xinayder

@xinayder@infosec.pub
2 Post – 53 Comments
Joined 1 years ago

That doesn't seem to be the case. From what I read on HN, the dev quit because he thought it didn't make sense to submit CVEs for temporary/wip solutions, and F5 thought otherwise.

So as I see it, the developer quit because he didn't agree that a CVE should be opened for a work-in-progress solution that was live on Nginx.

1 more...

Why is Gitness on the news and why is it being considered as the de-facto alternative to GitHub? Why is GitLab/SourceHut/Forgejo (and Codeberg)/Gitea not being considered?

Forgejo for example has almost a 1:1 compatibility with GitHub Actions and it didn't make the news. If you were to replace GitHub, Codeberg or Forgejo is a very good replacement for it.

Yet companies are manipulating survey results to justify the FOMO jump to AI bandwagon. I don't know where companies get the info that people want AI (looking at you Proton).

There's a GitHub issue tracking this bug. It seems like SDL3 was finally released and Valve "forgot" to compile SDL3 with Wayland support.

If you're using Wayland, you can add a startup parameter to force the game to use X11 and it will work.

This issue is also affecting Dota 2.

6 more...

An Oblivion remaster made in Skyrim

owait, that already exists, Skyblivion is a thing

I'd recommend Forgejo/Gitea as others have mentioned or https://sourcehut.org (instance available at https://sr.ht/)

As much as I despise MS and think they are equally incompetent, I don't think it's a good idea to lock down Windows. They will stop providing kernel access to 3rd parties at first, then a few months later you will only be able to download software from the Microsoft Store.

Yes, it's a security issue but them being allowed to close down their OS sets a dangerous precedent that will make Windows even more shittier and enshittified than it already is.

3 more...

Can someone ELI5 what's going on? Seems like they are still fighting about Nix allowing a defense company to sponsor their conferences, and trying to ad hominem the project leaders.

Care to share how you disabled every bit of AI in the phone?

2 more...

The same issue happens to me when opening links from any app on Wayland. For example, every time I click a link on a Discord chat, I have to manually click on the Firefox window because the focus is not automatic.

I stopped reading when I read "Electron".

I used Heroic a few times and it's absolute garbage because it runs Electron.

They said they will offer these 2 versions side-by-side, but mark my words, a few months/years they will go with the Electron version and kill the GTK version.

1 more...

That's like going to a therapist and then finding out your therapist needs to go to therapy after treating you.

why not gzip?

2 more...

If you own a domain name you can use the DNS-01 challenge instead of hosting a web server to serve the challenge response.

With DNS-01 it will add a TXT record to your DNS zones and check if the record exists to verify that you own the domain and then issue the certificate.

Depending on which tool you use, they usually support DuckDNS and some other free DDNS providers. If you have your domain on a registrar, chances are that it's also supported.

I tried 5 different credit cards to setup my account and none of them worked for the free tier. Contacted customer support, they simply said "well we can't do anything about it, it's clearly a problem in your end and not ours even though you tried 5 different credit cards to pay for the service".

I'm not using k8s just to host my website, I have other services on it as well.

I know it's overkill for small stuff, but I'm running k3s and not k8s (so it's a lightweight engine). The reason I'm doing this is for learning purposes, I want to learn more about k8s and thought I could do an experiment with it on a VPS.

I plan on renting another VPS and adding another node to the cluster, as it's pretty cheap (Hetzner ARM server costs around 3.8 EUR without VAT with 2 vCPUs and 4GB RAM). For example, it's much more cheaper than the VPS I have on Vultr that has 1GB RAM and 1 vCPU.

Which changes, care to elaborate?

I have a RX 6700 XT that I got earlier this year. I was imoressed that things just work. Okay, you might be in doubt about which driver to install, but it's much better and easier than Nvidia.

The VPN bandwidth doesn't need to be that good, I was checking the GL iNet models and 200 Mbps on WireGuard is enough for me.

Try Piper for your Logitech peripherals.

Seems like they are only dropping the deb for Ubuntu.

I tried changing the graphics settings on my mid-range PC and they barely make any difference. You can tune FSR to the max but I don't think there will be much notable difference.

So... not using Signal because it's based off a conspiracy theory that it's secretly funded by CIA?

Well, let's stop using RSA and encryption because the most used secure crypto algorithms today were created by none other than the NSA!

EDIT: None of the alternatives provided are good alternatives for Signal. Matrix is an extremely complicated protocol that lacks some features compared to normal IM apps (I use Matrix and the experience is quite close to a standard messaging app). XMPP is dead and has a very niche userbase. The others are not suitable for being a daily messaging app.

Signal is a good alternative and while I do agree with some points, they are not bad enough to prevent you from using it (e.g. not having usernames).

I run Wayland and it's definitely worse than X11, but it's getting better day by day. I always struggle with Wayland and I literally did nothing different than installing KDE Wayland. For example, ever since I moved to Wayland, Firefox will randomly freeze and crash when I'm using my PC - this happens at least once per gaming session.

Also, Wayland is still not feature complete and assuming it's the system fault for poor compatibility is wrong.

Just give arewewaylandyet.com a read.

1 more...

I was looking for it as well. I want to host the website using Caddy because I have a lot of config options available and I can fine tune it for my use cases.

I read a tutorial about using a Hugo Docker image, but then the hosting would be done by Hugo and not Caddy itself.

Haven't seen some of these before. Ones I particularly like are:

  • Tirar o cavalo da chuva: take your horse away from the rain = give up on something
  • Lavar as mãos: wash (the) hands = do not involve yourself in something
1 more...

The default config for sudo is to ask for root password. I too was annoyed by this and had to change the setting to ask for the user password, not root, every time I used sudo.

My upgrade was this year from a GTX 970 to a RX 6700 XT.

I use Arch (btw) and the linux-zen kernel, so I use the nvidia-dkms module. It was much simpler, I just installed mesa and the Vulkan drivers, shutdown, installed the new GPU, booted, uninstalled nvidia-dkms.

It was a seamless transition and I had no problems with it.

It's called bureaucracy and Europe is known for being bureaucratic.

Disclaimer: I got an Italian citizenship last year and I still can't get my ID card because of misunderstandings between my Comune and the Embassy.

How is this different than mounting the folder with the static website using hostPath?

Thanks for the suggestions!

I ended up configuring my CI pipeline to build a Caddy docker image that ships with my website files. The pipeline is also publishing the container image to the Codeberg registry and I apply the new image repo and tag to the Caddy Helm chart I found on ArtifactHub.

The only thing that's left is to setup the CI to automatically restart the pod when a new image is pushed, so it will always have the latest version.

It was easier than expected and I had a few issues like my stylesheets not being applied and image files not rendering, but it was solved by changing the pathType field on the ingress configuration to Prefix.

I had a similar issue with my laptop, where Arch wouldn't be recognized as a bootable system on my NVMe drive unless I disabled RST with Optane on the BIOS, setting it to AHCI mode.

I do remember seeing a similar issue a while ago as well, but I don't remember if the user managed to fix it.

I could suggest removing the Windows drive, installing Arch and checking if everything works, then plugging the Windows drive back in. Windows loves to delete non-Windoes bootloaders from every drive it can.

My only issue with the latest update is that the app doesn't start minimized by default. Otherwise, I really like the program!

You can install the log transformer plugin for Caddy and have it produce a readable log format for fail2ban: https://github.com/caddyserver/transform-encoder

I had this setup on my VPS before I moved to a k3s setup. I will take a look at how to migrate my fail2ban setup to the new server.

1 more...

I think so, but if you check the official image you can definitely find out how to include custom plugins in it. I think the documentation might mention a thing or two about it too.

It's still not an excuse to just ignore the security update because you might not be a target for hackers.

Just check your logs, there's probably a dozen or more requests trying to access wordpress pages on your server, or login via SSH. They want to take over your server so it can be part of a botnet.

Have you tried to install the it87 driver for your kernel? https://github.com/frankcrawford/it87 (on AUR it's it87-git)

I have ASUS B450M PRIME GAMING and after installing the driver, the chassis fan sensors were detected and I could use CoolerCtrl to draw the fan curve.

I don't quite like CoolerCtrl because of its UI, seems to be web based, but it works and has a daemon mode to start minimized on startup.

They kinda already do this. Any .exe you download outside the Microsoft Store requires double confirmation before you can execute it, unless it's from Microsoft.

I have a k3s cluster for fun and I can admit that k8s is way too complicated.

I don't want to dig hours through documentation to find what I'm looking for. The docs sometimes feel like they were written for software devs and you should figure part of the solution yourself.

I have a ExternalName service that keeps fucking up my cluster everytime it restarts, bringing down my ingresses, because for some reason it doesn't work and I have no idea where to look at to figure out why it doesn't work - I just end up killing the service and reapplying the yaml file and it works.

I had to diagnose why my SSL certificates would get stuck in "issuing" in cert-manager, had to dig through 4 or 5 different resources until I got to an actual, descriptive error message telling me that I configured my ClusterIssuer wrongly.

I wanted a k3s cluster to learn but every time I have issues with it I realize it's a terrible idea.

I wish I had podman + compose but it does seem like a docker-compose is more complicated. Also, I wish I could do ansible but I have no idea where to start (nor how it works).

EDIT: oh yeah I also lost IPv6 support because k3s by default doesn't enable v6 and I was planning on using Hetzner CCM to have a 2 node cluster until I realized Hetzner Networks don't support v6.

Do you have to do this every time you update your phone?