markstos

@markstos@lemmy.world
3 Post – 152 Comments
Joined 1 years ago

DDoSing cost the attacker some time and resources so there has to something in it for them.

Random servers on the internet are subject to lots of drive-by vuln scans and brute force login attempts, but not DDoS, which are most costly to execute.

Wasn’t the tablet already an eReader?

On the other hand, a Garmin Fenix can be easily opened with an inexpensive tool and replacement parts are easily found online.

24 more...

“14,250 residents…300,000 condoms”.

So, 20 per resident.

8 more...

Originally, ChromeOS was the Chrome browser with just enough code to boot to and take care of other essential OS functions. Like, the system settings and browser settings were practically merged.

The author is alluding to more recent efforts to untangle and separate ChromeOS from the Chrome browser. I believe the goal is for the Chrome browser on ChromeOS to be essentially the same as other Linux browser builds.

So these days ChromeOS is structured more like other Linux distros, with a huge difference being how locked down it is.

Na, it’s just that a memorial post is a time to pause the editor wars, if only for a moment, and pay respect.

3 more...

I’ve studied and used them both and prefer podman for the reasons podman promotes:

  • easy to manage containers via systemd, along with the other systems services I manage
  • better security: rootless containers.

Are you planning to run your own weather station to collect the wind speed, air pressure, precipitation, temperature and so forth?

At least historically, supercomputers were used for weather forecasting, as it’s rather complex to calculate. I’m not it would be worth it to apply all that computing power to privately generate local weather forecasts.

1 more...

This is standard practice in journalism to avoid libel lawsuits. Until there’s a conviction, you say “allegedly”. The media’s role is to report facts not to determine legal guilt.

As someone who has had a career in hosting: good luck.

Don’t forget backups, logging, monitoring, alerting on top of security updates, hardware failure, power outages, OS updates, app updates, and tech being deprecated and obsolete at a rapid pace.

I’m in favor of a decentralized net with more self-hosting, but that requires more education and skill. You can’t automate away all the unpleasant and technical bits.

1 more...

Why not boost the post instead of creating an image of it?

8 more...

How is it better than using NetworkManager or systemd-networkd directly?

Why is it worth the extra complexity?

3 more...

The classic Unix user and permission system provides a solution for this.

Create a user for the app you are worried about. Make the environment variables available to that user only.

Other apps can’t read the secrets, and if the app itself gets exploited, it has access to the secrets in any case.

Companies have policies that phones must be receiving security updates.

I see nothing ADHD-specific here.

12 more...

My wife has used Linux for over a decade. She primarily uses a web browser, office suite and a money management app.

Those have all been well-covered by Linux for years.

2 more...

This will be increasing the environmental impact of producing these chips. That’s a significant amount of energy and materials waste.

To be fair, infinite storage timelines are sustainable for no service.

PocketCasts is good.

3 more...

C920 is good enough for meetings. I solved the focus problem using the traditional Linux method of writing of udev rule which launches a timer when it's plugged in, which periodically launches a systemd service, which runs a bash script to make sure it self-corrects at least every 5 minutes.

❯ cat /etc/udev/rules.d/90-video4linux-webcam-config.rules
KERNEL=="video[0-9]*", SUBSYSTEM=="video4linux", ATTRS{idVendor}=="046d", ATTRS{idProduct}=="0892", TAG+="systemd", RUN{program}="/bin/systemctl start video4linux-webcam-config@$env{MINOR}.timer" ENV{SYSTEMD_WANTS}="video4linux-webcam-config@$env{MINOR}.timer"
❯ cat /etc/systemd/system/video4linux-webcam-config@.timer
# This file is managed by ansible-video4linux-webcam-config
[Unit]
Description=Periodically restart webcam config service

[Timer]
# Unit= defaults to service matching .timer name
OnActiveSec=30

[Install]
WantedBy=timers.target
❯ cat /etc/systemd/system/video4linux-webcam-config@.service
[Unit]
Description=Set webcam configs

[Service]
Type=oneshot
ExecStart=/bin/bash -c "/usr/local/bin/video4linux-webcam-config.sh %I"

[Install]
WantedBy=multi-user.target
❯ cat /usr/local/bin/video4linux-webcam-config.sh
#!/bin/bash

if [[ $# -ne 1 ]]; then
  echo "Expected minor device number as sole argument" 1>&2
  exit 1
fi

   v4l2-ctl -d $1 --set-ctrl focus_automatic_continuous=0
  v4l2-ctl -d $1 --set-ctrl focus_absolute=0

These days you are likely running some code nobody read closely.

The author trusted AI and didn’t fully understand it.

The maintainer trusted the author and merged because the change sounded good and the tests passed and they are grateful anyone contributed at all.

The packager trusted the maintainer. The security team trusted the packager. The user trusted the distro.

Tools like Podman, Docker, Distrobox and Toolbox use custom uid namespaces. I don’t see how they could work with them disabled.

5 more...

Lower hood bonnet height. So victims get thrown on the hood with a better chance of survival. With a high hood height, people are more likely to get knocked down and run over.

Framework Laptop with AMD/Ryzen. My son uses one with Valorent, Minecraft and other games and they all seem to run smoothly.

Also, very repairable!

The beauty of your homelab is that you can try and break things, learn something from it and try something else.

Spam filters rely on many signals besides the from address to decide if a message is spam, because one signal alone is often not reliable enough.

It’s hard to see who deals with spam with the best because when the filters are working well, you don’t notice how much is being blocked.

I can say that both Fastmail and Google work fairly well. Unless things have changed, about 90% of email is spam, with most getting blocked or diverted at different levels. So even if some gets through, it’s possible the systems to block it are still working very well.

No, it’s the framing. Consider this sentence from the story. Does it sound like it was written by a journalist reporting facts or a public relations specialist?

“There’s no frills — just high-quality products at affordable prices which is what customers have grown to love and rely on.”

That’s all opinion. Certainly you can find some products at Aldi that are not high quality, and speaking for what “all consumers have grown to love” is backed by any evidence.

It’s a lightly repackaged press release.

Agreed. I used to host email professionally and would not recommend managing your own mail server. It will constantly be under attack by spammers and if the inbox email address is exposed at all, soon 90% of incoming mail will be spam and you’ll need antispam software to filter it.

1 more...

Ok, but don’t forget to brush your teeth.

Would you like to buy a vowel?

Another option to slim down containers besides using Alpine is using Buildah to build an image from scratch.

https://www.redhat.com/en/topics/containers/what-is-buildah

I’m ready for post-flat design.

2 more...

My dog authenticates access to back yard with a Yubark Key that works over the wireless audio network.

In addition to "encryption at rest", also consider that your devices might be exploited over the internet, so attackers may be able to access the decrypted state that way. To guard against that, you may wish to encrypt certain documents with an additional password, even if they are sitting on an encrypted file system.

Recall that within a month, the widely SSH was exploited and a backdoor added to every machine. I had upgraded to that SSH version. I didn't run an SSH server on that box, but it goes to show that even those who take precautions can end up exploited!

2 more...

Meh, they already have this job. How many times have you had to go through a text or voice chatbot to get a human already?

Should we complain if these bots actually get more useful and answer our questions faster?

Yes, they will be confidently wrong sometimes. But so are the humans.

What could go wrong?

1 more...

What’s not ready for you on Wayland yet?

1 more...

Maybe next time you are joining a friend group ask a different question.

3 more...

I’m not trying to send mail directly from the host, only forward it to a host that’s prepared to send. I’m using Mailgun for that.

Where’s one example of where podman lags?

8 more...