Show more

Time to review some sections from Linux Hardening in Hostile Networks by @kyle again.

Some words on why you should:

a) Always check certificates, and
b) Periodically make sure any devices you own are too

The steps for (b) are provided.

ajmartinez.com/tech/posts/2021

Less than 5min with bettercap and sslstrip to intercept XMPP+STARTTLS. Always check certs y’all. No exceptions.

During a Qubes backup there was a slight dip in the battery charge even while plugged in. Next up, 12-thread DispVM compiling a bloated kernel.

ajmartinez.com/tech/posts/2021

Baseline charging rate for my Librem 14 over USB-C while running Qubes OS is.. 10W.

That may explain why the laptop died while charging from a low battery under load... I'll get some more data and see which rabbit holes that leads me down. Note that the same power supply handles all day heavy use on my work laptop without any decrease in battery status, so it can most certainly give more than 10W if asked.

ajmartinez.com/tech/posts/2021

On a train to add France to the list of countries I’ve physically traveled to in order to fix someone’s router...

Released v0.1.0 of check-tls-suites to provide some tooling to those who might want to check their cipher suites.

This takes the list of suites maintained by IANA, and uses them to check either a hex stream, or a list of integers like one might get from a TLS Client Hello in Wireshark or tshark. Each cipher is marked either as recommened, or not recommended.

Suites that are not recommended are wrapped in '!' characters.

crates.io/crates/check-tls-sui

Given that A Rust Site Engine was written for my better half, it appears another feature has been added to the 1.0 roadmap: an image gallery/slideshow.

Initial and simple POC is done... in JavaScript. It's not my favorite language, and it never will be, but I see how/why it's popular and useful.

Though other times I do update tech-y things: ajmartinez.com/tech/posts/2021

TL;DR - if you're annoyed that using a smartcard with gnupg stops you from later using it with pkcs11 directly the solution is simple: kill gpg-agent.

Well at least when I’m stuck in Windows for work I’ve still got Emacs.

Update: I went ahead and tried to boot with my Librem Key plugged into the hub, and that works too.

It takes a while for the keyboard and mouse to come alive again after the login screen loads, and if you do something like disable the onboard panel and then accidentally sleep the machine rather than locking the screen you’ll be power cycling to get back in.

Show thread

Pleased to report that all USB-C features offered by the Librem 14 work even when using Qubes OS.

ajmartinez.com/tech/posts/2021

-os

Got my spare Librem Key working with my NUC today, though I did run into some trouble with pcscd/polkit/Fedora along the way. My solution is here: ajmartinez.com/tech/posts/2021

Now my old laptop, a T460s, has a kali-rolling Qubes OS template VM with the tools I fancy for testing/investigating. At 17GB it’s the largest template I’ve ever made, but I’ll base a DispVM off it and likely a few normal qubes as well with configurations suited for specific roles. A few posts about what I do, and how, will happen eventually.

T460s running Qubes OS compiles A Rust Site Engine v0.9.0 in 3m15s. Librem 14 configured the same way does it in 1m20s. This is a full release build with flags for crt-static. Not mad about that at all. Now to wipe the T460s and prepare it for other duties.

Sometime this week I’ll be tweaking some Qubes stuff so my UI adapts between my Librem 14 being used with its onboard 1080p panel or my external 2160p.

org.Gtk.MountOperationHandler support coming to so you can open encrypted volumes with swipeable, modal dialogs

@purism

Show more
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml