I've done a little research but curious about first hand experience.
I've got a little home server that is full disk encrypted with LUKS (+LVM, of course). It's headless (no display, no keyboard, etc) and just lives attached to the back of my desk, out of the way.
If it gets rebooted due to a power outage, I can plug in a keyboard, wait long enough for it to get to the LUKS password prompt, enter password, hit enter, and assume it worked if I see the disk activity light blinking. Worst case scenario, I can move it to a monitor and plug it in to get display too.
Because lazy, I'd prefer to be able to enter the decrypt password remotely. "Dropbear" seems to be a common suggestion but I haven't tried it yet.
So, asking for your experience or recommendations.
I'll start. Recommendation #1 - get a UPS : D ... But besides that.
Addendum: either way, I currently need to be home to do this because I access it remotely via tailscale along with my desktop. Since both are full disk encrypted, neither will boot to the point of starting tailscale without intervention. But, I might repurpose a nonencrypted RPi with SSHd to act as a "auto restarts with tailscale so I can SSH to it, then SSH to server to enter the LUKS password" jump point.
I wouldn't recommend it due to complexity, but clevis is a thing. It permits a machine to automatically unlock on boot when various environment conditions are met.
I have it setup on a server running Fedora and can’t complain. When the system reboots and plymouth shows the LUKS password prompt a ssh server is started in the background as well - so I can unlock the server either using keyboard or connect via SSH. When rebuilding the initramfs (eg. for a new kernel version) the ssh server is installed and setup automatically so I don’t really have to worry about anything after the initial setup.
+1 for Clevis. I’ve been using it on my laptop for a year and it works like a charm. Sometimes, you need to update bindings after kernel updates, but it’s overall quite smooth.
If I'm reading the docs correctly, Clevis can rely on a separate Tang server for retrieving the decryption key, right? So in that scenario I'd need to have another machine for Tang that can also auto-boot without entering a boot/LUKS password. Otherwise, if both machines (server+clevis and Tang server) were in the same room and restarted due to power loss, neither would be able to boot if both were encrypted... or did I misunderstand something important?
And I don't think I actually want "automatic" unlocking. I just want to be perform the unlock (enter LUKS password) remotely. I realize that comes with manual intervention (entering the password remotely) but I'm okay with that. I should probably have clarified that by "home server" I mean a machine the serves nice to have stuff, nothing mission critical. Plus I'm really the only one who uses it currently so I'll notice it's down when something doesn't work and can then initiate the remote unlock/boot : D
Clevis is interesting but I don't think it matches my specific situation. Glad I know about it now though, thanks for the info.
Same boat. I'm currently testing some unlock stuff out. I just got USB unlocks to work for Debian by following this: tqdev.com/2022-luks-with-usb-u…
I load a USB with a keyfile, then read the keyfile during boot. If I don't have the USB plugged in, I fallback to entering a passphrase. I have multiple LUKS encrypted disks and I don't want to type out a long passphrase a bunch of times.
I briefly encountered dropbear during my research... but ended up following the USB path because it kinda seemed a little easier to setup. 🤷
Anyone have any thoughts on USB vs dropbear unlocks?
I feel that using full disk encryption of laptops is a must. Not to protect against attacks with physical access (to the unencrypted boot loader or unprotected BIOS), but to avoid leaking data when the laptop is either lost or stolen.
I'd imagine that if you have physical access and don't mind plugging in a USB then that's the easier route.
My personal goal is to be able to unlock it remotely in two main scenarios : 1. I'm lazy and don't want to have to awkwardly fumble at plugging in something. So, SSH to it from the same room and unlock it from my desktop. 2. Server got rebooted while I'm away from home but I would really like it to be up and running again for something I need but I don't have physical access at the time.
Both of those situations lean towards a remote unlock with no USB. The first one is absolutely doable because I have local access and could plug a device in, it's just awkward. On the second, physical access is impossible so it must be done remotely.
I mentioned it in another comment but the remote unlock while away from home presents extra challenges for me because I access my server externally via Tailscale. Since Tailscale isn't available at boot (pre-decrypt), then I'll have to tailnet+ssh to another machine on the LAN (that doesn't require a boot password/unlock) and then SSH from that machine to the server to enter the LUKS password to allow boot to continue. Sounds feasible, though perhaps a little clunky. That's my current plan and hoping to try it out this weekend if time permits.
Ah, nice ok. Your post got me to look at dropbear a little more closely, but since I got a bunch of disks, I think USB unlock makes more sense in my setup. I'm using a keyfile on the USB to unlock a bunch of disks on boot. But if I only had one, then dropbear would be more doable for me.
This is interesting, another one I hadn't heard of yet. And, the server is running Debian : )
I enjoy the intro too :
You know how it is. You’ve heard of it happening. The Man comes and takes away your servers, your friends’ servers, the servers of everybody in the same hosting facility. The servers of their neighbors, and their neighbors’ friends. The servers of people who owe them money. And like that, they’re gone. And you doubt you’ll ever see them again. That is why your servers have encrypted root file systems
I've recently upgraded my hard drives used for storage. and because I ain't made of money, I wanted to sell the old drives. shredding those things took ages (4 TB drives). lesson learned, new drives are btrfs + LUKS that gets unlocked via key file. so when the time comes to sell those, I won't bother with shredding, just sell them as is.
In addition to drives being safer to replace and sell, encryption at rest should also protect against theft. So the scenario being someone taking the server or its drives. At least for me encrypting the drives gives a bit more peace of mind seeing as credentials for various accounts aren’t easily retrieved from the disks.
But yeah, this does not protect from data being read at runtime
Exactly this. The chances of my server/drives getting stolen is extremely low but I like to take all the precautions I can even if it's just an exercise in "I can, so I will". That and the "peace of mind" you mentioned.
Yes it's not too much bother to set this up, it can be put into ansible and once working I've not had to touch it again. Here's another dracut tool using dropbear that works well and has decent instructions on setup: dracut-crypt-ssh
The crypt-ssh dracut module allows remote unlocking of systems with full disk encryption via ssh
dracut initramfs module to start dropbear sshd during boot to unlock the root filesystem with the (cryptsetup) LUKS passphrase remotely - dracut-crypt-ssh/dracut-crypt-ssh
Interesting, I want to try some of these solutions.
I set up luks on some of my selfhosted virtualbox instances to protect against physical theft, but power issues cause all too frequent restarts that are a serious pain to physically access.
An ssh call in a script that could be remotely used to unlock and complete the boot would be so handy.
I use dropbear in initramfs on my Debian server. Works great.
At home I have a cheap networked KVM because I also sometimes have hardware problems preventing a boot. Works really well. Cost 100 € and uses open source software. It's called GL.iNet KVM.
Good to hear. This will be going on a Debian server too.
I just set up tailscale on the RPi that controls my printer so I've got a jump host on the LAN now... Just need to make time to setup dropbear (and keys) on the server.
Hasan (left) and Vaush (right). They are streamers and you kinda have to be terminally online to get the joke. Hasan was recently accused of electrocuting his dog on stream, though without much evidence, and Vaush is allegedly into zoophilia
Hassan? pretty underwhelming, in short, dog is walking around on this treadmill kind of thing, looks to me almost obvious that his dew claw got snagged on it and he yelps, roughly at the same time hassan's hand is out of frame for a few seconds (that some are claiming he is pushing a shock remote).
oh and someone found a 2 year old clip of him saying that his friend gave him a shock collar that is laying around his house but he'd never use.
The dog is a girl, the appears to bend her ankle on the dog bed (it’s a stretchy material, the dog bed is like one of those fancy office chairs’ material) and the yell. Hasan was reaching off frame and that is “evidence” that he “must have” been abusing her with a 10000 volt shock therapy to make her gay or something.
Imagine that we didn’t even needAI to make people believe fake shit with no evidence.
It's kind of depressing to watch so many people just embrace this kind of naked smearing of someone.
I don't know Hasan's work. I know Vaush, and I think he frankly sucks. In either case, I'd rather people just say, 'Fuck that guy, I don't like him as a person' rather than diving into this practice of labeling everyone you don't like as a pedo or some other flavor of sick abusive pervert. It's gross.
My philosophy is that I personally don't know any internet personalities, so can't defend any actions they made unless they are complete lies. When watching the clip, it wasn't clear Hasan didn't shock his dog.
In the video, Hasan yelled at the dog, reached offscreen, the dog yelped, and Hasan didn't go to help.
And I am a Hasanabi fan. I greatly appreciate the work he has done for Palestine, and leftists agenda in the west. There is a universe where Hasan didn't shock his dog, was just annoyed at it, reached offscreen and for a seperate reason (like the dew claw getting caught), the dog yelped. But since none of us know Hasan personally, or privately, we can't tell.
Personally, I lay on the side of not believing it, because although there is evidence that the collar was a shock collar, I have seen streams/clips where Kaya runs around freely, greeting guests etc. Either way I will continue to watch him, because I value his political analysis, but don't freely defend strangers private lives on the internet.
A perfectly reasonable take! I tend to have opinions on public figures because I do think accountability of some kind is more important for them than others. I'm not a fan of 'cancel culture', but the inverse of it, which allows a felon as president, is not desirable either.
Hasan supports the fascist takeover of Ukraine by Putin. He also supports fascist Iran-backed Hamas, the suppressors of Gaza. People like Hasan drag the left movement into the dirt so we will never take off.
At best, he is a grifter that found a profitable influencer nieche, at worst he is a psyop to herd and discredit us.
Also he appears to view himself as his dog's superior instead of his caretaker, which hints at a right-wing world view. Also shock collar user, so he's a tormentor.
I haven't seen any proof he did do it either. If we're weighing the circumstantial evidence available? There's much more pointing towards that dog being treated well than poorly.
I have also seen a lot of proof that there is a targetted smear campaign against him, which leads me to be a lot more critical of all the info presented by both sides.
It's so obvious that the dog was trained with a shock collar that the people pushing the idea have just spent the last few days using a clip with one of Hasans streamer/podcast friends popping his chewing gum into the mic as "proof" he's clicking a button to shock the dog...
For a guy who streams 6+ hours 6 days a week and has done for the entire time he's had the dog.
Almost like the entire thing is hysteria driven by weirdo freaks who have even weirder hate boners and will make things up based on literally nothing other than circumstance.
I've just never enjoyed his content tbh. He also encourages faith in American electoralism to an extent that makes me uncomfortable and participates in drama slop too much for me to enjoy.
I know that last bit may seems strange considering what I have posted but I generally do not directly consume internet drama. I have never seen anything from the channels of either of these people. I just hear about it from other people and go, haha funny.
He is hypocritical, claiming that he wants liberation and rights for all and then continuing to pay people to torture animals to death so he can get a little pleasure from it.
I don't unterstand why people are so hung up on the whole 'did he schock the dog or not' thing when they mostly pay for way worse stuff to be done to animals.
Hasan supports the fascist takeover of Ukraine by Putin. He also supports fascist Iran-backed Hamas, the suppressors of Gaza. People like Hasan drag the left movement into the dirt so we will never take off.
At best, he is a grifter that found a profitable influencer nieche, at worst he is a psyop to herd and discredit us.
Also he appears to view himself as his dog's superior instead of his caretaker, which hints at a right-wing world view. Also shock collar user, so he's a tormentor.
I learned that the guy on the left is Hasan and thr guy on the right is Vaush by the comments. I then spent too long figuring out what the scale was....and it seems to be that there is no difference?
Both people seem to take fine care of their dogs? Fun fact: Abused animals don't crawl into your lap and expose their bellies for affection. That is a sign of mutual trust and companionship.
You know a popular uprising is the real deal when France is evacuating their guy before the people take full control. The president's location is a mystery, his allies are fleeing on private jets, and the army is defecting to join the protesters in the streets. France loses another colony in Africa.
Madagascar’s president Andry Rajoelina has been evacuated from the country by a French military plane as protests and a military mutiny threaten to topple his government, RFI has confirmed.
President Andry Rajoelina ratcheted up tensions in Madagascar Tuesday by dissolving the National Assembly to block a vote to force him out of office as thousands gathered for new protests calling for his resignation.
Reverted commits 582a46656d04cbefd4eb60b9eda9d263315377d5 and c771b8b6f01c2f3b1f88cf1ceb0ed8802a79e98a from em-10 to allow Warhammer Darktide launcher to work again (github.com/GloriousEggroll/pro…)
Compatibility Report Name of the game with compatibility issues: Warhammer 40000: Darktide Steam AppID of the game: 1361210 System Information GPU: RX 7600 Driver/LLVM version: Mesa 25.2.4 (LLVM 20...
Entre os dias 13 e 18/10 o Movimento Software Livre brasileiro promove a II Semana do Software Livre no Brasil, evento que trará uma programação totalmente online, debatendo os diversos aspectos do desenvolvimento, manutenção e usos do software livre no Brasil, ainda com ênfase na governança das ações do movimento, em busca por incidência política mais efetiva e pela sustentabilidade dos produtos e projetos que tendem a ser fortalecidas e ganharem escalabilidade através das ações em Rede.
As atividades passaram pela pauta do uso de softwares públicos ao se usar dinheiro público na aquisição de softwares, compartilhamento de ferramentas de mapeamento, debate sobre questões de autonomia e infraestruturas sociotécnicas soberanas, além da governança do Movimento Software Livre no Brasil. Diante do contexto geopolítico atual, a Semana do Software Livre no Brasil traz pautas não só de interesse das comunidades interessadas em tecnologias livres, mas da sociedade como um todo.
Todas as atividades terão online e transmitidas em plataformas do Fediverso. Saiba tudo visitando semana.softwarelivre.tec.br/
Este bot foi solicitado para gerar um texto alternativo para sua imagem por @daltux. Se você consentir, concederá ao altbot uma permissão única para processar esta publicação específica. Todo o processamento é feito de forma privada sem terceiros. Qualquer conteúdo é excluído após o processamento. Política de privacidade completa: github.com/micr0-dev/Altbot/bl…
Você consente? Responda com 'Y' ou 'Yes' para continuar.
Rajoelina, 51, was first president from 2009 to 2014 before returning to power in 2023. He was increasingly isolated after losing the support of a key army unit that joined thousands of youths activists known as “Gen Z Madagascar” to protest against corruption and poverty. The movement had earlier turned down an invitation to meet him for dialogue and demanded his resignation.
...
Among the demonstrators were soldiers from the elite Capsat unit, which played a major role in the 2009 coup during Rajoelina’s rise to the presidency after mass protests forced his predecessor Marc Ravalomanana out of power.
I believe I read in another article that the soldiers that helped his return to power in 2023 also publicly called to oppose Rajoelina.
I don't really understand how the president was allowed to have dual citizenship. For senior positions in the judiciary/legislative/executive branch, I don't think dual citizenship should be allowed. You can make rare, special exceptions, but not for the presidency (or say the supreme court or party leadership).
Because Madagascar is a former French colony. They also have a conflict over some islands in the Pacific. The article said the former president cut a deal with Macron and was then evacuated, the deal could be about those islands but I doubt the new government would respect it.
He’s a French citizen and is perceived as supporting French interests in this former French colony whereas other presidents tried to move Madagascar in other directions.
Rajoelina took power after a military coup in 2009. He was a radio DJ and mayor of the capital city who encouraged the overthrow of the former president, so him getting overthrown himself is a pretty interesting turn of events.
Oct 13 (Reuters) - U.S. President Donald Trump urged Israeli President Isaac Herzog on Monday to pardon Prime Minister Benjamin Netanyahu, who is on trial for corruption, during an address to the Israeli parliament in Jerusalem.
Netanyahu was indicted in 2019 in three cases, one of which includes receiving almost 700,000 shekels ($210,000) in gifts from businessmen, including champagne and cigars. Israel's President holds a largely ceremonial role but he does have authority to pardon convicted criminal if there are unusual circumstances presented.
"Ok so he's corrupt but he also helped provoke one of the most brutal wars our generation has ever seen and made me look good for threatening to stop supplying them with bombs, so can't you cut him some slack?"
I don't know man, as the president of a state, I think I would be quite offended by even just the notion of interfering with judical matters, but maybe that's just me
Israel relies entirely on American and overall Western money and they're more like a rabid dog on a leash than a state... in the past, there would be more spin around the fact that the American administration uses Israel to wage proxy wars, destabilise and impose themselves in the area but there is no need for masks anymore so it's all just obvious now. 🤷
Oct 13 (Reuters) - U.S. President Donald Trump urged Israeli President Isaac Herzog on Monday to pardon Prime Minister Benjamin Netanyahu, who is on trial for corruption, during an address to the Israeli parliament in Jerusalem.
Netanyahu was indicted in 2019 in three cases, one of which includes receiving almost 700,000 shekels ($210,000) in gifts from businessmen, including champagne and cigars.
Israel's President holds a largely ceremonial role but he does have authority to pardon convicted criminal if there are unusual circumstances presented.
At present, I have limited disk space for my media library, so occasionally I must purge content I've already watched or acquired long ago but never watched. I'm big into letting my winners run, so when choosing which content to purge, I want to just sort by Ratio in qBittorrent and start purging anything older than 30 days that isn't getting uploads. The problem is, more often than not I'm cross seeding the same content across multiple trackers, so although a specific torrent on a specific trackers may be performing poorly, that doesn't mean the same content isn't performing well on another tracker.
I know how to select, right click, and Copy > Name. Is there a way to export the grid view so that I can do some data manipulation in LibreCalc?
I've searched and stumbled upon this thread from over a year ago where it appears the OP is attempting something similar. I don't mind getting my hands dirty with the web UI and/or the API, but since I'm not a developer, I thought I'd check w/ the community before I go that route. Also, one of the commenters in the other thread that I linked mentions parsing the save data directly - are they talking about parsing the fastresume files or something else? Thanks!
This is not what you asked for specifically but check out tqm github.com/autobrr/tqm it does everything you want automatically. It takes a bit of fine tuning but it can handle a lot of scenarios.
Never needed to use this but have seen that tools like github.com/fedarovich/qbittorr… are able to export lists of loaded torrents in various formats, it might do what you want.
e.g. if you're going to load the output in LibreCalc then you probably want to export a list in csv format most likely (the project's wiki mentions it github.com/fedarovich/qbittorr…).
so when choosing which content to purge, I want to just sort by Ratio in qBittorrent and start purging anything older than 30 days that isn’t getting uploads. The problem is, more often than not I’m cross seeding the same content across multiple trackers, so although a specific torrent on a specific trackers may be performing poorly, that doesn’t mean the same content isn’t performing well on another tracker.
Something to consider for the future, you could re-work how you are storing your torrent data and hardlink all those cross-seeding torrents in their own folders. So if you do a full delete of one torrent + data it won't actually affect the torrent + data of other torrents. If you have it split out like that then you could even try to automate the whole process of deleting old torrents with tools like github.com/Hundter/qBittorrent… or github.com/Mythic82/Qbittorren…
Would hardlink the same torrent data in two places so that torrents for trackera can point to the trackera folder and torrents for trackerb can point to the trackerb folder.
Thanks for the idea about exporting torrent data using the CLI - I'll look into that.
Re: linking, I currently use sym links to avoid duplicating storage across multiple trackers. My main reason for sym links is so I can link across different devices (my understanding is hard links are limited to the same device). Hard link or sym link aside, the problem is for a given torrent, I don't want to delete it from any trackers if it's performing on at least one of them. My thought process is if I'm keeping the content around for even just one of my trackers, I may as well keep cross seeding it, if for no other reason than to earn that sweet bon. The hard part is identifying which torrents are performing poorly across all trackers. If I can get the data into CSV format, then I think I can massage it well enough to tell which (poorly performing) torrents can be safely purged from all trackers.
Log Out è il ritrovo dei Tech Worker che dopo il lavoro vogliono incontrarsi. Un aperitivo per conoscersi e confrontarsi, per parlare di lavoro (ma anche altro) con persone che potrebbero benissimo essere nostri colleghi, se solo non lavorassero altrove 😊
Nobel Peace Prize laureate María Corina Machado is a far-right Venezuelan coup-plotter funded by the US government. She supports Israel as it commits genocide and is key to Trump's regime-change war.
Given the state of Venezuela's economy I find is highly implausible that Maduro could've actually won. This isn't to support invasion or Machado, just realistically speaking there's no way the voters agreed to more Maduro.
I don't think even 5% of Venezuela's economic issues derive from Maduro's government. Not that I like him particularly. We severely underestimate -or pretty much ignore- the actual implications of being subjected to the sanctions and isolation Venezuela has been. And the huge social fracture derived primarily from the middle to upper class being annoyed at having to redistribute wealth for decades ain't helping. I know this first-hand and the insolidarity, entitlement and neoliberal kool-aid drinking from that part of Venezuelan society is a fucking bleak reality.
Daily reminder that the Nobel Prize was (still is) purely a marketing move to scrub the reputation of the Merchant of Death, Alfred Nobel. Because he got butthurt that the newspapers had the audacity to shed light on the truth about his horrible legacy.
The first Nobel Peace Prize went to the woman he had a crush on and never got over even decades after she dumped his explosive peddling ass.
Speaker Mike Johnson (R-La.) said Monday the government shutdown is on its way to being one of the longest in history unless Democrats accept the House-passed, GOP-crafted stopgap bill to reopen the government.
“We’re barreling toward one of the longest shutdowns in American history, unless Democrats dropped their partisan demands and passed a clean, no-strings-attached budget to reopen the government and pay our federal workers,” Johnson said in a press conference on the 13th day of the government shutdown.
Congressional leaders have been locked in a standoff over government funding as Democrats demand that Republicans make concessions on health care, notably Affordable Care Act tax credits that are expiring at the end of the year. Republican leaders have refused to negotiate on health care during a shutdown, arguing that that Democrats must accept the “clean” funding stopgap the House passed in September — and which has failed to advance in the Senate seven times.
Veterans are facing federal charges after protesting Ice sweeps and Trump’s national guard deployments. The justice department claims the veterans were violent
An AI bubble requires actual AI capabilities to be built and to fail to be called that. A stock trading scam on AI stocks is just a stock trading scam.
36GW is 36 times current US corporate owned AI datacenter capacity. All of it made at TSMC which runs full tilt as it is. TSMC's current plans is to 2x (over 3nm today) 2nm node by 2028. 4x by 2031 would still mean 2038ish to satisfy just OpenAI demand.
A big problem with having so many partners that OpenAI has no actual money to pay, is that no one has the confidence to place big TSMC capacity unless they are sure OpenAI actually buy from them, with money they get on time to buy from them. There are definitely consumer AI/gaming capabilities that can have more certain demand than the datacenter impossibilities.
Each additional announcement makes the joke more impossible to believe. CISCO did not do this during 1999 bubble. People just assumed its growth would continue.
Fine, OpenAI revenue growth may reach 3x at end of this year. At losses equal to its revenue number in 2024. OpenAI already has the most expensive models.
Knowing that it's just seven companies propping up the US economy, and the private ones don't have to publicly report if they just lost half a trillion dollars, it gives one pause. I'm definitely reevaluating if and when I want to move my investments to cash.
that is how OpenAI measures all of its deals. the GPU providers DGAF about that measure, and "real deals" will be for x number of gpu's instead. OpenAI PR make stonk go up, is vagueness everyone else seems to enjoy. It makes 0 sense in any deals these companies can make. It just scares the rest of us for how much the power bill go brrrr.
There was a link in the article about that, it was saying that they are just requiring self reporting, I don't know the political context in California, but it seems like you wouldn't push this and then turn around and try the id thing, but I am by no means an expert at predicting the idiocracy of politicians.
Probably will get it anyway, companies don't like to build and maintain software for two different markets so they tend to just follow the regulations of the strictest market, especially if those regulations don't really cut into there bottom line like this one.
When I read that shit as a kid, I thought Asimov's laws of robotics were like natural laws, so that it was just naturally impossible for robots to behave otherwise. That never made any sense to me so I thought Asimov was just full of shit.
Actually seems easier (probably not at the state level) to mandate cameras and such digitally sign any media they create. No signature or verification, no trust.
And the people that are going to check for a digital signature in the first place, THEN check that the signature emanates from a trusted key, then, eventually, check who's deciding the list of trusted keys… those people, where are they?
Because the lack of trust, validation, verification, and more generally the lack of any credibility hasn't stopped anything from spreading like a dumpster fire in a field full of dumpsters doused in gasoline. Part of my job is providing digital signature tools and creating "trusted" data (I'm not in sales, obviously), and the main issue is that nobody checks anything, even when faced with liability, even when they actually pay for an off the shelve solution to do so. And I'm talking about people that should care, not even the general public.
There are a lot of steps before "digitally signing everything" even get on people's radar. For now, a green checkmark anywhere is enough to convince anyone, sadly.
It could be a feature of web browsers. Images would get some icon indicating the valid signature, just like browsers already show the padlock icon indicating a valid certificate. So everybody would be seeing the verification.
But I don't think it's a good idea, for other reasons.
An individual wouldn't verify this but enough independent agencies or news orgs would probably care enough to verify a photo. For the vast majority we're already too far gone to properly separate fiction an reality. If we can't get into a courtroom and prove that a picture or video is fact or fiction then we're REALLY fucked.
I get what you're going for but this would absolutely wreck privacy. And depending on how those signatures are created, someone could create a virtual camera that would sign images and then we would be back to square one.
Privacy concern for sure, but given that you can already tie different photos back to the same phone from lens artifacts, I don't think this is going to make things much worse than they already are.
someone could create a virtual camera that would sign images
Anyone who produces cameras can publish a list of valid keys associated with their camera. If you trust the manufacturer, then you also trust their keys. If there's no trusted source for the keys, then you don't trust the signature.
The problem is that "AI" doesn't actually exist. For example, Photoshop has features that are called "AI". Should every designer be forced to label their work if they use some "AI" tool.
This is a problem with making violent laws based on meaningless language.
This sounds about as useful as the California law that tells ICE they aren’t allowed to cover their face, or the California law that tells anyone selling anything ever that they have to tell you it will give you cancer. Performative laws are what we’re best at here in California.
Has anyone been able to find the text of the law, the article didn't mention the penalties, I want to know if this actually means anything.
Edit: I found a website that says the penalty follows 5000*sum(n+k) where n is number of days since first infraction, this has a closed form of n^2+n= (7500^-1)y where y is the total compounded fee. This makes it cost 1mil in 11 days and 1bil in a year.
Yeah, this is an important point. If the penalty is too small, AI companies will just consider it a cost of doing business. Flat-rate fines only being penalties for the poor, and all that.
How do you figure, I haven't seen the actual text, is it written ambiguously? If not, I would imagine that they be able to enforce it, the only thing is the scope is very small.
Okay, but when can the law straight up ban companies who don't comply with the law from operating in the state instead of just slapping them on the wrist and telling them "no" the same way a pushover parent tells their child "no". Especially after they just ignore the law.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
My LinkedIn feed is 80% tech bros complaining about the EU AI Act, not a single one of whom is willing to be drawn on which exact clause it is they don't like.
That’s not actually the case for most companies though. The only time you’d need a full time lawyer on it is if the thing you want to do with AI is horrifically unethical, in which case fuck your little startup.
It’s easy to comply with regulations if you’re already behaving responsibly.
That's true with many regulations. The quiet part that they're trying to avoid saying out loud is that behaving ethically and responsibly doesn't earn them money.
Yes... it's so bad that I just never log in until I receive a DM, and even then I login, check it, if it's useful I warn people I don't use LinkedIn anymore then log out.
Not a terrible resource when you're actually looking for a job. But that's because all the automated HR intakes are a dumpster fire, more than anything headhunters bring in value.
Did you seriously use LinkedIn? I always thougt that it was just narsisitic people posting about themselves never having any real conversations and only adding superficial replies to posts that align 100% with them
If I could delete it without impacting my job or career I would. Sadly they’ve effectively got a monopoly on the online professional networking industry. Cunts
Seems reasonable to me. If you're using AI then you should be required to own up to it. If you're too embarrassed to own up to it, then maybe you shouldn't be using it.
Prosecution: "Your Honor, the definition of artificial is 'made or produced by human beings rather than occurring naturally,' and as all human beings are themselves produced by human beings, we are definitionally artificial. Therefore, the actions of an intelligent human are inherently AI."
Defense: "The defense does not argue this point, as such. However, our client, FOX News, could not be said to be exhibiting 'intelligence.' Artificial they may be, but AI they are clearly not. We rest our case."
IMO if your "A*" style algorithm is used for chatbot or any kind of user interaction or content generation, it should still be explicitly declared.
That being said, there is some nuance here about A) use of Copyrighted material and B) Non-deterministic behaviour. Neither of which is (usually) a concern in more classical non-DL approaches to AI solutions.
Yeah for real, what does this mean exactly? All forms of machine learning? That's a lot of computers at this moment, it's just we only colloquially call the chat bot versions "AI". But even that gets vague do reactive video game NPCs get counted as "AI?" Or all of our search algorithms and spell check programs?
At that point what's the point? The disclosure would become as meaningless as websites asking for cookies or the number of things known to cause cancer in the state of California.
If you ask ChatGPT, it says it's guidelines include not giving the impression it's a human. But if you ask it be less human because it is confusing you, it says that would break the guidelines.
ChatGPT doesn't know its own guidelines because those aren't even included in its training corpus. Never trust an LLM about how it works or how it "thinks" because fundamentally these answers are fake.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
I don't think linking a "China watcher" that exclusively makes videos on how China is going to collapse any minute now going back years is good evidencd.
Kinda? You can find videos of any car catching on fire, what matters is how they compare at a statistical level with their competition to see if they are doing better or worse, not evidence that at minimum failure rates are nonzero. I truly don't trust China Watchers to produce anything meaningful or useful.
Define "plenty." What's the fire rate compared to the total number of BYD cars in existance? How does that compare to Tesla? How's the historical trend, is it going up or down? Are they equally likely to catch fire across the board or are there problematic models or series? Different countries have different automotive regulations and therefore have slightly different cars even if they're the same model, are the fire rates different by country? Are domestic Chinese BYDs more likely to catch fire than cars exported to, say, other Asian countries, Latin America, or Africa?
This is why you don't draw conclusions from how many YouTube videos you can find. When there are billions of any product there will inevitably be tons of videos of it going wrong which doesn't inherently tell you whether it's actually likely to happen or not. If that was an acceptable statistical analysis method, then I can binge watch the hundreds of thousands of aviation accident videos and conclude that literally all planes do is crash.
Tesla stock price has always been valued on "Next Big Thing". Its robotaxi/fsd is falling flat so far. But robotics is new NBT. With 85% of robots sold in China, and massive manufacturing market share that is still growing, future robot sales will still take place there, and Chinese companies are already well ahead in humanoid and other robotics.
Also their gimmick, robot soccer and robot olympics events, even if not incredibly impressive, is a mass student training program in robotics future that just doesn't exist in the west. China's future robot dominance is completely assured because they care about making it happen. Tesla has 0 chance of success, and for a market, requires giving Tesla US monopoly on overpriced robots.
A better world is possible. Capitalism in the modern age is dying imperialism. Western supremacy is built on the backs of the global south, not any intrinsic superiority of capitalism to produce good results but for its systemic drive for plunder. Socialism, where humanity takes the reigns of how we produce and distribute away from the profit motive, is the way forward. If you want a place to start with theory, I made an introductory Marxist-Leninist reading list, feel free to give it a look!
It's time to read theory, comrades! As Lenin says, "Despair is typical of those who do not understand the causes of evil, see no way out, and are incapable of struggle." Reading theory helps us identify the core contradictions within modern society, analyze their trajectories, and gives us the tools to break free. Marxism-Leninism is broken into 3 major components, as noted by Lenin in his pamphlet The Three Sources and Three Component Parts of Marxism: | Audiobook
Dialectical and Historical Materialism
Critique of Capitalism along the lines of Marx's Law of Value
Advocacy for Revolutionary and Scientific Socialism
As such, I created the following list to take you from no knowledge whatsoever of Leftist theory, and leave you with a strong understanding of the critical fundamentals of Marxism-Leninism in an order that builds up as you read. Let's get started!
Section I: Getting Started
What the heck is Communism, anyways? For that matter, what is fascism?
Breaks down fascism and its mortal enemy, Communism, as well as their antagonistic relationship. Understanding what fascism is, where and when it rises, why it does so, and how to banish it forever is critical. Parenti also helps debunk common anti-Communist myths, from both the "left" and the right, in a quick-witted writing style. This is also an excellent time to watch the famous speech.
Section II: Historical and Dialectical Materialism
By far my favorite primer on Marxist philosophy. By understanding Dialectical and Historical Materialism first, you make it easier to understand the rest of Marxism-Leninism. Don't be intimidated!
Further reading on Dialectical and Historical Materialism, but crucially introduces the why of Scientific Socialism, explaining how Capitalism itself prepares the conditions for public ownership and planning by centralizing itself into monopolist syndicates. This is also where Engels talks about the failures of previous "Utopian" Socialists.
Section III: Political Economy
That's right, it's time for the Law of Value and a deep-dive into Imperialism. If we are to defeat Capitalism, we must learn it's mechanisms, tendencies, contradictions, and laws.
Best taken as a pair, these essays simplify the most important parts of the Law of Value. Marx is targetting those not trained in economics here, but you might want to keep a pen and some paper to follow along if you are a visual person.
Absolutely crucial and the most important work for understanding the modern era and its primary contradictions. Marxist-Leninists understand that Imperialism is the greatest contradiction in the modern era, which cascades downward into all manner of related contradictions. Knowing what dying Capitalism looks like, and how it behaves, means we can kill it.
Section IV: Revolutionary and Scientific Socialism
Can we defeat Capitalism at the ballot box? What about just defeating fascism? What about the role of the state?
If Marxists believed reforming Capitalist society was possible, we would be the first in line for it. Sadly, it isn't possible, which Luxemburg proves in this monumental writing.
Excellent refutation of revisionists and Social Democrats who think the State can be reformed, without needing to be replaced with one that is run by the workers, in their own interests.
Section V: Intersectionality and Solidarity
The revolution will not be fought by atomized individuals, but by an intersectional, international working class movement. Intersectionality is critical, because it allows different marginalized groups to work together in collective interest, unifying into a broad movement.
Critical reading on understanding misogyny, transphobia, enbyphobia, pluralphobia, and homophobia, as well as how to move beyond the base subject of "gender." Uses the foundations built up in the previous works to analyze gender theory from a Historical Materialist perspective.
De-colonialism is essential to Marxism. Without having a strong, de-colonial, internationalist stance, we have no path to victory nor a path to justice. Fanon analyzes Colonialism's dehumanizing effects, and lays out how to form a de-colonial movement, as well as its necessity.
Solidarity and intersectionality are the key to any social movement. When different social groups fight for liberation together along intersectional lines, the movements are emboldened and empowered ever-further.
Section VI: Putting it into Practice!
It's not enough to endlessly read, you must put theory to practice. That is how you can improve yourself and the movements you support. Touch grass!
Mao wrote simply and directly, targeting peasant soldiers during the Revolutionary War in China. This pair of essays equip the reader with the ability to apply the analytical tools of Dialectical Materialism to their every day practice, and better understand problems.
Congratulations, you completed your introductory reading course!
With your new understanding and knowledge of Marxism-Leninism, here is a mini What is to be Done? of your own to follow, and take with you as practical advice.
Get organized. Join a Leftist org, find solidarity with fellow comrades, and protect each other. The Dems will not save you, it is up to us to protect ourselves. The Party for Socialism and Liberation and Freedom Road Socialist Organization both organize year round, every year, because the battle for progress is a constant struggle, not a single election. See if there is a chapter near you, or start one! Or, see if there's an org you like more near you and join it.
Read theory. Don't think that you are done now! Just because you have the basics, doesn't mean you know more than you do. If you have not investigated a subject, don't speak on it! Don't speak nonsense, but listen!
Aggressively combat white supremacy, misogyny, queerphobia, and other attacks on marginalized communities. Cede no ground, let nobody be forgotten or left behind. There is strength in numbers, when one marginalized group is targeted, many more are sure to follow.
Be industrious, and self-sufficient. Take up gardening, home repair, tinkering. It is through practice that you elevate your problem-solving capabilities. Not only will you improve your skill at one subject, but your general problem-solving muscles get strengthened as well.
Learn self-defense. Get armed, if practical. Be ready to protect yourself and others. Liberals will not save us, we must save each other.
Be persistent. If you feel like a single water droplet against a mountain, think of canyons and valleys. Oh, how our efforts pile up! With consistency, every rock, boulder, even mountain, can be drilled through with nothing but steady and persistent water droplets.
"Everything under heaven is in utter chaos; the situation is excellent."
Freedom Road Socialist Organization (FRSO) is a national organization of revolutionaries fighting for socialism in the United States. Our home is in the working class.
You think you can just go against decades of propaganda that built their worldview and to which they attach themselves like lifeboats in the raging sea so easily?
The problem I see often is moral "flexibility", and even on Lemmy I see an objectively morally wrong action being praised because it's done by people "on our side"/"who are European as me" and those same users will condemn the same behaviour (usually not even as egregious too, lol) coming from "the other side". Westerners are often too propagandized for us to have productive, informative discussions, and too weak and morally confused to admit they're wrong/X action is simply not good regardless of who's doing it.
Trade numbers confirm that Chinese exports to the United States fell, but jumped globally, as a new 100% tariff threat from US President Donald Trump promises a rocky patch ahead of trade negotiations between the world's two strongest economies.
Want to wade into the sandy surf of the abyss? Have a sneer percolating in your system but not enough time/energy to make a whole post about it? Go forth and be mid: Welcome to the Stubsack, your first port of call for learning fresh Awful you’ll near-instantly regret.
Any awful.systems sub may be subsneered in this subthread, techtakes or no.
If your sneer seems higher quality than you thought, feel free to cut’n’paste it into its own post — there’s no quota for posting and the bar really isn’t that high.
The post Xitter web has spawned soo many “esoteric” right wing freaks, but there’s no appropriate sneer-space for them. I’m talking redscare-ish, reality challenged “culture critics” who write about everything but understand nothing. I’m talking about reply-guys who make the same 6 tweets about the same 3 subjects. They’re inescapable at this point, yet I don’t see them mocked (as much as they should be)
Like, there was one dude a while back who insisted that women couldn’t be surgeons because they didn’t believe in the moon or in stars? I think each and every one of these guys is uniquely fucked up and if I can’t escape them, I would love to sneer at them.
(Credit and/or blame to David Gerard for starting this.)
And in related news, worldwide ecosystems are already getting perma-fucked by billionaires' repeated and relentless wrecking of our planet for personal gain.
I mention billionaires specifically because the average Joe, the 99% of humanity being told to cut down their carbon footprint and delete emails to save water, is completely fucking blameless in this.
They didn't choose to have car-centric architecture forced on them for the past goddamn century, they didn't choose to have planet-wrecking crypto farms/NFTs forced on them a few years ago, and they sure as hell didn't choose to have planet-killing AI slop extruders forced on them, either.
(Anyways, unrelated hot take of the day: taking responsibility for something you're not responsible for is a moral failing, and needs to be treated as such)
Researchers in Leeds have joined experts from across the world in warning that Earth is reaching the first of many climate tipping points that will cause catastrophic harm without urgent action.
Happy that we graduated from making military decisions based on what the Oracle of Delphi hallucinated to making military decisions based on what Oracle® DelPhi® Enterprise hallucinated
Reacting to J.D. Vance’s abruptly aborted appearance on ABC on Sunday, former GOP campaign adviser Rick Wilson ridiculed the vice president's latest “embarrassing” stab at getting out of Donald Trump’s shadow and casting himself as the MAGA heir appa…
Edit: So one is definitely going to be the Proselytizer Library Stick (OK I need a better name for it, fine). Going to test out some Debian options on there, just need to find a nice way to make it a user friendly portable library/reader, so feel free to mention whatever comes to mind there as well.
But I have more of these little suckers, so thats just one for now.
So I've got a few Intel compute sticks sitting on my desk here, and I don't know what I want to do with them (aside from throw them out, I'd rather find some value in them if I can).
They are STK1AW32SC, which have the atom x5-Z8330 chips, with a whopping 2gb ram, 32gb emmc, and a microsd slot.
A few things I've considered: - Take a few LCDs and the drivers and make a "household front end", basically just point to my locally hosted services (mealie for recipes, hass, etc) - Same thing but make it a digital picture frame - Compute to point to a magic mirror instance - Try out how terrible emulation is on them to make a little game console for the kids thats standalone? They already can use the living room one for that, which is a usff box with a lot more power. So probably not. - Automatically boots to rick roll to stick in TVs at my BILs house and drive him nuts?
Open to ideas! I've got tons of machines here, so I really don't need them to do anything - which means the silly and borderline stupid (see rick roll note above) are perfectly acceptable ideas.
Lakka is a lightweight Linux distribution based on RetroArch that transforms a small computer like a Raspberry Pi into a full blown retrogaming console.
If I think about it as a travel console for retro gaming, that actually feels mildly useful. Maybe I keep it to NES/Genesis era, and a couple of cheapie controllers? That could be fun
I mostly just like to avoid the landfill if it can be avoided, now to find something to do with the other ones that have been sitting in the bin for a while...
They used to do digital signage work, but they've long since been replaced in my lab use, thus the issue with what to do with them now 😀
How much storage does it have? Google search indicates it may just be 32GB. With a small distro, you just maybe just barely fit text only Wikipedia on there with Kiwix (or whatever the Wikipedia archive reader is called.)
Alternatively, you could put some books from Project Gutenberg on there. Throw in some public domain music recordings, a freely available movie or two (like the ones from the blender project), and maybe some light weight open source games... Then, you could have have yourself a portable offline library which could be shared with no legal repercussions.
Its just the 32gb emmc + whatever you shove on an sdxc - technically supports up to 128gb (officially), but by spec its sdxc v3, so untested/unsupported up to 2tb. I've got a bunch of spares at 128gb or less so thats what I'll likely toss in.
I like the idea of a mini library.... but maybe a step further and drop in a front end to navigate books, with a lightweight ebook reader application, and put some anti-capitalist works on there? With a bonus of the AFAQ? Ooh and some anti-fascist materials....
There is a group read of it happening that I am just now realizing I was probably tagged on my db0 account, and I totally forgot about it!
Anyway, I think something with both non-fiction works and fiction with a specific lean would be neat. Everything from The Iron Heel to The Conquest of Bread, a bit of Civil Disobedience by Thoreau, etc.
So just for the record, I think this works quite nicely. Using foliate as the ebook reader, mx linux on the stick, its pretty responsive. I think I can trim it down further (maybe I'll go full custom build if I have the time), but its pretty good to go right now.
One thing I was thinking about doing, since its OPDS friendly, is setting up a custom catalog to be available publicly that it can access, for ease of adding new books. I'm also going to grab and load a bunch locally, I have some on my library server right now, but I'll probably focus and expand the collection a bit for this.
Maybe something with sections for economics, the environment, anti-imperialism, social progressivism, etc.
I also really like the idea of incorporating some of the piefed rational discourse kit (maybe including some videos in a different section, or links to a wiki? Not sure yet.).
Well that part it looks like will be a project unto itself, but either way - the anti-fascist proselytizer stick has a start!
Get a distro running XFCE, slap the Chicago95 theme on it, and try to convince your friends that their computer updated to the latest version of Windows.
A rendition of everyone's favorite 1995 Microsoft operating system for Linux. - GitHub - grassmunk/Chicago95: A rendition of everyone's favorite 1995 Microsoft operating system for Linux.
About all they're good for is signage and maybe assist tasks with HA. You won't be able to drive a decent enough display to do normal desktop things for certain. Maybe use them as little seed devices or something.
Nah, they can definitely do a decent display, I've had a desktop running a stupidly fat web app (not mine) on those with 1440p at 60hz. And that stupid thing needed windows, which was even worse. Trying to do a second thing with windows + that stupid app? Waste of time, not going to happen, but the main app ran just fine as bloat on top of bloat.
But light desktop stuff they can do just fine, however that isn't what I want. A few ideas from the original: - Portable library (definitely going to happen, I'm installing now and going to build Bookworm on it) - Portable (not mobile) emulation station, may happen, toss some NES and Genesis games on it. May try that out tonight after the library build. - (not from the other thread) Portable kid distraction (basically boot to gcompris) - maybe, I'll have to see how well that works. Should only need opengl 2.1, but I think that chip supports 4.something, so should be good.
You must be mistaken. The sticks you mention have max out at 1080p, and with 2GB of mem, you're not going to be running any desktop for very long. The Atom chips and the memory limitations just don't make these useful candidates for anything with a DE.
The x5-Z8330 has 800 passmark points which is enough to run Arch with XFce without issues. 2 GB of RAM though is the sticky point. It is problematic with Debian/Mint as they consume about 800 MBs of RAM on a cold boot (don't even think of Fedora or Ubuntu that are dogs when it comes to RAM usage), but on Arch you can configure it to consume only 450 MB of RAM: files.mastodon.social/media_at… (here's my Arch/XFce with a BeOS theme using 585 MB of RAM with 3 apps open). That's a life saver on a 2 GB of RAM computer, because Youtube alone on Chrome can use up to 800 MB of RAM, while on Firefox goes up to 1.1 GB. Consider that 128 MB of RAM also goes to the integrated graphics card. But with other websites, or with a third party youtube front-end, or other apps, 2 GB can be enough (just make sure you give it a 4 GB swap file -- not zswap). Finally, make sure you use only a background color, not an image. Images, uncompressed in RAM, can use up to 80 MB of RAM if they are in high-res. A plain color takes kilobytes! Also, disable the BT service and any other service you don't use via XFce's startup utility. That one takes 45 MB alone, it's a dog... Load it only when you need it.
Running a 32 bit os might net you better idle. I run 32 bit debian on an ancient laptop and my idle is a bit lower, 300-400 mb. I'm also using openbox.
I run Volumio on one that's connected to my AV receiver. It integerates well into Home Assistant and can be used to listen to webradio and music streaming services (including your own). It can also play from its own storage.
I am actually quite impressed with mxlinux on there!
Edit: Oh, for the record the little hdmi extension cable (~6" or so) is super handy and what he was missing when he had it plugged into the back of that monitor. I might stick it into a video switch though.
I just bought one to use as a Magic Mirror dashboard. I can't think of any other real use for them other than as dashboards.
I like the Volumio idea though. You can set up a Music Assistant container and get a whole home audio setup without having to run a bunch of speaker wire. At my old place I had an Apple TV airplay movie audio into the kitchen so you wouldn't miss any dialogue while you ran into the kitchen.
Edit: Really specific hypothetical. If they're powerful enough to run Kodi, and you have a travel homelab with Jellyfin/Plex, I wonder if they could serve as a travel streaming stick 🤔
I always thought they were a cool idea, but never bought one. Idea-wise, IDK, use them for cluster-computing? I considered getting one as a retro gaming arcade...so maybe that?
Retro gaming I think is going to be good for one, cluster-wise I'd be better off with the old pi 3bs I have... somewhere.... I think in with the microcontroller bin (amidst of a pile of esp32s).
I've got a USB gamepad I picked up when radio shack was closing its stores, I think thats with the old consoles though (everything going back to n64, my NES, Genesis, and PS1 are long gone unfortunately), which is at my BIL's house as he is playing my old Wii and PS2. Which is now making me want to take the of Xbox shell and shove a PC in there for the living room, a good excuse to upgrade the living room PC... But a whole new project at the same time lol
Ah... forgot about them for a while, checking : last update from April "#58 - Dev Kits, Compute Packs, & 2025 Timeline" so in theory now they are on board certification. Good occasion to also check github.com/SimulaVR/Simula/com…
David Ellison, heir to the fortune of his father, Oracle founder Larry Ellison, is said to have been attracted to Weiss and The Free Press specifically for the outlet’s pro-Israel stance. Dylan Byers, who broke news of the FP sale for Puck, reported that Ellison was “smitten by Bari’s unwavering support of Israel and preoccupation with the rise of antisemitism—issues that are as near and dear to David’s father, Larry, as they are to Paramount’s outgoing owner.”
Facing blowback for minimizing the famine in Gaza, The Free Press responded by saying that critics of the article, including Drop Site, are “journalists who oppose actual journalism.”
Weiss added: “You’ll notice one important aspect about the uproar: No one is disputing the facts in our piece.”
Well, we are. The Free Press claims in its investigation to have looked at the cases of 12 Palestinian’s photographs, as well as the child, Muhammad Zakariya Ayyouba Al-Mutawaq who appeared prominently in a New York Times article—and whose story they questioned in a previous Free Press article. Yet instead of reporting on the 12 Palestinians they claimed to have looked into, the article in fact only addresses nine, or arguably ten, an inexplicable discrepancy, and doesn’t provide original reporting on any of the cases.
The Free Press Called Out "Incomplete" Reporting on Gaza's Starving Children. Here's the Complete Story.
Ryan Grim Oct 12, 2025
David Ellison, heir to the fortune of his father, Oracle founder Larry Ellison, is said to have been attracted to Weiss and The Free Press specifically for the outlet’s pro-Israel stance. Dylan Byers, who broke news of the FP sale for Puck, reported that Ellison was “smitten by Bari’s unwavering support of Israel and preoccupation with the rise of antisemitism—issues that are as near and dear to David’s father, Larry, as they are to Paramount’s outgoing owner.”
Facing blowback for minimizing the famine in Gaza, The Free Press responded by saying that critics of the article, including Drop Site, are “journalists who oppose actual journalism.”
Weiss added: “You’ll notice one important aspect about the uproar: No one is disputing the facts in our piece.”
Well, we are. The Free Press claims in its investigation to have looked at the cases of 12 Palestinian’s photographs, as well as the child, Muhammad Zakariya Ayyouba Al-Mutawaq who appeared prominently in a New York Times article—and whose story they questioned in a previous Free Press article. Yet instead of reporting on the 12 Palestinians they claimed to have looked into, the article in fact only addresses nine, or arguably ten, an inexplicable discrepancy, and doesn’t provide original reporting on any of the cases.
David Ellison, heir to the fortune of his father, Oracle founder Larry Ellison, is said to have been attracted to Weiss and The Free Press specifically for the outlet’s pro-Israel stance. Dylan Byers, who broke news of the FP sale for Puck, reported that Ellison was “smitten by Bari’s unwavering support of Israel and preoccupation with the rise of antisemitism—issues that are as near and dear to David’s father, Larry, as they are to Paramount’s outgoing owner.”
Facing blowback for minimizing the famine in Gaza, The Free Press responded by saying that critics of the article, including Drop Site, are “journalists who oppose actual journalism.”
Weiss added: “You’ll notice one important aspect about the uproar: No one is disputing the facts in our piece.”
Well, we are. The Free Press claims in its investigation to have looked at the cases of 12 Palestinian’s photographs, as well as the child, Muhammad Zakariya Ayyouba Al-Mutawaq who appeared prominently in a New York Times article—and whose story they questioned in a previous Free Press article. Yet instead of reporting on the 12 Palestinians they claimed to have looked into, the article in fact only addresses nine, or arguably ten, an inexplicable discrepancy, and doesn’t provide original reporting on any of the cases.
The Free Press Called Out "Incomplete" Reporting on Gaza's Starving Children. Here's the Complete Story.
Ryan Grim Oct 12, 2025
David Ellison, heir to the fortune of his father, Oracle founder Larry Ellison, is said to have been attracted to Weiss and The Free Press specifically for the outlet’s pro-Israel stance. Dylan Byers, who broke news of the FP sale for Puck, reported that Ellison was “smitten by Bari’s unwavering support of Israel and preoccupation with the rise of antisemitism—issues that are as near and dear to David’s father, Larry, as they are to Paramount’s outgoing owner.”
Facing blowback for minimizing the famine in Gaza, The Free Press responded by saying that critics of the article, including Drop Site, are “journalists who oppose actual journalism.”
Weiss added: “You’ll notice one important aspect about the uproar: No one is disputing the facts in our piece.”
Well, we are. The Free Press claims in its investigation to have looked at the cases of 12 Palestinian’s photographs, as well as the child, Muhammad Zakariya Ayyouba Al-Mutawaq who appeared prominently in a New York Times article—and whose story they questioned in a previous Free Press article. Yet instead of reporting on the 12 Palestinians they claimed to have looked into, the article in fact only addresses nine, or arguably ten, an inexplicable discrepancy, and doesn’t provide original reporting on any of the cases.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
David Ellison, heir to the fortune of his father, Oracle founder Larry Ellison, is said to have been attracted to Weiss and The Free Press specifically for the outlet’s pro-Israel stance. Dylan Byers, who broke news of the FP sale for Puck, reported that Ellison was “smitten by Bari’s unwavering support of Israel and preoccupation with the rise of antisemitism—issues that are as near and dear to David’s father, Larry, as they are to Paramount’s outgoing owner.”
Facing blowback for minimizing the famine in Gaza, The Free Press responded by saying that critics of the article, including Drop Site, are “journalists who oppose actual journalism.”
Weiss added: “You’ll notice one important aspect about the uproar: No one is disputing the facts in our piece.”
Well, we are. The Free Press claims in its investigation to have looked at the cases of 12 Palestinian’s photographs, as well as the child, Muhammad Zakariya Ayyouba Al-Mutawaq who appeared prominently in a New York Times article—and whose story they questioned in a previous Free Press article. Yet instead of reporting on the 12 Palestinians they claimed to have looked into, the article in fact only addresses nine, or arguably ten, an inexplicable discrepancy, and doesn’t provide original reporting on any of the cases.
The biggest child abuser in this law is the government. All they are doing is using up all the loop holes in the UNCRC and human rights to manipulate their way into their "ultimate truth".
The corpos and the government lick each others boots - it's a 2-way relationship. They care more about the abusers than the victims in this regard. Children is just a term designed to go against its populace, and more harm being done in the long run.
That could change, but you are probably right. I am the only person I know who thinks it is a civic duty to transition off facist media. Nobody else around me cares. I mean NOBODY. Not even the tech savvy folks I know.
Banning online anonymity tools like Tor won’t stop crime.
Prohibition has never been a deterrent to consumption. Laws and law enforcement do not prevent, they just prosecute. I do come down hard on the parental groups when it comes to the safety, security, and privacy of their children. Mandating laws that dole out heavy fines to parents for their unsupervised children's online and offline activities would seem to me to be a good point to deviate from. However, we legislate to the lowest common denominator, and this gives governments the inroads they crave to keep tabs on their citizenry.
What I would like to hear are some solutions that protect the children, keep the terrorists at bay, and still has room for individual privacy, anonymity, and security. I certainly don't want children to be involved with activities that will harm them. At the same time, I'd rather avoid a buccal cell cheek swab every time I want to see some flesh or engage in other adult only activities.
If your neighbor wanted to hear all your phone calls, just to make sure you're a safe neighbor to be around, people wouldn't tolerate it. So they certainly shouldn't tolerate the government wanting to see all your messages and what you're talking about.
The correct way to eliminate human trafficking and child abuse is capital controls. Bring the fucking bankers to heel. You don't have the credibility to talk like this while you work hand-in-glove with skinsuits like Jamie Dimon and the coterie of coin operated policymakers that calls itself western democracy. So the intention is not to use credibility, but something much quicker.
We USians often don't realize that the Guardian is a right wing publication. A frustrating number of people in US circles (especially liberals who don't know they aren't leftists) think anything European/UK is ideal and that conservatives don't have any influence there.
The fact that other publications are more right leaning than The Guardian doesn't make it left leaning. It's a liberal paper, supporting liberal positions and routinely expressing opposition to leftists like Corbyn. In my book, support for liberalism and opposition to leftism makes it a right wing publication.
Does anyone really believe it was ever about protecting the kids? I thought it was super obvious it's about mass surveillance. It's so they can link a database of *exactly who is saying what. And then do something evil af with that info, yeah? It's just being poorly framed as "protecting kids" so no one can object, then they look like they don't "care about kids". Even though there's so much proof it doesn't help kids. What would help kids is parents who are able to be with their kids, rather than have to work fingers to bone to just scrape by. They could do information packages for parents, informing them of the risks and how to mitigate, as has been done before. This empowers no one, even if you believe their whole diatribe.
Child abuse, terrorism, national security were always a good alibi for surveillance and control, while pedofiles, terrorists and criminals in the goverment, destroying the national security and basic rights, wishing us to eat cakes.
They are emphatically anti-nazi/anti-fash. If you check out their homepage, the footer has links to "Nazi Punks: Fuck Off" and Black Lives Matter. The favicon for the site is a LGBTQ+ pride flag.
I've read a lot of tech docs through the years. Hands down, this is my favorite.
I do not recommend installing their OS, unless you have time to kill and curiosity. 9front is completely useless. It's a programmer's toy; a sandbox to develop some OS build ideas.
I highly recommend you do that, rather than looking at anything that disagrees and asking "if my government lied to me about genocide in Palestine, the Gulf of Tonkin, and Vietnam war, what else may they be lying about, and why?”
Most people aren't denying the genocide in Palestine and many other atrocities committed by the western nations. We're just sick and tired of the people who deny the wrongdoings of China.
No, China is not commiting genocide. The best and most comprehensive resource I have seen so far is Qiao Collective's Xinjiang: A Resource and Report Compilation. Qiao Collective is explicitly pro-PRC, but this is an extremely comprehensive write-up of the entire background of the events, the timeline of reports, and real and fake claims.
Tourists do go to Xinjiang all the time as well. You can watch , though it obviously isn't going to be a comprehensive view of a complex situation like this. Even with all of the real complexities, though, nothing material measures up to claims of genocide.
Western governments have levied false allegations of genocide and slavery in Xinjiang Uyghur Autonomous Region. A closer look makes clear that the politicization of China’s anti-terrorism policies in Xinjiang is another front of the U.S.
Thanks for linking the UN Report - really horrific stuff:
Two-thirds of the twenty-six former detainees interviewed, reported having been subjected to treatment that would amount to torture and/or other forms of ill-treatment, either in VETC facilities themselves or in the context of processes of referral to VETC facilities. These claims of mistreatment took place either during interrogations or as a form of punishment for (alleged) wrongdoing. Their accounts included being beaten with batons, including electric batons while strapped in a so- called “tiger chair”; being subjected to interrogation with water being poured in their faces; prolonged solitary confinement; and being forced to sit motionless on small stools for prolonged periods of time.
Some also spoke of various forms of sexual violence, including some instances of rape, affecting mainly women. These accounts included having been forced by guards to perform oral sex in the context of an interrogation and various forms of sexual humiliation, including forced nudity. The accounts similarly described the way in which rapes took place outside the dormitories, in separate rooms without cameras. In addition, several women recounted being subject to invasive gynaecological examinations, including one woman who described this taking place in a group setting which “made old women ashamed and young girls cry”, because they did not understand what was happening. The Government has firmly denied these claims, often through personal or gendered attacks against the women who have publicly reported these allegations.
The extent of arbitrary and discriminatory detention of members of Uyghur and other predominantly Muslim groups, pursuant to law and policy, in context of restrictions and deprivation more generally of fundamental rights enjoyed individually and collectively, may constitute international crimes, in particular crimes against humanity.
You're right it's incorrect to call it a genocide but I'm glad you at least agree that "rape", "torture", "deprivation of fundamental rights" and probable "crimes against humanity" are being committed in the "re-education" camps against non-Han ethnic groups with the government being at the very least complicit by denying any wrongdoing - so it's good to know you don't blindly believe the CCP to be a benevolent force for good but can recognize the harm they've already caused to Uyghurs, Kazakhs, Kyrgyz, Uzbeks and Huis in Xinjiang.
I encourage you to read China's response, and Qiao Collective's resources. I said the UN report is the best source on the allegations, not that it's a fully correct and verified document. The accusations are high, yes, which is why both sides of the argument need to be listened to. You wouldn't refuse to listen to evidence brought by defendents, would you?
Please prove yourself by walking in traditional uyghur clothing with an uyghur flag in a city like kashgar and live stream the event. Prove how accepting the general public is and how the police will treat you respectfully.
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
Many people said the same of Berlin, Hamburg, and other German cities while Jews were kept as slaves in factories and trained out to camps to be gassed. A nice looking city says nothing about the treatment of minorities. In fact many of the "nicest cities" in the world were built on the blood and bones of indigenous inhabitants.
Nobody had pocket video cameras during ww2 or sattelites that can take high definition photos of any patch of dirt on earth, with current tech it would be extremely easy to get a shitload of incontrovertible physical evidence from countless angles, and yet after years of accusations we have none
Nothing in this even comes close to proving a genocide, they can't even conclusively prove that the structures in question are detention facilites lol, try harder patriot
To clarify, do I think the Uigers are being massacred at population scale? I don't know. Do I think they are having their culture forceably erradicated and medical population control forced on them, and intentional han population being moved into the region to make them into a population majority to take away any regional political or social influence the Uigers might have? Absolutely.
Yes, don't be surprised when the locals rightfully get pissed at a white person appropriating their culture in their homeland for internet clout.
If you're talking about the actual people of that cultutre doing it, there are tons on both RedNote and YouTube if you search in Chinese or Uyghur.
Actually, most of these comments seem to stem from people not finding videos like these when searching in English and therefore automatically assuming they don't exist. Even though they do. And that's assuming you searched at all in any language which most of you haven't. Surprise surprise, most Uyghurs in Xinjiang don't speak or upload videos in English.
No actually the complete absence of evidence for the uighur genocide compared to the overwhelming body of evidence for the palestinian genocide makes for an extremely strong argument that the former is fictional
Big claims require big evidence, especially when they're coming from the US about alleged human rights violations that coincidentally happen to justify our preexisting foreign policy goals
Again, not the argument. The argument is "I didn't see this with my own eyes so it's not happening". That's a dumb argument. People use that to justify all sorts of things on all sides. Climate change denial. Flat earthers. People who think the CIA never did anything bad in south America. Etc.
If you're arguing against me you're arguing for those people because my only claim is that those people suck and the person I responded to was acting like one of those people.
The argument is "you have no fucking evidence, an obvious foreign policy motive for lying, and a long & extremely well documented history of lying" and you know it you spineless sack of shit
I have spoken to Uyghurs in Xinjiang and I have engaged on Xitter with their government-in-exile in Washington D.C. and I know who I stand with on this issue. I hope to see Xinjiang with my own eyes someday soon. The Taklamayan Desert is too captivating, even in pictures. I must hold its grains in my hand. Soon. The sands are calling @balance8873@lemmy.myserv.one. The sands are calling.
That having been said I don't actually know why you're responding to me. It sounds like you have some kind of actual evidence backing up your beliefs (whatever those beliefs may be) which means you don't fall into the category of stupid we were discussing.
The fact is there is hard evidence for a genocide in one case, and not in the other. If you have other reasons to believe the latter is still happening, then make them known. Otherwise it is no more plausible than telling elephants may dwell on the moon, despite no sightings.
I read and I believe I understood your points. The problem is no one actually used the argument you are trying to oppose. You interpreted that comment too literally. Not once they said that no seen corpses meant no deaths. Had you not assumed so wildly and acted so bluntly, you'd be understood better. You can block me If this is annoying you.
Shut the fuck up. You're the reason why people hate the idea of socialism/communism because they think that those people are all like you: propagandist cunts.
I encourage you to look at the evidence presented in this thread by everyone here, including the sources. There's good reason the leftists tend to have well-documented, well-sourced cases and counter-examples, while professional propagandists like Adrian Zenz feature prominently in western sources.
"Evidence" from PRC's propaganda outlet. Nice sources. Fucking Qiao Collective, holy shit that is just so dumb. You people really need to get your heads out of your asses and face reality.
As opposed to western propaganda outlets? Xinjiang and the PRC's treatment of the Uyghur people is one of the single most politicized aspects of CPC policy, why would you not read what pro-PRC groups have to say? Do you only listen to the side accusing defendants, and not the defendants?
By the way, you can GO TO XINJIANG as a tourist. You can talk to the people there. You can experience their culture for yourself. How's the Freedom Floatila doing in comparison?
Hell, go on RedNote, an explicitly PRC centric app with state control and cEnSoRsHiP and you'll see Uyghurs in and outside Xinjiang proudly sharing their culture. Wonder how many Palestinians are allowed on Israeli social media.
Also, Uyghurs can, get this, leave the country that's "genociding" them and many do every year for the Haj pilgrimage. Can Palestinians do the same? Uyghurs can also, get this, go back to the same home and possessions they had before they left without worrying about an Israeli or Han Chinese family moving in while they were gone.
Also also, look up "minority status" in China and how mixed race Han-Uyghur people usually identify with their Uyghur heritage on official papers because it opens up more social support programs like scholarships. They (and every other minority) were also automatically exempt from the One Child Policy which is a pretty stupid move if they're trying to get rid of them. You literally get more perks from the government if you're not Han, and this is supported by both the majority and minority ethnicities in China. What does Palestinian status in Israel get you again, I forget.
Every single "evidence" I've ever seen of this genocide ended up as hoax (remember the meat truck?), so I think it's pretty safe to say it isn't a thing.
I mean genocide doesnt concern buildings. There is a war in Gaza and not in Xinjiang. And there is many stages in Genocide. Palestinians are being killed nonindustrially and being displaced. Advanced, but not maxed-out genocide. Claims about Xinjiang say they are being forcefully sterilzed, and cultural leaders are being detained and tortured. I believe victims first and foremost.
You owe it to yourself to actually listen to the Uyghur people in Xinjiang, rather than what western news outlets and propagandists like Adrian Zenz espouse.
Dozens of bodies continue to be recovered every day in Gaza since the ceasefire went into effect on Friday, including 60 bodies in the past 24 hours. Roughly 500,000 Palestinians return to northern Gaza amid widespread destruction. Hundreds of Palestinian captives freed from Israeli detention arrive in Gaza and the occupied West Bank, or are exiled to Egypt as part of the ceasefire deal. Hamas releases all 20 remaining living Israeli captives. In the wake of Israel’s partial withdrawal, armed Palestinian groups accused of collaborating with Israel clash with security forces and resistance fighters in Gaza City. President Donald Trump addresses the Israeli Knesset to standing ovations then heads to Egypt for “Peace Summit” with world leaders. The American government shutdown entered its third week, leaving 750,000 workers furloughed and essential services paused. New lawsuit alleges postal worker Kingsley Fifi Bimpong died under police neglect in a Minnesota jail. Fighting on the Afghanistan-Pakistan border intensifies after Pakistani strikes putatively targeting Tehreek-e-Taliban fighters inside Afghanistan. An RSF strike in Sudan’s El-Fasher kills at least 60.
All living Israeli captives and hundreds of Palestinians released; Trump addresses Knesset
Dozens of bodies continue to be recovered every day in Gaza since the ceasefire went into effect on Friday, including 60 bodies in the past 24 hours. Roughly 500,000 Palestinians return to northern Gaza amid widespread destruction. Hundreds of Palestinian captives freed from Israeli detention arrive in Gaza and the occupied West Bank, or are exiled to Egypt as part of the ceasefire deal. Hamas releases all 20 remaining living Israeli captives. In the wake of Israel’s partial withdrawal, armed Palestinian groups accused of collaborating with Israel clash with security forces and resistance fighters in Gaza City. President Donald Trump addresses the Israeli Knesset to standing ovations then heads to Egypt for “Peace Summit” with world leaders. The American government shutdown entered its third week, leaving 750,000 workers furloughed and essential services paused. New lawsuit alleges postal worker Kingsley Fifi Bimpong died under police neglect in a Minnesota jail. Fighting on the Afghanistan-Pakistan border intensifies after Pakistani strikes putatively targeting Tehreek-e-Taliban fighters inside Afghanistan. An RSF strike in Sudan’s El-Fasher kills at least 60.
A bit on information from the DPRK I wrote earlier:
The problem with reporting on the DPRK is that information is extremely limited on what is actually going on there. Most reports come from defectors, and said defectors are notoriously dubious in their accounts, something the WikiPedia page on Media Coverage of North Korea spells out quite clearly. These defectors are also held in confined cells for around 6 months before being released to the public in the ROK, in... unkind conditions, and pressured into divulging information. Additionally, defectors are paid for giving testemonials, and these testimonials are paid more the more severe they are. From the Wiki page:
Felix Abt, a Swiss businessman who lived in the DPRK, argues that defectors are inherently biased. He says that 70 percent of defectors in South Korea are unemployed, and selling sensationalist stories is a way for them to make a living.
Side note: there is a great documentary on the treatment of DPRK defectors titled Loyal Citizens of Pyongyang in Seoul, which interviews DPRK defectors and laywers legally defending them, if you're curious.
In fact, the report is a propaganda piece likely geared at shoring up the rule of Kim Jong Eun, North Korea's young and relatively new leader, said Sung-Yoon Lee, a professor of Korean studies at the Fletcher School of Law and Diplomacy at Tufts University. Most likely, North Koreans don't take the report literally, Lee told LiveScience.
"It's more symbolic," Lee said, adding, "My take is North Koreans don't believe all of that, but they bring certain symbolic value to celebrating your own identify, maybe even notions of cultural exceptionalism and superiority. It boosts morale."
Sadly, some people end up using outlandish media stories as an "acceptable outlet" for racism. By accepting uncritically narratives about "barbaric Koreans" pushing trains, eating rats, etc, it serves as a "get out of jail free" card for racists to freely agree with narratives devoid of real evidence.
It's important to recognize that a large part of why the DPRK appears to be insular is because of UN-imposed sanctions, helmed by the US Empire. It is difficult to get accurate information on the DPRK, but not impossible; Russia, China, and Cuba all have frequent interactions and student exchanges, trade such as in the Rason special economic zone, etc, and there are videos released onto the broader internet from this.
Finally, it's more unlikely than ever that the DPRK will collapse. The economy was estimated by the Bank of Korea (an ROK bank) to have grown by 3.7% in 2024, thanks to increased trade with Russia. The harshest period for the DPRK, the Arduous March, was in the 90s, and the government did not collapse then. That was the era of mass statvation thanks to the dissolution of the USSR and horrible weather disaster that made the already difficult agricultural climate of northern Korea even worse. Nowadays food is far more stable and the economy is growing, collapse is highly unlikely.
What I think is more likely is that these trends will continue. As the US Empire's influence wanes, the DPRK will increase trade and interaction with the world, increasing accurate information and helping grow their economy, perhaps even enabling some form of reunification with the ROK. The US Empire leaving the peninsula is the number 1 most important task for reunification, so this is increasingly likely as the US Empire becomes untenable.
It says a lot about a country when its average citizen can’t leave to see the rest of the world or tell the rest of the world how great it is to live there.
What it says is that they were the victims of one of the most extensive bombing campaigns in history that reduced their country to rubble, then had the southern half of their country occupied by the US military who are still there to this day. We've been sitting on their doorstep blocking them from normal trade and threatening to invade constantly for most of a century, closing their borders is a completely reasonable response.
frongt
in reply to clif • • •clif
in reply to frongt • • •O, I fully intend to. Just wanted to ask for opinions who have done it or have tried other things while I'm sitting here waiting for an appointment.
Plus content... Lemmy... Engagement. If nobody posts then there's nothing here
MimicJar
in reply to clif • • •paequ2
in reply to clif • • •clif
in reply to paequ2 • • •whimsy
in reply to clif • • •dragonfly4933
in reply to clif • • •clif
in reply to dragonfly4933 • • •SphericalCow
in reply to clif • • •If you run a system that uses dracut to manage its initramfs, then github.com/gsauthof/dracut-ssh… might be of use to you.
I have it setup on a server running Fedora and can’t complain. When the system reboots and plymouth shows the LUKS password prompt a ssh server is started in the background as well - so I can unlock the server either using keyboard or connect via SSH.
When rebuilding the initramfs (eg. for a new kernel version) the ssh server is installed and setup automatically so I don’t really have to worry about anything after the initial setup.
GitHub - gsauthof/dracut-sshd: Provide SSH access to initramfs early user space on Fedora and other systems that use Dracut
GitHubmodeh
in reply to SphericalCow • • •+1
This is my setup as well, having a headless Fedora server, being able to unlock over SSH makes things a breeze.
just_another_person
in reply to clif • • •Clevis with TPM+Tang is the most secure you're going to get as far as automated unlocking goes.
docs.redhat.com/en/documentati…
Dropbear is still a thing, but going to be more problematic.
Chapter 10. Configuring automated unlocking of encrypted volumes by using policy-based decryption | Security hardening | Red Hat Enterprise Linux | 8 | Red Hat Documentation
docs.redhat.comdata1701d (He/Him)
in reply to just_another_person • • •clif
in reply to just_another_person • • •If I'm reading the docs correctly, Clevis can rely on a separate Tang server for retrieving the decryption key, right? So in that scenario I'd need to have another machine for Tang that can also auto-boot without entering a boot/LUKS password. Otherwise, if both machines (server+clevis and Tang server) were in the same room and restarted due to power loss, neither would be able to boot if both were encrypted... or did I misunderstand something important?
And I don't think I actually want "automatic" unlocking. I just want to be perform the unlock (enter LUKS password) remotely. I realize that comes with manual intervention (entering the password remotely) but I'm okay with that. I should probably have clarified that by "home server" I mean a machine the serves nice to have stuff, nothing mission critical. Plus I'm really the only one who uses it currently so I'll notice it's down when something doesn't work and can then initiate the remote unlock/boot : D
Clevis is interesting but I don't think it matches my specific situation. Glad I know about it now though, thanks for the info.
GitHub - latchset/clevis: Automated Encryption Framework
GitHubjust_another_person
in reply to clif • • •If you just want to remotely interact with LUKS to unlock it, I think dropbear-initramfs module is your only option.
Clevis+Tang is essentially the same thing but automatic, and yes it does require a separate machine and network access to that machine.
clif
in reply to just_another_person • • •sznowicki
in reply to clif • • •I do LUKS over https right now. The secret is to pass keyfile for decrypt as sh script that calls curl and echos the passkey back.
nowicki.io/self-hosting-lvm-ra…
LVM RAID1, LUKS, encrypted with key over FTP
nowicki.ioMark
in reply to clif • • •paequ2
in reply to Mark • • •Mark
in reply to paequ2 • • •Jess
in reply to clif • • •paequ2
in reply to clif • • •Same boat. I'm currently testing some unlock stuff out. I just got USB unlocks to work for Debian by following this: tqdev.com/2022-luks-with-usb-u…
I load a USB with a keyfile, then read the keyfile during boot. If I don't have the USB plugged in, I fallback to entering a passphrase. I have multiple LUKS encrypted disks and I don't want to type out a long passphrase a bunch of times.
I briefly encountered dropbear during my research... but ended up following the USB path because it kinda seemed a little easier to setup. 🤷
Anyone have any thoughts on USB vs dropbear unlocks?
LUKS with USB unlock
tqdev.comclif
in reply to paequ2 • • •I'd imagine that if you have physical access and don't mind plugging in a USB then that's the easier route.
My personal goal is to be able to unlock it remotely in two main scenarios :
1. I'm lazy and don't want to have to awkwardly fumble at plugging in something. So, SSH to it from the same room and unlock it from my desktop.
2. Server got rebooted while I'm away from home but I would really like it to be up and running again for something I need but I don't have physical access at the time.
Both of those situations lean towards a remote unlock with no USB. The first one is absolutely doable because I have local access and could plug a device in, it's just awkward. On the second, physical access is impossible so it must be done remotely.
I mentioned it in another comment but the remote unlock while away from home presents extra challenges for me because I access my server externally via Tailscale. Since Tailscale isn't available at boot (pre-decrypt), then I'll have to tailnet+ssh to another machine on the LAN (that doesn't require a boot password/unlock) and then SSH from that machine to the server to enter the LUKS password to allow boot to continue. Sounds feasible, though perhaps a little clunky. That's my current plan and hoping to try it out this weekend if time permits.
paequ2
in reply to clif • • •clif
in reply to paequ2 • • •Just one... For now 😀
It's a Lenovo Tiny refurb and came with a 1TB NVMe which is plenty for playing around but I'll have to expand if I move my Jellyfin instance to it.
paequ2
in reply to clif • • •Ah, nice ok. Your post got me to look at dropbear a little more closely, but since I got a bunch of disks, I think USB unlock makes more sense in my setup. I'm using a keyfile on the USB to unlock a bunch of disks on boot. But if I only had one, then dropbear would be more doable for me.
Neat! Interesting post!
Lemmchen
in reply to clif • • •SirMaple__
in reply to clif • • •On my Debian systems I use mandos to unlock LUKS during boot. All done over WireGuard which is loaded inside initramfs.
recompile.se/mandos
github.com/r-pufky/wireguard-i…
GitHub - r-pufky/wireguard-initramfs: Use dropbear over wireguard.
GitHubTMP_NKcYUEoM7kXg4qYe
in reply to SirMaple__ • • •Cool! I might install something like this someday.
Do you use secure boot? What device is your server? I would use my laptop for that, but not sure if that's how it should work.
clif
in reply to SirMaple__ • • •This is interesting, another one I hadn't heard of yet. And, the server is running Debian : )
I enjoy the intro too :
PoisonedPrisonPanda
in reply to clif • • •asking out of curiousity: what benefits does encryption have here?
as long the server runs everything is decrypted right?
so you are encrypting for the case when someone actively steals your hardware?
edit: stealing as in taking away.
but this would mean accessing during runtime is nonetheless possible in a decrypted way?
glitching
in reply to PoisonedPrisonPanda • • •shredding those things took ages (4 TB drives). lesson learned, new drives are btrfs + LUKS that gets unlocked via key file. so when the time comes to sell those, I won't bother with shredding, just sell them as is.PoisonedPrisonPanda
in reply to glitching • • •glitching
in reply to PoisonedPrisonPanda • • •PoisonedPrisonPanda
in reply to glitching • • •yah thats what i meant.
in a way.
SphericalCow
in reply to PoisonedPrisonPanda • • •In addition to drives being safer to replace and sell, encryption at rest should also protect against theft. So the scenario being someone taking the server or its drives.
At least for me encrypting the drives gives a bit more peace of mind seeing as credentials for various accounts aren’t easily retrieved from the disks.
But yeah, this does not protect from data being read at runtime
PoisonedPrisonPanda
in reply to SphericalCow • • •luks will also prevent or uphold the encryption if e.g. the power is pulled?
+this means that if someone breaks in, cuts the cables during running decrypted the data is still safe?
IanTwenty
in reply to PoisonedPrisonPanda • • •PoisonedPrisonPanda
in reply to IanTwenty • • •clif
in reply to SphericalCow • • •IanTwenty
in reply to clif • • •Yes it's not too much bother to set this up, it can be put into ansible and once working I've not had to touch it again. Here's another dracut tool using dropbear that works well and has decent instructions on setup: dracut-crypt-ssh
GitHub - dracut-crypt-ssh/dracut-crypt-ssh: dracut initramfs module to start dropbear sshd during boot to unlock the root filesystem with the (cryptsetup) LUKS passphrase remotely
GitHubclif
in reply to IanTwenty • • •nucleative
in reply to clif • • •Interesting, I want to try some of these solutions.
I set up luks on some of my selfhosted virtualbox instances to protect against physical theft, but power issues cause all too frequent restarts that are a serious pain to physically access.
An ssh call in a script that could be remotely used to unlock and complete the boot would be so handy.
Björn
in reply to clif • • •I use dropbear in initramfs on my Debian server. Works great.
At home I have a cheap networked KVM because I also sometimes have hardware problems preventing a boot. Works really well. Cost 100 € and uses open source software. It's called GL.iNet KVM.
clif
in reply to Björn • • •Good to hear. This will be going on a Debian server too.
I just set up tailscale on the RPi that controls my printer so I've got a jump host on the LAN now... Just need to make time to setup dropbear (and keys) on the server.