Carl

Pretty much every supermarket near me sells prepaid phones. And yes, they work exactly as you described. You buy minutes or data to add to your account, and then it sits in your account until you use it. Before the memory shortage price gouging BS, I could go get a burner phone for like $75 at my local Walmart or Target. No clue what they’d cost now, but they’re likely still pretty cheap as far as phones are concerned. The phones won’t have great hardware, but they’ll at least be able to run Android and can do all the things that modern smartphones can do… Albeit much slower than a flagship model.

As far as privacy goes, that will largely depend on your local laws. Drug dealers have historically used prepaid phones to avoid being tracked, (buy a phone card with cash, so you never have to use a debit or credit card to pay,) so governments started passing Know Your Customer laws that require the phone companies to verify and log your ID (tying it to your prepaid phone number, the same way a regular phone bill is tied to you) before they can sell to you. That way when the cops subpoena the phone company to see who owns a specific phone number, the company can actually tell them.

They make sprung flip-top covers specifically for this reason. It’s just a little adhesive square/circle that you stick over the power/reset button, and it has a flip-top that automatically springs closed again.

I mean, would you want it to serve clients outside of your subnet? I guess maybe if you had something like a guest network. But I tend to take the “fuck it, you get basic service and nothing else” approach to things like guest networks.

Isn’t it a potential security issue to have your pihole serve things on any subnet, because it allows an improperly configured firewall to stab at your pihole? I think you can specify any additional subnets it will serve in the settings somewhere. But IIRC, the default behavior is to intentionally drop traffic from unknown subnets. But that’s just off the top of my head.

I’m somewhere in the middle, because comments like yours actually reinforce my concerns. A reverse proxy isn’t really doing anything to make you more secure, unless you’re using it for some sort of access control. It hides which ports you’re using, and allows you to encrypt your traffic with TLS… But it doesn’t add any additional security to the services you are exposing.

Maybe if you use it for access control, to add a secondary username/password to the services. But that breaks most legitimate things (apps, mostly) that try to reach the double-password-protected service. Because a user on a web browser may be able to type in two passwords, (one for the reverse proxy, and then one for the service itself) but an app will try to pass that info automatically using headers.

Any vulnerabilities in the services will still become potential attack vectors. Anyone who remembers the Huntarr debacle will know exactly what I’m talking about, because a single service being vulnerable can do a lot of damage. Yes, containerization does a lot to help mitigate damage by excluding access to everything except what you give it. But it won’t completely stop things from going wrong.

I have deadass considered just taking like 10g of shrooms to see if it would rewire my brain and potentially fix some of the BS that COVID caused. I used to do heroic doses (+15 hits) of LSD in my youth, so it’s not like the trip would be unfamiliar.

You’re assuming it would immediately try to do something. A decent honeypot would take time to quietly gather usage data, instead of immediately phoning home.

Yeah, if you’re trying to honeypot someone with an OS-level rootkit, Lemmy would be a pretty silly place to do so. After all, there’s like a 99% chance that whoever gets it will be installing their preferred version of Linux. Hell, I’d even go as far as flashing the BIOS, because that’s an easy step that only takes an extra 10-20 minutes.

Honestly, the most surprising part about this is that NetHack is still getting active releases. Looks like 5.0.0 landed just a few months ago?

I think the point is that if you load an empty profile (no photos, no videos, no apps, etc) but your phone storage is nearly full, it could throw up a red flag.

Even on iOS, you can disable biometrics by entering the power/SOS menu. Just hold the lock button and volume down for like two seconds, and biometrics are now disabled until the passcode is entered.

Worth noting that this doesn’t actually re-encrypt the device. The device boots in an encrypted state, and entering the passcode allows the phone to unencrypt itself to function. But disabling the biometrics doesn’t re-encrypt the device. You would need to reboot to accomplish that. But if you’re able to access the power menu, you’re probably able to hit the “Power Off” option too.

I only make the distinction because cops have started imaging devices after confiscating them. If they manage to image your device while it’s unencrypted, they can take their time with whatever new exploit/bypass is discovered in the future. But if the device is encrypted when they image it, they’d only get an encrypted data blob and would need to actually break the encryption instead of being able to use a passcode bypass method.

iOS actually has a hidden “reboot if inactive after a little while” feature, specifically to re-encrypt an idle device. Most users only encounter it when they wake up in the morning and have to enter their passcode. But the point is that cops usually process devices in batches, so it usually takes them at least a few hours to get to your device. So if the device has been idle for a while, it will quietly reboot to encrypt itself. This also helps protect against future passcode bypasses that may be discovered, because an attacker would only get the encrypted data blob if they bypass the code on an encrypted device.

I see. I think you can do that, but it will need to be done during the initial setup. You could also try FileBot for the initial file renames, if you can’t get the initial file discovery and setup working.

Ah yeah, that’s because it will use the folder to store extra files as well, like subtitles, metadata, poster art, etc… Just dumping every media file into a single “Movies” library isn’t great, because you’ll have a ton of overlapping files. Separating them into their own folders allows you to store those extra files alongside the media.

My only guess is that they were trying to map their config/downloads/library folders to the same location. And yeah, that probably wouldn’t work.