Secure Linux Distro

I had to look into ‘secure’ Linux distros for a project, and the one I picked was Tails. You can find it at https://tails.net. The key feature of this distro is all the network traffic goes through the Tor network. There is a brief window were it attaches to a network and makes the Tor connection, but all traffic is blocked until that connection is made.

I run it off a USB on an old Intel based MacBook Air. Runs fine. It’s not a feature rich distro, which is fine given its purpose. You get a browser, basic office apps, a terminal, and your standard basic admin tools.

Another security feature is that no data is retained between sessions. The only exception is an encrypted data vault that requires a key phrase at startup. It also runs by default without a root password. This is a feature, since it requires a root password to run sudo type commands, including system updates and installing applications. If you want to run those types of commands, you need to set a root password at startup, which is only valid for that session.

If you need a secure network connection for a task, like White Hat cybersecurity projects, give Tails Linux a shot.

Pi-Hole DNS

Today’s tech advice: If you aren’t running Pi-hole, you should be.

Pi-hole is a locally run, open source, DNS sinkhole. It blocks ads and trackers. It also will provide some measure of improved network performance for delivering DNS results stored locally. It also prevents your ISP from collecting your DNS queries to sell for marketing purposes.

Seriously, you shouldn’t be using the DNS provided by your ISP. I suggesting using a non-tracking DNS, such as Cloudflare (1.1.1.1). You can configure Pi-hole to use Cloudflare or a number of other external DNS options. On an ‘average’ day, at least 30% of the DNS calls on my home network are serviced locally by Pi-hole and don’t leave the building.

You will also see a performance increase due to your browser not servicing the massive amounts of ads that Pi-hole will block.

Pi-hole also filters out ‘malicious’ domains, some of which will pop up from a hijacked ad on another site. This provides a level of security against malware and spyware. Although, many people intentionally log into spyware sites such as Facebook and Instagram. Plus various IoT devices like to phone home with usage data and anything else they can sniff. Roku and Sonos devices are constantly in the blocked list for my instance of Pi-hole.

It’s fairly easy to set up. I ran it on an old system running Linux for years. Recently moved to a Raspberry Pi 4. It will take some basic Linux skills to do that. Worth it if you want a dedicated local DNS with a static IP address. You can also pick up a Pi 4 or 5 for around $100, so it’s a fairly low cost option.

There are plenty of YouTube videos on how to set up and enhance Pi-Hole. I’ll list some interesting ones later.

Failure is an option…

If you don’t believe that, get a 3D printer.

Don’t get me wrong, I really enjoy mine. On my second in fact. Just remember the wise words of the Middleman, “Technology fails.” Call it a learning experience and move on. Don’t let a poorly wound spool of filament get you down. Use it for small things or just rewind the bloody thing your self.

Hardware & Software updates…

Haven’t posted in a while, so going to touch a few different topics.

First off, an Apple Watch update. I ran my series 1 for four years. Upgraded to a Series 5 mainly for battery life. I was going on vacation, and didn’t want to worry about it running out of power while I was out and about for the day. I was happy with the 5. That was the last one that didn’t support blood oxygen monitoring. Didn’t worry too much about that since I already a fingertip blood oxygen and pulse reader. I ran that for four years also. I did not get the Series 9. Went for the Ultra 2. The Ultra 2 is a beast. It’s big but I really do appreciate the larger battery. I can run it all day, collect sleep data, and then just pop it on a charger for 10-15 minutes in the morning to get back to an 80% charge. I also like the larger display, especially with simple analog watch faces. Fully expect to run this for at least four years.

I got a M1 MacBook. My last one was coming up on a decade of use. It still runs, and is a viable laptop. I still use it, but the M1 is a whole new experience. I got it with extra RAM and large SSD, since I plan on using that as long as I ran the Intel based one. One of the reasons I like the MacBooks is that they are bloody tanks. The hardware is rock solid, and the OS is stable. The M1 runs Baldur’s Gate 3 just as well as my Windows 10 tower with an i9 CPU. There are times I’m tempted to make the M1 MacBook my primary system instead of my Windows tower system.

I’ve got a pair of 27″ 4K monitors, which the MacBook drives nicely. One is a direct USB C connection (which also supplies power), and the other is connected to a USB C dongle via HDMI. The dongle also where the Ethernet cable is connected. Also picked up a Mac centric keyboard and mouse. Both are Logi products. The keyboard is a MX Mechanical, with the number pad and the extra loud clicky goodness. The mouse is the MX Master S3 for the Mac. Really please with both. The mouse tracks reliably on the black surface of my desk more reliably than the Apple Magic Mouse. YMMV, but it works for me.

Yes, I’m still running Windows 10. Thankfully the system I built a few years ago doesn’t have a TPM. So I rarely get the annoying ‘you need to upgrade your hardware to install the OS I don’t want’ messages from Microsoft. I had to use a Windows 11 system for a few weeks and I did not enjoy the experience. I’ve collected a lot of data over the years, and it’s stored on my homebuilt tower system. When I do a search, that is where I want to focus, not the Interwebs. I certainly don’t want search results for products someone is paying Microsoft put at the top of the list. I figured out quickly how to remove the new search button that is located where the Start button used to be. That improved my experience right away. Another ‘feature’ I didn’t like was that I couldn’t remote desktop to the Windows 11 system using the Microsoft remote desktop app on my Mac. I had to remote desktop to my Windows 10 system, and then remote desktop from there to the Windows 11 system. Probably some sort of ‘security’ setting that Microsoft has buried somewhere. I didn’t take the time to figure it out. Just stopped using the Windows 11 system. The only actually useful feature I found was tabs in File Explorer. Something MacOS has for years.

My opinion on Windows 11 is that Microsoft is trying to take us back to the days of the Mainframe and terminals. They want all your data in their cloud, where they can generate a continuing revenue stream. Personally, I’m not fond of this concept. There are multiple good reasons for the distributed data and processor concept, not all of which are technical. I’m old enough to remember when desktop personal computers on a LAN killed the microcomputer industry, and why.

LINUX skills

I started interacting with UNIX systems before Linux came out. I have never been a LINUX developer though. I’ve had at least LINUX box up and operating for a couple decades. They are handy to have around and useful for odd tasks. The GUI’s have come a long way, but as a UNIX admin told me mumble years ago, “If you aren’t using the command line, you’re doing it wrong.”

If you want to improve your LINUX skills, here is a good, and relatively cheap method. Pick up a Raspberry Pi, load Raspbian LINUX (or Ubuntu is another option), and work your way through “The LINUX Command Line by William Shotts.

I’m going with Raspbian. This way you can learn to fill in the gaps (example: no ‘cal’ command, so it’s ‘sudo apt install ncal’ for you).

Low Power FM Transmission

I decided to muck about with a low power private FM transmission. The goal was to pump my local and streaming music over an open FM frequency so I can listen on a radio, which I have several, including nice Bose Wave radios. The FM transmitter was just under $150 with shipping and taxes. This is a fairly easy to use model. I set the frequency, plugged in the input, and started listening.

I have it plugged into an old Sonos device (the Connect device, which has stereo output jacks). I had playlists with local and streaming music I could easily load and put in a looping random mix. An old smart phone or mp3 player with a mic/headphone jack and power supply would work also.

There is also a long wire antenna included in the package. The documentation clearly states that this is not for use in the United States, since it would boost your range well past the 300 feet allowed by the federal government.

Another useful tool post

As I’ve upgraded various systems over the years, I have a collection of old hard drives.

USB 3.x drive enclosures are a hand tool to have around.
Here are two I like, one 2.5″ and a 3.5″ model.

Handy for backups, file transfer, and the like.

A non tracking DNS

The nice folks at Cloudflare have put a non-tracking DNS in place for free use.  If you were not aware that most ISPs will sell your browsing history, for “marketing purposes”, you should be.

They make a nice, easy to use App for IOS devices.

Still using my Series 1 Apple Watch

It’s been three and half years and I’m still using my first edition Apple Watch (sport) on a daily basis. The screen has a few scratches, but it’s still  functional.

It’s kind of a milestone, since with the release of WatchOS 5, Apple has stopped support for us early adopting nerds.  I’m stuck on version 4.3.2 on this model.  Debating on getting an upgrade running this one till it drops.

Mini-Nuclear Plants

According to the Washington Examiner, the federal Energy Department is working with a company founded by Bill Gates (TerraPower) to develop small, less expensive/more efficient, nuclear reactors to produce electrical power.

These reactors use the molten salt cooling technology, as well as using liquefied sodium for a fuel source.

This is early stages development.  A prototype 1,100 Megawatt reactor isn’t scheduled until 2030.

Certainly a step in the the right direction for reliable, carbon free energy.