• 2 Posts
  • 427 Comments
Joined 2 years ago
cake
Cake day: July 9th, 2023

help-circle








  • I’ve had some amusing mixed experience with ChatGPT for this. When I asked about iptables rules to restrict podman, it was great. About podaman quadlets, though, which I first misspelled ‘quartlets’, it completely made it up, and even sent me a fake link to nonexistent documentation when I challenged it!

    • it’s more helpful if you ask the right questions
    • and its answers often give you ideas of what to google
    • Old stuff that has been written about many times over is more likely to get a proper answer
    • sometimes the gist of a wrong command/answer could still help me understand what to do with the right one

    Try to understand whatever you use from AI. At least understanding the general picture of what it means, and a basic idea of “this flag is for this; this option is for that”. AI can also help you with that understanding, but again beware of it completely making up something logically coherent but wrong.






  • Hah is there a rash of nursing home break ins that I’m unaware of?

    I mean, not Windows user lives in a nursing home. I wish! But some lose laptops on the train, and some even throw their computers away!

    Sure, most of the risk is remote through emails etc. Maybe you’re right. Maybe the balance is better the other way round: let all Windows Home users’ computers stay unencryptedv at rest, and keep encryption for Pro users. I grew up with a high focus on security; maybe I’m paranoid.

    But phones are all encrypted these days. Obviously they’re more mobile and at more risk, but that suggests to me that laptops are subject to similar, if smaller, risks.



  • That still happens without bitlocker. Computers are dropped. Facebook passwords are forgotten.

    I acknowledge automatic encryption is going to make some more cases of lost data, but, with respect, I think the benefit of making fewer cases of stolen data is worth it. I agree with the other commenter that users should be made aware of it more clearly.

    Also, as much as I hate the push to Microsoft accounts, I have to admit it helps mitigate this problem: if all ordinary users have an account looking after their master keys, then they can turn to that when they forget their login password etc. but the opportunistic thief on the train can’t (as easily). Not every grandma has a Millennial relative at hand to boot Linux to rescue files off her HDD. And for those who don’t like to trust their master keys to Microsoft/Apple/Google? There’s Linux. And external backups. And saving your password somewhere safe.


  • You know, this is actually one Windows decision I agree with. Encryption should be default, especially on portable devices like laptops. For an OS aimed at people who want to use their computers, rather than understand them, you have to choose an encryption that works by default for most of your non-tech-savvy users.

    If they want their data truly in their own hands, or full control, use Linux.

    If they want to use Windows, but not rely on a Microsoft account for recovery, get the bitlocker recovery key and write it down (which you can do).

    But I think this looks like a sane default.

    (Full disclosure, I don’t use Windows for anything I care about!)




  • Edit: I just realised your Edit was saying you’ve got legacy bios! So this is all irrelevant. I’ll leave it up in case it helps someone else.


    Could it be selecting the wrong SSD to put the boot loader on?

    When I reinstalled mint the other day on my laptop with an nvme and SSD (also dual boot) it labelled the extra SSD as sda and the original nvme as sdb, so it was going to try to put the bootloader on sda.

    I set up the partitions on the third option (1. Install alongside windows; 2. Wipe everything; 3. Set it up manually) and on the manual setup there’s a selector for the bootloader device just underneath the main section where you select partitions to use for /, /home, etc.

    IIRC you set the bootloader to the full device (in my case sdb) not the EFI partition (sdb1) and it works out out.