If you want to Travel to other Countries (Border-Control), you should know some things: Buy a older Acer Laptop with Micro SSD Harddisk and SATA CDROM Slot Buy a SATA CDROM Adaptor for 10$, open the Laptop and remove the SATA Drive put it into the SATA Adaptor Don’t put Screws into the Laptop to the Adaptorslot so that you can pull out quick the SSD drive Install Ubuntu Linux with LUKS Disk full encryption! DOWNLOAD here Buy a privacy Shield-Sticker onto the TFT To extend security use USB-WIFI Dongle for WIFI Connections! (MAC Address Spoofing) Or: Buy a older […]
Kategorie: Laptop
Major Tools for your IT Systems
A must „USE“ in these insecure days: nmap Portscan Tool use nmap -PN IP-Address to check failed Firewall Settings! arp-scan Network Scan to find active devices iftop to detect traffic and used Ports on a physical network Interface! ps aux show active processes on a Linux System htop more human friendly Process Monitor iotop human friendly traffic monitor from CPU/RAM to Drives Daily check Error Logs! Use always Firewalls and Disk/File Encryption! Don’t trust Hardware Protection (TPM) Chips most do communicate by clean signals on copper which can be read out by hardware hacking or magnetic fields! NEVER leave Hardware […]
Ubuntu 18.04 Backlight Control Command Line
By default the xbacklight command does not work on Intel HD Graphics: Workaround: sudo nano /usr/share/X11/xorg.conf.d/10-intel.conf: insert: Section "Device" Identifier "Card0" Driver "intel" Option "Backlight" "/sys/class/backlight/intel_backlight" EndSection now add to startup / autostart (lxde) : xbacklight -set 30
Outlook 2016 unsharp Fonts on Laptop Screen
If you asked for help on a new Windows 10 Laptop with Outlook 2016 cause the displayed Fonts unsharp or unclear check Outlook Settings -> Advanced -> Display -> set „disable Hardware Acceleration“ for the Video Card ! or check the Subpixel Rendering of windows 10 go: Search -> Clear Type Settings -> rerun all Dialogs -> select the best readable Window with Texts Remark: Can be a Linux Problem too! Seen on some OpenOffice Setups! Checkout if installed, the advanced Video Driver Software at System Settings or beside Clock Icons! (seen at ATI)
Linux: Systemd ignore console-setup settings
If you work on older Laptops and you use a Console only System Setup like on Debian there is a Bug on systemd and the console-setup package since years. After reboot all Font Settings seems gone. But the Settings are not real gone, cause systemd does not pull the settings on boot! How to fix? edit the crontab of root by sudo su – crontab -e insert the /bin/setupcon command on „@reboot“ means on every boot! @reboot /bin/setupcon > /dev/null 2>&1 save and exit, reboot now now the PC should echo big Fonts for old eyes „Terminus 20×12 Frambuffermode“
Security: Disable USB Drive mount for Users
If you share your Systems and you want to disable USB Drive connects there is a small solution. By default the gvfs Service handle all automounts and drive scans. On old Linux Systems you could purge the complete gvfsd „Backend“ but Ubuntu-Desktop forces some pakets to the default Desktop Package! If you purge it the working Desktop can be destroyed! It’s easier to disable the „USB Drivers“ called Modules from load on Start! Cause Rules are „Software“ and can FAIL unknown!! Howto? Edit the /etc/modprobe.d/blacklist.conf and add: blacklist usb_storage blacklist uas Update initramfs (Kernel Image) update-initramfs -u -k all reboot […]
Security: Isolated Browser eMail Programs
If you want to be more secure, on Linux you can isolate used programs on different Users! All you need is installed by default! Howto: Add a new User for eMail and Browser to the System with: $sudo adduser mailuser $sudo adduser webuser now install if not installed by default „gksu“ User Switch $sudo apt-get install gksu copy now the default App Links to webuser’s Home Desktop, for mailuser enter mailuser’s name $cp /usr/share/applications/firefox-esr.desktop /home/webuser/Desktop/firefox-esr.desktop edit the firefox-esr.desktop by right click on nautilus or a editor and change command line: old: /usr/lib/firefox-esr/firefox-esr %u to: gksu -u webuser -w "/usr/lib/firefox-esr/firefox-esr %u" […]
Security: Protection Against Cryptware Wannacry
You heard perhaps last day’s about the major problems of Attacks to Systems with the „WannaCry“ Crypto Ware Howto protect yourself? Enable the Firewall on Windows Systems!! Always! Update daily the Virus Scanners and Windows Patches! Disable and CLOSE Ports you never need! SMB Protocol is a open unencrypted Transfer Protocol! Use a second Router with Firewall behind your ISP Router or Modem! (openwrt, pfsense) Check with nmap Portscanner Tool the taken Rules and check if the work! For Network Access use ALWAYS SFTP with Authentification over KEYs Logins (Two Factor: Key and Password for unlock the Keyfiles id_rsa) For […]
Debian Ubuntu Laptop mods for SSD HDD and a full encrypted with luks
Major INFO 06-2015: Do not set tmpfs on ubuntu 15.XX or Systems with systemd!!! This block PC boot !! If you want to setup a Ubuntu/Debian Laptop with a full encrypted HDD use a „alternate“ CD/DVD. After Setup you have to change some little Parameters to extend the lifecycle of the SSD Chips disable Swap if you have more than 4GB Ram enable a RAMDISK with tmpfs for logs, caches of Browsers install cpufrequtils for CPU freqscaling install laptop-mode-tools to set powersave mode for hardware modules install xbacklight to reduce backlight energy Steps: open a Console and change to root […]
Linux Tip: Split Console Screen on Widescreen Laptop / PCs with „screen“ and „terminator“
Current Laptops / PCs uses 16:9 Widescreen Displays and if you dont want to use Xorg (Gnome,unity,Openbox Desktops) you can use on Linux Console the program called „screen“ it offers: – Split Consoles horizontally and vertically – disconnect the screen and let the scripts/commands active on remote Systems – reconnect if the remote Session was broken cause network problems On Gnome or unity you can use „terminator“ see: – manpage of screen – http://unix.stackexchange.com/questions/7453/how-to-split-the-terminal-into-more-than-one-view