Privacy, telemetry, data collection

https://librewolf.net/

LibreWolf — privacy enhanced Firefox gets much better results on https://coveryourtracks.eff.org

sudo apt update && sudo apt install extrepo -y

sudo extrepo enable librewolf && sudo extrepo update librewolf

sudo apt update && sudo apt install librewolf -y

Any program that uses web UI via web-server may leak internal LAN IP-address of the device, for example IP Webcam for Android does this in Referrer. F12 > Dev Tools > Network > check what requests app makes. Any API is potential channel for leaking user data. Be cautions when using proprietary apps in sensitive environment. FOSS is better in such cases, else decompile, modify, rebuild.

https://www.privoxy.org/user-manual/quickstart.html

https://docs.searxng.org/

sudo ufw enable

sudo apt install tor

torsocks --version

sudo systemctl enable tor      // start on boot

sudo systemctl start tor          // start now

sudo systemctl status tor       // check if running

torsocks curl https://check.torproject.org

CLI browsers are not safe browsers. Using w3m/lynx to “avoid JS” doesn’t make sense for anonymity; you’re trading usability and security for terminal UI. CLI inside a Tor-based system is safe way: Whonix, Tails (easiest).

Ordinary goofy will say that he has nothing to hide, but he do not take into account regime change, idiotic laws and limitations that may be in future... The less data you share, the better. Nobody has right to poke nose in your LAN, hardware, behavior, business...

KGet download and upload limit not working

nano ~/.bashrc

alias slowget='aria2c -c -x 16 -s 16 --file-allocation=prealloc --max-download-limit=1024K -o'

source ~/.bashrc

cd /desired/folder

slowget "file_0.avi" "URL"

If download fails:

slowget "file_0.avi" "NEW_URL" // to resume

Alternatives for using KGet:

E: Package 'trickle' has no installation candidate

sudo apt install firejail // 28.5 MB

firejail --net=eth0 --bandwidth=kget:1500:1500 kget

sudo wondershaper eth0 1500 1500 // NIC limit

GA-970A-DS3P FX wake on lan not working on Lubuntu

Looks like WOL is Enabled by default, if Erp Disabled, and MB is made solely for Windows, where WOL is enabled in driver. Enabled Power On By Mouse, Power On By Keyboard just in case... No lights on LAN port but 2.5W power draw... If CPU Turbo mode is enabled, 3.5W power draw...

https://www.gigabyte.com/Motherboard/GA-970A-DS3P-FX-rev-21

Windows 8 Features > Other OS

CSM Support > Never

Boot Mode Selection > UEFI and Legacy

LAN PXE Boot Option ROM > Disabled

Storage Boot Option Control > Disabled

Network stack > Disabled

IOMMU Controller > Enabled

ON REMOTE/TARGER/HOST/SERVER PC:

sudo nano /etc/default/grub

GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"

GRUB_CMDLINE_LINUX_DEFAULT=""

sudo update-grub

sudo apt install openssh-server -y

sudo systemctl enable --now ssh

ip link

sudo ethtool enp3s0 | grep Wake

        Supports Wake-on: pumbg

        Wake-on: d

sudo ethtool -s enp3s0 wol g

sudo ethtool enp3s0 | grep Wake

        Supports Wake-on: pumbg

        Wake-on: g

BUT IF sudo reboot > Wake-on: d > sudo poweroff > Wake-on: d

nmcli connection show

sudo nmcli connection modify "Wired connection 1" 802-3-ethernet.wake-on-lan magic

sudo nmcli connection down "Wired connection 1" && sudo nmcli connection up "Wired connection 1"

Alternatives:

Option A — NetworkManager

Create a dispatcher script:

sudo nano /etc/NetworkManager/dispatcher.d/99-wol

Put:

#!/bin/sh

ethtool -s eth0 wol g

Make executable:

sudo chmod +x /etc/NetworkManager/dispatcher.d/99-wol

Reboot and check:

ethtool eth0 | grep Wake

Option B — systemd service

sudo nano /etc/systemd/system/wol.service

[Unit]

Description=Enable Wake-on-LAN

[Service]

Type=oneshot

ExecStart=/usr/sbin/ethtool -s eth0 wol g

[Install]

WantedBy=multi-user.target

sudo systemctl enable wol.service

ON CLIENT PC:

sudo apt install wakeonlan

wakeonlan [MAC_ADDRESS]

KVM install and configuration on Kubuntu

sudo apt install qemu-kvm libvirt-daemon-system libvirt-clients bridge-utils virt-manager

groups                    List groups for the current user.

groups <username>   List groups for a specific user.

id <username>    Display UID, GID, and all group memberships.

cat /etc/group            Show all local groups and their members by reading a file.

getent group            List all groups from all configured databases.

sudo adduser $USER libvirt

Virtual Machine Manager > File > New Virtual Machine > Local Install Media (ISO image or CD-ROM)

If failed to create image, create image.qcow2 in storage location and then choose it for OS install.

sudo nano /etc/libvirt/qemu.conf

# Some examples of valid values are:

#

#       user = "qemu"   # A user named "qemu"

#       user = "+0"     # Super user (uid=0)

#       user = "100"    # A user named "100" or a user with uid=100

#

#user = "libvirt-qemu"

# The group for QEMU processes run by the system instance. It can be

# specified in a similar way to user.

#group = "kvm"

user = "your_username"

group = "your_username"

user = "your_username"

group = "libvirt"

sudo systemctl restart libvirtd

Network selection > Bridge device... > virbr0

ifconfig

On KDE couldn't turn off full screen with shortcuts... but right mouse button > tick full screen > untick full screen... Changing window size and position with shortcuts started working.

dpkg-query -W -f='${Installed-Size} \t ${Package}\n' virtualbox*

qemu-img convert -f vdi -O qcow2 /path/to/your/vm.vdi /path/to/new/vm.qcow2

sudo apt purge "virtualbox*"

sudo apt autoremove

Rescue mode without graphics:

sudo grub-install /dev/vda

sudo update-grub

Linux firewall ufw settings for local PC

sudo ufw enable

sudo ufw default deny incoming

sudo ufw allow from 192.168.1.0/24 to any port *****

sudo ufw allow from 192.168.1.0/24 to any port ***** proto udp

sudo ufw allow from 192.168.1.0/24 to any port ****

sudo ufw allow from 192.168.1.0/24 to any port 22

sudo ufw allow from 192.168.1.0/24 to any port 3389

sudo ufw allow from 192.168.1.0/24 to any port 445 proto tcp

sudo ufw status verbose

ss -tulpn

upnpc -l

curl ifconfig.me // compare with PC public ISP IP

nmap -p **,****,***** IP-address (check PC and ISP)

ip a

ip -4 addr

ip -6 addr // global address (not fe80::)

nmap -6 -p ****,***** YOUR_IPV6

Synchronize Android and Kubuntu folders

Install dk.tacit.android.foldersync.lite

https://www.apkmirror.com/apk/tacit-dynamics/foldersync/foldersync-2-8-0-44-release/foldersync-2-8-0-44-android-apk-download/

Create account for SMB server in FolderSync.

Create new sync and choose interval.

That's easiest way to sync files between Android devices and Linux PC.

Delete useless user: sudo deluser --remove-all-files <username>

IP Webcam auto file download via SFTP

sudo apt install openssh-server

systemctl status ssh

hostname -I

ifconfig

ip a

sudo adduser ftpdrop

[sudo] password for user:

info: Adding user `ftpdrop' ...

Is the information correct? [Y/n] y

info: Adding new user `ftpdrop' to supplemental / extra groups `users' ...

info: Adding user `ftpdrop' to group `users' ...

id ftpdrop

groups ftpdrop

getent group users // show users in group

sudo deluser ftpdrop users // remove user from group

ssh-keygen -t ed25519 -f ~/ftpdrop_key

Generating public/private ed25519 key pair.

sudo mkdir /home/ftpdrop/.ssh

sudo nano /home/ftpdrop/.ssh/authorized_keys

Paste contents of /home/user/ftpdrop_key.pub

sudo chown -R ftpdrop:ftpdrop /home/ftpdrop/.ssh

sudo chmod 700 /home/ftpdrop/.ssh

sudo chmod 600 /home/ftpdrop/.ssh/authorized_keys

sudo systemctl restart ssh

"Algrotirhm Parameters EC implementation not found" on phone

IP Webcam manual bulk file download

Open http://192.168.1.10:8080/videomgr.html#/modet in Firefox

F12 → Console

Add Set to remove duplicates:

[...new Set(

  [...document.querySelectorAll("a[href*='/v/modet/']")].map(a => a.href)

)].join("\n")

Explanation:

querySelectorAll → all <a>

map(a => a.href) → array of hrefs

new Set(...) → keeps only unique values

[...new Set(...)] → back to array for join("\n")

Copy output → save as list.txt

mkdir ipcam10

nano list.txt → Ctrl + Shift + V

mv list.txt ipcam10

wget -i list.txt --base=http://192.168.1.10:8080/v/modet/

Connect to Kubuntu from Android via Termux

1. Preparations on your Kubuntu 24.04 PC

    Enable Remote Desktop: Go to System Settings > System > Remote Desktop. Enable "Desktop Sharing" (VNC) or "Remote Login" (RDP).

    sudo apt update && sudo apt install openssh-server.

    To find your PC's local IP address (e.g., 192.168.1.10):

    ip addr  OR ip addr  | grep inet    

2. Installation on Termux (Android)

Install OpenSSH client to create the secure bridge:

    pkg update && pkg upgrade

    pkg install openssh

    Create the Tunnel: Use this command to forward your PC's remote desktop port to your phone.

        For RDP (Recommended): ssh -L 3389:localhost:3389 user@your_pc_ip

        For VNC: ssh -L 5901:localhost:5901 user@your_pc_ip

        (Keep this Termux session running in the background).

3. Connecting to the Desktop

Once the tunnel is active, you do not use Termux to view the screen; you use a dedicated app to connect to the "tunnel" Termux created.

    Download a Client: Install aRDP from Play Store or F-Droid.

    Configure the Connection:

        PC Name / Host: 127.0.0.1 (or localhost).

        Port: If the app asks, use 3389 (RDP) or 5901 (VNC).

    Login: Use your standard Kubuntu username and password.

If you get a black screen when connecting via RDP, ensure you are logged out of the physical PC first. Kubuntu's current RDP implementation often prevents simultaneous local and remote sessions for the same user.

POSIX ACL no ownership changes instead of chown and chmod

ACLs let you say: “This specific user can read here — without touching owner/group logic.”

Linux ACLs (setfacl, getfacl) rely on POSIX filesystem features.

NTFS is a Windows filesystem, so:

It has its own ACL model (Windows-style)

Linux NTFS driver (ntfs-3g) fakes permissions

There is no real POSIX ACL storage

Ubuntu 14 remote desktop Kubuntu 24.04 Plasma 5

Ubuntu 14

sudo apt install krdc

Kubuntu 24.04 Server with Plasma 5.27

sudo apt install xrdp

sudo adduser xrdp ssl-cert

sudo systemctl restart xrdp

NoMachine remote desktop with full access to PC

NOT OPEN SOURCE

sudo dpkg -i nomachine_9.3.7_1_amd64.deb

[sudo] password for user:

Selecting previously unselected package nomachine.

(Reading database ... 340752 files and directories currently installed.)

Preparing to unpack nomachine_9.3.7_1_amd64.deb ...

Unpacking nomachine (9.3.7-1) ...

Setting up nomachine (9.3.7-1) ...

NX> 700 Starting installation at: Tue, 30 Dec 2025 21:02:12.

NX> 700 Using installation profile: Ubuntu.

NX> 700 Installation log is: /usr/NX/var/log/install.log.

NX> 700 Installing nxrunner version: 9.3.7.

NX> 700 Installing nxplayer version: 9.3.7.

NX> 700 Installing nxnode version: 9.3.7.

NX> 700 Installing nxserver version: 9.3.7.

NX> 700 Installation completed at: Tue, 30 Dec 2025 21:02:27.

NX> 700 NoMachine was configured to run the following services:

NX> 700 NX service on port: 4000

Windows 7 PC remote desktop Kubuntu 24.04 Plasma 5

The "not applicable" error when trying to install **KB2592687** (RDP 8.0 update) on your Windows 7 machine usually means one (or more) of these common issues:

No sound on X2Go client with Kubuntu 24.04 server

On Ubuntu 14.04 LTS client old laptop

(X2Go audio forwarding over an SSH tunnel to localhost)

By default, the module binds to all interfaces (0.0.0.0 — meaning it could accept connections from anywhere on the network).

Adding listen=127.0.0.1 forces it to bind only to the loopback interface (localhost). This is a common security recommendation when you only need local/tunneled connections (like X2Go does), to prevent accidental exposure to the real network.

In practice, for localhost-only use, it's optional because the default port (4713) isn't usually exposed externally anyway, but it's "safer".

sudo nano /etc/pulse/default.pa

### Network access

load-module module-native-protocol-tcp listen=127.0.0.1 auth-ip-acl=127.0.0.1 auth-anonymous=1

ABOVE LINE IS SOLUTION IN MY CASE

pulseaudio --kill

pulseaudio --start

pactl info

You should see Server String... and so on... if access denied, smth is wrong. 

No need to add client user to audio group!

X2Go Server and Client for old notebook browsing

Always log out of your local session!

Setup (Kubuntu PC)

sudo apt install x2goserver x2goserver-xsession

Laptop

Ubuntu → sudo apt install x2goclient

Win7 → install X2Go Client for Windows

Result

Browser runs on Kubuntu PC

Laptop just displays it

Laptop load ≈ negligible

Ctrl + Alt + F - toggle full screen

Analyze network activity on Kubuntu in real-time

sudo tcpdump // command-line packet analyzer that captures network traffic in real-time

sudo tcpdump -w /path/to/log.pcap // pcap format is used by Wireshark

sudo tcpdump -i <interface> -l | tee /dev/tty | sudo tcpdump  -w /media/user/folder/tcpdump_log.pcap // problem with buffering while displaying real-time in terminal

sudo tcpdump -i <interface> | tee /dev/tty | sudo tcpdump -l -U -G 600 -w /media/user/folder/tcpdump_log-%Y%m%d%H%M%S.pcap // won't help

sudo tcpdump -l -i any | tee -a /media/user/folder/tcpdump_log-$(date '+%Y%m%d%H%M%S').pcap // works but creates incompatible file with Wireshark

tcpdump -l -i any -qn port 53 | tee -a /tmp/dnslogs

sudo nano capture_traffic.sh

#!/bin/bash

# Set the path for the pcap file
PCAP_PATH="/media/user/directory/tcpdump_log-$(date '+%Y%m%d%H%M%S').pcap"

# Run tcpdump to capture traffic and display in terminal, saving to file in background
sudo tcpdump -i enp -l -w "$PCAP_PATH" &

# Run tcpdump to capture traffic and display in terminal
sudo tcpdump -i enp -l | tee /dev/tty

sudo chmod +x capture_traffic.sh

./capture_traffic.sh

sudo apt install wireshark // graphical network protocol analyzer

Ctrl + Shift + P >Name Resolution > Resolve network (IP) addresses // in Wireshark

sudo dpkg-reconfigure wireshark-common > Yes // if u have permission problem

sudo usermod -a -G wireshark {your username}

sudo setcap cap_net_raw,cap_net_admin=ep {path/to/}dumpcap

Restarting Wireshark.

sudo wireshark

sudo dhclient

ping 8.8.8.8

ip link

nmcli

nmcli dev status

sudo lshw -class network

netstat

route

ss // (Socket Statistics) network sockets, network connections and network interfaces

ss -t -a -n // all established TCP connections

ss -u -l -n // listening UDP sockets

sudo apt install traceroute

• -n: Show IP addresses instead of resolving hostnames.
• -m max_ttl: Set the maximum number of hops to reach the destination.
• -q nqueries: Specify the number of probes per hop.
• -w waittime: Set the timeout for each probe.

traceroute -n -m 30 -q 3 -w 2 www.google.com

No network connection on Kubuntu Plasma Desktop

sudo dhclient

ping 8.8.8.8

ip link

nmcli

nmcli dev status

sudo apt install plasma-nm

sudo apt install network-manager

sudo nano /etc/NetworkManager/NetworkManager.conf // didn't work out

[main]
plugins=ifupdown,keyfile

[ifupdown]
managed=false

[device]
wifi.scan-rand-mac-address=no

change the line managed=false to managed=true // no effect

Add following:

[keyfile]

unmanaged-devices=none; OR for multiple devices

unmanaged-devices=none;your-device-name; // device name => ls /sys/class/net || ip link || nmcli

sudo service network-manager restart // didn't work

sudo systemctl restart NetworkManager

Failed to restart network-manager.service: Unit network-manager.service not found.

sudo apt reinstall network-manager

systemctl status NetworkManager

nmcli dev show // make sure device is managed

Reset Network Device Configuration:

sudo ifconfig device-name 0.0.0.0 down // didn't work

sudo ip addr flush dev device-name // didn't work

/etc/network/interfaces && /etc/sysconfig/network-scripts/ // Network Configuration Files

nmcli con show // list all existing NetworkManager connections names

nmcli con mod "Wired connection 1" ipv4.addresses ''
nmcli con mod "Wired connection 1" ipv4.gateway ''
nmcli con mod "Wired connection 1" ipv4.dns ''

nmcli con show 'Wired connection 1'

sudo systemctl restart NetworkManager

nmcli dev show  // look for state change

BEFORE => GENERAL.STATE:                          10 (unmanaged)

NOW => GENERAL.STATE:                          100 (connected (externally))

SOLVED! => NM works and connection is UP from the start

Reinstall drivers on Kubuntu in recovery mode

Ubuntu keyboard and mouse drives fail after upgrade:

sudo apt-get install -y xserver-xorg-input-all // reboot => also may solve other problems

sudo apt install nvidia-settings

If no internet connection in recovery mode or on Plasma Desktop

nmcli dev status

ping 8.8.8.8

sudo dhclient

Troubles with smartphone detection and other USB issues:

sudo apt reinstall mtp-tools

sudo apt reinstall libmtp*

sudo apt reinstall usb*

Network manager problems:

sudo apt install plasma-nm

sudo apt install network-manager

Show current Linux kernel name:

ls /boot

uname -r

uname -r -s -m -p -i -o

Linux 5.15.0-46-generic x86_64 x86_64 x86_64 GNU/Linux 

Reinstall Linux kernel:

sudo apt-get install --reinstall linux-image-$(uname -r)

Remove unused Linux kernel:

dpkg --list | grep linux-image // display a list of installed Linux kernel packages

sudo apt remove linux-image-5.4.0-90-generic // remove unused kernel

sudo apt remove linux-headers-VERSION*

sudo apt remove linux-modules-VERSION*

sudo apt remove linux-extra-VERSION*

Show info about system devices:

lscpu

lsblk

lsusb

lspci

sudo lshw

Gigabit LAN only 60MB/s max network speed on Kubuntu

ip a

sudo lshw -class network

System Settings - Connections

Error code 0x80070035 the network path not found solution

https://thegeekpage.com/turn-windows-features-on-or-off-blank-or-empty/

https://softwarekeep.com/help-center/how-to-fix-windows-resource-protection-could-not-start-the-repair-service

C:\Windows\system32>sfc /scannow

Windows Resource Protection could not start the repair service.

C:\Windows\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.

Verification 33% complete.

C:\Windows\system32>Dism /online /Get-Features /format:table | find "SMB1Protocol"

SMB1Protocol                                 | Enabled

SMB1Protocol-Client                          | Enabled

SMB1Protocol-Server                          | Enabled

SMB1Protocol-Deprecation                     | Enabled

SMB1Protocol can be enabled in Turn Windows Features On / Off.

Enabled SMB 1.0/CIFS Client, which made Windows 10 see all network PCs with Error code 0x80070035.

FOLLOWING COMMAND SOLVED the problem and gave access to shares:

C:\Windows\system32>

reg add HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters /v AllowInsecureGuestAuth /t reg_dword /d 00000001 /f 

https://winitpro.ru/index.php/2018/05/16/0x80070035-ne-najden-setevoj-put-windows-10/