Pretty much just follow the advice for installing cyanogenmod like unlocking
bootloader if locked, installing custom recovery. Only thing thats a bit
different is that your flashing an image file instead of a zip file.
> Netsurfy is clean as snow
Also fast and lightweight.
Unfortunately netsurf is missing in debian testing (buster) for now. It's
included in stable and sid, so I assume this exclusion from testing is
temporary. Will try it as soon as it appears in buster repos.
Hello everybody
Okay so I have tried installing Trisquel on computers before and what I found
is that the graphics card is often not properly supported so it can't power
the full display resolution as the proprietary driver thats required to make
it work has been removed. I have also found
> Or maybe we could ask them
> which about:config settings we need to clean/disable in order to
> stop the chatter.
That might work. Rather than calling it a bug report or feature request, it
could be framed as a simple support request. You wouldn't be asking them to
change anything about their
> https://developer.arm.com/support/security-update It didn't list
> A20 and said non listed cpus aren't affected. Most arm cpus are
> affected.
It seems I was wrong then. I'm glad to hear it, as a Libre Tea is likely to be
my next computer.
> Just a theory:
The moment I posted this, it occured to me that should it be the case, then
the vulnerabilities made public would be highly localized and easy to fix
with just a microcode upgrade. But the situation with meltdown and spectre is
more complex, requiring both microcode
> nobody knows if there is something worse
> inside the microcode (maybe improved backd00r)
Good point.
It is also possible that meltdown and spectre were already long known by
Intel and AMD, but only recently made public by them (via indirect channels)
so that they get to install a better
> The questions were a reply to Magic Banana who wasn't.
Fair enough, I was mistaken on this point, then. I apologize.
> So to you a conversation is worthy only if it is an argument?
https://www.merriam-webster.com/dictionary/argument
https://www.merriam-webster.com/dictionary/argue
These are
Yeah I read through that, I was asking if there is another way to use whonix
on trisquel without virtual box?
See https://trisquel.info/forum/virtualbox-libreboot-wtrisquel
I was just going off the arm affected cpu list.
https://developer.arm.com/support/security-update It didn't list A20 and said
non listed cpus aren't affected. Most arm cpus are affected.
ask on the rhombus-tech/arm-netbook mailing list, i suspect luke can
give you some answers about which socs are safe.
Okay.
Some cool websites I have used to test for leaks with Tor and other
solutions:
www.whoer.net
www.doileak.com
www.check.torproject.org
www.checkmytorrentip.upcoil.com
www.ip6.nl
These are good enough to know if there are some leaks in your system or
not... Of course some applications might
Trying to put whonix on trisquel, seems it won’t work because virtual box
won’t work on trisquel.
Am I missing something? Is there another way to make it work?
I wrote it in the style of reply to previous comment.
Avoid speculative execution. I believe MIPS doesn't do that. There are
probably others - I have not looked. Why not make a list for us?
There is software involved. It is free. Here is the source code:
https://github.com/jitsi/jitsi-meet
About privacy and security, README.md says:
WebRTC today does not provide a way of conducting multiparty conversations
with end-to-end encryption. As a matter of fact, unless you
I'm using Firefox 57, and, from a brief test, it seems to work fine. My
concern is that the service is running via a web browser. There's no software
involved, am I not right? Isn't this fact problematic from a point of view of
privacy and security?
Skype is proprietary software. Thanks to Edward Snowden, we know it is
spyware (Microsoft changed Skype specifically for spying):
https://www.forbes.com/sites/petercohan/2013/06/20/project-chess-how-u-s-snoops-on-your-skype/#17b4ab2484e0
Jitsi Meet is free software, hence respectful of your
Libre Tea uses an ARM processor, so like pretty much all modern CPUs it is
presumably affected by Spectre. Meltdown has been patched in the linux kernell;
just make sure that yours isn't too old to have received the patch.
Are there any libre computers secure from/not affected by spectre and
meltdown? The only one I could think of is the libre tea card. I have a t400
and I know the thinkpads are all affected by spectre and meltdown.
What is your opinion of this online video conferencing service? What are its
disadvantages? Is it a superior solution to Skype?
Thanks I am not sure if it is worth the waste the time of others. Isn't
NetSurf not quite up to date with current web standards? Looking at
http://www.netsurf-browser.org/documentation/progress.html (last updated
2012) I see it doesn't support HTML5, even CSS support is incomplete. Perhaps
Yes. Commercial VPNs are no different.
Maybe if you paste the output here someone will be able to help you with the
issue you are encountering during build time.
Good news. As long as one can compile it :)
> Another thought I had is to compare the about:config for Icecat and Tor
Browser and see if changing some of Icecat's values to match that of Tor
Browser can reduce background chatter.
I have been thinking the same (but only about Tor comparison). Additionally I
am planning to look at
Good summary. I have been thinking the same as I also observe what is
happening. Although I didn't agree with some of your previous post I
intentionally didn't reply in order to avoid all that cycle. For similar
reason I don't want to engage into argumentation. That's why I prefer to
focus
Joe le Chitarra mate, just letting you know that Netsurfy is clean as snow,
no 'chattering' no nada.
cheers
Could you all please stop arguing? My head hurds. My limited capacity cranium
itches. That's not good. I'm extremely annoyed. Any of you who adds any new
comment in this thread will see me personally appearing (tense, naked and
furious) in their room with a hard copy of Comodo
>Medical Records you don't want your insurance company to know about?
A new invention you are working on and don't want a big time company to steal
from you?
Protecting your source when you are a journalist brave enough to talk to
people in life or death situations?
Why do you need to get
>I wouldn't be surprised if some free VPNs are created/funded by those who
you are trying to hide from
Honeypot VPNs is nothing new. It has happened, it will happen. Do a brief
search on the argument if interested.
But how about commercial VPNs? Do you think that when sgt. Eye comes
>I don't feel very OK with paying for a VPN
https://riseup.net/en/donate#donate-cryptocurrency
> heyjoe cannot properly study any specific problem. Even less fight against
them. He ends up only complaining that the world is a terrible place. Worse,
he apparently blames the four freedom for not being a perfect solution to all
"the terrible things going on in the world" and therefore
> All this makes me think that such brute force cleanup in
> about:config may be possible for other Firefox clones.
Very interesting. Thanks for the time your putting into this. If we can
determine exactly which changes were the one that fixed the problem, I think
asking for those values to be
Arguments can be extremely useful tools for strengthening each other's
understanding. They can become unproductive when the parties involved are more
interested in avoiding concessions than advancing, but there is nothing wrong
with arguments themselves. Both you and onpon4 have been arguing,
Your post is in response of that of SuperTramp83, who wrote:
I don't know about Bannanna but I am talking about a computer I have direct
control upon.
Indeed, *we* are talking about software in computers we have personal control
upon. My previous post even started like that:
The four
https://www.youtube.com/watch?v=8r-e2NDSTuE
Basic security: pull the cord :)
Thanks.
I am looking to free my machines as much as possible but considering all the
CPU issues and the lack of libreboot for any of them, I don't know how
valuable the change of distro may be (currently openSUSE).
Pascal and I can agree to disagree; his wager[1] still works:
1.)If I genuinely believed that a supreme deity who was keeping a list and
checking it twice genuinely thought that I and everybody I cared about was
naughty every time we tried to be nice, I would want to kick that (expletive)
That's high level spionage... I am going more for protect against ISP and
copyright trolls and basic script kiddies... You know the most basic stuff.
Tor is not effective agaainst a global adversary either. I am talking about
basic security.
https://en.wikipedia.org/wiki/Key_size#Effect_of_quantum_computing_attacks_on_key_strength
I remember also reading (or was it a video?) about a new technology which is
already created which would allow to read information from a computer from
the distance, even if you are not connected to a
My understanding is that the only problem with Fedora is the kernel. This
might be a valuable piece of information for you:
https://www.fsfla.org/ikiwiki/selibre/linux-libre/freed-ora.en.html
Fedora 27 is current and that is honestly all I know; someone else will be
along shortly if you
@alimiracle and Hayder:
All fixed.
noordinaryspider@Uruk:~$ uname -r
4.14.13-gnu.nonpae
noordinaryspider@Uruk:~$
My X60 can probably handle pae and I'll get Jason's kernel when it's ready
but this is fine for now. :)
It's plenty peppy, whatever you did, and I haven't switched to a window
> Taking preventive measures seems practical to me.
Of course. You don't go out naked in winter and dress after you freeze. You
dress first. You have a direct experience to base you actions or. But with
computers it is all based on recommendations (unless you write the program,
in which
That's why I have been wondering if it would be a stupid idea to use:
1, A free VPN encrypting all connections;
2. A free proxy in a torrent client (with encryption too);
Something like
My PC -> VPN -> Proxy -> internet
It's very similar to what we do with Tor
My Pc -> GuardRelay ->
New browser tested:
Basilisk
(by the vendor of Pale Moon)
This one is very similar to the modern Firefox forks. Strangely some settings
(like for accepting cookies) were not even available in Preferences, so I had
to dig into about:config to find a setting to make the visible in the GUI.
It also had all telemetry flags disabled by default in about:config
> That is not immediately practical.
> It would be if you were in an actual situation which is threatening to your
health. But are you? Or is it a fear that one day you may be (a non-fact
ATM), so that you are taking preemptive measures?
Taking preventive measures seems practical to me.
I wouldn't be surprised if some free VPNs are created/funded by those who you
are trying to hide from... One should be very careful with 'free' things.
> Then let’s extend the metaphor to the immediately practical. I haven't
seen a poliovirus, but I trust getting a polio vaccine will help prevent me
from getting polio.
That is not immediately practical.
It would be if you were in an actual situation which is threatening to your
health.
> No, they were put to someone who was joking and specifically told you so.
No. It was SuperTramp83 who was joking. The questions were a reply to Magic
Banana who wasn't.
> Look, if you aren't willing to argue the point, then this conversation is
worthless.
So to you a conversation is
> But that is certainly not a reason to "remove the 'ethics' and 'freedom'".
"that" is not a reason because your "that" is not what I explained.
On various occasions I notice that you like to take my words out of context
and gently push their meaning into a completely different one, then
> Those are all things which have no or very little relation to your life. So
trust or no trust - it really doesn't expose you to any risk. But when your
life is based on a computer which can be modified remotely by an evil expert
and so create a disaster for you - that is something entirely
> I haven't directly seen an electron or the dwarf planet Pluto. I haven't
been to Thailand or Angola. Nor have I touched the original Rosetta Stone or
Terracotta Army.
Those are all things which have no or very little relation to your life. So
trust or no trust - it really doesn't expose
Tor is for what?
Medical Records you don't want your insurance company to know about?
A new invention you are working on and don't want a big time company to steal
from you?
Protecting your source when you are a journalist brave enough to talk to
people in life or death situations?
Just
Yeah, I noticed that much, webrtc was propably the culprit. But it only
happened once and now I am using a couple ufw rules to prevent that kind of
thing to happen again. Thanks!
Hey quantumgravity,
Thanks for putting the conversation back on track ;)
Well, that ended up being my option using VPN + Tor, using only VPN for some
stuff. Some people above mentioned I should "use bittorrent links to download
ISO" but they forget that I was looking for a PRIVATE way of
Trusting the free software community or trusting one single proprietary
software company is indeed analog to trusting all citizens (democracy) or
trusting one single dictator. You can say it is the same because it is
trusting in both cases. It is not. The users/citizens deserves the
> FSF proponents here would argue that through trust (in so called community)
you get the necessary certainty. But as I have said on other occasions -
trust is a belief. It creates more uncertainty as it is not based on direct
observation but on an idea. When you look a the tree outside your
> The questions weren't even put to you specifically
No, they were put to someone who was joking and specifically told you so.
That's why I didn't feel the need to refute every single thing you said. Just
those two because they stood out to me.
Look, if you aren't willing to argue the
> but I also guess you do have thousands of users who pay enough attention
and care enough as to use the tools ('member when we used tcpdump for
firecox?)
I don't know what this guess is based on. The fact is: only one user checked
it and he is not an expert whatsoever. This proves that
The question is trust and freedom.
Trusting one thing and not trusting another is a double standard. Someone
said "freedom is these 4 things" and people conform to trust "a community"
and to hate "a company" because the person has said "this is ethical".
It may sound outrageous but to me
>I doubt that.
And that's good.
>But do you really have 1000 programmers to check that program
I guess you don't but I also guess you do have thousands of users who pay
enough attention and care enough as to use the tools ('member when we used
tcpdump for firecox?) they have at hand to
>The tree is there, you can see it, touch it. You don't need a community of
experts to provide certifications and endorsements that there is a tree.
I beg to differ
I can easily go full-shit-philosophical about it until I really convince my
self there really is no tree and no observer either
Collectively - how does this actually work?
Say: 10 million lines of code for a program
10 programmers 1M lines each
100 programmers 100k lines each
1000 programmers 10k lines each (that looks feasible)
But do you really have 1000 programmers to check that program all of which
are:
-
>They all proprietary design and have computers full of proprietary hardware
and software, so according to your conclusion - 'maybe malware'.
Well, your reasoning is not very sound here. I don't know about Bannanna but
I am talking about a computer I have direct control upon. It is very
> Then how can we depend on the possibility of catching usage of undocumented
instructions in Intel's binary code base?
FSF proponents here would argue that through trust (in so called community)
you get the necessary certainty. But as I have said on other occasions -
trust is a belief. It
Well, I will try to get back to the topic:
it depends on the level of privacy you desire. A VPN (I use NordVPN) is
normally enough for me.
Maybe it's an option to use VPN + Tor for smaller files and browsing, while
sticking with normal VPN for downloading large files?
> Proprietary software is like if they give you a recipe, but in a form that
you can't read;
It's not the first time you bring forward this argument. Do note that freedom
1 is rarely, and for clear reasons of lack of knowledge, time and limited
human capacity, exercised individually but
You touch a very important point indeed, joe. God is indeed almighty for
he/she (I prefer 'it) is omnipresent and omniscient.
>The more I look at what is happening, the more I think: the only salvation
is some deep genetic mutation which would make human species into something
else.
>The problem is that no body can see the code of that crap, nobody knows if
there is something worse inside the microcode (maybe improved backd00r). So I
won't use microcrap. So maybe we are f***ed.
Hehe, right? In order to fix a vulnerability you install a backdoor \o/
That would be very
..ughhh, which reminded me I need to tcpdump da netsurfy, meh.
A reference (research paper published in 2015, focusing on proprietary
programs distributed through "app stores"):
Our analysis shows that 60% of the paid apps are connected to trackers that
collect personal
information compared to 85%–95% in free apps. We further show that
approximately
> Why do you even bother responding if you're not going to actually refute my
reasoning?
I am not interested in fighting with you, regardless if you consider that the
only valid reason for providing a response. I am getting tired of all this.
It is impossible to discuss anything
Malware, short for malicious software, is an umbrella term used to refer to a
variety of forms of harmful or intrusive software, including computer
viruses, worms, Trojan horses, ransomware, spyware, adware, scareware, and
other malicious programs. It can take the form of executable code,
> It's not a good feeling when you get up every morning knowing that your own
government is tracking you. They told me later 'we knew when you got up, we
knew when you left your house, we knew which vehicles you used, where you
stopped, where you shopped', for every electronic communication
79 matches
Mail list logo
