Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)S

Salix

@ Salix @sh.itjust.works

Posts
5
Comments
150
Joined
2 yr. ago

  • How to sync Akregator across devices?

    Jump

  • Self host FreshRSS, use the GReader or Fever API link that's built into FreshRSS to sync to other apps on your local network. If you want to access the sync remotely, use Tailscale or setup Wireguard. I personally just run Wireguard in OpenWrt

    There is no need to expose FreshRSS to the internet

  • Why does a state like California that has supermajorities in both houses of the legislature not have a livable wage, housing guarantees, universal healthcare, and other very progressive policies?

    Jump

  • it is liberal, aka generally right-of-center

    A lot of people don't seem to know this in the US. If you look at most Liberal Parties, they are centre or centre right. Though some are centre left as well. That's not a full list in that link.

    Japan's Liberal Democratic Party is the major right wing conservative party of Japan.

    Do note that the US' centre starts farther to the right than many other developed countries.

  • The real magic word

    Jump

  • Someone did a ELI3 explanation for this a couple days ago. The ELI5 explanation was more complicated so someone asked for ELI3 lol

    ELI3

    Pouring a cup of juice is something an adult needs to be involved with.

    sudo is when you ask for permission to pour your own cup of juice. You ask an adult, they give you the cup and the juice, and then you’re responsible for pouring it. If the adult isn’t paying attention they may leave the fridge open for you to go back for more juice or another beverage, but otherwise you’re limited to the amount of juice the adult has given you.

    run0 is when the adult just gets you a cup of juice. You tell them what you want, they go and pour the juice, and just give you the cup with the juice in it. You never enter the kitchen, so you don’t have access to the fridge, just your cup of juice.

    ELI5

    Basically, the SUID bit makes a program get the permissions of the owner when executed. If you set /bin/bash as SUID, suddenly every bash shell would be a root shell, kind of. Processes on Linux have a real user ID, an effective user ID, and also a saved user ID that can be used to temporarily drop privileges and gain them back again later.

    So tools like sudo and doas use this mechanism to temporarily become root, then run checks to make sure you’re allowed to use sudo, then run your command. But that process is still in your user’s session and process group, and you’re still its real user ID. If anything goes wrong between sudo being root and checking permissions, that can lead to a root shell when you weren’t supposed to, and you have a root exploit. Sudo is entirely responsible for cleaning the environment before launching the child process so that it’s safe.

    Run0/systemd-run acts more like an API client. The client, running as your user, asks systemd to create a process and give you its inputs and outputs, which then creates it on your behalf on a clean process tree completely separate from your user session’s process tree and group. The client never ever gets permissions, never has to check for the permissions, it’s systemd that does over D-Bus through PolKit which are both isolated and unprivileged services. So there’s no dangerous code running anywhere to exploit to gain privileges. And it makes run0 very non-special and boring in the process, it really does practically nothing. Want to make your own in Python? You can, safely and quite easily. Any app can easily integrate sudo functionnality fairly safely, and it’ll even trigger the DE’s elevated permission prompt, which is a separate process so you can grant sudo access to an app without it being able to know about your password.

    Run0 takes care of interpreting what you want to do, D-Bus passes the message around, PolKit adds its stamp of approval to it, systemd takes care of spawning of the process and only the spawning of the process. Every bit does its job in isolation from the others so it’s hard to exploit.

  • What VPN are you using?

    Jump

  • If you don't need port forwarding, Mullvad is my pick. Since they got rid of port forwarding, I've moved to AirVPN and am happy with them. I just dislike AirVPNs' GUI app, Eddie. I mainly use Wireguard directly for their servers.

  • Read You, A modern rss reader for Android.

    Jump

  • Newpipe is getting updates on fdroid again and seem like will be getting updates for the foreseeable future as the issue stopping it is solved.

    Jump

  • If you want to actually fully degoogle, you wouldn't want to use Revanced. Revanced just patches the official YouTube App.

    I personally use NewPipe when watching on my phone, but I do have Revanced YouTube installed as well just for casting to my TV. Convenience for me.

  • Read You, A modern rss reader for Android.

    Jump

  • Different use. Feeder only works locally.

    Read You can sync with multiple types of RSS servers. I love using it with FreshRSS. Great for people who use multiple devices.

  • It's movie night. You don't know who's coming but you have to pick a movie everyone vibes with. What do you choose?

    Jump

  • I've used this movie for movie night multiple times and people who come always love it!

  • It's movie night. You don't know who's coming but you have to pick a movie everyone vibes with. What do you choose?

    Jump

  • Thunderbird's New Rust Integration: The Future of Email Clients?

    Jump

  • I don't recall it ever being a dead project. They did have a time period where you had to either join the beta on Play Store, obtain the beta on Github releases, or use F-Droid and install the beta. They were working on integrating certain things and rewrites before doing an official release.

    It was a pinned issue in their issue tracker.

    The whole 5.7xx series were betas, and 5.800 started the official releases again

  • What's something you'll never get the store brand/generic of?

    Jump

  • Love Lee Kum Kee Premium Soy Sauce and Sempio for standard use. I agree that they are so much better then Kikkoman imo

    It's usually pretty easy to find other better soy sauces at most Asian grocery stores around the same price as Kikkoman

  • What song, when you listened to it for the first time, made you go: "This will be stuck in my head for the rest of the week."

    Jump

  • Note-taking app that looks too good to be true? - Siyuan

    Jump

  • German state moving 30,000 PCs to Linux and LibreOffice - The Document Foundation Blog

    Jump

  • What is a good keyboard for android?

    Jump

  • Reddit started blocking VPN users on old.reddit.com

    Jump

  • old.reddit.com is the only Reddit website I use. I have every reddit link automatically redirect to that website as well. I haven't been able to access old.reddit.com for months on most servers of 3 different VPNs I've used.

  • Reddit started blocking VPN users on old.reddit.com

    Jump

  • Started? Been having that issue for months now. It only works on VPN if you're logged on.

    Certain VPN servers can go through it they haven't implemented a block for it yet. AirVPN launched some new servers that worked for a bit, but Reddit blocked them a few weeks later.

  • Where do you find audiobooks?

    Jump

  • I absolutely love Libro.fm. People can choose a local physical store for Libro to donate to.

    How much do Libro.fm Affiliates earn?

    Our affiliate program offers a 10% commission on each audiobook and credit bundle, and a 30% one-time commission on each new monthly membership. Commission is earned on each qualifying sale (excluding tax, returns, and cancellations).

    Their customer service is phenomenal. Multiple times, there were some audiobooks that they did not have on their website that I wanted, so I sent them an email asking if they might be able to obtain them. They reached out to the distributors and got them on their store for me to buy in less than a week each time!

  • The National Court orders to block Telegram in Spain

    Jump

  • Huh, that's strange. On my 3 Android devices, I downloaded the APK from the website, and it always auto-updates.

    It existed ever since they added the APK to their website as a compromise for people who don't want to get Signal from the Play Store.