Share your projects

[Djoga'Ro]

So potentially you boot up a corrupted system and with that decrypt your sensitive data or log into sensitive accounts?

 

[netcat]

by encrypting your ~ you protect against someone getting physical access to your drive. ok. ultra powerful mini computers can be left on buses. but if someone compromises your account won't they be able to read your data?

 

[levi]

Encryption doesn't stop you getting hacked. The only way it can is if you don't decrypt it most times you boot the computer. I rely on not exposing ports and taking patches as soon as they're available to stop me getting hacked.

 

[netcat]

if you leave your pyra on the bus, someone gets it and xlock hasn't kicked in (for one of a million reasons) will they be able to read your data?

 

[netcat]

I just encrypt one file with ALL my sensitive data in it. I have a script that is basically a combination of gpg and grep. I supply my password via a pipe so it's not visible via ps. it also has incredibly ropey feature to edit by decrypting to a temp file, launching vi, then deleting the file. then I do a recursive grep of my entire filesystem for a unique string in my file to ensure temp file is actually gone. actually I think you showed me how to decrypt to a ram fs and I do that now. I would have preferred to pipe to and from vi but I couldn't figure that out. I think my system is completely ropey and I know several vulnerabilities but it seems better for me than an encrypted fs.

 

[FBnil]

I like LUKS. It is comfy and easy to use. I encrypted my root and my swap with LUKS. Not my boot.

Did you know you can have more than one Luks decryption password? So you can generate this ultralong, hard to write code (say, the C64 rev3 ROM assembly in hex, but leave out the last bit) and put it in your deadman's chest.

I just encrypt one file with ALL my sensitive data in it. I have a script that is basically a combination of gpg and grep. I supply my password via a pipe so it's not visible via ps. it also has incredibly ropey feature to edit by decrypting to a temp file, launching vi, then deleting the file. then I do a recursive grep of my entire filesystem for a unique string in my file to ensure temp file is actually gone. actually I think you showed me how to decrypt to a ram fs and I do that now. I would have preferred to pipe to and from vi but I couldn't figure that out. I think my system is completely ropey and I know several vulnerabilities but it seems better for me than an encrypted fs.

sudo apt-get install moreutils && man vipe # it's a small perl script (no need for moreutils, just download the code).
vipe picks up on the EDITOR and VISUAL variables, so you can use those to get it to open Vim. And you definitively may want to set TMPDIR, like so:
export TMPDIR=/dev/shm
But, you may want to modify vipe to not rely on this and always take tempfiles from /dev/shm and remove the editor selection part or you'll usually get nano as default editor instead of vi.
use it like so:
cat /secret/file.txt |vipe > /secret/file.new

see also quickedit: https://unix.stackexchange.com/questions/282366/how-to-invoke-vim-editor-and-pipe-output-to-bash

 

[pimaster]

Any Magic the Gathering fans? Built a page for constructing and sharing decks without requiring an account.
decky (with example cards)
Wish the small amount of energy I actually found could be spent on the Pyra but they require much more thinking.

 

[netcat]

Did you know you can have more than one Luks decryption password? So you can generate this ultralong, hard to write code (say, the C64 rev3 ROM assembly in hex, but leave out the last bit) and put it in your deadman's chest.


sudo apt-get install moreutils && man vipe # it's a small perl script (no need for moreutils, just download the code).
vipe picks up on the EDITOR and VISUAL variables, so you can use those to get it to open Vim. And you definitively may want to set TMPDIR, like so:
export TMPDIR=/dev/shm
But, you may want to modify vipe to not rely on this and always take tempfiles from /dev/shm and remove the editor selection part or you'll usually get nano as default editor instead of vi.
use it like so:
cat /secret/file.txt |vipe > /secret/file.new

see also quickedit: https://unix.stackexchange.com/questions/282366/how-to-invoke-vim-editor-and-pipe-output-to-bash

I run vi with -norc so no backup file.

My mentality is like, I could use a proper password manager but then I'm running lots of unknown code. I'm more comfortable with my own hacky perl, at least I know (some of) the vulnerabilities. pretty dumb logic..

it's not a project but I found out yesterday you can parallelize commands using xargs. I am very excited to parallelize my greps at work today. they are cpu bound. fast greps = happy friday.

 

[λ the β-Redex Reducer]

I split off my /home and /var folders because those tend to grow much faster than the rest of linux, and there are easily understood ways of cleaning them up, Generally the only way of cleaning stuff up from the rest of the root filesystem is by uninstalling stuff and then you have to watch out for dependencies. So I only encrypt my home partition, which contains all of the stuff I'm worried about, everything else is just standard linux stuff and mainly stuff that's freely available on the internet. I guess logs could be considered worth protecting, so you could consider encrypting your /var partition too. And if you ever park stuff in /root or /opt then your mileage may vary.

And if you use a swap partition then you need to encrypt that too.

 

[matzesu]

I was playing Magic when i was active at Boy/Girl Scouts: Whyle i ditnt know these Stuff from my Shool, as i was in a Middle Shool, my Scout Mates where on a Highshool (Gymnasium) and they played a lot of Pen and Paper and also these Trading Card Games..
I had a lot of evenings where i listen to they Pen and Paper Adventures as i found it quite entertaining,
So i dit learn the Magic Game and build me 2 Decks, and i also thought my Dad how to play but some time around whe end up just playing a bit Mario Cart Instead..

Maybe i get my Niche to play.. ^^

 

[netcat]

And if you use a swap partition then you need to encrypt that too.

don't forget to encrypt your porn.

 

[λ the β-Redex Reducer]

don't forget to encrypt your porn.

I do not have porn, but if I did then it would be in my home folder in my root partition and thus encrypted by default. Though I would probably store it in an encrypted folder so the back-ups would be encrypted as well. This would increase the chance of losing it but porn is sensitive content with low value so that seems fitting.

 

[Null]

don't forget to encrypt your porn.

I don't bother, if you're snooping on my PC then you deserve to suffer.

 

[FBnil]

don't forget to encrypt your porn.

...and use it for stenography.

I don't bother, if you're snooping on my PC then you deserve to suffer.

I wonder how big this number is:
sudo cat /dev/sda | strings | grep -i Peony | wc -l

 

[Null]

I wonder how big this number is

Spoiler

AI * Shoujo

en.everybodywiki.com

 

[spud42]

just a quick afternoon project to add an up down footswitch to my android tablet running Orpheus sheet music app.....

 

[netcat]

I do not have porn

it's your body telling you to not be vegan. listen to it.

 

[matzesu]

Why should somewhone got there porn stored on his own Computer these days? Expecally in a time where you can easily find them on the Internet by just using Google ?

I wouldn’t use the Pyra for porn.. don’t want to replay the spam mail who said he hacket my Computer and my Webcam to tell him the Pyra can’t hacket that easy and what Webcam ??

 

[Null]

Why should somewhone got there porn stored on his own Computer these days? Expecally in a time where you can easily find them on the Internet by just using Google ?

Watch out we've got an expert over here.

Also talking about experts:

Meet The Most Educated And Talented Man On The Planet! Meet Johnny Sins

Meet Johnny Sins, he's a doctor, a news anchor, a pizza delivery man!

www.rvcj.com

 

[FBnil]

Why should someone got there porn stored on his own Computer these days?

Because the wife doesn't want it uploaded to the internet?