posted at: https://dwaves.de/2022/05/01/the-deep-fake-crisis-destroying-trust-in-online-conferencing-from-fake-klitschko-conferences-to-fake-tom-cruise-videos-massive-challenge-for-europe-is-technology-neutral/

lorenzoancora@pod.mttv.it

Gain unprivileged access to an overlapped directory in Flatpak

Issue

/usr and other hierarchies on the host cannot be accessed from Flatpak, because they conflict with the sandbox. Instead, you are presented with a fake, overlapped filesystem hierarchy. Currently, Flatpak alone has no working options to solve this issue, as configuration overrides have no effect on those special filesystem hierarchies. As Linux does not support directory hard links, this is a serious nuisance!

Solution

Luckily, there is a workaround to safely access the original directory without having root access, if your sysadmin (or you, if you own the system) installed the bindfs package.

The bindfs command uses a FUSE filesystem to mirror the contents of a directory to another directory:

bindfs /overlapped ~/.overlapped

If high performance is needed:

bindfs -o multithreaded /overlapped ~/.overlapped

If security (read-only access) is needed:

bindfs -o ro /overlapped ~/.overlapped

Example

TASK: access the documentation on a Debian system from a Flatpak app.

user@localhost:~$ mkdir .doc
user@localhost:~$ bindfs -o ro,multithreaded /usr/share/doc .doc
user@localhost:~$ ls .doc

…will grant you fast, read-only access to /usr/share/doc by visiting .doc in your user home.
ls .doc will list the contents of /usr/share/doc, while .doc is not a symlink but a simple directory created by you.
You can now eg. use the Flatpak version of Mozilla Firefox to browse file:///home/yourusername/.doc and it will let you read the files in /usr/share/doc, which are normally inaccessible under Flatpak.

Note: this is not an official workaround, I've found by accident. If you know better alternatives please feel free to comment so other users can benefit. Thank you.


Tags: #linux #gnulinux #debian #flatpak #sandbox #virtualization #security #hacking #filesystem #fs #docs #sysadmin #sys #documentation

canoodle@nerdpol.ch

Deutsche Telekom and LANCOM hardware partnership - how to reach lancom support - VPN IKEv1 vs IKEv2

https://www.amazon.de/LANCOM-884-VoIP-Over-ISDN/dp/B01ERY8A8S/

https://www.amazon.de/LANCOM-884-VoIP-Over-ISDN/dp/B01ERY8A8S/

LANCOM is a major parnter of Deutsche Telekom.

“Würselen, August 26, 2002 – LANCOM Systems GmbH and Deutsche Telekom AG have agreed to cooperate on the sale of LANCOM Systems products.”

https://my.lancom-systems.de/newsroom/presse/archiv/archivansicht/lancom-systems-kooperiert-mit-deutscher-telekom/

that’s how a lot of lancom products end up at Telekom customers.

They could also have partnered with AVM that builds those pretty nice fritzboxes, why not?

just in case anyone wonders, this is NOT the official lancom forum: https://www.lancom-forum.de/

it is a forum run by social incompetent hobbyists and not paid by lancom.

so don’t expect to reach lancom tech support via this forum.

to reach the official lancom support, the user will need to register at LANCOM’s Jira instance here: https://support.lancom-systems.com/servicedesk/customer/portal/3/user/signup

the lancom support has answered… it only took them 5 weeks…

English:

  • Since 2019, IKEv1 has been described as deprecated and insecure by the IETF (Internet Engineering Task Force) and should therefore no longer be used.
  • LANCOM Systems recommends using the current IKEv2 standard instead.
  • The IKEv1 functionality is retained in LANCOM devices and can therefore continue to be used for scenarios with devices without IKEv2 support.
  • However, LANCOM Systems will no longer provide support for the analysis of connection problems with IKEv1 connections.
  • Also, there will be no bug fixes or new features in the firmware for IKEv1.

German:

  • IKEv1 wird seit 2019 durch die IETF (Internet Engineering Task Force) als veraltet (deprecated) und unsicher bezeichnet und sollte daher nicht mehr verwendet werden.
  • LANCOM Systems empfiehlt stattdessen den aktuellen Standard IKEv2 zu verwenden.
  • Die IKEv1 Funktionalität bleibt in LANCOM Geräten erhalten und kann somit weiterhin für Szenarien mit Geräten ohne IKEv2 Unterstützung verwendet werden.
  • LANCOM Systems wird allerdings keinen Support mehr bei der Analyse von Verbindungs-Problemen mit IKEv1-Verbindungen leisten.
  • Auch wird es für IKEv1 keine Fehlerbehebungen oder neue Features in der Firmware geben.
  • In Einzelfällen kann es zu Verbindungsabbrüchen während des Rekeyings kommen.
  • In einem solchen Fall kann es sinnvoll sein, die Lifetimes anzuheben, damit die Verbindungsabbrüche nicht mehr so häufig auftreten.
  • Informationen erhalten Sie in folgenden Artikeln:

#linux #gnu #gnulinux #opensource #administration #sysops #lancom #vpn #telekom #IKEv1 #IKEv2

Originally posted at: https://dwaves.de/2022/05/18/deutsche-telekom-and-lancom-hardware-partnership-how-to-reach-lancom-support-vpn-ikev1-vs-ikev2/

canoodle@nerdpol.ch

Russia's Conti working on exploits for Intel ME BMC AMT - Intel ME the biggest security fuck up in computing history - sue Intel

Intel might have installed – over the course of at least a decade (to this day?) a closed source backdoor in your computer’s firmware, that might never receive updates and is hard to remove.

Once this backdoor is fully cracked, everyone (Russia, China and North Korea) can use it.

Having remote control over a server down to the BIOS is a neat feature.

https://dwaves.de/2018/12/03/intel-bmc-java-jviewer-kvm-remote-control-with-linux-and-intel-mainboard-s2600cwr/

Hackers think so too.

Because a firmware is sometimes hard to update.

BIOS-UEFI updates need to be as easy to install than OS updates.

There are even parts of Intel ME that can not be updated at all (yet) because they are encrypted & signed (security by obscurity).

Currently the OS must be hacked or USB access (“physical access equals root access”) before it is possible to malware very deeply in the system = having this guy say: “only solution” “shredder mainboard”

But it might be just a matter of time, until new attack vectors are found, that allow exploit over network, maybe even in the security-nightmare language that every browser runs: JavaScript? X-D (just turn it off globally thanks!)

https://www.golem.de/news/conti-ransomware-gruppe-arbeitet-an-exploit-fuer-intel-me-2206-165848.html

(Conti is a hacker group associated with Russia)

https://www.golem.de/news/security-das-intel-me-chaos-kommt-2003-147099.html

https://www.golem.de/news/security-hackern-gelingt-vollzugriff-auf-intel-me-per-usb-1711-131065.html

Intel ME: Will Intel deliver updates? I hope so. Otherwise: Seriously sue intel to put your IT hardware at danger of being destroyed PERMANENTLY.

As it has happened with those KA-SAT satellite modems.

solutions anyone?

Yes multiple hard one’s.

  • try turning AMT BMC Intel ME off in the bios
    • some BIOS even allow to disable Intel ME permanently
  • on some systems BMC can be disabled with a jumper on the motherboard
  • Flash GNU Linux to the BIOS! (CoreBoot, LibreBoot with the Lenovo x60s no problem, with newer notebooks / PCs probably more effort)
  • “Just use AMD”, yes better but according to this video only a partial solution?

intel needs to work with it’s damaged customers to fix this mess

Or be sued for every hack and every ransomware attack and every downtime and every destroyed motherboard.

seriously.

open source backdoors instead of closed source backdoors!

ok ideally no backdoors at all?

“Intel had already found the vulnerability (CVE-2019-0090) itself last year, described only as a privilege escalation and tried to fix a possible attack vector.

According to PT, however, there are probably other attack vectors and the real problem in ROM still remains, as this part cannot be updated.

This is the preliminary culmination of an embarrassment on the part of Intel, which the manufacturer is trying to sell as security.

By now at the latest, Intel should mothball the concept of a proprietary ME and work on the open hardware security chip that Google

“Customers, users and Intel would be the winners.”

translated from: https://www.golem.de/news/security-das-intel-me-chaos-kommt-2003-147099.html

“Together with partners, Google has announced the Open Titan project. The goal is a completely openly designed chip based on RISC-V, which is to be used as root-of-trust in many different devices.”

https://www.golem.de/news/open-titan-google-startet-oss-projekt-fuer-hardware-security-chip-1911-144816.html

#linux #gnu #gnulinux #opensource #administration #sysops #cybersec #itsec #cyber #intel #intel-me #intelme

Originally posted at: https://dwaves.de/2022/05/17/russias-conti-working-on-exploits-for-intel-me-bmc-amt-intel-me-the-biggest-security-fuck-up-in-computing-history-sue-intel/

canoodle@nerdpol.ch

rant: system philosophy: IT that ignore UNIX K.I.S.S will die - in Germany there are only one man teams

https://www.youtube.com/watch?v=pGFGD5pj03M

https://www.youtube.com/watch?v=pGFGD5pj03M

team, team, team team…

In Germany, everyone is his/her own team, there are only one-man, one-woman teams.

teams not necessarily help each other

the best “help” you can get from another “team” is “it is somewhere in the (incomplete, outdated, no body cares) dokuwiki”

often they also work against each other

so actually there are no teams

without social skills and development as human being

the only interface that still exists is text and money

“give me that, here the money”

a “helpful” “community” isn’t it?

which reminds me of:

have no problem with that, just please do not raise any expectations that it might be otherwise.

“we are a hip, cool and fun company” (no)

just say it out loud: “we are a boring company, our systems are a grown mess and we are about to lose control, want to fix it?”

well if you read & understood K.I.S.S (simplify, simplify, simplify, standardize, automate) it could be fixed over the course of several years, if not: no.

to ignore K.I.S.S means: leaving behind an badly documented mess, either for others to fix or to die (delete & restart).

Any newcomer’s motivation will die fast, when being stuck without help and with outdated documentation.

Aka: the company is doomed to die in a self made mess. (Don’t tell me i did not warn ya)

Some will ride the rainbow, until it dies.

You just killed your own company and your job, but not in the way McIlroy envisioned it:

“As a programmer, it is your job to put yourself out of business. What you do today can be automated tomorrow.”

Doug McIlroy

(probably quoting JFKennedy)

PS: those guys at ubuntu surely also never have heard of K.I.S.S

the only reason ubuntu is still a thing, is that it is based on K.I.S.S respecting Debian

also: systemd has become “creepware” (it used to do startup, now it also does network config, WHY? WHY? (because it want’s to rule them all)

#linux #gnu #gnulinux #opensource #administration #sysops #team #teams #it #crowd #company #germany #error #mistake #unix #kiss #simplify #simplicity #rant

Originally posted at: https://dwaves.de/2021/11/10/rant-system-philosophy-it-that-ignore-unix-k-i-s-s-will-die-in-germany-there-are-only-one-man-teams/