Linux

Change or Set PIN for FIDO2 Token on Linux

July 5, 2024
Security, Linux

The easiest way to change/set PIN for FIDO2 token seems to be with Chromium/Chrome: Plug in the token Launch Chromium, navigate to chrome://settings/securityKeys, or click Settings -> Privacy and Security -> Security -> Manage security keys Click Create a PIN, if you don’t have a PIN set already, a new PIN will be created, otherwise you will be asked to change the existing pin Alternatively you can also wipe the token with the Reset option

More than smartphone, not yet laptop: Swmo on the PinePhone Pro

May 7, 2024
PinePhone, Mobian, pinephonekeyboard, sxmo, Linux

I’ve been daily driving the PinePhone Pro with swmo for some times now, it’s not perfect but I still find it be one of the most enjoyable devices I’ve used. Probably only behind BlackBerry Q30/Passport which also has a decent keyboard and runs an unfortunately locked-down version of QNX. For me it’s less like a phone and more like a portable terminal for times when using a full size laptop is uncomfortable or impractical, and with the keyboard it’s possible to write lengthy articles on the go. ...

Links and Further Readings for My Everything Open 2024 Talk

April 12, 2024
Talks, Linux, PinePhone, OP-TEE, EverythingOpen, Links

Here you can find a list of links related to my topic which I find useful or just interesting. Meta # Info page https://2024.everythingopen.au/schedule/presentation/24/ Slides EO2024.Slides.exploring.mobile.linux.security.odp Recording XXX to be processed VerityMobile GitHub :: ZhanYF/veritymobile Demo # Access Measurements from Linux Userland Sign in to GitLab with fTPM-backed FIDO token fTPM-backed SSH Identity Disposable Web Session OP-TEE # Docs Index and high level introduction # https://optee.readthedocs.io/en/latest/general/about.html Secure Storage # https://optee.readthedocs.io/en/latest/architecture/secure_storage.html ...

Encrypted and Version Controlled File Sync with git-annex(1)

October 21, 2023
Linux, sync, git-annex

git-annex(1) is a versatile and cross-platform tool build on top of git, it can sync, backup, archive files and provides many useful primitives for building customized workflow and storage system, for example, by combining git-annex with gcrypt, it’s possible to fully encrypt data stored on a remote. Partially due to its versatility, it has a steeper learning curve than some other tools in this field and it took me some time to figure out how to make it work for me, here is a quick guide that documents my journey. ...

Virtualization with KVM on the PinePhone Pro

June 23, 2023
PinePhone, Mobian, OpenBSD, KVM, BSD, Linux

Basic Setup # All the tools we need for running VM are already packaged on Mobian, to install them, run: sudo apt install virt-manager then add your user to the libvirt group: sudo adduser mobian libvirt Reboot and then run virt-host-validate, it should indicate /dev/kvm exists and is accessible. Trouble with Heterogeneous Architecture # Trying to start qemu-system-aarch64 with -enable-kvm flag can yield the following, rather unhelpfully worded error: ...

A week with Mobian on PinePhone Pro

June 15, 2023
PinePhone, Mobian, Plasma, Linux

It’s been a bit more than a week since I start daily driving the PinePhone Pro with Mobian, some parts of my journey are documented here. IME and Keyboard # Both Phosh and Plasma provide their own work flow for setting up IME and adding extra language support, but so far I’m unable to get Phosh’s ibus-based input system to work with PinYin when using on-screen keyboard. I’m able to install PinYin and Anthy from Phosh’s software center, but those methods only work when used with external keyboard, switching to either of those from on-screen keyboard makes no difference when typing. ...

Mobian and Plasma Mobile on the PinePhone Pro

June 6, 2023
PinePhone, Mobian, Plasma, Linux

Setup Tow-boot # Mobian as of now requires Tow-boot bootloader to be installed first, u-boot is no longer supported. To install Tow-boot, see this document, I find it easier to plug in a usb cable to start the phone while holding down the RE button. Be mindful that there will be no graphical boot menu after installation, at the moment tow-boot menu is only available via serial connection. It’s also possible you can skip this step, according to the PinePhone Pro wiki: ...