• 3 Posts
  • 77 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle
  • I self-hosted it few months ago, and it’s actually surprisingly easy! Someone has made an Ansible script for Matrix with Element and some bridges, that (at least a month ago, IaaC tends to be pretty fragile) worked out of the box on a first try. I just set up some config values (mostly about enabling bridges I want) based on their amazing documentation, and then ran it once and everything is working so far. I even updated it several times already, and every time it was smooth, and it was basically just running a single ansible command. Their documentation is pretty well written, and with my basic cloud, IT and Linux knowledge I had no issues with following it. All you need to know is how to set up cloud VM, get a domain and set DNS, and set up SSH keys to access the server.

    In total it took me about two hours in total, from when I decided “I’m setting up Matrix tonight” without any prior knowledge, looking up my options and finding the ansible script, setting up cloud and getting Matrix up and running.

    I’m renting a VM on Hetzner for like 6$ per month, and it worked without issues so far. I use it for Discord and Messenger, although the Meta bridge does have some problems, for example I didn’t figure out how to message someone with whom I haven’t had a conversation since I set up the bridge, since only then it creates the room for it. But that can be solved by keeping the Messenger app or usign the browser to send a first message, and it immediately shows in your Matrix bridge (and stays there forever).


  • Ever since I played watchdogs and shadowrun, I wanted to work in cybersecurity, especially as a Red Teamer, which is literally Shadowrun - you run complex ops that have to break in, and steal stuff from largre banks without anyone but the management knowing about the test, with almost nothing being off-limits, as long as it doesn’t cause some kind of damage.

    Five years later, I do work as a Red Team Lead. Hpwever, our company was just scrambling to start doing RT since thats the buzzword now, and while we did have amazing pentesters, unfortunately pentesting and Red Teaming requires vastly different skills. Ypu never need to avoid EDRs, write malware with obscure low-level winapi, or even know what kind of IoC ajd detections will a command you run create, when you are doing a pentest.

    But since no one knew better, and I love learning and researching new stuff, while also having Red Teaming romabticized, my interrest in it eventually led to me getting a Lead position for the barely scrambling team.

    Mind you, I was barely out of being a junipr, with only three years of part time pentesting experience. It was NOT a good idea.

    I quickly found out that RT is waaay harder and requires the best of the best from cybersec and maleare development. We didnt have that. Also, turns out that I love to learn now stuff and take on a challenge, but being a Lead also means you are drowning in paperwork and discussions with client, while also everyone from the team doesn’t know what to do and turns to me about what should we do. Which I didn’t know, and barely managed to keep learning it on my own. Our conpany didnt want to give us much time for learning outside of delivery, I was only working parttime, and I was slowly realizing that we don’t have almost any of the skills we need.

    We were doing kind of a good job, most of our engagement turned out pretty well, but it was atrocious.

    Turns out, I’m not good at managing and planning projects, or leading people. I’m better just as a line member.





  • Ooh, you are right, I can actually file bug reports or try to fix it myself now that I switched to FOSS from Windows. Tbh that didn’t really occur to me, since I was switching only like a month ago. I’ll look into it, so far I suspect that it’s actually covered by one of those troubleshooting cases mentioned in their FAQ, and I’m not really confident enough to start recompiling libraries with additional flags. Especially since I’m on Nobara and don’t want to break anything, AFAIK that OS is pretty customised from the start and figuring out what I can safely touch isn’t something I have the guts for yet.


  • Unfortunately, NVIDIA. I was buying a new PC half a year ago, and only started even considering to make the switch to Linux few months after that, so I am at a pretty unlucky point where I just had recently spent a lot of money for new-gen PC, but without knowing that I should really go for AMD.

    I will make the switch to AMD as soon as it’s justifiable, but I’m too lazy to deal with second-hand resale and it’s hard to justify a new GPU when I still have the current gen, but from wrong manufacturer.




  • I went with Fedora when switching almost a month ago now, and I’ve been having issues with some games not working as expected, and also had trouble getting NVIDIA drivers to work correctly (which I’ve already solved, I hope). (And some applications weren’t working at all, such as Unity)

    What would you consider as major advantages of Fedora, in addition to what you mentioned? So far, I usually couldn’t find a Fedora-specific version of the applications I wanted, unlike for other more well-known distributions. I do work as a programmer, which was also why I choose Fedora - I really like their Fedora Toolbox, but I would like to game regurarly on my PC and so far, it seems that Fedora doesn’t really handle it too well. Will I have similar issues on other distros, or will switching to something like Pop!OS be worth the time?

    EDIT: Just found out about Nobara, I guess I’ll give that one a try.







  • One of the projects I have in mind is to explore some kind of “offensive privacy”, where the focus would not be on not being trackable, but on your computer spewing random bullshit and behavior into the algorithm to confuse it, and have it learning on behavior that’s not really true, but only generated. This will enable you to kind of fight back and if done by enough users even reduce the effectivness of ML algorithms, since they would be learning bullshit. Unfortunately, the scale required to effectively affect the learning process of ML models would be enormous, so it’s not really feasible, but I think it’s still better than just “staying hidden”.

    With the advances in AI, creating a tool like that, that would simulate several random user behaviors on your IP/fingerprint, shouldn’t really be that hard.

    And as an added bonus - if it clicks on adverts, it’s costing someone money. Fuck corporations.



  • I’m also running NVIDIA (RTX 4070), and while I did have to try drivers from a few different sources, I eventually got it working pretty quickly.

    But my mistake was choosing an OS that doesn’t bundle non-free drivers (Fedora), from what I’ve heard some distros like Ubuntu come with NVIDIA support by default, so I guess that’s also an option.


  • I literally did this two weeks ago, switched Win11 for Fedora and so far it has been an amazing experience. So far, I only had to dual boot to Win once, and that was because I wanted to play some SteamVR games, which is the only thing I didn’t manage to get working (I know there’s ALVR, but SteamVR refuses to launch for me unfortunately).

    Just go for it, get a new SSD drive and dual boot your choice of distro. You can always go back, and unless you use bitlocker you can just access your windows files from the Linux, so there’s not need to move stuff around that much. With dualboot, you have nothing to loose.


  • The biggest problem i have with my data being collected, analyzed and used is in the fact that it will almost certainly be used to teach a ML model about how to better manipulate with people like me - the people that are privacy conscious and are trying as much as possible to reduce their fingerprint.

    That data is invaluable, and if there does exist a way how to target even people like that, which there probably does since we’re only humans after all, the ML model will eventually figure it out. And they have literally billions of people to experiment and learn on.

    Now, we already know from a few leaked studies made by Facebook that they cab already pretty well manipulate people into mostly whatever they choose. Take a hypothetical situation where you get a crazy out-of-touch billionaire, who decides to buy a large social network company, and then decides “Hey, I really want this candidate to win. Tune up the algorithms!”.

    And the ML models will get a clear goal, that has been already proven to just work pretty well at influencing user behavior. And any data you give them, it helps the model to fine tune into influencing people like you . Which would also be really hard to prove, because ML models are by definition black boxes that are really hard to reverse engineer, and proving that it was trained to do this is AFAIK almost impossible.

    I don’t want no part in that. Thankfully, all the large social networks have CEOs that are reasonable and would never try something like that, right?

    And one more thing - you may not think that data about your behavior are of interest to anyone right now. But look at China and their Social Credit. And imagine how would have I.e holocaust turned out, if the government had access to all the data, opinions and profiles of people that are being collected now.

    Oh, you mentioned you sympathize with the Jews three years ago in a private message? Well, let’s hope the country you live in never ends up in a situation where that could be a huge problem for you or your family.

    So, every time any site is offering a “personalized, curated list” for you (I.e the google search result, or YouTube recommended videos), assume you are potentionally being manipulated, and avoid the site altogether- because there’s no other way how to prevent it. The ML model knows that you know, and is already trying to figure out how to manipulate people that are taking care not to be. And if there is a way, it will figure it out with some success.