Profile picture
Adrian Sanabria @sawaba
, 9 tweets, 2 min read Read on Twitter
Why it will never be the year of the Linux Desktop
1. Install Linux. Works great!
2. Stumble upon interesting software on GitHub.

This looks really cool! You get excited.
3. Tackle 37-step process to build or install involving setenv, sandboxing, $PATH, export, tmux, gem install, apt-get, yarn, CPAN, rvm, nvm, pip, curl tgzs & nodejs to run 50kb of code.
You're nervous about being asked to install deps via CPAN, pip and gem all for the same piece of software, but running the coolest software requires sacrifice, right?
4. Install/build fails with a mysterious error.
5. Google mysterious error.
6. Google: "Ah, you're running an old version of Python/Go/Cobol/WTFBBQ!"

"Ah fuck, here we go", you're thinking...
7. Update Python/Go/Cobol/WTFBBQ
8. Package manager: "Sorry, fuck off, this is the newest version you can get"
9. Try to install a newer version manually
10. Install/build fails with a mysterious error.
11. Google mysterious error.
12. It appears newer versions of Python/Go/Cobol/WTFBBQ aren't compatible with the CurmudgeonOS distro due to issues with dependencies, paths and people with dirty auras.

You consider replacing CurmudgeonOS with HipsterOS.
13. You Google mysterious error + people with CurmudgeonOS
14. Yes, people have made this software work with your situation, but solutions generally involve chroot, docker and lemon water detox.

Is it really worth a multi-day colon cleansing to get this software running?
You begin to suspect this software has only ever worked on one system... the developer's.

But how could that be? It's been starred over 3000 times!
15. You Google other similar software.
16. You find a Chrome extension that does the same thing. It takes < 3 seconds to install and works perfectly on ChromeOS/MacOS/Windows/Linux.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Adrian Sanabria
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @sawaba see all

Profile picture
Alright, today is the day we get to find out if I was right or wrong about the level of dysfunction necessary for the failures that allowed the #Equifax breach to occur.

Why today? Because the House Oversight report has been released. Merry Christmas! oversight.house.gov/wp-content/upl…
Feel free to download a copy and read with me as I go through the report. I predicted 30 failed controls? I'm sure that was just a random number I threw out, but let's see how close I was. #Equifax
Also, for a refresher, this was my blog post about the breach. blog.savagesec.com/equifax-breach…

I also made a prediction that the breach would be financially lucrative for Equifax - that it was effectively the best lead gen event for the company EVER.
Read 42 tweets
Profile picture
2004 - I remember being so relieved when I could finally stop running my own email server. Why? Because the GMail beta was out and it was awesome.

Goodbye Postfix and Squirrelmail, hello GMail.

Now, it's looking like email servers at home is cool again? thehelm.com
2 My initial response was similar to @iiamit - "wait, what? - Is running a personal server myself really the best option right now?"

But I get it - privacy is an issue that has many people concerned. Still... there's a lot to give up here.
3 With GMail, I can instantly, easily search all my email anytime and from anywhere with simple search operators and filters. In a time when email is so overused, search and organization is important.

The Helm offers IMAP. Good luck finding anything 3 years from now.
Read 7 tweets
Profile picture
1/ Alright. InfoSec Industry. Mainstream media.
It's time we sit down and have a serious chat.
Almost all your stats and claims are bullshit.

Yes, it's rant time.
Yes, I'm using the patronizing filter, sorry.
My patient filter is all out of batteries.
2/ Breaches are bad. We can agree on this. They're disruptive. They're expensive. They can have a negative impact on reputation (mostly when handled badly).

They're not destroying companies at a horrifying rate, or any rate we can calculate.
3/ Certainly, we're not seeing 500,000 small businesses going out of business because of a breach. Or 60% of SMBs every year.

Businesses are going to fail because there are already 100 other cupcake shops in the same neighborhood.
Read 15 tweets

Related threads

Profile picture
Ok, I will.
A One Piece Readthrough Thread
So, my history with One Piece is that I’ve been a dedicated dub watcher since college. One Piece is the one shonen show I’ve never bounced from; its been with me through finals, freelance, job hunts, marriage, and parenthood. It’s my preferred “on in the background” anime.
Read 219 tweets
Profile picture
#linux #bash #obfuscation #technique #bashfuscation
padding commands with history expansion characters (#exclamation mark (!))
! ! ! ! echo this is test
(removed the previous tweet as I revealed too much info !)
#linux #bash #obfuscation #bashfuscation

using history expansion character -> !! (i.e. last command)

ca
!!t really

is equivalent to
cat really

(only 4 interactive shell)
#linux #bash #obfuscation #bashfuscation

padding commands with empty commands (: ;)

: -> true (do nothing)
; -> command separator

: : ; : ; cat really
! ! ! : : ; : ; cat really
Read 8 tweets
Profile picture
well I guess I know what I’m doing tonight
if you guys have any questions about Elon’s magic baseball train, I will do my best to get answers
when I say do my best, I can’t guarantee I won’t just ask who is grimes
Read 51 tweets
Profile picture
#linux #bash #path #obfuscation
goal: obfuscate /etc/passwd
1) #directorytraversal: /mnt/././../etc/././passwd
2) escape characher: /etc/.\/\/\/\/\/passwd /etc/.\/.\/.\/.\/passwd /\e\t\c/passwd
3) null character /et$'c/pa\u0000/notexist/path'sswd
....
#path #obfuscation using #symbolic #link
ln -s / anything
head -n 2 anything////../etc/passwd

ln -s ../../ wow
head -n 2 ././wow/../etc/passwd

* ../ after a sym link applies to the sym link not the current path
filename expansion #globbing

cat /et*/pa**wd

command expansion
$(echo /e)tc$(echo /pa*)wd

+ other string obfuscation techniques
Read 5 tweets
Profile picture
#linux #bash #obfuscation using shell parameter expansion:

alphabet=abcdefghijklmnopqrstuvwxyz
${alphabet:2:1}at really
${alphabet: -24:-23}at really
${alphabet: -24:1}at really
${alphabet:2:-23}at really

gnu.org/software/bash/…
similar #bat #windows (ss64.com/nt/syntax-subs…)
The goal is to obfuscate the following command:
cat really
in which, really is a file.
Using arithmetic (add, sub, mul, div, mod, and pow) for calculating index or lenght
${alphabet: 2:(-20-3)}at really
Read 6 tweets
Profile picture
#linux #bash #obfuscation using octal vals
$'\143\141\164' really

gnu.org/software/bash/…
"Words of the form $'string' are treated specially. The word expands to string, with backslash-escaped characters replaced as specified by the ANSI C standard."

Variations
$'\143'$'\141'$'\164' really
$'\143'''$'\141'''''''''''''$'\164' really
$'\143'''$'\141'''""''''""''$'\164' really

Explanation:
'' -> empty string
""-> empty string
'a''b' -> 'ab' (concatenation)

(deleted the previous one, as the picture had a problem)
To give you a headache

t=
$'\143'''$'\141'$t''"$t"''`$t`''$'\164' really
Read 13 tweets

Trending hashtags

#black #Astoria #avengersinfinitywar #CPAC2018 #Hitman #MondayMotivation #homophobic #young #fav #nomuslimbanever #ConversionTherapy #osdev #maga #SuperBowl #software #transphobia #BecauseofJesus #process #bashfuscation #cis #linux #aeasf #RecordStoreDay2019 #MerryXmas #makeamericagreatagain

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!