• 0 Posts
  • 81 Comments
Joined 2 years ago
cake
Cake day: August 6th, 2023

help-circle
  • Majestic@lemmy.mltoLinux@lemmy.mlAntiviruses?
    link
    fedilink
    arrow-up
    14
    ·
    edit-2
    9 days ago

    I would say there are not any worth recommending and that best practices are avoiding running random scripts you don’t understand, keeping software up to date with package managers, and using virtualization tools. Also look into Portmaster perhaps which is an interactive firewall.

    Meta rant on this subject

    What frustrates me about the answers these questions get is no one ever offers tools comparable to Windows tools, perhaps I think increasingly because they simply don’t exist outside of very expensive subscription enterprise offerings that require plunking down no less than a thousand dollars a year. (Certainly none of the major AV vendors offers consumer Linux versions of their software though most offer enterprise endpoint Linux that comes with the caveat of minimum spends of several hundred dollars if not several thousand a year)

    ClamAV is primarily a definition AV, the very weakest and most useless kind. Sure it’s kind of useful to make sure your file server isn’t passing around year old malware but it’s basically useless for real time prevention of emerging and unknown threats. For that you needs HIPS, behavior control, conditional/mandatory access control, heuristics, etc. ClamAV has one of the worst detection rates in the industry. It’s just laughably bad (often under 60%) so it’s really not a front line contender at all.

    Compare clam to consumer offerings with complex behavioral control like ESET, Kaspersky, etc that offered “suite” software that featured the aforementioned HIPS, behavioral control, complex heuristics to detect and in real time block malware-like behavior (for example accessing and then seeking to upload your keepass database files or starting to surreptitiously encrypt all your user files using RSA4096) and it just isn’t in the same ballpark as anything competently done in the last 20 years.

    I haven’t used or relied on a traditional AV for definition detections for years. They’re worthless, it’s impossible to keep up. The AV’s I’ve deployed are for their heuristics, behavior control, HIPS, etc which actually stops new and emerging and unknown threats or at least puts real obstacles in their way. So what Linux needs, what users need is software like that, forget the traditional virus definitions, something with behavior control, HIPS, and some basic heuristics for “gee this sure looks like malware behavior, better ask the user whether they want and intend this”.

    “Just be smart about what you run” isn’t a realistic solution when people say Linux is for everyone including their tech illiterate relatives. Yes, Linux is a lot safer if you just install things from package managers but that isn’t bulletproof either as we’ve seen a number of spectacular impact upstream malware insertions into build repos for huge software projects in recent years.

    Just maintain back-ups isn’t helpful with smart cryptolocker software which may hide itself for weeks or months and encrypt your files as you back them up. Nor does it protect against account compromise from all your passwords being stolen or a keylogger. Nor does it defend you against persecution after being hit by mercenary/government police-ware and spyware from overreaching governments and makes the bar for them getting evidence you’re an illegal gay person or whatever that much lower technically in terms of capabilities.

    Back-ups are disaster recovery. Everyone should have them but part of a layered defense is preventing the disaster and inconvenience and invasion of privacy and so on before it happens. Having your identity stolen or accounts taken over isn’t as simple as reverting to a back-up, it can result in hours, days of phone calls, emails, stress, hassle, etc that can drag on for weeks or months.

    Portmaster is a start for this type of system control and protection as it’s a very effective interactive firewall but as far as I know there aren’t any consumer available comprehensive behavior control + HIPS type Linux desktop security solutions. There are several vendors of default deny mandatory access control with interactive mode for Windows but none offer solutions for Linux that aren’t part of enterprise sized contracts beyond affordability and reason. If anyone knows otherwise I would love to know of these solutions as I want to implement them on my Linux machines as I am not comfortable with just my network IPS and firewall solutions by themselves without comprehensive end-point security.




  • I think the home media collector usecase is actually a complete outlier in terms of what these formats are actually being developed for.

    Well yeah given who makes it but it’s what I care about. I couldn’t care less about obscure and academic efforts (or the profits of some evil tech companies) except as vague curiosities. HEVC wasn’t designed with people like me in mind either yet it means I can have oh 30% more stuff for the same space usage and the enccoders are mature enough that the difference in encode time between it and AVC is negligible on a decently powered server.

    Transparency (or great visual fidelity period) also isn’t likely the top concern here because development is driven by companies that want to save money on bandwidth and perhaps on CDN storage.

    Which I think is a shame. Lower bitrates for transparency -should- be the goal. The goal should be to get streaming content to consumers at a very high quality, ideally close to or equivalent to UHD BluRay for 4k. Instead we get companies that bit-starve and hop onto these new encoders because they can use fewer bits as long as they use plenty of tricks to maintain a certain baseline of perceptual visual image quality that passes the sniff test for your average viewer so instead of getting quality bumps we just get them using less bits and passing the savings onto themselves with little meaningful upgrade in visual fidelity for the viewer. Which is why it’s hard to care at all really about a lot of this stuff if it doesn’t benefit the user in any way really.


  • And which will be so resource intensive to encode with compared to existing standards that it’ll probably take 14 years before home media collectors (or yar har types) are able and willing to use it over HEVC and AV1. :\

    As an example AV1 encodes to this day are extremely rare in the p2p scene. Most groups still work with h264 or h265 even those focusing specifically on reducing sizes while maintaining quality. By contrast HEVC had significant uptake within 3-4 years of its release in the p2p scene (we’re on year 7 for AV1).

    These greedy, race to the bottom device-makers are still fighting AV1. With people keeping devices longer and not upgrading as much as well as tons of people relying on under-powered smart-TVs for watching (forcing streaming services to maintain older codecs like h264/h265 to keep those customers) means it’s going to take a depressingly long time to be anything but a web streaming phenomenon I fear.


  • Majestic@lemmy.mltohomelab@lemmy.ml*Permanently Deleted*
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    1 month ago

    Disclaimer: I’ve not used that exact machine but have worked with similar Lenovo/Dell stuff.

    On HP’s spec sheet it says the max HDD size is 2TB. Do I need to do anything to the BIOS to allow bigger drives?

    Set mode to UEFI and/or GPT possibly. Some very old BIOS may simply refuse to boot off a drive that big while some may work as long as the boot stuff is in the first 2TB.

    I’ve heard it’s possible to add a third 3.5in HDD in the DVD drive bay. Can anyone confirm? Do you need a bay adapter or whatever?

    Often these form factors have a SATA plug for a DVD drive. Be aware that this one is usually only SATA 2 at best so slower than SATA 3 (only 3Gbps vs 6Gbps) and often only SATA 1 (1.5GBps) in fact given DVDs need significantly less than that. Not technically a huge limiting factor in anything but bursts and saturating the cache as mechanical hard drives are going to tend to struggle to get much above 300Mbps sustained write anyways but a consideration. I wouldn’t put a RAID drive on it if possible as RAID drives should be on SATA adapters of matching speeds.

    You can use a bay adapter and you can set the drive directly bare on the surface but it may induce vibrations and in theory for mechanical drives could shorten the life of the drive in addition to being annoyingly noisy. An SSD located there wouldn’t have this problem as it’s safe to set the SATA ones on a bare surface. Though if the SSD is getting heavy regular use you might consider still investing in some sort of heat solution like an aluminum dock for 2.5" drive to place it in and set that there.

    As far as if you really want to set a 3.5" spinning disk HDD there without paying for a dock, at least put rubber between it and the metal of the case. Either little rubber standoffs or a flat rubber pad. This may induce heat issues but should solve the vibration one at least.

    You can of course buy a PCIe SATA or SCSI card and connect to that to get higher speeds.

    The other questions I’ll leave to other people. Technically hardware RAID tends to come with lots of problems for home lab setups and software at the host OS tends to be more recommended as easier to recover with and less prone to various problems.


  • I would go for an Apple TV 4K box with ethernet (don’t burden yourself with wifi when you can have gigabit ethernet for $20). No ads, simple, works, looks really nice, apps are very responsive, I can fly through my home media collection’s wall of posters using the remote without any delays in loading images. Compatible with all the major streaming services. Has infuse for streaming local media as well as Plex and Jellyfin apps.

    If you’re interested in spending some money and want something better without the Apple ecosystem (be warned, Google seems to be cracking down on sideloading so who can say how much longer that lasts but do as you feel right) I’d recommend something from Dune-HD.

    Considering how old the Nvidia Shields are at this point, the disinterest from Nvidia in refreshing them periodically as Apple does, the insertion of ads, framerate switching issues, etc I think Dune-HD makes the superior product for upmarket non-Apple TV streaming. People have been waiting for a Shield update for 4 years now. In that time Apple dropped their own prices to make Nvidia look like even bigger clowns still selling old hardware and chips all these years later at such mark-up.

    They support AV1, dolby vision, atmos and 2 of their 4k models have a dual OS set-up. One is Netflix certified Android which gets you full support for 4k streaming, DV, atmos, etc from all major streaming services, the other is a special virtualized container running a customized version of linux with a media center which you can install Kodi, Plex, Jellyfin, etc onto.

    People who say “just run it off a PC you install Linux on” are not very serious or not very discerning (or more hardcore than me in their refusal to ever pay for any streaming services). Quality from such non-certified devices is capped at 720p without dolby atmos, dolby vision, etc from nearly all the major streaming services.

    If you don’t want to drop as much as Apple or Dune-HD charge I’m not sure what to say. Walmart’s onn USED to be a great choice as you formerly could root them but they changed that and locked them down since 2024 I believe. Just get something beefier than a stick that plugs into your TV IMO, any kind of box is going to be superior in terms of ability to deal with heat.




  • Okay you say this but these tools are privately owned. What happens when one day the provider slams them with a 1000% price increase? They can either pay or go back to doctors who detect cancer even worse. It gives these AI companies undue influence and turns a tool into a crutch and an addiction which can be leveraged to drive up healthcare costs and punish providers who don’t play ball perhaps resulting in deaths from doctors in systems that don’t have access to the tool because they’re in a payment dispute with it or they had it but stopped paying for it and patients may not know any of this.

    This is a nightmare for human beings who have fought hard to grow smart, to be intelligent as a species and to have educated professionals who have learned to use their brains be instead trained by these machines to stop using their brains, to atrophy them, to become dependent on these systems and worse than before the moment they are removed.

    It will be used to attack the wages of doctors and I guarantee that they won’t be compensated with cheaper schooling (doctors need at least 6 years of university plus additional years in training before being able to practice on their own, it’s an immense expense and burden in a time of rising costs and huge debt). Which will lead to shortages of doctors and they’ll be replaced with AI and nurses not up to the task and we’ll be told this is fine. Having access to a thinking human being may become a gated luxury that few insurance companies want to shell out for until after you’ve been evaluated by AI systems several times and only IF those systems deem it necessary. Some AI systems will make mistakes that kill patients and insurance companies will be fine with this as a quickly dead patient is usually cheaper than paying for months or years of treatments and/or surgeries so they’ll have a perverse incentive to push patients towards those systems. Doctors take an oath not to do harm, not all take that as seriously as they should but usually there’s some compassion there whereas a computer system would not care one bit if you’re denied and unlike a doctor won’t fight for you against the insurance companies.


  • Probably the best choice if OP is dreading 11. Put it off, hope that in 3 years Linux support has matured even more for their use cases.

    MS support has used this software themselves in an edge case where they couldn’t get Windows to active properly.

    You have two options here:

    1. Enable the extended support (no pay needed with this software but if OP absolutely refuses to run it they can pay Microsoft money directly though it takes work to find where to do that at) and run on that for 3 years until 2028.

    2. Upgrade to LTSC IOT using the method they outline at the link there. Again they have two options, one is free, the other is following that guide but paying for a gray-market key (G2a for instance) for LTSC IOT which would avoid running this software on their PC but would mean paying someone some money for a corporate volume key they’re not technically allowed to sell. Which means support until 2032.




  • Presumably given they’ve all been released in the past few years and are still getting updates the manufacturers would release an update disabling the functionality to comply with law. Same with end user devices removing the functionality via software update.

    You’d have a small percentage of holdouts who have auto updates off and also refuse to apply it manually and who also have non-updated computers or smartphone. They’d leave it up to whoever buys the spectrum to locate illegal use like this based on detected interference in their usage, report it to the FCC and they send you a nasty letter followed by debilitating fines and a legal order to seize your equipment if that fails.

    In practice people who go out of their way to avoid the updates that disable it will probably see no consequences but decreasing benefits as well and will eventually update or replace devices.


  • The only thing I would note is -IF- your volumes are not partition or disk based BUT -files- based there is the possibility that corruption of the host file system of the disk the files containing the volumes are on could result in pieces of those files being marked unreadable by the disk and it’s POSSIBLE one way to solve this would be a file system check utility.

    HOWEVER such activities carry a -large- risk of data loss so I would advise a bit for bit copy of the disk and doing the repair on that so if it goes wrong you’re not worse off. -IF- you cannot make a copy then I would advise at least trying to mount using backup headers before doing that and copying off anything you can salvage as file system checks can really mess up data recovery and should only be used in certain circumstances.

    You’re much better off trying the recovery software I linked in fact than doing a file system check as it will tend to have better results.

    You can also use the option to mount as read only in VC to prevent writes to a suspected failing disk.

    Let me know if you need further advice.


  • Veracrypt has back-up headers located elsewhere in the volume that are unlikely to have been overwritten.

    First thing’s first I would strongly recommend copying the drive as it currently exists bit for bit to another drive of equal or larger size. Don’t work on the original if you can help it.

    Now with this copy, you should try to check the option to use the backup header when mounting and try again. If the partition is gone and veracrypt doesn’t see it you’ll need to try using something that recovers partitions and doesn’t mind encrypted partitions or partitions or file system types it doesn’t understand and use that to ON THE COPY recover and recreate the partition (this will write data and can cause the possibility of further loss or worsen your ability to recover which is why it is important to perform it on a copy). Testdesk may work for this but there are other options that probably are better.

    See this list: https://old.reddit.com/r/datarecovery/wiki/software and choose something from there if this data is truly important. Again only work on a copy on another drive. Some of these software examples actually work against the original drive and make a copy elsewhere and should be safe to use on the original drive so long as they have you select a target drive to push the recovered data to but read the documentation. Testdisk absolutely must be used on a copy.

    You will incur data loss and likely should run one of the file recovery software mentioned on the drive once successfully mounted in veracrypt to attempt to recover as much as possible.


  • Apple TV: No ads. Been around for over a decade.

    Google TV: homescreen ads for a decade+ and even pushed onto Nvidia shield owners who originally may have bought the devices because Nvidia made a premium customized version without ads until they got tired of that and put ads in.

    Apple has problems but ads aren’t a big one.

    Neither big company is your friend. They both exploit workers and are both bad.

    It’s just Google tends to be better at cutting edge bad like enabling genocide with their products and stuffing ads down the throats of people while Apple tries to maintain a crunchier appearance and vibe and is fine reaping 30% App Store fees on all transactions and making side loading very hard.

    Apple rips you off on low storage and high costs to upgrade compared to Google/Samsung it’s definitely true.


  • Majestic@lemmy.mltoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    71
    arrow-down
    4
    ·
    5 months ago

    Never cared for pocket and always disabled it as spyware. Fake spot will be missed though.

    This is an ill omen however. They’re cutting back dramatically in anticipation of their Google funding being lost forever and perhaps as some suggest in anticipation of enshitifying. These were both sold originally as additional revenue streams for Mozilla.


  • Use secure erase function which is built into the SATA and other specs, it applies a voltage spike to clear the cells of all held charges thus wiping them. This happens near instantly, it’ll be a process that will signal it’s finished within a minute and takes much less time than that.

    If you want to be extra paranoid I suppose you could follow that up by encrypting the entire (empty) drive and then doing it again though I’m not sure this has any benefit however it’s the closest to forcing the cells to be used again and then cleared again. However this does not guarantee that exhausted and worn out areas are flash are not potentially spared both. It’s unlikely for large amounts of data to be recovered from this unless your drive is failing or has been completely worn out but it’s also why if you ever store sensitive data on an SSD it’s preferable to do so in an encrypted form (such as encrypting the whole disk or partition).