You ever pull up his moustache to make sunglasses out of it lol?

Super Mario 64 and his ludicrous fucking elastic face.

This person asked if they can make PopOS secure via TPM.

I am saying that while yes, you can, there isnt much point, because setting up LUKS to work with TPM is inconvenient, easy to fuck up, and basically offers no additional protection against all but extremely implausible security scenarios for basically everyone other than bladed server room admins worried about corporate espionage who are for some reason running bare metal PopOS on their server racks.

Like the only actual use case I can see for this is /maybe/ having a LUKS encrypted portable backup drive, but even then you can still base the encryption key in the actual main pc’s harddrive without using tpm, though at /that and only that point/ are we approaching parity between the difficulty of using or not using tpm to accomplish this.

Oh ok so the use case here is if this casual linux user asking this question has only their harddrive stolen from their pc or their laptop in their home or apartment or workplace, not their whole pc.

Mhm that seems likely.

I guess this maybe makes sense if youre running like a server room, but chances are low thats the actual context of this question.

Why would you run PopOS on a large operation’s servers?

Again, you dont need to use TPM to have a LUKS encrypted partition unlock automatically on boot.

You can just do this via the standard drive management included with PopOS.

Its not though, it requires a ton of extra work to set up, isn’t necessary, doesn’t allow you to do anything you can’t do without it.

You also do not need TPM to automatically decrypt drives on boot, I have also done this on PopOS for 3 years, with TPM disabled.

Ok… so… if you have TPM… and LUKS…

You still have a scenario where the encryption key is still on your physical device, LUKS with or without TPM, or … some kind of TPM based Linux encryption solution I have never heard of?

Does Windows Secure Boot work on Linux via the TPM?

No…

Am I missing something?

Theres no point in involving TPM in securing a linux computer.

In a scenario where you’ve physically lost your computer, using TPM or not it wont matter if your pc gets into the hands of someone who can attempt to brute force the keys.

If your pc is remotely compromised to the point it has something on it that can grab your keys, it also will not matter if you are using TPM in some way.

The only practical use of full disk encryption is if your linux pc and or laptop gets stolen and falls into the hands of a non tech savvy person, and in that scenario, going through the trouble of correctly binding LUKS to TPM will have just been a waste of time.

Thus, you should probably just use LUKS and not bother routing it through TPM.

Sure but you dont need to use TPM at all to use LUKS.

You can store the encryption key on the harddrive, in the LUKS partition layer.

Like thats the default of how LUKS works.

Im really confused why people think TPM needs to be involved in anyway when using LUKS.

Generally speaking you have to go out of your way to correctly cajole TPM v1 or v2 to actually correctly interface with LUKS.

Not necessarily?

Im pretty sure I used PopOS for 3 years with LUKS encryption with TPM disabled.

Why would you do this when PopOS offers LUKS1/2 disk encryption?

(nevermind)

Hah, Ive gone uh, full tilt, and actually am working on making a game myself that will hopefully /actually have meaningfully innovative and compelling gameplay/, and i dont plan on or seem to have any real need to fall into the kickstarter/early access trap.

From a developer standpoint, both those approaches mean deadlines and managing expectations, which is basically maddeningly stressful and soul crushing.

From a gamer perspective, more often than not that means throwing money at a promise that at best will not live up to the hyped experience you have generated with the fandom, and at worst is just a total bust, failure, or scam.

So yep, my plan is tinker away for a year or two until the fundamentals are technologically sound and the actual gameplay is unique and compelling.

Then, only then, would i maybe release a demo or in depth teasers or testing session footage.

Yes thats right. Testing. Remember when games used to actually be playtested, not just for bugs, but for actual gameplay experience?

Many of at least my favorite games and mods were hugely shaped by tester feedback that radically reworked certain game elements to solve unexpected gameplay problems, or to further an idea that the testers found fun or useful that tje devs didnt even realize was really possible in the world theyd constructed.

Anyway… woo video games, shit sucks mostly these days but there are some notable basically niche exceptions, and hopefully i can make something thats at least niche successful.

In the words of a person i truly do think is an actual genius of game design:

These things, they take time.

Time where no one has any real clue wtf youre actually doing, haha.

First off, dang thats a pretty good username, second:

sigh yep, youre right.

I am the only avid video gamer I knew who actually refused and refuses to buy anything ever again from Bethesda after FallOut 76.

I personally know a good deal of gamers who said theyd do the same… and actually did not, some even pre ordering Starfield.

Gamers are basically hilarious hypocrites from the standpoint of market research, public sentiment analysis and actual dollareedoos.

Which is why i would have been an actual idiot at this point to think that an actually significant number of gamers could actually successfully pull off a boycott as a means to influence the overall market conditions.

This is not /that/ complicated.

Who plays video games these days?

Children, and adults who are basically working shit jobs and have little disposable income, but theyre generally likely to get hooked into a game that offers microtransactions of some kind.

Ok, so, we all know AAA studios are more or less led by extremely money hungry bullies who see games as a product to sell to consumers for the purposes of maximizing shareholder profit, and they know they have to mainly compete against other games, and movies and tv (netflix hulu fucking whatever).

Gamers also basically expect high quality graphics and the production value of basically a blockbuster movie, if you go by sales data.

Sure, other games with less astounding graohics and actually unique or novel gameplay exist, thats neat, they have teensy tiny draws, excepting the essentially totally unpredictable break out hit thats popular for maybe a month, maybe literally days.

So, we need huge studios for huge production values, and then the only way to possibly make profits on that is exploitative games as a service with microtransactions and season/battle passes.

Their brains are stuck in a loop state basically, and going by their logic, it makes sense from their position and with their motives and personalities.

Theyre following corpo logic basically perfectly.

You can say theyre the bad guys, and I can say go rewatch V for Vendetta and replay the part where V says ‘you only need look into a mirror’ multiple times.

How does this situation actually change?

Either, somehow, not one but a number of basically indie games somehow become huge successes with massive regular player counts, and most importantly they somehow have to draw people away from the mostly unoriginal schlock that is most AAA money printing games these days…

Or, basically, a significant number of big name studios/publishers need to basically just go entirely bankrupt.

Are either of these likely to happen?

Probably not, not soon, barring an extremely serious basically global economic downturn.

The fact that there is this much uniformity in strategy means that there will be sort of attritional damage done to the less successful, but that… might result in a sea change of market strategy to some other basically fad for AAA game studios… or it might result in even further buyouts and consolidation of once great IPs and studios.

Welcome to video game hell, nearly no one is truly innocent.

Doom, yes.

Crysis?

maybe

I would just like to point out that being terminally online has almost nothing at all to do with being technically savvy.

Huge numbers of people who are terminally online are really only adept at using tech at a surface level, and often confuse this /skill/ for things like knowing how back end programming works, understanding what software development entails, etc.

Actually technically competent people go to great, astounding lengths to make decent software very easy to use for the average person. UI/UX, front end devs, back end devs, database management, and I would say testing paradigms for possible bugs, but the industry seems to have largely abandoned giving a shit about that.

Even here on lemmy I often find myself in discussions which turn into arguments which turn into me finally realizing that the person I am talking to has absolutely ludicrous ideas about tech, the tech industry or a specific software.

Such people say and truly believe in obviously nonsensical things, or approach topics from a standpoint that makes it obvious they are really just power users of a particular kind of software, and have developed into basically superficially convincing fanboys or fangirls for it.

They reveal that they only have knowledge from a bit of experimentation and mostly just following a whole bunch of uninformed discussion about some new tech buzz word, and lack understanding of the important basic concepts, or actually relevant dynamics at play, which they likely would /not/ believe if they had ever actually worked in the tech industry, or developed their own software, or contributed usefully to some open source project.

A whole key thing about the tech industry is that it is dominated by reverence for impressive sounding tech buzzwords that promise some new and revolutionary feature, when in reality such things are nearly always minor, iterative improvements on something that came before.

A high number of people are easily bamboozled by such things.

Basically… you are not immune to propaganda?

Then tech world has: You are not immune to marketing.

A great example is the current craze over ‘AI’ generated content.

OpenAI, Stable Diffusion, these kinds of things?

None of them are capable of the vast majority of the kinds of processes that describe intelligence, but people will argue vehemently that they do, because they are not tech savvy, do not know anything about how the underlying tech actually works or what its capable of, or even what the word intelligence means.

It can do cool and neat things, and its branded or marketed as AI, so it is!

But, its not.

Specifically for antiwork:

Because they are either generally not very well informed or politically well versed and just know that work sucks,

Or they do not have very much free time to follow meta news about reddit and are unaware of what is going on,

Or they just have not heard of lemmy yet,

Or they have had some kind of technical trouble trying to sign up for or use lemmy in the way they would want to,

Or they are not very not very tech savvy and do not understand the FOSS benefits to a discussion board or why or how thats relevant to capitalism,

Or they are basically hypocrites who prefer an echo chamber that is comfortable to a somewhat less echo chambery option and are really just into the whole scene superficially and do not really actually care for having non contradictory and inconsistent views + personal actions/behaviors.

Lots of them probably fall into different categories and many probably fall into more than one.

That is a neat story, thanks for sharing!

Best I’ve got doesn’t have to do with Godot, but I think its neat.

The year is 2003 or 4, and I am beta testing the 0.5 release of Project Reality, which later more or less evolved into Squad.

I know nothing about coding at this point being still in middle school.

What I do possess is apparently pattern recognition.

We are in a last minute waaay overextended beta testing session trying to iron out a mystifying bug:

The whole new feature of implementing squad specific kit bags that are only obtainable at certain in game locations is working.

But… sometimes it is not. At all. Sometimes you can grab an unlimited number of kits without restriction, sometimes you cant and have to follow the newly coded rules that limit kits by being in a squad, and having a total pool of requestable kits per squad and per your whole team.

We get in vehicles, we get out of vehicles.

We go to different parts of the map.

We die then respawn via suiciding.

We die then respawn via being shot, killed as infantry with different weapons, killed inside different vehicles.

We join and leave amd create and disband squads.

We die on the water, we die on the land.

We die on islands, we die on beaches.

We shall never surrender!

Er, well the goof off testers wont, the devs are getting frustrated.

Absolutely none of this has any discernable effect on the problem.

After what must have been about 3 hours… we are basically just fucking about as testers as the actual devs including the one who actually coded the new system is in despair, we are gonna have to push back the massively advertised release date of about 8 hours from now.

Fucking about a bit and watching random zany attempts at most impressive suicides with those who we are at this point joking are just the chosen ones able to spawn unlimited specialist kits with c4 and anti tank weapons…

Something clicks.

I hold down the tab button to bring up the scoreboard with player names.

I start telling a few of the testers who have not already left to try spawning kits at various locations.

Everyone goes sure man why not.

After doing this with myself and 5 other people… I have a theory.

Everyone who has non alphanumeric characters in their name is able to break the kit limitation rules, everyone else is bound by them.

The lead dev is skeptical, but checks the code again anyway.

About a minute later he screams over the mic on teamspeak.

About 10 minutes later, he has fixed what was probably a really simple but easily overlooked bug in how early python parses string values and passes them to other functions or data types.

The server is back up, everything works correctly now, and Project Reality 0.5 is released only a few hours behind schedule, instead of the next week or two when the team would be able to organize another large scale testing bout.

Lol and thats the story of how i saved a mod release date wooo!

Ding ding ding, winner winner chicken dinner.

Sure if you are a bigger entity and have more money to throw around, there are other engines that’ll probably be a much better fit.

If youre a broke ass indie dev, I am not really seeing a better choice than Godot right now, as youre not gonna be able to afford a more expensive engine without /usually/ pulling some kind of asset flip scam type thing.

Sure there are some very good more niche 2D only development engines, but even with a lot of them youve still got some kind of liscensing to deal with.

That basically leaves Unity and … OGRE, as far as I am aware for possibly good choices for a 3D game.

Unity is currently self destructing, and OGRE, at least as far as I have tried, is pretty hard to get a native dev environment working on linux. Maybe I missed something or got confused, but I kept running into error after error trying to set up its more advanced features, which seem to require windows specific dependencies.

I guess you could run it in a VM but that seems basically insane, and even if I was to set up a dedicated Windows machine just to develop on OGRE, it is far more clumsy to work with than Godot.