Ernie's

Introduction/Information I dual-boot Windows with Garuda GNU/Linux (the KDE-Lite flavor). At present, no Arch-based distribution supports secure boot out-of-the-box, but Windows 11 wants secure boot enabled, so I went looking for a solution. I found one that integrates secure-boot support into my Arch-based GNU/Linux distribution on the CachyOS Wiki that uses the sbctl package, and it works flawlessly for me, with one caveat that your computer must have the ability to enter set-up mode, or manage/delete PK keys in the EFI (BIOS) interface. A second caveat is that only dual-boot (Windows with a single GNU/Linux distribution) works at present, and I have not yet learned a way to use sbctl with non-Arch-based distributions, unless they have the package available in their repository. With that said, the best feature of sbctl is that it creates a post-build hook so when you get an updated kernel, the image gets automatically signed for you as part of the installation, so you don't ha...

I have used a number of distributions over the years, starting with Mandrake Linux which morphed into Mandriva after a few iterations, then when the company stopped distributing/supporting it, I switched to Mageia, a community-based fork of Mandriva that was originated by several members of the Mandriva development team (I had vowed to never use a corporate/Company based/supported distro again as a result of my experience with Mandrake/Mandriva). When I ran into issues I could not resolve with Mageia 8, I used Linux Mint Debian Edition (LMDE) for a time. When Microsoft released Windows 11, I became aware of UEFI with Secure Boot, and I though it was a good idea. For me, security is a layered affair, structured something like an onion. The more layers I can add to my security system, the more roadblocks there are for the bad guys, and each segment of my system that I make more secure adds another layer to my security onion. I mention Secure Boot because none of the distributions I use...

For any GNU/Linux users (Debian based distributions), here is a list of several common apt commands and their descriptions: apt command function of the command apt install Installs a package apt remove Removes a package apt purge Removes all traces of a configuration (including configuration) apt update Refreshes repository index apt upgrade Upgrades all upgradable packages apt autoremove Removes unwanted packages apt full-upgrade Upgrades packages with auto-handling of dependencies apt search Searches for the program apt show Shows package details apt list --upgradable Lists all upgradable packages apt list --installed Lists all i...

I have subscribed to US-CERT Security Advisories, and several other related security advisory mailing lists for more years than I can count. Today, I received an Advisory from US-CERT titled ‘Keeping PowerShell: Measures to Use and Embrace, with a link to a PDF document of the same title, at ‘ Keeping PowerShell: Measures to Use and Embrace | CISA ’. In and of itself, this document is probably not of much interest to most home Windows 10 or 11 users, but reading it informed me that there is a newer and possibly more secure version of PowerShell available to the general public. The document linked above was not very clear about that, but the suggestion was there. I make it a policy to keep all the software on my computers as up to date as possible, based on the information I have at any given point in time, so when I learned that there is a newer version of PowerShell available, of course, I had to get it. WindowsPowerShell 5.1 comes preinstalled in Windows 10 and 11. Since it is needed...

I take my Internet safety and privacy very seriously. I live on a fairly limited fixed income, so I consider anything that has the potential to affect my available resources to be very important. Getting hacked, or having my identity stolen could have very serious consequences for me even though I don't have much to get got. Here are some of the steps I have taken to protect myself, online and off: I have enabled 2FA on all my Internet based accounts that support it. For those accounts that do not yet support 2FA, I have a few alternate email accounts (one for each Internet account that does not support 2FA, also with 2FA enabled) for the account's 'username'. I use Windows 11 with a 'password-less' Microsoft account (using the Microsoft Authenticator App on my mobile phone) and a Bio-metric scanner (backed up with a pin) for log in purposes. My Windows installation's security is hardened by enabling Ransomware protection, so even if some miscreant manages...

Any time we edit the Windows registry, we should make a current registry backup just before editing it. The Windows Registry Editor has a built-in back up feature in the 'File' menu, named 'Export...'. To open the Windows Registry Editor, search for 'reg' in Windows search. Choose 'Registry Editor - App' in the results list to open the registry editor. The registry has five main branches: 'HKEY_CLASSES_ROOT' 'HKEY_CURRENT_USER' 'HKEY_LOCAL_MACHINE' 'HKEY_USERS' 'HKEY_CURRENT_CONFIG' When you choose to export the registry to create a backup, the Registry Editor remembers where you chose to store it. Here is what you have to do to back up the entire registry (or any branch you desire): If you want to back up the entire registry (recommended) make sure 'Computer' is selected at the top of the left pane. If you prefer to back up a single branch, make sure that branch is selected. Click 'File >...