furrowsofar

joined 2 years ago
[–] furrowsofar 2 points 8 hours ago

I assume it has something to do with how secure boot, the TPM, and Bitlocker interact.

[–] furrowsofar 2 points 11 hours ago

I get it. Credential storage and recovery is a big issue. People vary in skill, ability to keep track of keys or remember how to use them, and they may not have a password manager, safe deposite box, or other locked storage to store them in.

[–] furrowsofar 2 points 14 hours ago* (last edited 13 hours ago)

By the way, I would not consider logging in via ssh and running a bash script to be insecure in general.

However taking uncontrolled data from outside of that session and injecting it could well be insecure as the data is probably crossing an important security boundary.

[–] furrowsofar 2 points 14 hours ago* (last edited 14 hours ago)

I was more thinking of the CGI script vunerability that showed up a few years ago. In that case data came from the web into the shell environment uncontrolled. So uncontrolled data processing where the input data crosses security boundaries is an issue kind of like a lot of the SQL injection attacks.

Another issue with the shell is that all proccesses on the system typically see all command line arguments. This includes any commands the shell script runs. So never specify things like keys or PII etc as command line arguments.

Then there is the general robustness issue. Shell scripts easy to write to run in a known environment and known inputs. Difficult to make general. So for fixed environment and known and controlled inputs that do not cross security boundaries probaby fine. Not that, probablay a big issue.

By the way, I love bash and shell scripts.

[–] furrowsofar 2 points 14 hours ago (2 children)

Bittlocker is a pain. Simply booting a maintainance disk requied me to use the recovery codes to get back into windows.

[–] furrowsofar 1 points 14 hours ago (2 children)

Give her and your personal representatives the keys or access to the keys. Problem solved.

Same problem as you passwords and password manager.

[–] furrowsofar 2 points 14 hours ago

Servers are harder and not preconfigued if you want unattended boot. The first key has to come from somewhere typically to unlock the root partition. The other keys can then be stored on that encrypted partition and are typically referenced by crypttab for auto unlock.

The first key can come from anywhere you want such as attached media like a flash drive, a over the network say via ssh, from a key server, or from the TPM. Or you could remotely connect to the console. There are bunch of how tos out there. It amounts to customizing the boot process and the initramfs. It is not simple. What makes sense depends on the threat model.

[–] furrowsofar 1 points 15 hours ago* (last edited 13 hours ago)

Disk encryption does not impact file sharing over the network.

Sure if you sharing by a USB portable drive you have to unlock and lock it every time you use it. That is separate thing though.

The bigger issues of encryption are one should have a good backup and recovery plan both for media and for the keys. One has to consider legacy planning too. How do your personal representatives access.

[–] furrowsofar 1 points 15 hours ago (1 children)

Your recovery problem was a backup issue not an encryption issue. Consider addressing the backup issue.

[–] furrowsofar 3 points 15 hours ago* (last edited 15 hours ago)

Android uses verified boot then encrypts the various profiles and the new private space seprately. This is how my GrapheneOS phone works.

Linux has a bunch of options. Ubuntu use to suggest per user encryption by ecryptfs but has since gone to partition based encryption via dm-crypt/LUKS. I still use either or both depending though ecryptfs seems depricated/discontinued and on the next upgrade I may discontinue.

Linux can support vaults too. Just locking certain folders. Encfs, and gocryptfs can do this for example. I use encfs though perhaps gocryptfs is a better choice these days. One can also use partition based solutions like dm-crypfs/LUKS or maybe even veracrypt too.

[–] furrowsofar 6 points 15 hours ago (2 children)

My understanding is Russian inflation is much higher. In the 20% range. So be skeptical regarding the above numbers.

[–] furrowsofar 3 points 15 hours ago

Can you just forward the email? Basically use it as a mail drop.

 

Well I just replaced my aging LG G6 with a new Google Pixel 8a running GrapheneOS. The G6 was based on Android 9 which was initially released in August 2018, and my last update was January 2019. The big issue, after 6 years since OS initial release, apps are starting to not support Android 9. Add to that, my USB-C plug was getting questionable in terms of retaining charging cables and my fingerprint reader has not worked for years.

So how to replace the G6? Well I choose a new Google Pixel 8a and GrapheneOS. The Google Pixel is one of the better supported hardware devices in the after market ROM landscape and GrapheneOS seems to be one of the most popular ROMs.

It took me about a week to do the transition. Lot of that was just normal when moving everything to a new phone and not using the vendors automatic tools. The actual initial setup and flashing though was pretty straight forward. It was a bit emotionally difficult to take new $400 hardware and then just simply re-flash it risking say bricking. This turned out to be a non-issue.

Benefits I see from doing this:

  • Lack of Cruft. The lack of all the vendor loaded cruft was very nice. My old G6 has about 17 apps that I could never really delete because they were flashed into the ROM. Many of them fairly large Google suite apps.
  • Profiles. The new phone can fully use user and work profiles, plus with Android 15 it has the Private Space feature. GrapheneOS also supports up to 31 user profiles, not the 4 supported by most distributions. I actually use the Private Space to contain my Google Play Services and Google Play Apps and otherwise just the owner profile. Might have been better to look at some of the other options, not sure.
  • Storage Scopes are really useful. One can restrict App access to only certain folders. I have already used that a few times, probably more in the future.
  • Backup. GrapheneOS allows one to do App backups to your own media or cloud storage. For stock systems normally only Google Drive is allowed, which I would never use.
  • Sandboxed Google Play. I like the idea of sandboxing Google play. Presumably it should be more compatible then MicroG and some Apps require Google play. Interestingly the number that do seems fairly small. I actually further placed all my Play Services related stuff in a Private Space so I know what apps can actually use it.
  • Device Integrity Check. Verified boot and some other device integrity checks are properly supported and so many apps that required them should run, though not all. This is not always the case with third party ROMs.
  • Wifi Calling and Messaging seems more stable then my old G6. Maybe just the difference between Android 9 and 15.
  • Updates should be supported for a full 7 years from initial device release which as of late 2024 is about another 6.5 years. My original G6 had about 1 year of updates.
  • Hardening. Graphene has a bunch of hardening features not in typical distributions. Storage Scopes and really good Profile support are a couple I've mentioned, but there are many others.

One question that took me a while to consider is where to get Apps from. There are pros and cons and a lot of discussions about this. In the end, I used the GrapheneOS App Store, F-Droid, Accrescent, Obtanium, and the Aurora Store in that order for my owner profile, then installed sandboxed Google Play Services and the Google Play app in my Private Space.

As of now my limited experience with GrapheneOS has all been positive. The one App that I have had issues with is the UPS app for some reason. For that I'll just use their website for now. Not sure if the UPS app can be made to run or not. My understanding too is that Google Wallet may not fully function though I have not tried it and have never used it before anyway.

If your interested in GraphneneOS and have any specific questions, feel free to ask. All the best.

76
Vote! (self.politics)
submitted 2 months ago by furrowsofar to c/politics
 

Vote. Need I say more.

36
submitted 5 months ago* (last edited 5 months ago) by furrowsofar to c/technology
 

I need to change ISPs and need to find a new email provider. This time I want to move to my own domain which I purchased through Namecheap and I do not want to use another ISP's email system nor do I want to use Google, or Microsoft since I am Linux (and Android too) based. I would like this to be US based or at least have a strong US presence so obvious choices like Proton Mail, Mailfence, and Mailbox.org are out. I would prefer it interoperate well with FOSS software too, I use Thunderbird and K-9 Mail for example. Also so want them to be trustworthy, have good security, and have good OpSec with respect to their their servers and service.

After looking I find three I am considering and they are quite different:

  • Fastmail. Long history. No PGP support but they do have their own domains one can use also.
  • Namecheap Private Email. Uses Ox App Suite, may support PGP, and quite new. I think you have to have your own domain (not sure).
  • Forward Email (forwardemail.net). A forwarder with IMAP support. You supply the webmail if you want webmail, but otherwise it should work fine with IMAP and normal clients.

So questions:

  • Any thoughts and experience, pros and cons with the above 3.
  • Other better ideas.

So thoughts? Thanks.

11
submitted 9 months ago* (last edited 9 months ago) by furrowsofar to c/finance
 

Well I finished my taxes this year and they are finally accepted. Every year, we look at the market and the issues and decide on what provider to use. So here is a summary of our experience. Happy to hear your experiences too.

Over the years I have used TaxCut/H&R Block, TaxAct, FreeTaxUSA, and now this year OLT. They all have done the job, but they have all had issues too. I left the PC version of TaxCut/H&R Block (often considered the #2 software out there) in 2003 primarily because I wanted to move to the Web and use Linux. It was also a huge cost savings at the time. My last H&R Block return was $61.30, and TaxAct was $17.90 in 2003. We used TaxAct (maybe the #4 tax provider, and #3 provider in the high-end market) for many years, but their price hikes over the years were way beyond simple inflation and sanity. By 2020, our last return cost $134.90. They also had issues with calculating underpayment penalties so we sometimes payed penalties when we did not have to. If they had just followed inflation that $17.90 in today's dollars would be $30.16. So I strongly believe that paying more then $30 regardless of how complex your taxes are is a rippoff. So in 2021 we moved to FreeTaxUSA (FTU) which was $21.98. As far as I know they are the #3 tax provider and the #1 value player. We actually like them quite a lot. The main issue we found was their treatment of MN Exempt income from mutual funds is a bit suspect though it can be worked around. The other issue we had was particular to this year. Turns out that we needed K1 support with certain boxes and codes, and the state part of that which for us is MN KF. FTU just could not do it. So we tried OLT. The cost of OLT was $15.90. What I really appreciate about OLT is support of a wider range of filing situations for a price under $30.00. Also like their lack of games including no price tiers based on your return, and being able to see your whole return before paying. What I am less sure of is thier MN state returns. My experience is that you may have to know what your doing and know to manually enter certain things, and manually override others for MN State returns. I had no particular issues with Federal though. So it seems like OLT is good for more complex returns for people that know what they are doing. Overall I liked OLT because of many added capabilities and I do hopefully know what I am doing.

I'll close with the list of tax providers I personally considered in the order of decreasing market share based on relative web traffic: TurboTax (60%), H&R Block (23%), FreeTaxUSA(7.4%), TaxAct (6.4%), TaxSlayer (2.3%), OLT (0.59%), 1040 dot com (0.48%). I did not seriously consider CashApp Taxes, FileYourTaxes, 1040Now, eFile Express, IRS Free Fillable Forms, or Sprintax for various reasons. I also did not consider TaxHawk or Express1040 or consider them in my web traffic estimates as they are from the same company as FreeTaxUSA which is more well known. I wanted a provider with fairly good support, that had some popularity, had a reasonable reputation, could file taxes of reasonable complexity, was focused on US residents, is web based and can use with Linux and Firefox, and could file my state return. I also wanted a provider for under $30 which left only FreeTaxUSA, OLT, and 1040 dot com on the list.

Anyway, hope someone finds this somewhat interesting or useful. Best to you all.

 

I have one mutual fund where cash dividends (there were no short gains this year) plus Box 7 (Foreign Tax Paid) is not equal to Box 1a (Ordinary Dividends). I have never seen such a thing before. Talked with the mutual fund company and they say it is correct. They claim in this case it includes and "interest adjustment" as well so that Box 1a = cash dividends and short term gains + foreign taxes + interest adjustment.

What exactly is this interest adjustment. I'd like to know for two reasons. One is an accounting one for my accounting program, and the other is tax and anything I should know about it for tax purposes.

Maybe I am just confused but if it appears as a Ordinary Dividend I would think it would it would either mean I get some value for it be it a pass through tax credit (like Foreign Tax paid), a basis change (like a reinvestment), or maybe something that has accrued (something earned but not yet paid). As it stands, it seems like I am paying tax on something I get no benefit from so it kind of blows my mind.

So I am confused. What is this thing. The fund is T. Rowe Price International Stock.

Thanks.

15
submitted 10 months ago* (last edited 10 months ago) by furrowsofar to c/finance
 

Any ideas for alternative US tax forums or discussion boards similar to say Reddit Tax? Ideas?

6
submitted 10 months ago* (last edited 10 months ago) by furrowsofar to c/finance
 

Wondering if anyone here has used and what their experience has been. They do not appear in the lists of commonly hyped providers most of the time.

Normally I use FreeTaxUSA, but this year after entering most everything I found out it did not handle Estate state pass-through withholding.

So I spent yesterday on OLT entering everything again. They seem to handle more stuff at the cost of more complexity. Anyway got it all in this time. Still waiting for some final source documents but may file with OLT this year.

Anyway, wondering if anyone has done a full prep and filing with them and their experience. Thanks.

21
submitted 11 months ago* (last edited 11 months ago) by furrowsofar to c/politics
 

Does anyone have thoughts or experience with the fundraising site: https://app.oath.vote .

The article talks about it but I have not tried.

15
submitted 1 year ago by furrowsofar to c/chat
 

Anyone having issues with Jerboa on Beehaw today? Mine just opens and crashes. Did the clear cashe and storage thing. No effect. Have not tried reinstall.

11
submitted 1 year ago* (last edited 1 year ago) by furrowsofar to c/foss
 

I have been noticing that Google Play is overrun with adware, trialware, and freemium kinds of apps. Really hard to find FOSS and truly free apps.

Curious about best strategies to sort though Google Pay. I typically start with F-Droid and AlternativeTo to find apps then try to find them on Play.

Ideas?

12
submitted 1 year ago* (last edited 1 year ago) by furrowsofar to c/foss
 

I've been looking at options for controlling my Ubuntu Media Center computer from Android. Mainly Mouse, but Keyboard is good too. Looked at a lot of stuff but the most interesting ones were:

So in short I found KDE Connect was the most obvious but I really liked how XMouse worked in terms of ease of setup and simplicity. Frankly probably would have used it if it was in Play too.

I was thinking that BlueTooth would be better and more universal. The issue I found was FOSS apps seem to be missing and I could never get the one freemium app I found to actually work. This seems to be an area that needs a good FOSS alternative that actually works. Let me know if you have any idea of other options OR why I loose the data stream somewhere between the bluetooth stack and the Linux input subsystem.

view more: next ›