lainchan / Ω
(untitled)
H.R. Giger · 2025-09-03 05:57
Tech Questions #16
Old Thread: >>86529
Ask your simple questions in this thread. You will get replies more likely if you use this thread because many posters regularly visit this thread.
Nanashi No Gombe · 2025-09-03 11:18
I just want to inform that pro-w*reguard anon that he is a retard and never actually had to work with either. Apart from providing a much less mindfuck configuration, w*reguard is a useless piece of soykaf that fails to do anything useful all the while openvpn not simply can do layer 2, it can fuarrrking work over a http proxy. W*reguard is extremely rigid for the sake of "simplicity" while pushing itself in the kernel instead of using tun/tap. fuarrrking glowing piece of soykaf.
Yamaoto Toshi · 2025-09-03 11:44
My testicles hurt like hell!!!!!!!!!!!!!!!!!!!!!!!!!
Naomi Nascimento · 2025-09-04 07:09
What is a good WM To use, Using a DE like Gnome is pissing me off. Looking to distro hop from OpenSUSE. No I cbf installing Gentoo , I've used Arch in the past but looking to try something that isn't systemd for something new. Used to use i3 if that's anything good, I just can't remember how to config anything.
Batou · 2025-09-04 08:20
>>88663
You could try Void if you are looking to get away from SystemD. I use EXWM on Arch personally, but for standard WMs i'd just stick with i3.
Neo · 2025-09-04 09:16
>>88663
By asking people for such a thing you're asking for their own personal opinions that most likely won't reflect you, but the most sane and supported distributions that come without systemd are: Devuan, Void, Artix, Guix, Gentoo, Slackware, Parabola and Hyperbola, read about them and see which one you like best. For window managers, see this: https://wiki.archlinux.org/title/Comparison_of_tiling_window_managers
Bob Arctor · 2025-09-04 10:33
Artix Linux with Xmonad Xlibre
John Rain · 2025-09-04 11:50
>>88663
You need to know what type of window manager you want, whether it's tilling or stacking. Whether it uses configuration file customization or GUI customization, whether it's compiled or uncompiled, and so on.
The general recommendation is i3 for tilling and openbox for stacking. Personally I like windowmaker and openbox, I don't like tilling, my brain scrambles with the way it's done.
Hong, Guil Dong · 2025-09-04 11:55
>>88663
As for distros without systemd, I recommend everything from Void linux to perppermintOS. At the end of the day, distros don't change much from one to another, just the packaging system and the standard programs. I've been using Void Linux for 3 years now, and I've never had any problems that weren't of my own making, but I'll probably move on to FreeBSD in a few years.
Splicer · 2025-09-04 12:16
>>88663
Gentoo is the only choice until somebody implements an adequate ports system that does everything portage does (portage is a horrible piece of fuarrrking python soykaf, slow as hell, I don't even want to think about the actual codebase).
Juse use Gentoo. But if you're too weak for the trn path, install Artix. Artix is nice. It's based on Arch, so suffering is granted, but it's better than Devuan and Devuan is better than everything else.
Dr. X · 2025-09-04 13:04
>>88663
I use icewm for my desktop and windowmaker/dwm for my laptops. I prefer to use floating window managers as they are usually easier to set up/use and I've had less problems with them compared to tiling, where I've ran into issues like programs not rendering correctly because of the frame size and having keyboard shortcuts for certain programs overlap with those of the wm (The latter of which is like kicking dead whales down the beach pretty bad, since you might not realize it right away and then you have to rewire your brain to use another key combination). That said, tiling is great for terminal work/writing and for laptops where it's sometimes cumbersome to constantly have to use the mouse (for browsing I use vimium).
Unidentified · 2025-09-04 19:01
I have been meaning to set up a personal website on a VPS and wanted to ask which operating system and web server I should choose. My criteria are:
1. It should be easy to learn and set up
2. It should be secure by default (no wordpress)
3. It should be hard to make it insecure because I am a hobbyist programmer, not a computer engineer
4. Once properly set up, turning on unattended upgrades should keep the server indefinitely secure
My current plan after some rudimentary research is:
1. Use either alpine linux or openbsd for the operating system
2. Use either nginx or lighttpd for the web server
3. Set up ssh with public cryptography authentication only, no fail2ban
4. OpenSSL with TLS 1.3 only
Thoughts? I want to keep it as simple as possible.
Unnamed · 2025-09-04 20:50
>>88678
I've been using debian and nginx. Never had any problem.
fsociety · 2025-09-05 02:22
>>88678
ditto on debian and nginx.
this is my new vps setup checklist. ymmv.
rent a vps and install debian
login and change root password
install and set up ufw firewall
create a non-root user, logout root, login as user
make sure "su -" works for user
restrict root access to members of wheel group
disable root ssh login
specify allowed ssh users
set up ssh key login
make sure ssh key login works
back up ssh keys securely
optional: disable password logins
set up alternative dns
install fail2ban
either point a domain name to the vps or set up a tor onion address
optional: adjust umask for tighter default permissions
optional: change the server's default directory for authorized keys
install secure server software
open appropriate port(s)
Masami Eiri · 2025-09-05 03:54
>>88681
Or you can just run everything in docker/podman containers and don't bother with most of those.
Eldon Tyrell · 2025-09-05 05:34
>>88682
How would that help? You still need to access and secure the host.
Emmanuel · 2025-09-05 05:48
>>88665
I'm asking people so I can get their own personal opinions
Incognito · 2025-09-05 05:55
>>88663
Thankyou everyone for your responses.
My mine take away that I'm going to try is using Void Linux with i3. As I have installed Arch in the past , if I can do that I'm sure Void is not going to too bad, same with i3 as that's something I used and loved. Does anyone have any advice for use of Void with its advantages over Arch with it not using SystemD?.
Planning on running a system that is encrypted, Minimal set up ( Hence use of i3 ) , Automatic VPN Connection with Wireguard ( Need to understand how this works and if there is such as a killswitch ) , Playing the occasional Steam games, Getting back into programming and OpSec too. If anyone has anymore friendly advice or opinons on things suggested or perhaps things that have worked for you in a nice system setup or things that haven't worked well for you?
Hacker · 2025-09-05 11:22
>>88683
Why do you need to configure those rights / groups / non-root user, etc. If you only run stuff in containers that can't touch/reach anything in your system you might as well stay as root and don't bother with rights or permissions or anything like that.
Linda Lee · 2025-09-05 12:07
>>88692
You can't run the whole VPS OS in a container. The VPS OS SSH login faces the internet. You have to secure it well or it can and probably will be compromised, along with all of the apps running in containers. What you're suggesting is like a bank installing bullet-proof glass at all the teller stations, but leaving the back door unsecured.
Cutter · 2025-09-05 12:08
>>88681
Thanks. I am testing this on my soykafbox I had laying around for a while. I have found this article which you might find interesting as well. Basically you can disable ssh public IP address and put it behind wireguard.
https://frank.sauerburger.io/2023/09/13/ssh-over-wireguard.html
Ein · 2025-09-05 14:01
>>88693
Why do you need anything for SSH login beyond a non-generic password? From this whole list I only see the usefulness of fail2ban to make those chinese botnets send a bit less password bruteforcing requests over time, but that's basically it. Not that they could ever succeed anyway if you generate a decent password.
Tyrell Wellick · 2025-09-05 14:53
I need to rent GPU compute to train a ML model but I don't know what the hell I'm doing. I have trained models before but this time I don't have access to my universities GPU core. I'm working on a brain to text decoding competition. I'm going to have to train a machine learning model. I don't think it should be huge but more than I want to train on my laptop. anyone have a rec or a how to guide or something?
Spike Spiegel · 2025-09-05 15:55
How the heck do I view things on github without javascript?
Jim Hilger · 2025-09-05 17:58
>>88695
Because in the real world, ssh security like that gets defeated constantly. Maybe you'll understand a little better when you turn thirteen and you've run a vps for a while. Until then you should try to avoid advertising your stupidity in public and rejecting the advice of people who clearly know a lot more than you do.
藤原純一 · 2025-09-05 18:54
>>88697
>brain to text decoding
glowniggers will use it to read thoughts in CIA torture rooms
DARPA will make drones that automatically kill anyone who thinks about Rothschilds
Unidentified · 2025-09-05 20:09
>>88699
If you actually knew what you were doing, you’d specify which attack vectors those configs are supposed to address. Instead, it looks like you’re just mindlessly following advice you pieced together from elsewhere - cargo cult style. Maybe those tweaks made sense in their original context, but the moment you copy-pasted them out of it, they lost all meaning.
Koichiro · 2025-09-05 20:24
>>88700
Sing trololo in your head 24/7 to jam them.
Y.T · 2025-09-05 20:50
>>88701
OK, whatever you say, Chief. Have a great day and good luck with your VPS. o/
Arisu Mizuki · 2025-09-05 21:25
Recognizing, reporting and not responding to bait that is meant to cause outrage and derail threads is an important skill to navigate imageboard-style anonymous forums.
Koos van der Merwe · 2025-09-05 23:31
>>88703
I'm not the person who asked for advice. They are probably more grateful to your replies. I was simply interested to see if you can explain any of that soykaf since I'm also hosting some stuff on a vps. Since you refused to explain, I decided to ask AI:
Essential / Strongly Recommended
>Rent a VPS and install Debian → obvious prerequisite (Debian/Ubuntu/CentOS/etc. all fine, distro choice is mostly preference)
>Create a non-root user, logout root, login as user → critical to avoid day-to-day root usage
>Make sure su - works for user → ensures you can escalate to root when needed
>Disable root SSH login → prevents brute force attempts against root directly
>Set up SSH key login → very strong protection vs. brute force, essential if public internet exposed
>Make sure SSH key login works (before disabling password auth!) → avoids locking yourself out
>Back up SSH keys securely → losing keys = losing server access
>Optional: disable password logins → highly recommended if you’re confident with key management
>Install secure server software & open appropriate ports → only run what you actually need
Useful but Context-Dependent
>Install and set up UFW firewall → good for restricting unnecessary services. If you only have SSH + one service, this helps contain mistakes. Some argue it’s redundant if you don’t install extra daemons
>Specify allowed SSH users → minor hardening, useful if multiple users exist. For single-user VPS, not very impactful if root login is already disabled
>Install fail2ban → useful against brute force on SSH or exposed web apps. Less important if you disable password login and use only keys
>Set up alternative DNS → relevant if you want censorship resistance, redundancy, or privacy. Not “security” per se
>Point a domain name or set up a Tor onion → convenience, not security (unless you specifically want anonymity via Tor)
Mostly Subjective / Not Universally Important
>Login and change root password → not critical if you’ll disable root SSH anyway
>Restrict root access to members of wheel group → Debian doesn’t use “wheel” by default, uses sudo. This step overlaps with “create a non-root user + disable root login,” so it’s redundant
>Optional: adjust umask for tighter default permissions → niche, only matters for multi-user environments
>Optional: change the server’s default directory for authorized keys → security-by-obscurity. Breaks tooling and doesn’t add meaningful security
I still don't see the point of "Essential / Strongly Recommended" stuff. Like, why bother with ssh login, with non-root user, if your root password is strong enough that no one will ever be able bruteforce it. Anyway, ChatGPT agrees with your takes there as you can see.
Terzibashjian · 2025-09-05 23:48
Anyway, thanks for a reminder to install fail2ban, this nonstop bruteforce traffic is annoying.
Aristóteles Amadópulus · 2025-09-06 06:40
How can I adjust my monitor? I am using linux with Xorg on a laptop (builtin monitor) with an intel GPU.
It is quite bad with dark colors, the rest is fine. The issue is mostly apparent in games, but it sometimes bothers me when looking at pictures or videos too.
The contrast test at lagom.nl (http://www.lagom.nl/lcd-test/contrast.php) confirms the problem. At max brightness, I cannot see the blue stripes 1 to 4 or the first stripe in the red, purple, yellow and white bands. It gets much worse when I adjust the backlight to fit the ambiant light.
My gamma is fine (according to http://www.lagom.nl/lcd-test/gamma_calibration.php), and I can't adjust it higher without smudging all light shades. I would need to set it to 1.5 to pass the contrast test on the darker part of the blue band (compared to 1.1 now). I would like to change only the dark parts.
Is there some way to adjust the contrast setting on my builtin monitor? Or possibly a more generic way to change the "curves" of the graphic card (the page for the gamma test shows a windows utility for nvidia cards)? The only answers I could find online were using xrandr (not enough control) and xcalib (can only reduce contrast)
Hong, Guil Dong · 2025-09-06 10:16
>>88709
Try ddcutil. You can use ddcui as a GUI frontend. I used these to adjust my desktop's monitor, which has no OSD.
J.C. Denton · 2025-09-06 10:40
>>88711
Sorry, I forgot to write it but ddcutil doesn't find my display.
i2cdetect doesn't find any DPDDC device either only gmbus dpb, dpc and dpd, and unrelated devices.
Faye Valentine · 2025-09-06 18:46
>>88706
This is one one day of f2b running, here's a list of IPs (for the same kind of crawler/scraper botnets who will proceed to try to bruteforce them lol):
193.46.255.244 103.101.162.38 46.20.109.239 196.251.115.108 91.224.92.79 80.94.93.119 141.98.10.225 80.94.93.233 45.135.232.92 193.46.255.33 193.46.255.159 193.46.255.20 193.46.255.7 103.172.205.139 91.224.92.28 164.52.50.2 194.233.85.56 91.224.92.106 118.219.234.233 103.31.39.240 34.175.118.185 104.208.108.166 209.141.47.217 177.157.206.193 193.122.200.89 219.78.189.19 193.46.255.103 91.224.92.108 188.166.242.21 65.20.147.45 109.123.252.28 34.66.72.251 43.156.35.175 41.216.178.119 103.30.194.191 36.67.70.198 194.12.32.194 103.153.190.121 81.192.46.35 185.213.164.127 185.213.165.72 36.64.68.99 209.38.111.217 62.182.118.138 61.216.7.163 47.242.206.240 111.94.162.252 103.98.176.164 167.172.153.88 101.36.124.127 186.210.68.49 187.12.210.250 192.145.169.26 102.88.137.80 198.24.79.245 138.68.12.170 193.46.255.217 102.90.34.90 139.59.142.156 91.224.92.32 213.55.85.202 209.38.91.119 49.206.195.207 65.20.166.163 193.46.255.99 45.78.213.163 45.78.213.221 45.238.112.148 65.20.191.12 76.11.71.36 155.93.89.195 23.95.37.90 186.179.80.12 162.241.127.152 115.88.121.73 120.157.208.115 122.54.18.220 59.24.28.114 188.194.11.247 187.174.238.116 162.241.29.37 193.32.162.157 119.197.87.141 144.172.109.4 47.239.183.181
Vasya Pupkin · 2025-09-06 21:08
I'm struggling to see how to maintain anonymity in the face of OSINT-savvy individuals, without having to rebuild my digital life from scratch and part with my digital possessions. As a law-abiding citizen, I'm not worried about government agencies; it's the malicious actors I'd rather keep at bay.
For instance, I have an old Steam account with thousands of games, which was linked to my primary Gmail address
and original IP. Even if I change the email, password, username, browser fingerprint, and start using a VPN (which would significantly slow down game downloads), they still possess historical data that could be exposed in a breach. Other services may not fully delete accounts, as seen with adultfriendfinder.com, and GDPR requests are only applicable sites that don't already know that I'm not european.
Luckily, I've avoided significant data breaches and there aren't substantial archives of my online activity. Nevertheless, I'm uncertain about the best approach to protect my anonymity. All I know is that I require two
additional emails to segregate my digital footprint without compromising functionality or performance. Using virtual machines or heavily secured browsers isn't a viable solution for me.
John Rain · 2025-09-06 22:51
>>88718
You’re absolutely right that “perfect anonymity” isn’t really achievable once a long-term account history, past IPs, and linked identities exist. The key is to separate damage control (limiting what past accounts reveal) from operational security going forward (compartmentalizing new activity).
1. Accept that legacy accounts can’t be made fully anonymous
Your Steam account (and anything tied to your original Gmail/IP) can’t be “cleaned” in a way that erases its historical fingerprint. Those services will always have backend logs, even if you change visible identifiers.
Instead of trying to retrofit anonymity onto them, treat those accounts as pseudonymous but linkable: fine to keep for convenience, but don’t use them for anything you want to stay separate.
2. Build compartments for the future
Since you don’t want VMs, Tor, or heavy setups, stick with lightweight compartmentalization:
Primary identity: Keep using your Steam, Gmail, banking, shopping, etc. -> linked to your real self.
New pseudonymous identity: Create fresh accounts with new emails (e.g. ProtonMail, Tutanota, or even Gmail if you keep it isolated). Always access them via VPN or a separate browser profile. Don’t cross over.
If you need two emails, you can structure them like:
Email A ->“utility pseudonym” (forums, communities, low-risk stuff).
Email B -> “sensitive pseudonym” (things you really want isolated, like activism, dating, or projects).
3. Limit exposure from old data
Assume anything in an old breach could be connected back to you if leaked. Don’t reuse usernames, handles, or unique strings from your old accounts.
Periodically check services like haveibeenpwned.com to know if any of your old accounts show up in leaks.
For peace of mind, you can disable or delete unused old accounts (even if deletion is imperfect, it reduces the attack surface).
4. Practical performance balance
VPNs will indeed slow down downloads. You don’t need to pipe everything through a VPN. Use it only when you’re doing things that require separation, not for game downloads or Netflix.
For browsing, a dedicated hardened browser profile (e.g. Firefox with containers, or Brave) gives you separation without the weight of full VMs.
5. The realistic bottom line
Your old life isn’t going to be made anonymous retroactively. That’s okay - malicious actors generally exploit low-hanging fruit (password reuse, obvious linking, reused handles).
The best move is to draw a clean line today: don’t mix old and new identities, keep them compartmentalized, and only harden the privacy of the new one.
In short: don’t waste energy trying to anonymize what’s already tied to your name. Instead, keep legacy accounts for convenience, and build new pseudonymous compartments for anything you want private going forward.
Neo · 2025-09-07 00:08
>>88719
Thanks chatgpt bla bla bla
Shogun · 2025-09-07 08:06
>>88718
>As a law-abiding citizen, I'm not worried about government agencies;
GET OUT OF LAINCHAN I am angry
Bobby Newmark · 2025-09-07 10:22
>>88718
In addition to what >>88719 mentions, you can also spread misinformation. There are various ways of doing this - create and use accounts in your name with purposefully false information, spoof your location to a place you've never been to, etc.
This video by Mishaal Khan goes more into depth on the process:
> Go St*lk Yourself: Privacy Through OSINT w/ Mishaal Khan | 1-Hour
https://www.youtube.com/watch?v=tJEGBmQjh-8
There are also the IntelTechniques data removal guides:
https://inteltechniques.com/links.html
Ignore the bots and the FUD.
Elliot Alderson · 2025-09-07 11:49
>>88718
How tech savvy? Random kid who can google and look up breached databases or something more advanced?
Yu-ichi · 2025-09-14 21:52
>>88720
I think he's using local AI to rewrite his content and avoid stylometry detection. We should probably do that too, so we don't stick out like a sore thumb.
>>88722
I like to sleep fine at night.
>>88723
I've compiled a list of sneaky tricks, like faking my GPS location within an Android VM and posting social media updates with fake location sharing options. I also upload photos or documents with fabricated metadata to websites that don't strip it. That sort of thing. But I'm saving the more heavy-hitting tactics for an upcoming OSINT ARG. Honestly, I'm still figuring things out, but I'd be happy to share some sneaky tricks I've picked up so far if you're interested. Not saying they're revolutionary or anything.
I'll check out your video. I've read a lot of Mike Bazzell's OSINT Techniques 11th Edition, and while I picked up on some useful tips that I apply to stay under the radar, I think he glows. He has an ex-FBI background, and sometimes his advice is questionable – like promoting ProtonMail despite them sharing data with French authorities over a kid who missed school for a climate protest.
>>88724
I don't know, but when 4chan gets upset with someone, do they suddenly become NSA-level hackers or something?
Yamaoto Toshi · 2025-09-15 15:53
Choosing host provider, would like to hear other people's experiences.
I'm hosting a website and must remain anonymous to protect users, and I will only pay in XMR. I'm currently using one of the recommended privacy/freezepeach services with a track record of defending customer sites instead of just tossing them away. Icelandic. Price went up to about 460€ a year.
I've discovered another service which takes XMR, but their emphasis is on cheap game servers in Germany and some of the content people post to my site could be in breach of their ToS. We have been raided before and another similar site has had to content complaints made to their host, so it's not paranoid to think people might try to have my site taken down. On the other hand, there is a well-established site hosting similar content also using this host without issue, so I wonder if they really care about these ToS until someone complains. The price is about 46€ a year. 10 times cheaper.
My two main concerns with moving to the cheaper provider are:
- glownerds deciding to access the server legally through the provider (unlikely, but they'd be getting user account details)
- raiders reporting the site and getting it shut down without warning (we have hourly remote backups but it's still a pain)
Batou · 2025-09-15 16:22
>>88897
>don't have social media
>don't share personal information
>use linux and tor browser
>if based in usa -> go online during moscow standard time office hours
>if based in russia -> go online during eastern standard time office hours
There, I solved OPSEC.
Trinity · 2025-09-15 17:35
>>88918
nta but i seriously hope you're just havin a giggle
Faye Valentine · 2025-09-15 19:42
>>88897
>we should do that too
no don't, I hate it. dread has informal style guidelines that people use in order to evade forensics. i like to think that image boards as a whole have different implicit styles that undermine it, I've noticed this on lainchan in particular before the advent of LLMs. iykyk
Vasya Pupkin · 2025-09-16 16:06
>>88943
Acoustic panels or like a normal human being furniture.
Roger Pollack · 2025-09-16 16:34
>>88718
>As a law-abiding citizen, I'm not worried about government agencies
Good luck when they start incrementally make everything you take for granted illegal. Eventually it will be illegal to breathe.
Anonymous · 2025-09-16 17:54
Are TrueCrypt volumes created back in 2010 using default options (AES, RIDEMP-160) and a 16 character password still secure with current hardware (RTX 5090) and software (hashcat)? What are the implications of that for the data we encrypt today?
Nemissa · 2025-09-16 20:12
>>88918
>if based in x then go on during x time
This isn't really feasible, Unless you're some sort of NEAT without a day to day life. This would REALLY Have to depend on your threat model and how much 'danger' you're in I suppose.
>Don't have social media
Whilst I subscribe to doing this, by not using my social media. I have not outright deleted them for various reasons. Using it as a false normal person cover really works to throw the system off, perhaps I might access it every now and again to show activity. Yet it doesn't tie in with any other online / internet presences or identities in which I possess.
>Don't share personal information
Pretty dead simple and obvious in not providing information that can lead directly back to you, but also this can tie in with what I was saying in creating a false cover with social media. Posting information which may seem personal but is completely untrue and is in no way negative by any means. If anyone is truely tracking you , chances are stumbling across this information is enough to throw them off by some regard or buy you more time.
>I Solved OPSEC
I wish only these few steps you mentioned were more than just the minor part of OPSEC itself but realistically we both know that is not true.
A list of things for me to mention in this one reply would be massive.
The Phantom Phreak · 2025-09-17 09:54
>>88950
The first step with chasing ghosts is that confirming the ghost exists. You can just deny them that privilege.
Delilah · 2025-09-17 10:10
>>88897
> But I'm saving the more heavy-hitting tactics for an upcoming OSINT ARG. Honestly, I'm still figuring things out, but I'd be happy to share some sneaky tricks I've picked up so far if you're interested. Not saying they're revolutionary or anything.
If you're open to sharing them I'd love to hear about them. Sounds interesting.
Tomohisa "Tom" Kanezaki · 2025-09-18 08:40
are all the goody goody devs in a bubble where they think making their code "understandable" makes it better? is the actual reality that some code saying it does something (via variable names, comments, what file it's located in) doesn't hold sway on what it actually does in terms of what change you need to add, or what invariant you need to deduce? why is their code quality such garbage when they all follow these supposed best practices and consider themselves superior to the boom booms?
Cat Mother · 2025-09-21 16:15
why is this happening??????
# echo --prefix=~/usr
--prefix=~/usr
# echo prefix=~/usr
prefix=/root/usr
Motoko Kusanagi · 2025-09-21 20:46
>>89034
Because bash is weird
https://www.gnu.org/software/bash/manual/html_node/Tilde-Expansion.html
>Bash also performs tilde expansion on words satisfying the conditions of variable assignments (see Shell Parameters) when they appear as arguments to simple commands.
--prefix=~/usr doesn't satisfy the conditions of variable assignments because "--prefix" cannot be the name of a variable.
Guthrie · 2025-09-30 12:16
Is there a better way to deduplicate files? I am working with untrusted input so in my mind the only acceptable choice is a secure cryptographic hashing algorithm. Part of my workflow is moving files to a directory and running this code.
cd /path/to/directory
for file in ./*; do
filename=$(basename "$file")
ext=$(echo "$filename" | awk -F'.' '{print $NF}')
hash=$(openssl dgst -r -sha3-512 "$file" | awk '{print $1}')
mv "$file" "$hash.$ext"
done
In case you are wondering why I am using openssl for hashing and not a native keccak implementation
https://eprint.iacr.org/2023/331
>This paper describes a vulnerability in several implementations of the Secure Hash Algorithm 3 (SHA-3) that have been released by its designers. The vulnerability has been present since the final-round update of Keccak was submitted to the National Institute of Standards and Technology (NIST) SHA-3 hash function competition in January 2011, and is present in the eXtended Keccak Code Package (XKCP) of the Keccak team. It affects all software projects that have integrated this code, such as the scripting languages Python and PHP Hypertext Preprocessor (PHP).
fsociety · 2025-10-01 01:55
how to get mobile chrome (fork) to open the multipart file it produces with the page download button? other than from the downloads list.
Lady 3Jane.. · 2025-10-01 02:32
https://vesta.sourceforge.net/
Should I care about vesta for my projects? It seems forgotten, the alternative I see is Kconfig which is cool only because of nconf.
Lunch · 2025-10-03 09:48
Beginner question about static compiling:
If a program lists SDL2 as a dependency (the only runtime dependency), can i statistically compile said program so that i don't need the sdl2 library installed on my system at runtime?
SHODAN · 2025-10-03 10:30
>>89195
https://stackoverflow.com/questions/6578484/telling-gcc-directly-to-link-a-library-statically
woah did i just google it? sorry sorry. now you just have to figure out the makefiles, good luck have fun.
Molly Millions · 2025-10-08 02:28
What are the least bad VPS providers? My current one's website portal thing blocks my home IP for some reason. I can't even let them rip me off without also paying for a VPN. I don't need an uber privacy respecting one just one that doesn't block me for no reason and will let me open a fuarrrrking SMTP port. Thank you.
Joe Bloggs · 2025-10-08 04:03
>>89247
Search "low end talk vps offers", read reviews (both in comments and the internet in general by searching "provider name reddit" for good looking offers for example), ping test IPs.
Marly Krushkhova · 2025-10-08 12:41
I'm going to try to make a seedbox/media server, but I really want to do the configuration on an Ubuntu server first. I was thinking of configuring an image in either qemu or vmware and then copy it over, but is that too involved? I haven't looked at the machine I'm going to be installing it on yet and fear that even if I successfully move it, I will be confused redoing the LVM partitions since that's not something I am good at. Should I just stick to using a livecd and write a script to manage installing everything or will I get something out of doing it the hard way?
Any recommendations for software would be cool too. I was just going to set it up with swizzin.
Joey · 2025-10-08 15:10
>>89250
If I wanted to do that, I would definitely use nixos... I mean, if you make it work in VM, to make it work on remote server it's literally just copypaste config file and reboot. With Ubuntu you'll have to repeat the same steps on remote and it's usually a lot of manual steps like install1, configure 2 , install something more, check, find out, configure service etc, it's also can get messy and easy to forget all the steps you did yo make it work in the correct order with all the little details, if the task is compound and has many steps which you only figure out as you go.
Project 2501 · 2025-10-08 15:50
Playing video in the framebuffer without X/Wayland - is it possible? I have searched but results are confusing.
藤原純一 · 2025-10-08 17:24
>>89252
mpv --vo=drm works perfectly for me, I wanted to take a screenshot but it'd just take up the whole screen and I couldn't find a way to get the geometry right.
Cutter · 2025-10-11 07:03
why do they call it "systems programming"?
do they call what dog walkers do dogs walking?
Wintermute · 2025-10-13 00:02
In this film they claim 1G is no longer monitored/surveilled. Sounds like false propaganda to me, what’s your lain’s take?
Btw, enjoyable 2.5 hours, but nothing new; I’m a harsh critic
Unidentified · 2025-10-13 00:39
>>89336
Wow, if that baby wasn't gonna come out retarded already, even if it's just a prop gun blasting blanks.
What's the obsession with progs and needing pregnant women be in combat roles? Double-kill for the meat grinder?
Incognito · 2025-10-13 07:45
>>89336
>In this film they claim 1G is no longer monitored/surveilled.
The idea behind such a claim is kinda intuitive, but not fool-proof. It's the same kind of argument as claiming that today you could communicate securely via oldschool telegraphs because everyone is too busy with decrypting encrypted messages on online platforms, hacking computer networks, figuring out backdoors to mobile devices, pulling profiles from video surveillance footage, and analyzing all sorts of data you leave behind on social media and the internet as a whole. The only reason why such a downgrading might work is that the authorities aren't aware of it and if people don't know to look for you. But once that first security measure is toppled over, you can basically kiss privacy goodbye, because it'll be rather easy to apply the old methods to these old systems and start monitoring and wiretapping your lines like they used to (what's solved once pretty much stays solved as long as our collective memory isn't impaired or lost totally for some reason). Maybe after another 100+ years these technologies will be so retardedly rudimentary to the authorities that they won't even realize someone could use 'em, especially if in the meantime we were to witness such an explosion in the development of new innovations that nobody could keep track of everything, apart from the latest innovations and measures because those are just that demanding to work out and penetrate. But don't worry, if and when AI becomes actually competent, I'm sure nothing, not even the simplest and most basic technologies will be overlooked as far as electronic communications of any sort goes.
Hong, Guil Dong · 2025-10-13 08:35
>>89336
>>89337
>>89343
It's just a special case of "security through obscurity", search for the term. It sometimes works ofc, it's not interesting from research viewpoint because it's fundamentally unreliable, but in practice it might be usable, all depending on exact exotic ways you come up with and your specific circumstances.
Nguoi La · 2025-10-13 09:00
Is 1G even usable at all? Haven't all antenna been decomissioned by now?
XERXES · 2025-10-14 08:36
Why are browsers that aren't spyware so fuarrrking retarded?
Crazy Jake · 2025-10-14 08:38
>>89360
Instance was paulgo.io in case anybody's curious
Agent Richard Gill · 2025-10-14 18:53
why are un*x cunts okay with x.509 when its the complete antithesis of the un*x way
>wanna pipe some stuff here?
>NOOOOPE, you have to connect to it in some gay way that propagates the string "myserver.com" through the APIs so some part can know to check the key for myserver.com
this soykaf breaks everything
imagine if cat asked for the file name as a parameter so then it could go open the file itself
also x.509 is insecure as fuarrrk monkey dick trash
Bobby Newmark · 2025-10-14 21:57
https://github.com/yt-dlp/yt-dlp/wiki/PO-Token-Guide#guide-providing-a-po-token-manually-for-use-with-mweb-client
I can't find serviceIntegrityDimensions.poToken after doing F12 > Network > filter by v1/player . What tab should I check for it? I checked Headers, Cookies, Request, etc. and still can't find it.
John Titor · 2025-10-15 02:17
>>89367
Go to youtube.com (not music), open a video that has CC/subs and activate subs with CC button in the player. Then find the request packet in network tab, go to Payload sub-tab, and look in Request Payload -> {videoId: ...} -> serviceIntegrityDimensions
BloodCat · 2025-10-15 08:30
>>89370
Do I filter with v1/player ? I get a POST method file called player?prettyPrint=false . Where is the Payload subtab? After clicking it, I only see (on the right) Headers, Cookies, Request, Response, Timings, and Security. I'm on Firefox by the way.
Hitomi · 2025-10-15 13:59
>>89371
Oh, my bad. It's the Request tab then. You should have multiple/many lines of pretty-printed JSON; if you only have one line then toggle off "Raw" to the right. poToken is the second-to-last object for me, when the video has subtitles available (but I actually didn't have to activate them this time). You are looking at the correct request so if you don't have a poToken object, try another video
Donna Hawthorne · 2025-10-15 14:04
>>89372
I found it, thank you.
Junichi Fujiwara · 2025-10-21 21:41
Is there some sort of self-hosted imageboard aggregator so I can browse multiple imageboards from one place? It'd be nice to have one unified layout and color scheme, something like Kuroba for desktop.
藤原純一 · 2025-10-22 16:20
How do i abuse ATS filters in my resumee?
Im thinking of pasting all the words in the background with same color, any smarter idea?
Cypher · 2025-10-26 13:36
not sure if this is the right thread
but would anyone here know where i could find a reliable place online to have someone pass cert tests for me
Tank · 2025-10-28 01:49
>>88654
I'm trying to run GNU APL on Arch Linux. I used the gnu-apl package from AUR (https://aur.archlinux.org/packages/gnu-apl). The package builds fine but the apl interpreter crashes whenever I try to execute something. Even 3 + 3 doesn't work. The binary distribution of GNU APL (apl-bin) works fine. Also, I'm aware that I should just use Dyalog but I wanted to test other options. I have attached the backtraces to this post.
Hououin Kyouma · 2025-10-28 21:17
>>89470
No chance of that happening. For one if it's CompTIA they photograph you and take two forms of ID. If you ever want to take another test from them you'd hypothetically have to use the same person to take the new test for you. Not realistic. Certs aren't worth a damn anyway as I've found out--they're not going to get you a job if that's what you're trying to get them for. At some point in the past they had weight but nowadays they don't, that ship sailed.
Mitnick · 2025-10-29 08:54
>>89481
i've already got the job and skills, just want the certs as a decoration and a bargaining token for a better raise
cant remember where i read/saw it but someone was bragging about a way to get around all that red tape
apparently the test taker service would stealthily remote into your system and take the test for you, so even if its one of those where you need to be on cam, just make yourself look like you're testing and pass
Lain Iwakura · 2025-10-30 12:54
I'm quitting emacs since it's becoming too much of a burden to maintain and further modify, I also want something that's more portable, but I do still need a TODO app so I'll ask the following
Are there any free as in freedom TODO apps that allow dates to be added to said TODOs and also show a list of TODOs descending by how soon they need to be done? For example, TODO <DD> should show up after TODO <DD-1> and so on.
Cat Mother · 2025-10-30 13:53
>>89489
Thanks Mr. GPT. Now please tell your handler to go back to sucking paint.
>>89491
I just use a text file. Each task is a block of text inserted in deadline order and I delete it when it's done or obsolete. What more do you need?
HELIOS · 2025-11-01 13:32
>>89491
>I also want something that's more portable
There is also VSCode but I suggest that you try NeoVim. I personally prefer Emacs over (Neo)Vim but you may like it.
>I do still need a TODO app
How about Calendar.txt ?
>https://terokarvinen.com/2021/calendar-txt/
tl;dr
* Keep your calendar in a plain text file.
* Calendar.txt is versionable, supports all operating systems and easily syncs with Android mobile phone.
* One line per one day (or goals).
* You can use Grep
* It can be synced with Git or Syncthing or just rsync (or whatever)
Batou · 2025-11-01 14:43
>>89492
>>89504
I can't believe that I haven't thought of a regular .txt considering that org is pretty much that with some fancy highlighting, thanks.
>There is also VSCode but I suggest that you try NeoVim. I personally prefer Emacs over (Neo)Vim but you may like it.
I'll consider switching to neovim if vim doesn't suit my needs but it's unlikely to happen since I'm not planning to tinker too much anymore, I'm actually only planning to tinker with vim if it has serious annoyances.
VSCode has proprietary elements AFAIK so I'll reject it, I know that there's VSCodium but even extensions for basic functionality in certain languages are proprietary.