botanicalfriend

5 ms·

1.
What it was like working on LLMs and security at Meta (2022-2026)(joshuasaxe181906.substack.com)
10 points by botanicalfriend 1mo ago|0 comments
2.
by botanicalfriend 7mo ago
On the dynamic linker bypass specifically, have you looked at fapolicyd [1]? It uses fanotify(7) and the top of the README is: > The restrictive policy was designed with these goals in mind: > 1. No bypass of security by executing pro
3.
by botanicalfriend 9mo ago
Paying maintainers doesn't give Red Hat a magic oracle for "which commits matter for security". What you actually end up with is cherry-picking + backporting. Backporting is inherently messy, you can introduce new bugs (inclu
4.
by botanicalfriend 1y ago
amazing because of the irony, yes?
5.
by botanicalfriend 3y ago
From my perspective a large factor contributing to its popularity is because of FastAPIs native integration. V2 has broken so much behavior, and the library is generally fragile and slow. Credit where it is due, it is a great library that h
6.
by botanicalfriend 3y ago
I have the same worry (although I have no evidence, and haven’t done much research into finding evidence). I've slowly transitioned from FF to Chrome over the past year, for this reason. I still use both, but am trying to prepare mysel
7.
by botanicalfriend 3y ago
This looks super useful. It is a bit convoluted to setup WG/PiHole/Unbound/foo and link them all together. But, it is not tedious enough that I’d ever put in the time to make a whole UI to improve it. I’m glad someone did th
8.
by botanicalfriend 3y ago
HAProxy
9.
by botanicalfriend 4y ago
The “closed door development” is a problem for their business. They don’t have that problem when they maintain it, free software aside.
10.
by botanicalfriend 4y ago
A very simple haproxy/envoy/nginx config will achieve this, no?
11.
by botanicalfriend 5y ago
You can encrypt them using something like https://github.com/FiloSottile/age and then just store them in git. When you need to access them, just run "age -d .." If you're paranoid you can use GPG + a sma
12.
by botanicalfriend 5y ago
Vault X.509