>>12235 The other mods are never active, it's really just me for the most part. If Randy Savage comes around again, he'll get the hammer. On a lighter note, what was the previous board description and what should the new description be?
>>12244 You're welcome. >>12250 I'll just spoil it for you if you want me to but I would need to make a new meta thread and get a better picture of someone else. How's Uriel, or a end/tech/-tan or <insert your image here>? We can all vote on it. I'll add that onion link in the new meta thread that I would make after we decide on what to do for the OP picture of that thread that can be a mascot or can just be anything else, even a different Stallman picture if enough people wants it. I won't however delete the image. This is an imageboard after all, not a bbs. >>12252 >polite sage on a sticky Why
Endwall guy should keep irrelevant compile instructions in this thread by editing the OP or edit the Sticky thread before purging said irrelevant posts in various threads. Just remind them to compile from source and redirect them to this thread.
Endware is a suite of programs geared towards internet privacy, security, and anonymity.
Endwall: endwall.sh is an iptables based firewall script designed to be implemented on any linux distribution shipped with iptables. endwall.sh is based on default drop policies, coupled with a novel strategy of passing packets on local host ports only for those enabled by the enduser. It comes with a variety of well used ports enabled with several additional port passing configurations available by uncommenting the script. It provides essential security to a new user.
Endsets: endsets.sh is a script that adds blacklisting and whitelisting functionality to endwall.sh. It depends on the program ipset. It is persistent on reboot if you enable ipset as a service. This is the recommended blacklisting tool for endwall if you are running a server or planning on opening up ports and services to the public and will require daily blacklisting of new incomming IPs.
Endlists: endlists.sh is a traditional text file list based blacklisting and whitelisting script. It has slow performance, and can't be updated on the fly. Good for <1000 ip subnets, very tedious and slow to run for more than that. Blocks the IPs by adding them as individual rules to the iptables ruleset. Works but not recommended for heavy duty on a server. May be useful for workstation use to block ip ranges if you are not opening up ports and services to public clients.
Endtools: endtools are a collection of scripts including alogz.sh, mlogz.sh, spamlogz.sh and iplookup.py. These scripts will help to service an enduser of endwall in adminstering endsets/endlists.
iplookup.py is a geoiplookup script written in python and requires python and pygeoip. It has simmilar functionality to maxmind's geoiplookup program and uses the maxmind *.dat files.
spamlogz.sh is a script that searches through log files to find flagged log entries flagged in endwall.sh, endsets.sh and endlists.sh.
alogz.sh is a daily log reading script designed to read the output of an apache http server's log output.
mlogz.sh is a daily log reading script designed to read the output of a postfix smtp server's log output.
>>12218 You are looking at it wrongly, it isn't wrong to pay attention to relevant situations, such as owning horses or cars. Why not learn how to fix both cars and computers? I learned through reading and dismantling my own vehicle in a matter of weeks, you have no excuse faggot, especially when cars probably aren't going to be gone anytime soon.
Regarding the paperwork, the insurance, potential crashes, that is indeed bullshit, I've saved thousands by utilizing bikes and buses when suitable, but I still keep my car around for when I require it, especially if the government suddenly falls due to some unexpected problem and my only means of escaping is my car (Or stealing other vehicles, but good luck with that). Cars and internal combustion engines are highly interesting, Rudolf Diesel invented the diesel engine over 100 years ago, and affordable cars that could be distributed to everyone in the United States have been around for almost as long. Yes, Americans love their cars and having twenty different manufacturers pumping out three different versions of the same model in one-hundred different colors, but that is no reason not to purchase an older used car from an individual instead of a dealership or corporation.
Why this thread got side tracker? Not even OP, but isn't it about "vehicle hacking"?
This is technology related, but this thread is not about it. Maybe create another one just to discuss engines and transportation technology...
>>12218 I already do take care of horses though. And I can't really fix a modern car because it's basically proprietary shit all the way through, but honestly these days it's the difference between baking your own bread and going to Subway for grody sandwiches, it's such a suboptimal set of options.
I can't wait until the world explodes and we're on full Vampire Hunter D mode.
Hie, I'm trying to find a good solution to never get out of storage on my HDDs, for my backups and my regular use.
What is your data storage solution?
I want, if possible, a solution that is the most freedom compliant.
There is the usb HDDs, 3/4 plugged on a rasp.
There is the NAS with 3.5' HDDs in it.
Maybe a cheap 20$ computer with the HDDs in it with linux installed...
What should be the best? What HDD to buy (there are these backdoors, even though I don't think I can find any without)
"Intel engineers attended the same conferences as other company engineers, and read the same papers about performance enhancing strategies – so it is hard to believe they ignored the risky aspects. I bet they were instructed to ignore the risk," - deraadt
Holy smokes. He also thinks that way.
It's one of the (possibly) many backdoors from some security agency.
Doesn't this mean we now have a reliable way to hack just about any computer back to 1997? That is good news if there are any video game consoles that haven't been hacked yet. They should use this to crack all of the latest systems and get around any patches made to the PS3 or other old systems.
>>12213 Not the same guy, but, PS4 is not RISC, it's CISC, from what I know. I think xBox is CISC too.
Only PS3 used a Cell processor...
But Meltdown would only allow to get the memory, not to take over the "anti-cracking" system, because it probably needs a Sony server authentication.
I know this is a little off topic but when I read this, it struck me as very cyberpunk-esque so I thought I would share: "All unintellectual labour, all monotonous, dull labour, all labour that deals with dreadful things, and involves unpleasant conditions, must be done by machinery. Machinery must work for us in coal mines, and do all sanitary services, and be the stoker of steamers, and clean the streets, and run messages on wet days, and do anything that is tedious or distressing. At present machinery competes against man. Under proper conditions machinery will serve man. There is no doubt at all that this is the future of machinery, and just as trees grow while the country gentleman is asleep, so while Humanity will be amusing itself, or enjoying cultivated leisure – which, and not labour, is the aim of man – or making beautiful things, or reading beautiful things, or simply contemplating the world with admiration and delight, machinery will be doing all the necessary and unpleasant work. The fact is, that civilisation requires slaves. The Greeks were quite right there. Unless there are slaves to do the ugly, horrible, uninteresting work, culture and contemplation become almost impossible. Human slavery is wrong, insecure, and demoralising. On mechanical slavery, on the slavery of the machine, the future of the world depends. And when scientific men are no longer called upon to go down to a depressing East End and distribute bad cocoa and worse blankets to starving people, they will have delightful leisure in which to devise wonderful and marvellous things for their own joy and the joy of everyone else. There will be great storages of force for every city, and for every house if required, and this force man will convert into heat, light, or motion, according to his needs." Oscar Wilde - 1891 The quote is from "The soul of man under socialism" and he talks about socialism but clearly describes that what is needed is individualism, an awakening of each and every man.
Authors of one of the most infamous botnets of all time get busted, researchers discover keyloggers built into HP Laptops, the major HomeKit flaw no one is talking about & the new version of FreeNAS packs a lot of features for a point release.
Jupiter Broadcasting Performance Meltdown | TechSNAP 351 Posted on: January 11, 2018
http://www.jupiterbroadcasting.com/121472/performance-meltdown-techsnap-351/ The types of workloads that will see the largest performance impacts from Meltdown, tools to test yourself & the outlook for 2018. Plus a concise breakdown of Meltdown, Spectre & side-channel attacks like only TechSNAP can. Then we run through the timeline of events & the scuttlebutt of so called coordinated disclosure. We also discuss yet another security issue in macOS High Sierra, a backdoor in popular storage appliances.
>>12183 They're telling you to write to your representative. Not saying you'll succeed or have an impact though. There are also other methods such as contributing to projects that hinder attempts of mass surveillance in your country/state. Or getting your family to use instant messaging clients with good encryption.
>>12184 >They're telling you to write to your representative. Don't work, conglomerates have too much money.
>projects that hinder attempts of mass surveillance Don't work, no one gives a shit about privacy anymore, they just follow the bandwagon and no pretty sheep is allowed to criticize.
>Or getting your family to use instant messaging clients with good encryption. Never worked. They just use whatever the other people is using. I've tried so fucking many times that it's not even fun anymore (I suggested not some obscure software, but Signal, that has fancy interface and all - not once they installed it).
Something must happen and I think it's close (~2022), unfortunatelly.
>>12186 not 12185,
but what have you succeeded on?
You are dealing with a social problem you cannot fix.
FBI here is admitting encryption and good OPSEC actually work,
But if your family, and society as a whole, does not want either,
what are you left with?
I'm ignoring OP, and several respondents here who clearly read NSA's ANT Catalog,
and know clearly how NSA bypasses encryption by fuzzing Qualcomm chips worldwide.
NVM LTE is designed top to bottom to dox everyone in the planet (which is why
Snowden is COINTEL).
>>10724 good point >.html is just .txt with markup >hosting pastebin is just bloat over .txt Oh. I really should have known that. Maybe I shouldn't be an Ideas Guy™ if I'm not a webdev person and I haven't slept much. I'll be off to check my ego.
What's the safest possible way to browse the internet anonymously and safely? There's a thread on /tech/ with the endwall developer talking about proxychains, and that seems pretty cool. Some of the links to proxy lists seem dead, and I have found some online but why should I trust these random 'free' proxies?
What about proxychains over VPN? I'm currently using Mullvad which is alright, and I'm curious about more security if need be. Does a VPN -> proxychain -> TOR connection work? Sounds horribly slow in theory, but I think we all know that privacy comes at a cost in our current world.
I suppose I could call this a 'VPN/proxy/TOR general thread.'
Changes in version 0.2.9.5-alpha - 2016-11-08 Tor 0.2.9.5-alpha fixes numerous bugs discovered in the previous alpha version. We believe one or two probably remain, and we encourage everyone to test this release. o Major bugfixes (client performance): - Clients now respond to new application stream requests immediately when they arrive, rather than waiting up to one second before starting to handle them. Fixes part of bug 19969; bugfix on 0.2.8.1-alpha. o Major bugfixes (client reliability): - When Tor leaves standby because of a new application request, open circuits as needed to serve that request. Previously, we would potentially wait a very long time. Fixes part of bug 19969; bugfix on 0.2.8.1-alpha. o Major bugfixes (download scheduling): - When using an exponential backoff schedule, do not give up on downloading just because we have failed a bunch of times. Since each delay is longer than the last, retrying indefinitely won't hurt. Fixes bug 20536; bugfix on 0.2.9.1-alpha.
Maybe some guy some day invents a way to cache public web page data like layout, css, scripts and content, but the private data will be still strictly passed between core server and user cryptographically signed end-to-end.
On the other hand, should we trust VPS hostings, it's a clear MiTM between website admin and users after all. After all it's one more nail into TCP/IP coffin.
We're about halfway through October and about two weeks out from our most esteemed /tech/nician's autistic tantrum over on /operate/:
>>>/operate/7122it's good reading, he came in with a balloon knot and left with a rectum that you could park a utility van in
so it seems like a good time to reassess the state of the board.
Since October 1st, there have been 0.6 original posts per day on /tech/. I use the term "original" with some reservation, as some of them are just verbatim reposts from 8/tech/. There have been an average of 8.13 replies per day, but most of them were one-line comments or barbs without substance, or memes, or corrections to a previous post. We're averaging about 1 substantive reply per day. Two on a good day. I didn't feel like digging into the numbers any further, but it's my impression that these averages don't even reflect how dire the situation is, as there was a burst of activity at the beginning of the month that has tapered off significantly.
/tech/ is not dead, but it's on life support, and, ironically, none of its denizens seems to know how to service the life support machine.
It would be a shame for this alternative to pigchan and Hiroshima's /g/ to wither through neglect.
Let's brainstorm ideas for keeping this place alive.
>>12119 >>12118 >better education >/tech/ academy That's supposed to be the wiki, but unfortunately most threads on installgentoo wiki in the sticky are outdated or on shit like e cigarettes. The best solution to getting new users familiar with this place would be to have a proper resource for new posters. Back on 4/g/ and almost all of the boards on 4chan with a sticky/wiki, anons will just dismiss all threads looking for newcomer advice with "read the sticky lol" while the wiki itself is outdated and shitty at parts.
Tldr: one possible way to generate new users and stop SOME shit threads is just to have an actually good resource that isn't filled with infographics from 2013. Genuinely good threads will come from experienced users of course, but no new good users will come about if all they see articles that were last edited several years ago. I would just recommend making more infographics/verticals those are the easiest to use in threads
>>12118 TBH lainchan became shit long LONG time ago (around the time fags on IRC started saying that lainchan is some anarcho communist ground) From then lainchan was flooded with whiny "let's talk about my life problems but not actually do anything about them" faggots.
It was only a matter of time that style of discussion would transfer into the tech discussions, the lowest fucking common denominator people
>>12126 I think we should have a thread on improving the wiki here. We could just list various articles that either need to be written or updated, and compile a list of revisions and additions that should be added.
Something I have noticed many people talking about is the lack of expertise/knowledge in the posters. I think it is partially due to being on an anonymous imageboard and not knowing who you’re talking to, or more importantly what they know. People often change how they talk given their audiences level of experience and knowledge in a field. When there is a mismatch, either something seeming too obtuse or lacking in interest or insight, people tend to lose interest. Of course one solution to that is having some sort of standard of knowledge that can’t be enforced but is expected (like knowing how to install linux, having watched an anime if you’re on /a/, etc.). Then comes the problem of what I might call elitism, which is when the standard alienates too many people. This problem is compounded when you’re board covers multiple subjects, so everyone is expected to know a lot in systems programming, cryptography, electronics, etc. So the people who are experienced with working with micro-controllers for example think this board is lacking because most people do not have the same level of background in their field. As much as a diversity of backgrounds might be a problem, more users might fix this. At least then they have someone else to talk to, even if most people can’t keep up with them. On the other hand, making sure people have some level of knowledge standard, as was mentioned before, might ameliorate big werdz the lacking board discussion since it could reduce the number of low quality posts.
There are more issues, such as politics clouding up discussion, as well as not citing your sources, but there are other posts for that.
Been collecting all I can find on how to make a truly secure cellphone that doesn't leak one's private data daily. Figure it's time to share my findings and collaborate with others for even more insight. Will continue adding as long as this thread remains on topic and doesn't get sidetracked.
1) you write like a 13 year-old nigger, though you've made pretty lengthy texts. Get a look at spellckecker highlights sometimes, kay?
2) Your wall of text posesses little to no value. I would consider this post as low effort even for cuckchan or 8ddit. You explain obvious things as you if you see your reader a full retarded normalfag who has no prior knowledge of government surveilance, proprietary and malicious software I'm sure, everyone on end/tech/ is informed enough for this topic to be considered our baseline And if you were to accuse certain government agencies or corporations in spying, please provide direct prooflinks for new users not familiar with this topic to research into.
3) You give no actual instructions on "how to make a truly secure cellphone".
4) There are obvously only two options available: Galaxy S2 with Replicant or any other smartphone with radio chipset physically removed and libre usb wifi adapter attached instead.
>>12145 >here's hard proof >implying you can't change the log I'm not OP, but I too criticised him on here yesterday, and my post is gone. It can be just a bug, but I don't think so.
I'll just repeat, anyway:
>Only Linux OS's remains as being uncompromised No. Not even close.
Android is based on linux kernel, but it has many Google proprietary code. Also, vendors requires blob drivers to run on hardware.
And... no, Linux is not the only free system, look more.
OP, you started a thread about "how to make" a secure smartphone, but ended with not actual content. Too much text for no content.
We don't want to be rude, but maybe your text will be more appreciated on 4/g/ than here.
You can't have a personal tracking device (aka smartphones) on your pocket all day and get privacy. You have a geolocalization tool with you everywhere. Even efforts like the Purism, CooperheadOS, PostmarketOS and LineageOS are not the solution to this problem.
>>12149 >implying you can't change the log Yes, I can't, no Board Owner nor Board Volunteer can. Anything I do with posts are logged and can't be removed by our side. If anything is done, it would also show up and have a permanent record in the logs. I wasn't here when the bug happened but that's just LynxChan still being buggy after all these years, and you should know that these things can still happen. Some people in /tv/ had some problems around the same time >>>/operate/8056 Perhaps there was an unreported LynxChan update or this might had been a genuine unexplained bug or exploit.
Advanced users of GNU/Linux (and I mean advanced), remember to try Source Mage GNU/Linux. True source-based distribution, and (in contrast with Gentoo and Arch) is: Free from obfuscated and pre-configured code. Fully committed to GPL, uses only free software (as in freedom) in their main package. With even the documentation licensed as FDL. Without 3rd party patches, sensible defaults or masked packages. Doesn't need obfuscated python libraries, only bash. No systemd (they've implemented their own init scripts system http://sourcemage.org/Init). Uses clean dependencies as they came from upstream developers, which by the same provides instant updates. Can heal broken installs. Can also use flags.
Do you like Arch Linux's AUR? Do you like Gentoo's portage (or ports-like) package manager? With SMGL's "sorcery" you get all that. Making new spells (package build files) not found in the grimoire (repository of spells) is easy http://sourcemage.org/Spell/Book
The typical individual wants a simple to use and light electronic device to quickly and efficiently access their entertainment, which could be observing videos uploaded onto Youtube, conversing with other individuals on Facebook, Etcetera. Why is it that hand-held "phones" have been selling much more rapidly than laptops and desktops have been?
They want to make money and people are dumb and consumerist. That's a great explanation about the idiocracy in contemporary society.
And I'm not talking about jews or being against capitalism at all. I'm saying that facebook and other platforms are optimized for low cognitive load, so that any other stimuli for selling products have more convertion rate. Not just explicit ads, since today they control your news feed in a way that you don't perceive someone is trying to sell you things.
That's why they track people everywhere, they want to 'optimize' their target public to the maximum, based on behavioral analysis.
Of course, government uses it as a tool too, but most of the shit today, like the crazy widespread of dangerous ECMAScript's support on mainstream browsers and GPS turned on by default on the PTD (personal tracking device), it's all about this: money.
So, if you ask "where" it went wrong, I would probably say that humanity itself is the wrongness and the fight for self-affirmation and to feel more and more acepted and the 'special snowflake', posting pictures of their bodies on instagram, that is the real problem.
Second, I would say the urge to do things as fast as someone can, so someone can profit on it. People don't want to do the 'right' because they say it takes too much effort. They just want to go home watch netflix on his "smart TV", take his dosage of SSRI's, eat the crappy food industry makes full of carbohydrates and try to show his life is good on instagram, so he can feel less bad and continue to ignore all the bad things that is happening everywhere around.
If computing and was created to be 'right' it would be designed thinking more on essential aspects of a system (such as safety, security, reliability, etc) instead of just trying to reduce the power usage with bad and unknown microcode, lauching a new "module" to the ISA that promisses better L2 caching and then selling it for twice more money, as Apple and Sumsung/Qualcomm is doing today.
But, guess what? These people make a lot of money and the admin on imageboards can't even pay the fucking VPS.
Maybe we are too innocent and idealist for all this madness.
Continuing from >>>/tech/597 https://archive.is/INR3l This is for non specific, general tips for anonymous web browsing and downloads, tips on browsers and browser configurations for the security concious that you don't want to make a new thread for.
>>1069 I torrent behind tor. Not sure about doing this with I2P.
I use deluge with gtk and set the proxies to port 9050. Then add the torrent through a link, magnet or the actual torrent file. Then manually edit the trackers so that they are http only. It should start downloading after that.
>>1082 The proxying works fine in Deluge. It's not leaking. The trackers communicate by TCP, the traffic is TCP. It works. The attack that is mentioned in the second article stem from applications that ignore your proxy and send traffic by UDP without tor. That doesn't happen here. Both the trackers and the traffic are proxied through Tor as TCP connections. I dissmiss that complaint/claim.
As for slowing down the networks, with download speeds at 250KB/s I doubt it. Thats about what I get using wget behind tor. Rate throttle it if you want to be polite.
=>> Search for YouTube videos (:h for help) > Endchan 1. EndChan/InifNow question and answer (by OdiliTime) [01:10:35] 2. The Old 4Chan (by That Guy With A Voice) [01:48] 3. The Voice Teens Philippines Battle Round: Clark vs. Chan - In The End (by The Voice Teens Philippines) [05:14] ... =>> Select one or more videos to play (:h for help) > 1 URL: https://youtube.com/watch?v=ParATBARwic [Embed] -> Channel : OdiliTime -> ChannelID : UC9YYaqKNOZa5ue-sxE0cuPA
>Sorting through some books and organizing other random shit >Laptop is closed and should be on sleep mode >Come back after a few minutes >Fucking CPU (Core 2 DuoTM) at 227 DEGREES FAHRENHEIT for over ten minutes based on usage history >Fan isn't turning on >Somehow still able to navigate through the OS and normally turn off computer >Turn computer back on and fan is working perfectly fine
What the fuck, I'm surprised how hardy this damn laptop is.
>>12078 Yes you should. Ideally every 3 years. It doesn't matter if it's a laptop or desktop, you need conductivity for the heat sink on your CPU and GPU. I would guess it's only because the nm spacing is so high on your c2d that it didn't fry. IIRC the old p4 chips can also withstand very high heat. I would guess it's not been a problem until now because you don't put your laptop under stress or leave it on for extended periods. While you're at it I would dust your vents to prevent air flow blockage also.
>>12079 I should have also stated that reaching the heatsink to apply new thermal paste is a major pain in the ass when it comes to Thinkpads (If you don't already know, you need to remove the entire motherboard. This applies to the X60 and X200 laptops I have, I have no idea if this applies to other models...). >Would guess it's not been a problem until now because you don't put your laptop under stress or leave it on for extended periods. It was most likely a software-related problem, the fan didn't turn on at the time, but works perfectly, but my Thinkpad has been the subject of a strange problem recently, the laptop AC adapter connection turns off and on like a linear "beeping" and a clearly audible high pitched whine emanates from the motherboard, specifically below the CPU where there is an abundance of capacitors... >While you're at it I would dust your vents to prevent air flow blockage also. It gets done daily, the keyboard requires a total of four screws to be removed, and fastest measured time I have gotten it done was in eight seconds.
Check your sysctl for acpi controls. OpenBSD may require tunning on this...
Also, as the other anon said, clean the laptop. Over the years it becomes with so many dust that you can't even pass air through it. And the thermal paste, of course (don't need to buy these expensive silver paste, just the simple one will do the job, unless you try overclocking or other dumb shit).
>>12082 >don't need to buy these expensive silver paste, just the simple one will do the job This irks me because there are multiple companies that manufacture and sell thermal pastes and each claims that their "PATENTED TECHNOLOGY SILVER-INFUSED SUPER THERMAL PASTE 3000 GAMER-GRADE" is better than the others on the shelf without giving an ingredient composition list, and you end up needing to rely on experimentation by others to determine which thermal paste is suitable for your application, but then you realize there are multiple variables that go into these tests and that 1 degree difference could have been due to an external factor, and you don't trust the generic paste because that small tag with mandarin written on it makes you suspicious. This same concept applies to other products. >unless you try overclocking or other dumb shit Only when I want to run a software application on one of my older computers to escape the analytical botnet and other garbage, the fan always stays on the highest setting when the CPU is overclocked, and my dedicated calculations computer is cooled via refrigeration.
Autistic rant because fuck corporations that don't strive to manufacture products that are the best in the competition for the money.