• 54 Posts
  • 344 Comments
Joined 3 years ago
cake
Cake day: November 27th, 2023

help-circle


  • You could make it about equivalent to the protections afforded by the typical BIOS password, i.e. the attacker must first disassemble your laptop to reflash the spi chip or pull the hard drive. A grub.cfg like so would do, assuming everything in encrypted partitions:

    set prefix=(memdisk)/boot/grub
    set superusers="myuser"
    password_pbkdf2 myuser grub.pbkdf2.sha512.10000.<your hashed password>
    cryptomount -u <UUID of LUKS container>
    search.fs_uuid <UUID of the root filesystem under LUKS container> root cryptouuid/<UUID of LUKS container>
    configfile ($root)/@rootfs/boot/grub/grub.cfg
    

    Assuming you boot directly to GRUB or locked out the SeaBIOS boot device selector, then GRUB will only ever look for a boot device matching your disk’s UUID; attempting to do anything else aside from entering the LUKS passphrase will prompt for the GRUB password. You’d still have your own recovery path by pressing Esc, entering your GRUB password, and dropping to the GRUB shell. Bonus points for patching the GRUB code so it doesn’t echo the UUID of your disk.

    No, it isn’t bulletproof against physical access. But yes, I had the same question you did when starting out with coreboot and this was the solution I came up with.


  • What I like to call temporal horror vacui. Some things are easy to start, they do require some periodic checking, but are otherwise passive. So I’ll start a 3d print, get water boiling on the stove, or start running an offline backup. Then my mind is bothered that those are such “empty”, “unproductive” tasks, and so reactively fills in the gaps with things I’ve been procrastinating like dishes, meal prep, planning, etc.

    Also body doubling. For emails, I have a good friend at work who also massively struggles with them, so every now and then, we make a commitment to each other and for an hour or two, both sweep through our inboxes, with a bit of commiseration along the way.

    Anyway, it’s still a struggle that makes me wonder about seeking an ADHD evaluation … next month maybe.



  • I use it to generate little bash and python scripts for mundane tasks, random ideas I don’t have a good starting point for, or boilerplate code I don’t have the energy to write manually. Or also to decipher cryptic error messages and logs. Nothing that I publish though, just all testing and personal scripts.

    I do this with models running locally on my gpu. 14B parameters is surprisingly decent and fast enough for a 16 GB slot-powered workstation model.

    For fun, since the model is local, I also toss in some excerpts of my writing, see what it can glean from my style and vocabulary, something I’d never do with an LLM hosted by someone else for obvious reasons.



  • Focus follows mouse and unchecking the option to auto raise the active window. Couldn’t live without it and being used to it has made me extremely clumsy when I do pick up my Windows work laptop.

    I change the taskbar clock to be a one-line MM/DD HH:MM:SS format, drop in my customized locale (based on en-US for maximum compatibility, but without having to deal with US formats and units that I’m not fond of), and point the taskbar shortcut for my text editor to a script that creates a pre-named file and launches the editor with autosave enabled. Because having to manually save and come up with a name for your spur-of-the-moment notes sucks, automatically generating 20260831_text_1 is so much better than a, b, a2, etc.

    XFCE specific, I get rid of the second panel full of launchers. Acquired taste, but also Chicago95 theme and icon pack.







  • For anonymity alone, no. You ought to at least aspire to live the nomad lifestyle first and put up with its challenges, then enjoy whatever anonymity comes from it as a bonus.

    If you don’t mind apartment living, you could consider the arrangement I had at one point. Private landlord who didn’t run background checks, accepted payment in any reasonable form, many tenants, communal mailbox without apartment numbers or names required. Internet, utilities, etc. all rolled into rent and not individually metered. Might be harder to find but they exist.







  • Nearly everything that both requires a phone and disrespects my privacy has been work-related, so using 2 phones has been a solid choice for me.

    The work phone has a sim from a mainstream carrier and only gets powered on while at work during work hours. Maybe I’m spoiled that my workplace tolerates this arrangement. I couldn’t imagine having to be reachable any time of the day. I didn’t intentionally buy a separate phone, it’s just my old phone repurposed.

    The personal phone has an “IoT” SIM which can be purchased non-KYC where I live. All FOSS apps and a personal number via VoIP.

    I know it isn’t by any means airtight, but it gives infinitely more peace of mind than just trusting whatever sandboxing mechanism available on one device will be sufficient.