nemozone

✉️ a zone for no one and everyone :) 🔞

Source: https://zealdocs.org/

Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF.

curl -s https://packagecloud.io/install/repositories/firstlookmedia/code/script.deb.sh | sudo bash

sudo apt update
sudo apt install -y dangerzone

You also need a docker environment and also have to add your user the docker users group.

The best way to install Docker on Ubuntu 22.04 is to use the official Docker repository. This will ensure that you have the latest version of Docker and that it is signed from the official source. To start, update your existing list of packages:

sudo apt update

Next, install a few prerequisite packages which let apt use packages over HTTPS:

sudo apt install apt-transport-https ca-certificates curl software-properties-common

Then add the GPG key for the official Docker repository to your system:

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

Add the Docker repository to APT sources:

echo "deb [arch= $( dpkg --print-architecture ) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $( lsb_release -cs ) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

Update your existing list of packages again for the addition to be recognized:

sudo apt update

Make sure you are about to install from the Docker repo instead of the default Ubuntu repo:

apt-cache policy docker-ce

Finally, install Docker:

sudo apt install docker-ce

Docker should now be installed, the daemon started, and the process enabled to start on boot. Check that it’s running:

sudo systemctl status docker

The output should be similar to the following, showing that the service is active and running:

Output ● docker.service - Docker Application Container Engine Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2022-04-01 21:30:25 UTC; 22s ago TriggeredBy: ● docker.socket Docs: https://docs.docker.com Main PID: 7854 (dockerd) Tasks: 7 Memory: 38.3M CPU: 340ms CGroup: /system.slice/docker.service └─7854 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

Installing Docker now gives you not just the Docker service (daemon) but also the docker command line utility, or the Docker client. By following these steps, you can easily install Docker on Ubuntu 22.04.

You will probably receive a failed docker daemon reply. You have to add your user to the docker group.

Adding a user to the Docker group in Ubuntu 22.04 is a simple process, provided you have the necessary permissions and understand the potential security implications. To add a user to the docker group, the first step is to create a group called docker if it does not already exist. This can be done with the command groupadd docker. Next, add the desired user to the group by running the command usermode -aG docker <username>. For example,usermode -aG docker sammy would add the user sammy to the docker group.

To apply the new group membership, log out of the server and back in, or type the following: su - <username>. You will be prompted to enter your user’s password to continue. Confirm that your user is now added to the docker group by typing: groups. Output should look like this: sammy sudo docker.

If you need to add a user to the docker group that you’re not logged in as, declare that username explicitly using: sudo usermod -aG docker <username>, where is the username of the user you wish to add.

It is essential to be aware of the security implications of adding users to the docker group. The docker group grants root-level privileges to the user and therefore should only be done if absolutely necessary. For details on how this impacts security in your system, see Docker Daemon Attack Surface. An alternative to running with the docker group is to run the Docker daemon as a non-root user (Rootless mode).

By following the steps outlined above, you can easily and securely add a user to the docker group in Ubuntu 22.04.

Then reboot and your are done.

Citations :

  1. https://www.digitalocean.com/community/tutorials/how-to-install-and-use-docker-on-ubuntu-22-04
  2. https://www.reddit.com/r/docker/comments/wo7si8/cannot_seem_to_add_user_to_docker_group_ubuntu/
  3. https://learn.microsoft.com/en-us/visualstudio/containers/troubleshooting-docker-errors
  4. https://joachim8675309.medium.com/jenkins-environment-using-docker-6a12603ebf9
  5. https://joachim8675309.medium.com/jenkins-environment-using-docker-6a12603ebf9#:~:text=Compose%20Configuration%20(Linux%20or%20macOS)&text=Add%20a%20group%20docker%20if,%2Fvar%2Frun%2Fdocker.
  6. https://docs.docker.com/engine/install/linux-postinstall/

Citations :

  1. https://phoenixnap.com/kb/install-docker-on-ubuntu-20-04
  2. https://linuxhint.com/install-docker-compose-ubuntu-22-04/
  3. https://www.digitalocean.com/community/tutorials/how-to-install-and-use-docker-on-ubuntu-22-04
  4. https://docs.docker.com/engine/install/ubuntu/
  5. https://cloudcone.com/docs/article/how-to-install-docker-on-ubuntu-22-04-20-04/
  6. https://runnable.com/docker/install-docker-on-linux

source: https://github.com/firstlookmedia/dangerzone

Their website: https://dangerzone.rocks/

https://github.com/freedomofpress/dangerzone/wiki/Installing-Dangerzone

https://packagecloud.io/firstlookmedia/code/install#manual-deb

So first we open up our terminal. On most Linux systems you hit up this keyboard combination Ctrl + Alt + t, sometimes it's also your Windows key(i.e. Super key) + t, or you can hit this key combination Alt-F2 and then type the terminal name for example “gnome-terminal” or the equivalent in your system

sudo editorOfYourChoice /etc/modprobe.d/blacklist.conf for example

sudo nano /etc/modprobe.d/blacklist.conf 
sudo vim /etc/modprobe.d/blacklist.conf 

Or you can even use graphical ones

sudo gedit /etc/modprobe.d/blacklist.conf for example
sudo mouspepad -H /etc/modprobe.d/blacklist.conf for example

Then you go at the Bottom of the file add these lines

install module_name /bin/true fo example

install bluetooth /bin/true #disables bluetooth and its subprocesses
install btusb /bin/true
install uvcvideo /bin/true  #disables your camera module and its subprocesses


blacklist iwlwifi          #disables WiFi
blacklist firewire-core #disables firewire
blacklist thunderbolt  # disables thunderbolt

Finally type these comands

sudo update-initramfs -c -k all
sudo shutdown -r now

To undo these steps you can just delete the entry or uncoment them and reboot your system

You can uncoment stuff like this, example

#blacklist iwlwifi
#install bluetooth /bin/true

Don't forget to save your new entries!

sudo update-initramfs -c -k all
sudo shutdown -r now

And then reboot

sudo reboot

source: https://wiki.archlinux.org/index.php/Kernel_module#Blacklisting

Why it can be a smart idea to disable thunderbolt:

https://thunderspy.io/

This article will describe usage of AppArmor.

https://www.hiroom2.com/2018/05/06/ubuntu-1804-apparmor-en/

So if you have read my article about how you can start to use Linux ( Starting the Journey). Maybe you want to proceed a step further.

We live in a world which is under a dire pressure of surveillance capitalism the biggest threat of our times. If you haven't checked out this movie, I would highly recommend you this to show you the flaws and problems and where this can lead to.

The analysis of the movie is correct. But there are no solutions offered there.

But there is a solution, leave the matrix, by matrix I mean surveillance capitalism.

Here I have curated a big list of alternatives, there is nearly for everything an alternative you are not bound to the FANGULTAD universe

Facebook(i.e. Meta) Amazon Netflix Google(i.e. Alphabet) Uber LinkedIn Two Sigma Apple Dropbox FANGULTAD or in short FANG or FAANG

Get out of their FANG's ;)

And forget about their free services there is only one true free thing and that is open source, open hardware and decentralized/federalized/Peer-to-peer own hosted social networks like the fediverse/mastodon. And keep in mind if something is free you are the product. Here is a nice video about that.

All credit goes to the nice folks at the fediverse who helped me find these alternatives. Thank you all so much! <3

To be able to fully understand the impact of some services here is a list of privacy and open source services which rely on the FANGULTAD universe. This is no offense to the services per se. But it reflects the situation perfect:

https://codeberg.org/ReverseEagle/DeGoogle-FOSS/src/branch/master/PROJECTS_USING_GOOGLE.md

Also check out Aral Balkans stuff he is a cool dude:

Don't use Zoom check out the alternatives at https://switching.software/replace/zoom/ but if you must use due to whatever reasons you can use a VM, see this link(PDF!):

https://assets.privacytools.io/aragon-drop/zoom_tutorial.pdf

Unfortunately this link is gone for good. But the Wayback Machine has a backup. You are welcome :)

https://web.archive.org/web/20210729190814/https://assets.privacytools.io/aragon-drop/zoom_tutorial.pdf

Or use Aral Balkans method:

https://ar.al/2020/06/25/how-to-use-the-zoom-malware-safely-on-linux-if-you-absolutely-have-to/

Zoom is nasty Malware like Macrohard Doors

This should be the goal :)

https://privacytools.io/ https://privacytests.org/ https://www.privacyguides.org/ https://web0.small-web.org/ https://switching.software/ https://flossmanuals.net/ https://opensource.builders https://prism-break.org/en/ https://framasoft.org/en/ https://framalibre.org/ https://degooglisons-internet.org/en/alternatives/ https://entraide.chatons.org/en/ https://alternativeto.net/ https://tutanota.com/ A secure E-Mail Provider, better then ProtonMail https://www.privacy-handbuch.de/handbuch_31d.htm https://fediverse.party/ https://e.foundation/products/ https://www.nitrokey.com/news/2021/nitrophone-most-secure-android-planet https://iode.tech/en/ https://guardianproject.info/ https://brianlovin.com/security https://ssd.eff.org/en https://www.kuketz-blog.de/ (If you speak German, an awesome blog!) This link is defunct! https://media.kuketz.de/blog/messenger-matrix/messenger-matrix-en.html (also in english) https://www.messenger-matrix.de/ https://www.messenger-matrix.de/messenger-matrix-en.html https://www.kuketz-blog.de/empfehlungsecke/ An awesome place to start for German speakers/readers https://small-tech.org/ https://sitejs.org/ https://ar.al/ https://write.as/ https://tenor.com/ https://gifer.com/en/gifs/giffer https://librivox.org/ https://privnote.com/# https://riseup.net/en https://share.riseup.net/ https://2017.ind.ie/ethical-design/ Ethical design manifesto https://publicstack.net https://www.wikipedia.org/ https://en.wiktionary.org/wiki/Wiktionary:Main_Page https://commons.wikimedia.org/wiki/Main_Page https://en.wikinews.org/wiki/Main_Page https://leafletjs.com/ https://mega.io/ https://wormhole.app/ disclaimer hosted in US, patriot act! https://operationtulip.com/ https://ethical.net/resources/ https://www.zotero.org/blog/improved-pdf-retrieval-with-unpaywall-integration/ https://addons.mozilla.org/en-US/firefox/addon/unpaywall/ https://unpaywall.org/ https://en.wikipedia.org/wiki/Sci-hub if you are a poor student use this only with tor in a vm! https://gagarine.medium.com/use-sci-hub-with-zotero-as-a-fall-back-pdf-resolver-cf139eb2cea7 https://wikiless.org/ A good alternative to wikipedia https://codeberg.org/orenom/wikiless#why-i-should-use-wikiless-instead-of-wikipedia https://en.wikipedia.org/wiki/Internet_Archive https://en.wikipedia.org/wiki/Project_Gutenberg https://en.wikipedia.org/wiki/Wayback_Machine https://en.wikipedia.org/wiki/Zeno.org https://vimeo.com/ An alternative to youtube https://github.com/pfrazee/ctzn https://whyprivacymatters.org/ https://goodreports.com/ https://ngrok.com/ Port forwarding made easy and secure https://tosdr.org/ https://funkwhale.audio/

“…Funkwhale is an open source and self-hosted music streaming service that helps you upload, share and enjoy music.”

https://substack.com/about?utm_source=substack&utm_medium=web&utm_content=footer https://frame.work/about An awesome open hardware vendor https://12ft.io/ https://friendly.io/ https://www.humanetech.com/ https://www.humanetech.com/take-control https://osint.info/index.php?title=Main_Page https://challengepower.info/ https://buggedplanet.info/index.php?title=Main_Page https://repaircafe.org/en/visit/ https://seahost.de https://github.com/TeamPiped/Piped Imperial Library of Trantor see below http://kx5thpx2olielkihfyo4jgjqfb7zx7wxr3sd4xzt26ochei4m6f7tayd.onion/ https://www.ifixit.com/Info/index

iFixit is a wiki-based site located in the United States that teaches people how to fix almost anything. Anyone can create a repair manual for a device, and anyone can also edit the existing set of manuals to improve them. Our site empowers individuals to share their technical knowledge with the rest of the world.

Repair Manifesto

Some useful add-ons:

https://github.com/SimonBrazell/privacy-redirect DuckDuckGo Privacy Essentials this Add-On isn't as good as I've thought don't use it better change the default search engine in your browser. privacy badger https everywhere NoScript ublock origin #decentraleyes use this instead its better https://www.localcdn.org/ https://github.com/rickwierenga/sci-hub-injector An Add-on which lets you enjoy science papers update(20.01.22) well a few days ago this project died. The King/Link is dead, long life the King/Link :) https://addons.mozilla.org/en-US/firefox/addon/scihub-injector/ Thx <3 to Josias([@]josias@floss.social)

https://github.com/nileshtrivedi/better

This extension looks at your current URL, and recommends “better” product/service alternatives via an in-page pop-up. “Better” could mean ethical / privacy-conscious / secure / local / cheaper / high-quality etc. This should work for both Chromium-based (Chrome, Brave, Chromium etc) AND Firefox-based browsers.

– nileshtrivedi

https://chrome.google.com/webstore/detail/better/fhblooichgponllpehbkpihicebfgfll https://addons.mozilla.org/en-US/firefox/addon/better-alternatives/

Cheers :)

All credit for this mentioned method goes to Chubin^1 and the cheat.sh^2 project

Hi folks here I'll show you one of the best cheat sheets if you for example forgot how to use tar, like in the picture below tar what?

You can just type cht tar in your terminal.

So to get this working we have to do the following, just install curl. I'll provide the steps for the most used Linux Distributions.

sudo apt install -y curl       #Debian and Debian based systems
sudo zypper install -y curl #OpenSUSE/SUSE
sudo dnf install -y curl       #Fedora
sudo pacman -S curl           #Arch Linux

After that you go to your home folder just type cd in most distris it will instantly teleport you to your home folder. You can tpye pwd to see where you are, ideally it should print out something like this.

/home/$USERNAME

The $USERNAME is the named path of your User. For example if you named it to penguin the output looks like

/home/penguin

There you'll find your .bashrc file now you can append this function with the editor of your choice

nano .bashrc or
vim .bashrc or whatever you use, you can also use a graphical one

gedit .bashrc or
mousepad -H .bashrc

Then you go to the bottom of the file and append this function

function cht() {
      curl cht.sh/$1
  }

Then you save your .bashrc

Close and open your terminal or type this

source .bashrc

And then you can look up the most used commands

You can even look up the basic programming structures of some languages

cht python/:learn

Or even rfc's :)

cht rfc/1234

Cheers :)

Tracing is a useful technique to find bugs in software, and ftrace is the tracing framework built into the Linux kernel.

But before we start talking about ftrace, let’s define what tracing is…

Source and further reading

Introduction

The Linux CSPRNG (cryptographically secure pseudo-random number generator) is one of the most used source of randomness. Its soundness is thus of critical importance for applications using cryptography, such as SSH, web servers or VPN servers. However, the CSPRNG's official documentation might be a bit difficult to digest. This blog article documents its inner workings, focusing on the most important points, so that anyone can easily assess whether the generator meets their requirements and which of its interfaces should be used...

source and further reading

Linux is not a secure operating system. However, there are steps you can take to improve it. This guide aims to explain how to harden Linux as much as possible for security and privacy. This guide attempts to be distribution-agnostic and is not tied to any specific one...

madaidans-insecurities.github.io/

You want to start your Linux journey but don't have any clue where or how to get started, fear no more

Here you'll learn the ways of Linux, at least the basics for free in nearly 10 languages

If you know german you can also check out this site

Also a very good source but its not for beginners

Here you can learn about the technical internals of Linux

Here is the book version

This is an interactive map of the Linux kernel, just for fun :)

You want to start but don't know which OS suites your needs the best. Well that is also no problem

You can also get some inspiration from Distrochooser

Here is a good tutorial to create a bootable USB Stick in Windows for Ubuntu but this also should apply to most other Distributions

You can also create a multi bootable USB Stick with ventoy

Or you can also get a preinstalled Linux Notebook/PC

Vendors who have a fairly, kinda good support for Linux

Lenovo especially ThinkPads DELL especially the XPS series HP Notebooks, not all series, do your research! Raspberry Pi devices could also be a good starting point

This is a video which explains why it would be wise to learn Linux

Don't be afraid if you have questions ask any one of us, we are nice people who love to bring other people in touch with free alternatives :)

“software is like sex: it's better when it's free…,,

– Linus Torvalds –