I think that what helped was to remove "END;" line. It's an alias for COMMIT.

-1
submitted 2 days ago* (last edited 2 days ago) by hetzlemmingsworld@lemmings.world to c/sqlite@programming.dev

Hello, when I use following sqlite3 commands, it returns error "cannot commit - no transaction is active" somewhere near the line "WHERE user IN (".... So I wanted to ask what to replace with what in order not to produce said error. I am not a developer and the ChatGPT (1, 2) is unable to provide working code. Can you please help?

said commands:

-- Start a transaction
BEGIN TRANSACTION;

-- Insert missing user_permission_overrides rows
INSERT INTO user_permission_overrides (room, user, write)
SELECT DISTINCT ru.room, u.id, TRUE
FROM room_users ru
JOIN users u ON ru.user = u.id
LEFT JOIN user_permission_overrides upo ON u.id = upo.user AND ru.room = upo.room
WHERE u.created < strftime('%s', '2024-07-02 00:49:26')
AND upo.user IS NULL;

-- Update existing user_permission_overrides rows
UPDATE user_permission_overrides
SET write = TRUE
WHERE user IN (
    SELECT id
    FROM users
    WHERE created < strftime('%s', '2024-07-02 00:49:26')
);

-- Commit the transaction
 COMMIT;

 END;

list of tables, schema, pragma I have pasted here please.

5
submitted 2 days ago* (last edited 2 days ago) by hetzlemmingsworld@lemmings.world to c/kodi@reddthat.com

Kodi (20.1 (20.1.0) Git:20230316-d8f3f99cc3-dirty). Platform: Linux ARM 32-bit

was not responding after start and the Tvheadend shown no channels at http://192.168.0.2:9981/extjs.html (later I have found the disconnected antena cable).

cat /home/xbian/.kodi/temp/kodi.log (for other OS log paths check here) shown some warnings and errors, which I have all pasted here.

When i have pushed any button on the remote control (control worked and TV led indicated contact), there was no log entry added into a mentioned kodi log.

"dmesg -T" not shown any errors. After rebooting over SSH (reboot now), it started responding after boot (weird that not under first boot and second yes). But it got no reply from TVHeadend HTSP client (no signal, later I have found it is disconnected antena ;). When i went to this addon configuration, it freezed with following errors in said Kodi log:

error <general>: Repository add-on repository.universalscrapers does not have any directory and won't be able to update/serve addons! Please fix the addon.xml definition
error <general>: AddOnLog: pvr.hts: Command getDiskSpace failed: Unable to stat path
error <general>: GetDriveSpace: Add-on 'pvr.hts' returned an error: server error
warning <general>: OnMessage: Suspiciously long time to handle GUI_MSG_PLAYBACK_STARTED (25.942558s)
warning <general>: OnMessage: Suspiciously long time to handle GUI_MSG_PLAYBACK_STARTED (6.573358s)
error <general>: CCurlFile::Open - <http://127.0.0.1:9981/imagecache/2403> Failed with code 404:
...

Then i saw it moved to and stuck on a "stopping kodi" xbian screen. Since I have not updated a few months, i did command "sudo apt update;sudo apt upgrade" via SSH command line remotely.

it updated many packages, no "kodi" package, but "tvheadend" one

at the end of the upgrade process was:

initctl: invalid command: try-restart
Try `initctl --help' for more information.
invoke-rc.d: initscript ntp, action "try-restart" failed.
Setting up xbian-package-config-xbmc (20231115) ...
Processing triggers for xbian-package-config-xbmc (20231115) ...
Errors were encountered while processing:
 fail2ban

(fail2ban has been installed by me previously and it never worked entirely, and removal is not working somehow), system rebooted itself automatically after upgrading.

After reboot, there still has been errors in the mentioned kodi log:

Starting Kodi (20.1 (20.1.0) Git:20230316-d8f3f99cc3-dirty). Platform: Linux ARM 32-bit
info <general>: Kodi compiled 2023-03-17 by GCC 10.2.1 for Linux ARM 32-bit version 5.18.2 (332290)
info <general>: Running on BCM2711 with XBian 12.0 - Bullseye, kernel: Linux ARM 32-bit version 6.1.66+
info <general>: FFmpeg version/source: 4.4.1-Kodi
error <general>: GetDirectory - Error getting /home/xbian/.kodi/userdata/addon_data/pvr.nextpvr/
error <general>: GetDirectory - Error getting special://profile/addon_data/pvr.nextpvr/
error <general>: GetDirectory - Error getting /home/xbian/.kodi/userdata/addon_data/pvr.vbox/
error <general>: GetDirectory - Error getting special://profile/addon_data/pvr.vbox/
error <general>: GetDirectory - Error getting /home/xbian/.kodi/userdata/addon_data/pvr.vuplus/
error <general>: GetDirectory - Error getting special://profile/addon_data/pvr.vuplus/
info <general>: PVR Manager: Started
error <general>: [2024-07-01 20:08:55,877 pyinotify ERROR] add_watch: cannot watch /run/splash WD=-1, Errno=No such file or directory (ENOENT)
error <general>: AddOnLog: pvr.hts: Command getDiskSpace failed: Unable to stat path
error <general>: GetDriveSpace: Add-on 'pvr.hts' returned an error: server error

and the screen detected no signal. After next reboot, the screen is ok. After next reboot with connected antena cable, these errors and warnings remains.

After researching all that warnings, I have this (highlighted items are unsolved):

Regarding first block of errors (DBus error: org.freedesktop.DBus.Error.InvalidArgs), someone says that there is no issue with it.

Regarding second block of errors ("Repository add-on repository.superrepo.org.gotham.all uses old schema definition for the repository extension point!"), I think i will have to contact repo admin or uninstall that repo/addons.

"POParser: missing msgstr line in entry. Failed entry", I have not found any solution to that.

Third block: (JSONRPC: Could not parse type "Setting.Details.SettingList") - someone says "can also be ignored, not skin related"

Fourth block may be related to PVR addons that i think are disabled and can not be uninstalled and has no updates. Weird.

Fifth block: (pyinotify ERROR] add_watch: cannot watch /run/splash WD=-1, Errno=No such file or directory (ENOENT)) - I have not found any solution.

Sifth/final block of errors is likely related to second block.

13
submitted 3 days ago* (last edited 3 days ago) by hetzlemmingsworld@lemmings.world to c/tor@lemmy.ml

Reposted from: https://lemmings.world/post/10879238

I am talking about some way to report it (without exposing my identity - using Tor browser) or let it be shutdown.

Related Tor FAQ: https://support.torproject.org/abuse/#abuse_remove-content

Report1: https://report.cybertip.org

Report2: https://www.iwf.org.uk/en/uk-report/

Report3: https://www.inhope.org/EN#hotlineReferral

Here is how to report bad site, in case you find any clearnet traces on the .onion site, incl. email address.

In this particular case, I have been able to spot the ODER/BUY NOW link which lead to a clearnet site. Within a second, it then redirected to a onion site, where I have found an e-mail address. So i had 2 ways to report this (clearnet website and an e-mail).

So run whois lookup (for example at https://who.is/whois/ for mentioned clearnet redirect domain name) and inside the output, discover which nameservers/hosting company it is using. Since it has been using Cloudflare, I have submitted the report form on Cloudflare site. Second thing is that e-mail address the paedopile worm provided on the site. I could visit that email service domain to find abuse contact. I have written steps on how i have discovered the initial link and found the e-mail so they can verify the case.

Do you know other way when you do not find any clearnet traces?

11
submitted 4 days ago* (last edited 3 days ago) by hetzlemmingsworld@lemmings.world to c/tor@lemmy.world

I am talking about some way to report it (without exposing my identity - using Tor browser) or let it be shutdown.

Related Tor FAQ: https://support.torproject.org/abuse/#abuse_remove-content

Report1: https://report.cybertip.org

Report2: https://www.iwf.org.uk/en/uk-report/

Report3: https://www.inhope.org/EN#hotlineReferral

Here is how to report bad site, in case you find any clearnet traces on the .onion site, incl. email address.

In this particular case, I have been able to spot the ODER/BUY NOW link which lead to a clearnet site. Within a second, it then redirected to a onion site, where I have found an e-mail address. So i had 2 ways to report this (clearnet website and an e-mail).

So run whois lookup (for example at https://who.is/whois/ for mentioned clearnet redirect domain name) and inside the output, discover which nameservers/hosting company it is using. Since it has been using Cloudflare, I have submitted the report form on Cloudflare site. Second thing is that e-mail address the paedopile worm provided on the site. I could visit that email service domain to find abuse contact. I have written steps on how i have discovered the initial link and found the e-mail so they can verify the case.

Do you know other way when you do not find any clearnet traces?

3

beside this one

4
submitted 4 days ago* (last edited 4 days ago) by hetzlemmingsworld@lemmings.world to c/security@lemmy.ml

Reposted from: https://lemmings.world/post/10865023

1. Recognize the common signs

• Urgent or emotionally appealing language • Requests to send personal or financial information • Unexpected attachments • Untrusted shortened URLs • Email addresses that do not match the supposed sender • Poor writing/misspellings (less common)

2. Resist and report Report suspicious messages by using the “report spam” feature. If the message is designed to resemble an organization you trust, report the message by alerting the organization using their contact information found on their webpage.

I have found also these phishing reporting pages:

SITE: https://safebrowsing.google.com/safebrowsing/report_phish/

SITE: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

SITE: https://www.scamwatcher.com/scam/add?type=fraudulent_website

SITE/EMAIL: https://report.netcraft.com/report ( scam [*AT*] netcraft [*D0T*] com - for a phishing/fraud mail forwarding )

EMAIL: https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email#section_1 - forward phish mail to report [*AT*] phishing [*D0T*] gov [*D0T*] uk

EMAIL: https://apwg.org/reportphishing/ ( reportphishing [*AT*] apwg [*D0T*] org - forward phishing mail as attachment if possible )

EMAIL: phishing-report [*AT*] us-cert [*D0T*] gov (phishing message should be sent as attachment possibly or its full source code in a message BODY.)

OTHER: https://www.knowbe4.com/free-phish-alert (email client extension)

feedback or new additions are welcome

3. Delete Delete the message. Don’t reply or click on any attachment or link, including any “unsubscribe” link. The unsubscribe button could also carry a link used for phishing. Just delete


Source: https://www.cisa.gov/secure-our-world/recognize-and-report-phishing

Send this to your friends, especially internet beginners.

14
submitted 6 days ago* (last edited 4 days ago) by hetzlemmingsworld@lemmings.world to c/firefox@lemmy.world

If anyone wants to check, here is a video showing a Firefox dev. console (F12 key) and errors occured on https://www.openstreetmap.org/search?query=Oslo#map=8/59.973/10.723

I would like to find the causing extension without the need of disabling extensions randomly or by disabling half of extensions, then if issue solved, disable half of that half etc..

Sometimes it helps to hover over the link near the error on dev. console (F12 key), Console tab, to see the moz-extension://somestring and find first characters of the string at page about:debugging#/runtime/this-firefox Though this time, it does not show that IMO (per the linked video).

If I should click something particular in a FF dev. console (F12), please guide me. Thank you.

3
submitted 1 week ago* (last edited 1 week ago) by hetzlemmingsworld@lemmings.world to c/law@lemmy.world

SPAM companies like DataPacket/DataCamp, 247.ro continuing to SPAM while using IPs from RIPE, which says "RIPE NCC does not have the legal power to investigate these types of issues or take action against ISPs, other organisations or individuals. ... If you require further assistance, we suggest contacting your local law enforcement agency or seeking legal advice." I know that there are many victims of their unsolicited messages, yet why they are allowed to operate for years, law not reaching them? What one can do except submitting their IPs to:

https://www.spamcop.net

https://www.spam.org/report

https://signalants.signal-spam.fr/reportings/new

https://www.abuseipdb.com

https://cleantalk.org/blacklists

I have tried to submit to TrustPilot, but they are protecting SPAMmers.

[-] hetzlemmingsworld@lemmings.world 2 points 1 week ago* (last edited 1 week ago)

Ok, so spending received XMR within 15 blocks (block time seems to be 2 minutes, so half a hour) is too early and spending every 6 months incoming payments in one single tx to my secondary wallet i suppose is too long time.. hmm, that is all quite complicated, I can't asses/compare these times (30 minutes vs 1 month vs 6 months) significance of the impact on anonymity. But thank you.

27
submitted 1 week ago* (last edited 1 week ago) by hetzlemmingsworld@lemmings.world to c/protonprivacy@lemmy.world

3 password managers at same time 🧐 :

My older version of a Firefox browser remember most of my passwords (I am ok how it works), but some important passwords are also stored in KEEpass and not in Firefox. Then there is a ProtonPass which can import both Firefox CSV and KeePass XML.

Problem with import and synchronization of these managers is that the

  1. Pass is not made to deduplicate the imported data (some imported logins may already be in vaults), which requires user to delete Pass logins prior importing a .csv file (importing because file contains more up to date logins).

  2. import does not contain 2FA secrets nor aliases (aliases deleted in Pass can not be restored into Pass at the time of writing - June 2024).

Firefox and Proton Pass - PROS and CONS (as of June 2024):

Quality of suggested logins:

⛔️ Firefox (old ver.) suggests all passwords saved across whole website incl. its subdomains which is messy

✅ Pass: suggests only passwords for a present page (not subdomains) = good

⛔️ Pass: does not automaticaly complete/suggest login when typing into username field and the list of saved logins is not alphabetically sorted by the username.

Speed:

✅ Firefox: shows saved logins instantly

⛔️ Pass: 1 second delay of a Proton Pass drop down menu with login username suggestions comparing to Firefox which loads immediately and gives impression that it loads even before login page finished loading. Both password managers loads at same time on user mouse click into the login field. Delay of a ProtonPass happens only when the suggestion menu should appear automatically upon loading a login page.

Registration form suggestions:

✅ Firefox: suggests previously used usernames/emails when typing, which is fine

🆗 Pass: does suggest anything when i type, as already mentioned. When I click, it suggests main ProtonMail address and allows generating unique alias which is very important key feature

🆗 Pass: password generating box shows non-important confirmation of a successfully copied password, which hides after like 2 seconds, making impossible to read the next form field during that time, which is annoying.

Login form suggestions:

⛔️ Pass: does not offer any login suggestion on a Basic HTTP Auth (.htaccess password protection of a directory) forms (popup) of mine (site: ILF admin, C*A/my)

Other:

⛔️ Pass: in Firefox i think it sometimes gets logged out requring to spend time re-login which may require 2FA auth from other device or other password manager.

✅ Pass: editing, grouping of passwords seems a bit better than Firefox

✅ Pass: Integrated 2FA

✅ Pass: Pass monitor in paid plan, password strength/leak indication

PROS vs CONS. What to do?

ProtonPass is a bit slower than Firefox, yet it has its advantages - email alias generating, 2FA....

SimpleLogin browser extension can be used for Proton aliases and if you do not need 2FA, it may be easier to stay with just Firefox, which is enough safe manager since I am already making backups of a Firefox (incl. passwords - which are also synced E2EE to the Mozilla cloud https://support.mozilla.org/en-US/kb/sync#w_is-it-secure).

Other option is to use Pass only for aliases and 2FA and inside its General settings, disable passwords saving and filling, letting Firefox do this job.

Third manager (for example KeePassXC) can serve as a backup, it can also import exports of Pass and Firefox. I guess it would be good to backup any password manager (incl. Pass) data regularly on schedule.

What are your suggestions/feedback regarding this?

24

After removing all passwords under three dots/kebab menu in the top corner of the page "about:logins", i wanted to import passwords from a Proton Pass to see how it works. Yet there is no import menu entry. After researching, I have found a solution that I want to share:

go to "about:config" page, and search for "signon.management.page.fileImport.enabled". Set it to true by double clicking on "false". Reload "about:logins" page to see the import menu entry under three dots corner menu.

12

Firefox 115.12.0esr with Pass 1.17.4

On various pages including https://lemmy.ml/signup when I click 1st time into a email or password field, Pass shows a "suggestion" box, when I click one more time into that form field, the box now fails to hide even i click outside of it. Workaround is to click into different form field.

Anyone is experiencing the same? On which platform/pass version?

17
submitted 1 week ago* (last edited 1 week ago) by hetzlemmingsworld@lemmings.world to c/lemmy@lemmy.ml

Reposted from: https://lemmings.world/post/10530999

Please what are the easiest and fastest steps in order to find backup of a currently unavailable post thanks to no longer running Lemmy instance?

Lets say it is this post we are reading, that become offline. I am not asking for the links to instances that hosts it, but for the way on how to discover all the instances myself.

So far I have found only this way:

  1. open largest instances list: https://lemmyverse.net/?order=posts&open=true
  2. open one after another and under magnifier button, search for the same post ID (number) as your dead link has

OF opinion: good not to be adicted to it or to anything actually.

[-] hetzlemmingsworld@lemmings.world 2 points 2 weeks ago* (last edited 2 weeks ago)

The more outputs you have/use, to more traceable you get

Thanks for your input. ChatGPT says "using more outputs in your transactions can potentially lead to unintentional traceability if those outputs are later used in a larger transaction. This is why it is important to carefully plan and manage how you use outputs in your transactions to maximize privacy." So it confirms what you have said.

So I guess that I should avoid manually adding multiple outputs in aim to decrease chance of a tracking, I am saying that since i am usually getting small transactions and spending in big ones (which would "consolidate" small outputs and more less invalidate my anonymization effort). So I guess i will do just churning with single output to my secondary wallet and in case i want to "join" funds from "home" and "work" accounts, I can do:

C)

3rd party -> work -> work2nd

KYC'ed 3rd party -> home -> home2nd -> home3rd -> work2nd

and then spend big transaction from work2nd (or maybe i can skip the step "home3rd -> work2nd" and source the big transaction from various accounts, yet someone claimed last year "It seems that at the present moment, neither the Monero GUI/RPC/CLI wallets implement the ability to transfer from multiple addresses." and I can confirm I am unable to find it in Monero GUI [btw. it is very slow to sync (even tens of minutes if not ran for 2 weeks+), i am NOT running node and i am using Tor proxy inside it]. Feedback to what I have written is much appreciated.

[-] hetzlemmingsworld@lemmings.world 3 points 2 weeks ago* (last edited 2 weeks ago)

don’t use a churn output with an unchurned output

You mean that the churning by sending from my wallet to this same wallet(i can also say account or sub account of the wallet) (sending to self) just part of its ballance, will result in churned and non churned outputs in that wallet and these will be joined together if i later (after a week) send a big transaction (or wallet sweep) causing my previous churning be pointless? Maybe in this case is better for simplicity to always churn (part or full balance - i do not know if there is any benefit in sending in parts or in full) to second account within my wallet (instead of sending to self/same address) to prevent this. And i will be sending XMR to a third parties only from that secondary account?

Maybe ask them to establish private (end to end encrypted - E2EE) communication channel by using PGP or ask them to use the service like proton.me which has E2EE mail. If they know some answer to your question, you can send them link to an password protected paste at https://bin.disroot.org

[-] hetzlemmingsworld@lemmings.world 12 points 3 weeks ago

Thanks, I see that the cross-posting works like this: "In order to cross post, I need to first create the post in one community, then after I create the post, I can click the two nested squares icon under the title of the post (with the pop-up text “cross post”) that shows up on mouse-over." https://lemmy.world/post/354611

[-] hetzlemmingsworld@lemmings.world 3 points 3 weeks ago* (last edited 3 weeks ago)

I assume that you mean to receive XMR on own wallet 1, wait for example one week, send to own wallet 2, wait a few days and then spend it (for example in an e-shop)?

According to @jet@hackertalks.com jet@hackertalks.com suggestions, i assume that to improve this, i can split the first transaction between my wallets into two payments (hours or a day delay between each) and each sent to different wallet of mine, then making sure i do not send these two outputs later into same wallet of mine, which would compromise my anonymization attempt? Is this split into 2 payments doubling the difficulty to trace the payment?

The method described in this whole post of mine can be considered very unlikely to be traced by any government in the next decade? Thank you

Thanks, I would like to be able to understand how big improvement would be to send the same or similar amount to secondary wallet of mine when comparing to direct sending mentioned by you. I think that i want above average protection, but i am unable to estimate impact (on TX traceability) of 1,2 more transactions of similar amount between my wallets and i am not enough technical to read and understand tens of technical pages of the Monero whitepaper.

[-] hetzlemmingsworld@lemmings.world 1 points 3 weeks ago* (last edited 2 weeks ago)

I have been told that it is not safe to enable 2FA and use Pass as an authenticator. For Proton account 2FA I am using not only Pass but also KeePassXC as a backup solution (for the case when Pass logout and requires 2FA code in order to login - and in such a case you can not get the 2FA code out of Pass - chicken-egg problem). Yet when using Pass desktop app, maybe logout issue is minimized (it remember my password across reboot and paid Pass is said to work offline).

[-] hetzlemmingsworld@lemmings.world 1 points 3 weeks ago* (last edited 3 weeks ago)

I guess You mean to create new mod rights request discussion topic inside the community, where i want mod rights (seems like an unsolicited way that pings and spends time of all members)

Regarding contacting instance admins in case community has no active mods, i assume i go to parent instance (in this case https://lemmy.ml/ ) and scroll down to see the list of "admins:" in the sidebar. I click one, it says "You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user." I am unsure how to follow ext. user via my home instance yet i have found this kind of URL: https://lemmings.world/u/username@external.instance (assuming my instance lemmings.world) and on it is a New message button that seems to be working. So it does not seems to be easy to contact custom external instance user who's post i can not see on my instance. UPDATE: I can do it by using search icon and pasting: @username@external.instance (for the community, i use !community@external.instance) - this method is not apparent to a newbie

no, when i use ! like this: https://lemmings.world/c/[!qbittorrent@lemmy.ml](/c/qbittorrent@lemmy.ml) then it returns error "couldnt_find_community"

view more: next ›

hetzlemmingsworld

joined 3 weeks ago