- 1 Post
- 14 Comments
You can get the disk serial with
smartctl -i /dev/.... Serial should be written on disk. Keep a mapping of disk ID -> serial.If serial is not visible without taking all disks apart, it’s a good idea to put a sticker with a copy of it on the side of the disk or disk tray depending on your NAS form factor.
Setting
webgl.disabledtofalseinabout:configallows to display the map.I’ll let you research the attack surface of webgl and see how this fits in your threat model.
4·3 years agoInteresting article, thanks a lot for sharing!
So the guy gave Xerox more than 2 years to fix a critical bug, that they acknowledged existed, and they still haven’t done anything. This tells me all I need to know about how Xerox values the security of their customers. And the VersaLink are not exactly cheap printers ($700 to ~ $10k depending on model), not that this would be an acceptable response even on the cheapest, not network connected, printer.
2·3 years agoOn LibreWolf (and other Firefox based browser), you should be able to force the normal context menu with Shift + right click. But I don’t know if moodle is using additional tricks to also block that.
Switzerland voted on a 12x initiative a few years ago: https://www.businessinsider.com/switzerlands-112-initiative-why-executives-are-worried-2013-11
Unfortunately it got rejected after big companies threatened to fire their employees and leave Switzerland if this was accepted, that this would destroy the economy, and so on…
Others disagree. According to World Radio Switzerland, Novartis, Nestle, Bobst, and SBB sent thousands of employees letters asking them to vote no to the 1:12 initiative, arguing that it would make Switzerland a less desirable place to do business. Earlier this year the CEO of commodities giant GlencoreXstrata said the company would consider leaving Switzerland if the law passed. “I can’t believe that Switzerland would cause such great harm to its economy,” Ivan Glasenberg said in an interview with the SonntagsZeitung. “And I say that not just as the head of a company, but as a Swiss citizen.”
3·3 years agoIn Orbot, you have a “VPN mode” toggle, when enabling it, it will create an Android VPN connection which “torify” the traffic of all apps you have selected in the “Tor-Enabled Apps” section.
Unless this changed recently, Android only support a single active VPN connection at a time, so unfortunately this Orbot mode cannot be used in conjunction with a standard VPN.
0·3 years agoTelemetry and Suggest are two completely separate things.
- telemetry goes to: https://incoming.telemetry.mozilla.org/submit
- URL bar “keylogging” goes to: https://merino.services.mozilla.com/api/v1/suggest
The only different between “online” and “offline” is that in “offline” mode what you type in your URL bar is not included in the telemetry sent after you have selected a suggestion. But this changes absolutely nothing to what is sent to the Suggest API endpoint when you type in your URL bar.
I’ve repeatedly provided clear evidence of what I said, you just keep mentioning a random code comment and interpreting it in a way which completely contradicts the actual code and what countless people have observed. So at the risk of repeating myself:
- A code comment does not prove anything.
- Your completely wrong interpretation of it even less so.
- Link to code supporting your claims or GTFO.
And how would that support your claim that this post is:
misinformation. No data is sent by default, you have to opt in.
The relevant parts from this code comment about the “offline” mode are:
Firefox Suggest suggestions are enabled by default.
The onboarding dialog is not shown.
Which correspond to the code I’ve already linked to.
case "offline": enabled = true; defaults.setBoolPref("quicksuggest.shouldShowOnboardingDialog", false); defaults.setBoolPref("suggest.quicksuggest", true); defaults.setBoolPref("suggest.quicksuggest.sponsored", true); break;The code you cited just says that users with locale “en-US” are enrolled in the “offline” mode.
Basically:
- locale = “en-US” => “offline” => opt-out
- locale != “en-US” => “opt-in” with all possible dark patterns to trick the user into accepting it: user has to click the small “Not now” text which does not look like a button on the top right corner to disable Suggest.
To summarize, the “offline” / “online” Suggest Scenario have absolutely nothing to do with the fact that Firefox sends data to Mozilla or not, it only defines if the Suggest feature is opt-in or opt-out. Is this naming extremely confusing? Absolutely! But at this point it’s clear that Mozilla has done everything possible to mislead users about what their “suggestions” really are.
So please, stop spreading misinformation while claiming that people trying to bring awareness about this awful “feature” are the ones providing false information. A code comment is not proof, your completely wrong interpretation of it even less so. If you don’t agree, please link to the relevant source code which would contradict the one I’ve linked to.
And how would that support your claim that this post is:
misinformation. No data is sent by default, you have to opt in.
The relevant parts from this code comment about the “offline” mode are:
Firefox Suggest suggestions are enabled by default.
The onboarding dialog is not shown.
Which correspond to the code I’ve already linked to.
case "offline": enabled = true; defaults.setBoolPref("quicksuggest.shouldShowOnboardingDialog", false); defaults.setBoolPref("suggest.quicksuggest", true); defaults.setBoolPref("suggest.quicksuggest.sponsored", true); break;The code you cited just says that users with locale “en-US” are enrolled in the “offline” mode.
Basically:
- locale = “en-US” => “offline” => opt-out
- locale != “en-US” => “opt-in” with all possible dark patterns to trick the user into accepting it: user has to click the small “Not now” text which does not look like a button on the top right corner to disable Suggest.
To summarize, the “offline” / “online” Suggest Scenario have absolutely nothing to do with the fact that Firefox sends data to Mozilla or not, it only defines if the Suggest feature is opt-in or opt-out. Is this naming extremely confusing? Absolutely! But at this point it’s clear that Mozilla has done everything possible to mislead users about what their “suggestions” really are.
So please, stop spreading misinformation while claiming that people trying to bring awareness about this awful “feature” are the ones providing false information. A code comment is not proof, your completely wrong interpretation of it even less so. If you don’t agree, please link to the relevant source code which would contradict the one I’ve linked to.
No, you are the one providing misinformation. The explanation you linked to is completely wrong. “offline” actually means that you are silently and automatically “opted-in”, so basically what everybody except Mozilla calls opt-out.
However, this does not change anything to the fact that these “suggestions” were silently enabled in Firefox 92, and that the opt-in dialog box was introduced only in Firefox 93. In addition, this opt-in dialog is not shown if you left your locale as the default “en-US” (“offline” = opt-out).
From your comment on this other post and the downvotes it generated on said post, while this post and your comment get upvoted, I guess neither you nor anybody even checked to see what “offline” means…
If you scrolled down a little from the link you provided, you would have seen that “offline” really means:
- Do NOT show the “opt-in” dialog to the user.
- Silently opt-in user to “suggestions”
So basically “offline” = “opt-out” and not opt-in.
There is something seriously wrong with Mozilla leadership. They keep alienating the small privacy-focussed userbase they have left, and then act surprised when Firefox’s marketshare keeps shrinking…
Baker needs to go and be replaced by someone who cares about Firefox long term viability instead of only caring about how many millions more they can add to their obscene salary while destroying Firefox and everything else that Mozilla built over the years.
I just plug all disks in my server, then run the following script to get the mapping GPTID -> partition -> disk serial:
#!/bin/sh glabel status | awk '/^gptid/ { print $1, $3 }' | while read -r gptid part; do disk="/dev/${part%p*}" serial="$(smartctl -i "$disk" | awk '/^Serial Number:/ { print $3 }')" printf '%s\t%s\t%s\n' "$gptid" "$part" "$serial" doneThen, when a disk fails, I just check with
zpool statuswhich one is unavailable or completely missing, and see to which serial it corresponds in the previously stored output of the above script.This script is for FreeBSD and assumes you add disks using their GPTID in your ZFS pool (default on TrueNAS), but it can easily be adapted to Linux with a mix of
lsblk --nodeps -o +WWN,SERIALand the symlinks in/dev/disk/by-id/.You can create random read to try to identify a disk (using
badblocksfor instance). If the bad disk is not completely dead, create random read on it and try to “feel” which disk is constantly spinning and creating vibration. If disk is completely dead, do the same on all other disks and feel which one is inactive.But writing down the disk ID -> serial mapping, if the serial is written on the hard drives is a lot easier and more reliable.