RSSAmplifier

Blog

Andrea Scarpino's blog

scarpino.devRSS feed ↗20 posts

Latest posts

harbour-exporter: a prometheus exporter for the Jolla Store

I’m on the SailfishOS boat again and I’ve come back with a native client for Lemmy . However since my first submission to Harbour , the #Jolla Store, (and that was 9 years, 11 months ago!) I’ve missed email notifications for app reviews (AKA comments). In fact, users can leave those directly from the Jolla Store app, but developers can only read them from the same application. Going app by app,…

winaskpass: WSL ssh-add helper using WinCred

TL;DR: ssh-add helper for WSL that stores passphrases in Windows Credential Manager. Get it via cargo install winaskpass and set SSH_ASKPASS=winaskpass . I’ve been a Linux user for over a decade, or rather twenty years. Even at work, I’ve used Linux for everything, until now: $corporate made a decision that turned my development world upside down. We’re moving to Windows. I refused to let it win…

Sniffing Android apps network traffic

Back in the day, it was really easy to sniff the network traffic made by apps on Android. You could do it in a few minutes by adding mitmproxy’s certificate and setting the HTTP proxy on your wifi network settings. That was it. But things have changed (for good) and that’s no longer the case. However, I still want to sniff the network traffic made by the Apps in Android. How? Well, I can’t use my…

I went out for dinner and I took some endpoint

Three weeks ago I went out to a pub for dinner. Due to COVID-19 restrictions there are no paper menus anymore and the waitress gave me a card to place my order. The card she gave me had a QR code and a 5-digit number. I scanned the QR code and opened the website it pointed to. To login I used that 5-digit number. I placed my order. So far so good. When suddenly a hamburger button caught my…

I'm back in the boat

In mid-2014 I first heard about Jolla and Sailfish OS and immediately bought a Jolla 1; wrote apps; participated in the IGG campaign for Jolla Tablet; bought the TOHKBD2; applied for (and got) Jolla C. Sounds like the beginning of a good story doesn’t it? Well, by the beginning of 2017 I had sold everything (except the tablet, we all know what happened to that one). So what happened?? I was a…

Sharing your loan details to anyone

A week ago, I blogged about a vulnerability in a platform that would allow anyone to download users’ amortisation schedules. This was a critical issue, but it wasn’t really exploitable in the wild as it included a part where you had to guess the name of the document to download. I no longer trust that platform so I went to their website to remove my loan data from it, but apparently this isn’t…

Sharing your amortisation schedule to anyone

Last month, my company allowed me to claim some benefits through a dedicated platform. This platform is specifically built for this purpose and allows you to recover these benefits not only in the form of coupons or discount codes, but also as reimbursements for medical visits or interest on mortgage payments. I wanted to try the latter. I logged on to the platform and then I filled in all the…

Sway and the Dock station

I just moved permanently from awesome to Sway because I can barely see any difference. Really. The whole Wayland ecosystem has improved a LOT since last time I used it. That was last year, as I give Wayland a try once a year since 2016. However, I had to ditch an useful daemon, dockd . It does automatically disable my laptop screen when I put it in the dock station, but it does relies over xrandr.…

External encrypted disk on LibreELEC

Last year I replaced, on the Raspberry Pi, the ArchLinux ARM with just Kodi installed with LibreELEC . Today I plugged an external disk encrypted with dm-crypt, but to my full surprise this isn’t supported . Luckily the project is open source and sky42 already provides a LibreELEC version with dm-crypt built-in support. Once I flashed sky42’s version, I setup automated mount at startup via the…

Automated phone backup with Syncthing

How do you backup your phones? Do you? I use to perform a copy of all the photos and videos from my and my wife’s phone to my PC monthly and then I copy them to an external HDD attached to a Raspberry Pi. However, it’s a tedious job mainly because: I cannot really use the phones during this process; MTP works one in 3 times - often I have to fallback to ADB; I have to unmount the SD cards to speed…

How my car insurance exposed my position

As many car insurance companies do, my car insurance company provides a satellite device that can be put inside your car to provide your car’s location at any time in any place. By installing such device in your car, the car insurance company profiles your conduct, of course, but it could also help the police in finding your car if it gets stolen and you will probably get a nice discount over the…

arch-audit

I started a tiny project a couple of days ago: arch-audit . arch-audit main (and unique) goal is to display the Arch Linux packages that are affected by known vulnerabilities on your system. To do that, arch-audit parses the CVE page on the Arch wiki, which is maintained by the Arch CVE Monitoring Team . arch-audit output is very verbose when it’s started without any argument, but two options…

Choqok 1.6 Beta 1

I’m happy to announce that we will release Choqok 1.6 next month! (mid July) This will be the first release after the KDE frameworks port and many things have been fixed in those 16 months, including: Twitter: fix user lists loading ( BUG:345641 ) Twitter: allow to select any follower when sending a direct message Twitter: fix searches by username Twitter: fix searches by hashtag Twitter: show…

From Ghost To Nanoc

I completed my blog migration from Ghost to nanoc . About 2 years ago I did setup a blog on blog.as.it using Ghost. It’s UI was very minimal and I liked the default theme (Casper) a lot. However, I kept nanoc for my main website, until I decided to give Hakyll a try. It’s not that nanoc didn’t satisfy me at that time, but that I was fascinated by Haskell - I’m still fascinated by Haskell, but I’ve…

KDE Telepathy ThinkLight Plugin

Do you own a ThinkPad? Good! Does it have the ThinkLight ? Good! Then this post might interest you! I just wrote a KDE Telepathy plugin that blinks the ThinkLight when you get an incoming message. Sounds almost useless, isn’t? Maybe not. I found a good use case for it: sometime you could be away from keyboard, but near your ThinkPad (e.g. studying), the screen goes black, sounds are off, but you…

Cleaning an Arch Linux installation

We are in springtime and usually in springtime you make some cleaning . Today I decided to clean my old desktop that is running the same Arch Linux installation since 2007. Warning : this whole task requires a bit of knowledge about what a package does and why it is installed on your system. You could break something, but IMHO in the worst case you will re-install it later ;-) So, I started by…

Choqok and KDE Frameworks

Hi there, Good news for the Choqok users out there: we are now using KDE Frameworks technology! In fact, I spent the last month porting Choqok bits from Qt 4 to Qt 5, but I also fixed minor bugs you discover when doing this kind of work. Regressions could happen, so please report them and we’ll fix them! To try this version you just need to install qca-qt5 and qoauth-qt5, build our code from git…

Firefox KDE Wallet for KF5

Hi there, I have a good news for Firefox and Plasma 5 users: I ported KDE Wallet password integration extension to KDE Frameworks 5! It seems to me that this plugin is unmaintained because both the released version and the SVN one do not support Firefox 33 or newer. So, as first step I took Guillermo’s code and bumped the Firefox version. After that I did work on the KF5 version: I updated the…

How I lost my blog content

…and, luckily, how I restored it! Let me say this before you start reading: backup your data NOW!!! Really, do it. I post-poned this for so long and, as result, I had a drammatic weekend. Last Friday I had the wonderful idea to update my Ghost setup to the newer 0.5 . I did this from my summer house via SSH, but the network isn’t the culprit here. You have to know that some months ago, maybe more,…

Bringing back my data

The past days have been very “FLOSS” for me. Let’s start from the beginning: Tuesday I managed (= it means I found money) to became a supporter of the FSFE ! This is something that I had in mind since the last Linux Day (I’m sorry, that post is in Italian!) because I meet the FSFE Bari guys there and we had a nice chat. I already knew the FreeYourAndroid campaign, but on Thursday I stumbled upon…