• 0 Posts
  • 13 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle
  • Boot: Yes, the windows boot drive (an old 128GB SATA SSD), but I hit F11 on boot adn selected USB to boot to that to do the install just like with Pop. But again the install worked fine at least on the older LTS version of Ubuntu. And it booted on USB correctly with the later version too, just as soon as it went graphical it b0rked.

    So do you get a grub menu at all? Is there the Plymouth (green, grey and white text only) loading screen? What does booting look like? I need more detail here because I’ve had driver issues and this is sounding more like a boot issue. Would it be possible to remove other hard drives during a test installation then add them back afterwards? Totally understand work and life comes first and all but if you get the opportunity, I’ve got a hunch.

    I’m thinking we need a matrix chat or something to send images and details on lol


  • Okay, so I’m assuming with Pop you used the nvidia driver edition which meant it loaded using that. It’s possible that Ubuntu tried using nouveau and failed to work I guess but I think I need to know more. Tell me about how you are connected to your monitor. Display port or hdmi? Do you have a docking station?

    Were both installs using Wayland, xorg or dont know?

    It’s interesting that Pop installed and showed everything but Ubuntus later version didn’t because Pop is based on Ubuntu and theoretically has most of the same drivers. I’ve experienced it not working exactly the same before but yeah, that’s odd.

    Does your computer use secure boot and was it on at the time you tried installing Pop, and Ubuntu?

    Was anything above the usb in the boot priority during the Ubuntu installation? If the screen was unresponsive and the device rebooted using Ctrl,Alt,Del then how do you know that was ubuntu?

    Do you have a spare device such as a laptop around with an Ethernet port?

    What other distros have you tried and have you ever used Linux Mint? It’s my GOTO for anyone new to linux (including myself).

    Sorry that’s a lot of questions but I think more information could be very useful.



  • I’m sorry your team is like that, they should do better. I get along with my company IT team, obviously working close with them has benefits, but we have a lot of oversight and executive support so giving two word answers isn’t a thing where I work, they have to give a written justification etc.

    In the same sense that not everyone works where I do, not everyone has assholes in IT who deny everything. Neither of our experiences are default and I was trying to write for someone in-between. Apologies if it didn’t come across that way.

    There are businesses who don’t allow spotify on the corporate device, for sure. I saw a talk delivered by a guy who did. He worked for a mining company, they wouldn’t let people install things and were inundated with policy violations. He had to change the entire company culture around who IT were, and started by letting people make install requests for apps they wanted to use. They just tracked the requests so they knew who had what, and by helping, they could be selective about where the software came from.

    When people don’t have IT as a support and see them as a regulator, they don’t work with them and bad shit happens. This dudes mining company was hit, also with ransomware (this one worked), because the CFO had local admin since he didn’t want to talk to IT.

    My point is

    • a. they should be helping in this instance. Sorry they don’t, that’s frustrating to hear. Work culture is hard to change and I’m lucky with where I do work and the culture we have.

    • b. don’t bypass security controls regardless. Sorry. It’s still not the answer. If work makes you do things a slower or more annoying way, that’s their time lost. HR will throw you under the bus for the policy violation.


  • JoshCodes@programming.devtoLinux@lemmy.mlLibreOffice is pretty damn good
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    7 days ago

    That may be true for Discord but for FOSS products the security concern is the attack surface (more to patch).

    Like I said to the other commenter, if they say no they should have to justify that (in written form, argued, with points), even if the reason you want it is familiarity with the tool, workflow speed ups, or it has a nicer UI. Make them work harder if they say no, and make it really clear you will go away quietly if they say yes.

    I do think that companies asking users to use standard tools so they can build processes and training materials is reasonable. Using other tools means more attack surface, it means more updates, more documentation, less familiar people and it means more risk.

    Also assuming your company is like most and forgets to document everything alongside the crucial processes, if you know how to do something and tie it to a FOSS product instead of say excel, they won’t be able to hire a grad that can work for cheaper and do the thing half as well.

    My point is it does do something for them, but not as much as they think. They didn’t pay for the office suit for you to not use it. However, if you don’t need it, they can also stop paying for it. Justification is important. So is making ITs life difficult by making them justify decisions.

    Bypassing them makes the incident response team’s life difficult, not ITs.


  • Okay maybe I should have said they can’t say no and appear reasonable? Was there a justification or is this guy Joseph Goebbels or something? I bet you didn’t use AI 2 years ago but probably have that running rampant.

    I’d love to live in a world where I trust everyone to install software on computers, but Mr Ransomware, albeit not common, is out there waiting to fuck up the business with a portable application he found. He wanted to do something for a colleague, but we all nearly suffered for it.

    Install things the right way, and if you can’t, make a case for it and get managers involved. Justify the time saved or the comfort it provides: everyone hates AI, blame it on copilot being in excel.

    Bypassing security instead of working with them doesn’t help anyone and it almost always ends badly.


  • There was a trend of malware authors making websites to give away free video editors, I think this one appeared as capcut. They patch the binaries or use other techniques and include malicious DLLs.

    Edit: you and I both are fine with people installing FOSS from github, but what happens when they get the name for the repo wrong? What happens when they go to the fake site a malware author spun up, that even has all the files they wanted?

    Security is there for a reason, sorry, I know we can be annoying and add hurdles to important roles, but people get things wrong. We help with that, and bypassing us means you didn’t give us a chance to save you before you messed up (again I assume everyone on lemmy is a sysadmin Linux user so not ‘you’ but a generic user you).


  • JoshCodes@programming.devtoLinux@lemmy.mlLibreOffice is pretty damn good
    link
    fedilink
    English
    arrow-up
    34
    arrow-down
    1
    ·
    7 days ago

    On behalf of cyber and IT, just ask IT to install the thing, please. They can’t really say no to a free app and bypassing restrictions ends badly for everyone. I had a user do that with video editing software… seriously, what could go wrong? Ransomware. Literally ransomware. Lucky for antivirus it stopped it but yeah, please work with IT.






  • There are definitely some VPN providers to worry about.

    VPNs are a security tool but they don’t protect people as much as they think. They hide DNS traffic your ISP would have received, so that your ISP can’t tell everyone which cuckold or affair site you access (except you probably forgot to turn the VPN on one time or another so…)

    Your ISP can still see IP addresses you connect to, they forward all your traffic [I need to proof read before I press post - this is just misinformation]. Good opsec is a nightmare. Ad blocking does more for less cost than getting a VPN will ever do (except for certain human rights circumstances but I’d wager they’re actually going to be careful).

    My personal tip is use DNS over HTTPS/TLS where possible, and don’t use Cloudflare or Google. Add an ad blocker and it’s far easier to setup and way more cost effective than VPN.