c0m4r

Radxa ROCK 5C Lite

All you need to know in one place.

Table of contents:

• Resources
• What is "Lite" about Rock 5C Lite
• Use-case

c0m4r

Malicious "Hide Youtube Shorts" extension in Google's Chrome Web Store

TL;DR: This extension for Chrome and Brave is malicious, do not use it.

(Update) A follow up story by Wladimir Palant: https://palant.info/2024/10/30/the-karma-connection-in-chrome-web-store/

(Update 2024-11-11) The extension has been removed from CWS and marked as violating Chrome Web Store policies (which is good, but odd, as it should be marked as malware)

c0m4r

This setup allows restrictive chmods, which prevents users for reading the conents of each others directories and provides a layer of security against reading raw PHP code in case of FPM failure. You can set chmod 600 for all .php files and chmod 640/710 for any other static files/dirs.

certbot certonly -d example.com
useradd -m -d /home/example -s /bin/bash example
usermod -a -G nginx example
su - example -c "mkdir ~/www"
chmod 710 /home/example
chmod 710 /home/example/www
su - example -c "echo '' > ~/www/index.php"

c0m4r

Epic Store Free Games email notifications

OS Setup: Linux (any), Postfix as a forwarder

Depends on: nodejs + AuroPick/epic-free-games

It's best to run cron once every 2-3 days, so as not to miss the release time window. The script compares with the last run to avoid sending duplicate emails.

v2: JS only

c0m4r

Mikrotik as OpenVPN client

Table of Contents

• Mikrotik OVPN-Client configuration
• VPS configuration
  • OpenVPN Server
  • Mikrotik WIFI monitoring
  • Whitelist DDNS Mikrotik IP iptables
• Files:

c0m4r

Observium on Alpine Linux

WARNING: It's a draft. It doesn't cover security, permissions and other stuff.

Tested on Alpine Linux v3.20 / Observium CE 24.4

Installation

Derived from https://docs.observium.org/install_debian/

c0m4r

Whitelist DDNS Mikrotik IP iptables

A python script solution to whitelist an IP address in iptables resolved with Mikrotik DDNS service (or any other).

• https://wiki.mikrotik.com/wiki/Manual:IP/Cloud
• https://help.mikrotik.com/docs/display/ROS/Cloud

In this example I have whitelisted Mikrotik DDNS IP to allow access to SSH and OpenVPN ports.

The script is scheduled in crontab to run every minute. It will resolve Mikrotik DDNS domain, flush the iptables WHITELIST chain and add the IP address if it changed.

c0m4r

Update Lenovo ideapad Gaming 3 Laptop BIOS on Linux

WARNING: flashing the new BIOS can brick your laptop, DON'T do it if you don't know what you're doing or just for the sake of having the latest firmware. Make sure you actually need it and that both your laptop's power AC adapter is plugged in and the battery is fully charged.

Preamble

If you've got one the ideapad gaming 3 laptops you might face the problem with updating the BIOS, if your model isn't covered via fwupd.

There are ways to workaround it with some crazy shit magic tools, but the safest way is just use the Windows environent in the absence of a BIOS update file for Linux.

c0m4r

Alpine 3.19 desktop setup

Install Alpine

1. Get Standard ISO from https://alpinelinux.org/downloads/
2. Boot the ISO and log in as root (no password required).
3. Run setup-alpine and install using defaults. For partition layout use sys or lvmsys.

Desktop Setup

c0m4r

Building Quake III Arena on Linux from ioquake3 source

• https://ioquake3.org/
• https://github.com/ioquake/ioq3
• Quake III Arena on Steam

Requirements

1. Get quake3-latest-pk3s.zip from https://ioquake3.org/extras/patch-data/
2. Get pak0.pk3 from the original copy of the game