@Nomad@infosec.pub
nomad
member since 16 Jun 2023 14:59
comments
- on This is the back of my 10" Mini server rack -- Custom made 3D printed power modules for each server in c/selfhosted@lemmy.world · 12 Sep 2026
-
on what google wallet FOSS alternative do you know that works in Germany? in c/foss@beehaw.org · 12 Sep 2026
It works by public key cryptography. They sign that your name bought a ticket with a secret key and everybody checking tickets has a public key to check it with which can’t be used to forge a signature.
Yes I’m talking about 14 days, sorry. Just refund the ticket and now you have a valid signature under your name etc that you can show anybody checking tickets. They can’t take that piece of information from you. But that can publish on a public list which tickets were invalidated afterwards. Which nobody bothers checking, instead they rely on the apps checking that.
Pkpass is just a formated version of what data is contained inside the qrcode. It should be possible to scan the code and save it as pkpass. But im not sure. My website allows importing into google wallet or downloading the pkpass for another wallet.
Edit: the last part of the comment is wrong! The qrcode is enough data to allow checking the ticket but usually doesn’t contain more than the signed data for the ticket. That is enough to allow showing a valid qrcode, but not enough to display all related data. So you could in theory construct your own “thin” pkpass file or you might try reverse engineering the data inside the jwt token from the google wallet link to build a pkpass file from.
Edit2: here you find a tool to do this. You can use the signature for the barcode to display a valid ticket code, but you won’t be able to create a valid container signature, so you need an app that will accept that anyways. (Apple wallet doesn’t) github.com/google-wallet/…/README.md
Maybe just try calling and telling them you have an iPhone and no google account. Or buy your ticket from another source.
-
on what google wallet FOSS alternative do you know that works in Germany? in c/foss@beehaw.org · 11 Sep 2026
So I questioned somebody checking my ticket and they explained that lots of people buy the ticket online, screenshot the qrcode and refund it afterwards (14 period online in Germany).
The app checks regularly if the certificate (pkpass) has been revoked and displays that fact somehow. And that’s why they want to see it in an app.
The qrcode certificate is signed and allows to check the validity of a ticket even if both phones are offline, which is a lot on German railway. The drawback is that once a certificate has been signed its valid for a given time and you need to check a certificate revoke list online to see certificates that have been marked invalid. Which none of the phones used by railway personnel does.
Fair warning the workaround i use could also be used for fraud. But as the system has been designed by smart people and is being abused by monkeys, I will still share.
Usually there is a way to download or scan the pkpass version of the ticket. And then you just import it into any app that doesn’t check the CRL. Like passandroid on fdroid.
I travel daily on Deutschland ticket and have never had the case that anybody asked to see it it is a screenshot and complain that its not the right app. There are actually more valid apps than railway companies in Germany. Monkey get told “check is not screenshot”, monkey do. Nomad happy and not so mad after all.
-
on This is the back of my 10" Mini server rack -- Custom made 3D printed power modules for each server in c/selfhosted@lemmy.world · 11 Sep 2026
Cool build. Please be aware there is a reason that Sockets are made from a plastic that does not melt nor burn. Everything near power connections is a potential fire hazard.
-
on Filesystem? GPT is enough. in c/linuxmemes@lemmy.world · 6 Sep 2026
Realized that years ago. Only problem is with dual boot to windows, so be careful if you run that eternal sin of a system.
Usually run luks directly on disk. Sadly windows asked to initialize an unformatted disk when I added a new ssd and I clicked yes. Fortunately it just formatted the backup drive, but that could have been worse.
-
on Ads and tracking infiltrated TVs. Now they're coming for monitors. in c/technology@beehaw.org · 25 Aug 2026
Nobody forces you to install the LG app. Nobody forces you to use windows either…
-
on Ads and tracking infiltrated TVs. Now they're coming for monitors. in c/technology@beehaw.org · 25 Aug 2026
There is a reason to connect a TV to the internet. there is not for a monitor.
-
on Chinese Scientists Made Glowing Plants with Firefly DNA to Replace Streetlights in c/technology@lemmy.world · 10 Aug 2026
Not nearly enough light.
-
on didn't think so in c/programmer_humor@programming.dev · 7 Aug 2026
That i can agree to.
-
on didn't think so in c/programmer_humor@programming.dev · 7 Aug 2026
I’m imagining we are horse breeders in a time where automobiles were not perfect for transportation yet and horses were still everywhere… Not wanting to see a future potentially making us obsolete in our current job is making many people at least blind to the benefits of LLMs and at worst ignorant of the future. Some of us might still be able to drive horse carriages for old times sake, but the rest…
I think you want to say 5W? Amperage is just half of the equation. :)