The feature request includes the phrase “Behind the scenes there would need to be some cryptographic magic,” because it’s just yet another “I have a sweet idea for an app, bro, I just need you to do the coding for me” pitch.

The project has 766 contributors with pull requests being accepted all the time. That’s not a walled garden.

Forgejo, a Gitea fork used by Codeberg. I chose it because it’s got the right balance of features to weight for my small use case, it has FOSS spirit, and it’s got a lovely package maintainer for FreeBSD that makes deployment and maintenance easy peasy (thanks Stefan <3).

Friendly reminder that lemmy votes are public

Sorry, all of the linux stuff is just specific to my own preferences/environment - if you’re more familiar with windows it would be best to just use that for testing. Presumably it will come with windows installed?

If so, put some programs on a normal usb storage device and then install/run them from there.

• For the cpu stress loading, you can use CpuStres: https://learn.microsoft.com/en-us/sysinternals/downloads/cpustres
• For temperature monitoring, you can use Open Hardware Monitor: https://openhardwaremonitor.org/
• To test the microphone/camera, I’d just use whichever app you’ll normally be using them for

As for the rest:

1. When you first turn the laptop on, at the red Lenovo splash screen, press Enter repeatedly to get into the boot menu. Once there, it’ll give you a list of options with associated keys to access them - go to “BIOS Setup - F10” (or something similar, not sure of the specifics on the X1C 6th gen). If it prompts you for a password to enter that, it’s locked.

2. To test all the ports, plug your usb stick with the apps on it into each of the usb ports and make sure it shows up in explorer; try the same with an sd card if you have one; plug in to a wired ethernet connection and make sure you have internet access through it (disable wifi at the same time to make sure); plug headphones into the jack and make sure they work; plug into an hdmi display if you have one.

3. To check battery health, run Command Prompt with administrator privileges, then run powercfg /batteryreport to generate a battery health report

Good luck!

Personally I’d do the following:

• boot into the bios config menu to make sure it’s unlocked (if it’s locked and they don’t have the password that’d be a dealbreaker for me)
• boot into a live linux environment from usb and test both batteries, keyboard, trackpoint/trackpad, speakers, microphone, wifi, and all external ports (T480 has 2 usb-c, 2 usb-a, ethernet, hdmi, headset, and sd - make sure batteries charge well from both usb-c ports)
• to check the storage health, install nvme-cli if not installed, run nvme smart-log /dev/nvme0 and check the “percentage_used” value: if it’s near 100% it might die and need replacement soon
• to check that the vents, airflow, and cooling hardware are in good shape, install stress if not installed, run stress -c 7 to load up 7 of the 8 available cpu threads, make sure the fan spins up good and strong, and watch /sys/class/thermal/thermal_zone0/temp to make sure the cpu temperature stays under ~90-95 degrees

On my own time later, I’d run memtest86+ overnight from bootable usb to check the memory, then install tlp and run tlp recalibrate with the laptop on the charger to recalibrate the batteries

Edit: enjoy the new laptop! I hope it works great for you

Just part of our standard office package, everyone gets a laptop, dock, and external monitors for their workspace.

I can’t speak for all of them, but we’ve had a couple hundred deployed over the last several years with very few issues. Mine’s been solid as a rock.

The usb-c docks, however, are a nightmare, though I gather that’s fairly universal.

I daily a T480 with Debian for work, and I’d recommend it highly. Great performance, battery, build quality, look & feel, etc. We have some 7480s deployed and while they’ve been solid as well, I much prefer the thinkpad. T series will have better performance and battery than X series, also, so I’d take the T480 over the X1C.

There should be a section in the configuration about dhcp, which is how ipv4 addresses are given out on your network. What happens is when a device first connects to the network, it sends out a broadcast with its mac address - the dhcp server (in this case, your router/firewall) hears this, and sends back a reply allocating an address. You should be able to see a list of currently allocated addresses, and hopefully configure reservations to make those allocations permanent. To reserve an ipv4 address for a specific device, you need that device’s mac address.

Each item on that current allocations list should have a hostname, a mac address, and an ipv4 address. If it’s not clear by the hostname which device is the tv, you can look up each mac address and deduce from there (the first part of each address is unique to a specific manufacturer).

Once you have an ipv4 address reserved for the tv, you can set your outbound firewall rule to block it.

Ipv6, as I mentioned, is much more complicated. It might be possible to disable it completely on your router, and that’s likely the only way to block the tv from using it, but then your whole network will lose ipv6 capability across that boundary (probably not a lot of downside to that, though).

Good luck!

If your firewall can set outbound rules, and you can control DHCP on your network so that you can reliably know the TV’s IPv4 address, you can block the TV from reaching beyond the local network there with a “deny all from source address of TV” type rule.

If your router/firewall is handling IPv6 though, it gets a lot more complicated, since the TV could have any number of addresses that change often.

RIP

Heyr himna smiður - a medieval Icelandic hymn, set to music by Þorkell Sigurbjörnsson

piped.video link

deleted by creator

That’s awful, I’m sorry :(

Is your ISP’s infrastructure based on RFC 1149?

🥲

Altruistic behavior in social creatures improves the fitness of the group, and has positive evolutionary pressure. Strong, cohesive groups pass on their genes, so actually pretty probable!

ssh predates the specification, exists somewhat independently of even the idea of a desktop (not common to see xdg env variables like XDG_CONFIG in a headless environment, for example), and uses the homedir/.ssh directory on both the client and server side of a connection. I think it’s less to do with security and more to do with uniformity for something as important as ssh - ssh doesn’t need to change to use the xdg spec, and xdg doesn’t need to allot anything special for ssh when it’s already uniform across the unix spectrum

If you aren’t going to fully wipe your drive in horrible events like this, at the very least use shred instead of rm. rm simply removes references to the file in the filesystem, leaving the data behind on the disk until other data happens to be written there.

Do not ever allow data like that to exist on your machines. The law doesn’t care how it got there.

If you can find a cheap used micro-form-factor pc with hdmi output (eg thinkcentre m93p), that’s a great sustainable way to go. Stick debian on it, get a cheap tiny bluetooth keyboard/trackpad, stream via web browser. Bonus if it’s got a dvd player, for the ultimate utilitarian foss htpc.

For donating compute/storage/bandwidth to community archiving, this is a great place to check out: https://wiki.archiveteam.org/

Just my opinion, but I think they’re a great project to support.