derek

joined 5 months ago
[–] derek@infosec.pub 9 points 1 week ago

I'm not associated with anyone in this thread or the situation being discussed. I'm interested how we understand and use cultural signals. Here's some Pepe detail for the similarly curious:

The alt-right got wise to new media in the 2010s. They started meme-washing their hate mongering and trying to normalize coded hate speech in internet culture using Pepe memes and other popular formats. It snowballed and the Pepe meme = Nazi user association is a product of lasting trends from that time. It's similar to clocking someone for wearing straight-laced Doc Martens or khakis and a white polo.

For those in the know one of those items is a small red flag. The wearer could be completely ignorant that these are known dog whistles/identifiers for members of hate groups. If someone is wearing a lot of small red flags then it's less likely the wearer is accidentally serving white supremacist. That's the point of stealing and manufacturing these kinds of symbols though: most people don't know they exist or what they intend to mean so the user can feign ignorance with plausible deniability. They're the inverse of modern progressive advocacy symbols. Wearers can hide in plain sight with just enough Nazi showing that other insiders see them. Pride icons for cowards.

The artist who created Pepe has publicly denounced the character's use as a hate symbol and regressivist propaganda tool. Whether or not a community or individual "liberates" Pepe from the prison CHUDs built is up to them.

For what it's worth: I lean toward liberate most of the time (fight against the thieving bigots) but in this situation, even given a permissive setting, adding "posts Pepe" as a mark against is sensible. It's clear the user is either intentionally pushing hate propaganda or else under enough alt-right influence that their intentions aren't relevant to the evaluation.

[–] derek@infosec.pub 1 points 1 week ago (1 children)

laughs in home lab

Not that I'd buy it but, if I did, that power button might get used twice a year. Likely less since I wouldn't be able to upgrade or maintenance its hardware.

[–] derek@infosec.pub 12 points 1 week ago

That's a problem. Absolutely. It's not the problem though. I'm not sure the problem can be summarized so succinctly. This is the way I've been putting it:

These are the top reasons humanity needs successful, decentralized, open social media platforms:

  1. Collecting and selling user's private data is dangerous and unethical.
  2. Using that data to intentionally and directly manipulate user's thinking is even worse.
  3. All of the major centralized social media companies have been proven to either allow these illicit information campaigns or coordinate them directly. TikTok is the focus right now but Sophie Zhang exposed Facebook for doing exactly what TikTok has been exposed for recently. Can you recall any meaningful consequences for Facebook? Do you think Facebook is now safe to use?
  4. It's clear that most political leaders are either too ignorant, too corrupt, or too inept to meaningfully legislate against these problems.
  5. The concerned public can't shut Pandora's box. No one is coming to save us from big tech or the monied interests and nation-states that wield it.
  6. The concerned public can't easily and legally audit the platforms big tech builds because they are closed and proprietary.
  7. Personal choice is not enough. Not using centralized social media increases personal safety but does little to curb its influence otherwise.

These are listed by order of intuitive acceptance rather than importance. I find it aids the conversation.

The best reasonable answer to these problems I've seen proposed is for the public to create an open and decentralized alternative that's easier to use and provides a better user experience.

Will that kind of alternative be a force for pure good? I'm not sure. To your point: I'm not convinced social media of any kind can be more than self-medication to cope with modernity. Then again I've had incredible and meaningful conversations with close friends after passing the bong around and spent time on Facebook/Reddit, and now Mastodon/Lemmy/etc, doing the same. Those interactions were uplifting and humanizing in ways that unified and encouraged all involved.

I think the truth lies somewhere in the middle. We need to take care of each other, refuse pure hedonism, and protect the vulnerable (and we're all varying degrees of vulnerable). At the same time: humans aren't happy in sterile viceless productivity prisons. Creating spaces for leisure which do no harm in the course of their use isn't just a nice idea... It's necessary for a functional and happy society.

[–] derek@infosec.pub 1 points 2 weeks ago

That's no different from VMware or Hyper-V if you switch the specifics around. There are many more administrators running virtualization clusters that have very little knowledge of the internals than there are subject matter experts or weekend deep divers. The barrier to entry for these things is low because they're designed well enough and half decently documented. Proxmox isn't unique in this respect.

[–] derek@infosec.pub 1 points 3 weeks ago (2 children)

OK. So we have a disagreement then. What part of Proxmox requires expertise?

[–] derek@infosec.pub 4 points 3 weeks ago (1 children)

Toss a message at Scott Reeder (Scott Prop and Roll). I'd bet money he either knows folks who worked that set or knows someone who knows someone. I've no idea if he'd respond but he seems chill like that.

[–] derek@infosec.pub 3 points 3 weeks ago (4 children)

I'm not sure I'm parsing your fifth paragraph correctly. Are you suggesting Proxmox is DIY and unsuitable for Production? That Proxmox is suitable for Production and those who think they can roll their own hypervisor are in for a bad time? Something else?

[–] derek@infosec.pub 3 points 4 weeks ago* (last edited 4 weeks ago)

That's a fair take. Silver Blue is great and, in the spirit of the thread, if I were helping an interested but hesitant lifelong Windows/Intel/Nvidia user migrate to Linux today I would:

  1. Buy them a new SSD or m.2 (a decent 1tb is ~$50 & a good one only ~$100).
  2. Have them write down what applications, tools, games, sites, etc they use most often.
  3. Swap their current Windows OS drive with the new drive and, if needed, show them how and why that works or provide an illustrated how-to (so this choice is not a one-way street paved with anxiety. If they want to swap back, or transfer files, or whatever else; they can. Easily). Storage drives are just diaries for computers. The user should know there's nothing scary or mystical about them.
  4. Install Fedora Kinoite on that new drive.
  5. Swap them from Fedora's custom Flatpak repository to Flathub proper. A decision that should be given to the user on install IMO but I digress.
  6. Install their catalogue of goodies from step 2 so they're not starting from scratch.
  7. Install pika and configure a sane home directory backup cadence.
  8. Ask them to kick the tires and test drive that Linux install for at least a month.

Kinoite is going to feel the most like Windows and, once configured, stay out of the way while being a safe, familiar, transparent gateway to the things the user wants to use.

My personal OS choices are driven by ideals, familiarity, design preferences, and a bank of good will / public trust.

I disagree with some of Red Hat's business model. I fully support the approach SUSE takes. I'm also used to the OpenSUSE ecosystem, agree with most of their project's design philosophies, and trust their intentions. I'm not a "fan" though and will happily recommend and install Silver Blue or any other FOSS system on someone's computer if that's what they want and it makes sense for them! Opinionated discussion can be productive and healthy. Zealotry facilitates neither.

That said: Aeon has been out of beta for a while. The latest release is Release Candidate 3 and they're closing in on the first full release. Nvidia drivers work after a bit of fiddling. 🙂

I'm going to edit my previous post to add the Kinoite suggestion for posterity's sake.

[–] derek@infosec.pub 5 points 4 weeks ago* (last edited 4 weeks ago) (2 children)

Check out Aeon and Fedora Silverblue. I'm installing Aeon on Desktops and MicroOS on Servers. My computer needs to be a reliable tool. Immutable distros make it exactly that.

The last thing I want to do in my free time or during my work day is be forced to fiddle with some poorly documented and/or implemented idiocy on my personal computer because I forgot to cast the correct incantation prior to updating something. I'm not a masochist.

EDIT To the hesitant but hopeful Windows+Nvidia user: give Fedora Kinoite a try. Check my reply to @independantiste@sh.itjust.works below for details.

[–] derek@infosec.pub 22 points 1 month ago

I was taught something different growing up and had to check myself with a quick read. Holy shit. You're right. Thanks for sharing.

[–] derek@infosec.pub 6 points 1 month ago

My partner has chronic pain. I'm stealing this as a tool for future conversations. Thank you!

[–] derek@infosec.pub 10 points 1 month ago (1 children)

The right thing to do is offer a program to replace the battery. Even more right would be not designing anti-repairability into your products. 🙊

Throttling the processor to extend the life of the phone is a reasonable temporary alternative IF it's transparent and opt-in. Effectively forcibly downgrading the hardware spec of a device I own without even telling me is a serious breach of trust at the very least, no?

I agree the decision may have resulted in less e-waste but, even if so (and assuming all is well-intended), that can't justify hijacking consumer's belongings. That's a dangerous precedent to set.

view more: next ›