root wants to login

"please confirm operation through your hw signing device"

i wonder if someone has made something like trezor integration to linux login management

should we use external hardware signing device instead of root password to prevent privilege escalation through keylogger?

make sure xinput is not installed for tiny bit of protection,

although there sure are other ways to do the same

though im not sure why it would not find a device which it just listed...?

lxc may add some security

terminal:

# xinput test

Unable to connect to X server

terminal through x2go client:

$ xinput list

"pointer" id=0 [XPointer]

"keyboard" id=1 [XKeyboard]

ubuntu@u3:~$ xinput test 1

unable to find device '1'

ubuntu@u3:~$ xinput test 0

unable to find device '0'

ubuntu@u3:~$

whenever you type

sudo pacman -S application

then you type sudo password

your root may have been compromised

instead do

shutdown -r 0

login as root

pacman -S application

shutdown -r 0

login as normal user again

wow this is fun way to use computer

sudo / su is fake security and password is super easy to steal

only way to protect this is to only login to root after fresh boot without logging to any possibly compromised user level account

or maybe run qubes os

nostr:note1xds03mnh2lej9j6q7q268w00xj702xnjyzslg8zye06p4cw8g33sarwk4a

any #linux user can install #keylogger and steal #sudo password whenever root types login password

wow such system security

https://superuser.com/questions/301646/linux-keylogger-without-root-or-sudo-is-it-real

see first answer for instructions

edit: primal breaks the link only in preview, works now

updates:

- improved / fixed video loading

- added npub support

example npub link:

(;v1 == load only videos, ;v == load images and videos, neither == load only images)

ps. primal breaks the link, (do copy paste)

https://bafybeib4img4dhsxvyfdtks7ifpaeabe2hqc6nta6ssl2oepuljb5lktzi.ipfs.dweb.link/media.html#npub1tsrs6ptjnq5hluxawfme5sfxalfscapequm3ej0yfw65scwu8lys8q7y7l;v1

updates to media viewer (link in my profile)

- images take full width (way better on mobile)

- maximized images are centered

nvm found trick to fix

unicode-bidi: plaintext;

???

https://rentry.org/x43w52

ok wtf

looks like following. why?

hello world

hello #world#

#css #dev

#primal #fix

npubs can be replaced with #p2p #blockchain #dns

it appears, just too much text/links within element

rarely do i debug why toggling css class takes seconds rather than milliseconds

#primal can you add web+nostr: protocol handler?

iris is broken atm

lotsa nameservers out there

https://public-dns.info/nameservers.txt

unfortunately none of these seem to resolve decentralized domains

trying to resolve name here...

./curl --dns-servers $(ns=$(cat ~/nameservers.txt | head -n 65000 | tail -n 5000 | while read ip; do echo -n $ip","; done); echo ${ns::-1}) ipfsgate.bit

naah, doesnt work