Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)T
Posts
5
Comments
212
Joined
2 yr. ago

  • I wasn't the original person that replied.

  • Could start with the fact that they go down about once a month now and take half the Internet with them.

  • If someone's self-hosting, I'd be willing to bet they don't have the same hardened config or isolation that a cloud provider would.

  • No VPN.

  • I've started noticing websites just to refuse to work on Linux:

    • Xfinity
    • Microsoft
    • United Airlines
    • American Airlines

    It's not like some weird script error either. It's straight up a 403 Forbidden on certain routes. Works perfectly fine if I switch to my Windows laptop. It's like it took one look at my user agent string and decided I was a bot.

  • No. Docker containers aren't a full sandbox. There's a number of exploits that can break out of a container and gain root access to the host.

  • Big if true, but this unfortunately just seems like wild speculation.

    There's articles going back to before the election talking about how Trump hasn't been seen in several days. I couldn't find anything more recent than June. He apparently has a habit of flaking on commitments, which doesn't surprise me in the slightest.

  • Tbh I just use it as a reminder to run a system upgrade, otherwise I'd constantly forget to do it.

  • Shell

    Jump
  • I really enjoyed fish but stick to bash as a daily driver because the fanciest, mostly highly personalozef ergonomic shell in the world is useless when you have to ssh into a VM or a Docker container that only has bash. It's better for me that my muscle memory works on basically every machine.

  • Does anyone else manually review PKGBUILDs before installing or upgrading anything from the AUR?

  • Yeah, but the malware can just wait for a system upgrade where you sign a new boot image and slip itself in then.

    It works for Windows because theoretically only Microsoft would have the signing key and it's not just sitting on disk somewhere. But then you're just trusting Microsoft, and also subject to vendor lock-in.

  • Actually, I would love for you to explain to me how Secure Boot alone would protect someone from any of that. If you want to protect files, you need full disk encryption, not Secure Boot.

    Or are you seriously expecting a government-level threat actor to bother to:

    1. Sneak into your home while you're away or asleep;
    2. Overwrite your bootloader or UEFI with a rootkitted image of the same version so it's impossible to tell;
    3. Wait for you to boot your computer and enter your disk encryption password, then:
    4. Use the rootkit to read the decrypted files off your disk?

    That's the great thing about fascist governments, is they have no need to be that sneaky. They can just change the laws to make whatever you're doing illegal and jail you until you agree to give up your documents, or simply hit you with a $5 wrench until you tell them the password.

  • For a home desktop that's never left unattended with anyone untrustworthy, I don't see that Secure Boot is worth the effort in setting up.

    Given that you have to re-sign the boot image every time you upgrade, any malware already running with root privileges on the machine could easily slip itself into the new signed image.

    The best security is not running untrusted software to begin with.

  • That's why we switched, on both closed- and open-source projects. There's just no winning an argument that puts you on the same side as racists.

    At one point I was considering how, if someone asked on one of our public repos, I'd say "no" but at the same time post a receipt for a donation to the NAACP just to prove I wasn't racist. Thankfully I realized how stupid an idea that was before it came to that.

    Performative removedness is a cancer, man. Did any of this arguing and vitriol actually help any marginalized group in STEM? I really fucking doubt it.

  • I don't DM and tell.

  • Thank you boo

  • I don't even need to read the message to know it's a scam. No one ever DMs me otherwise.

  • Programmer Humor @programming.dev

    Another meme inspired me to make this

  • 196 @lemmy.blahaj.zone

    As rule as it gets

  • 196 @lemmy.blahaj.zone

    (OC) sour cream rule

  • Ask Lemmy @lemmy.world

    Has anyone else gotten emails out of the blue from random members of Congress that sound like replies to something you sent in?

  • Memes @lemmy.ml

    Meta AI supports spooky dookies