geggo98

8 ms·

1.
by geggo98 10d ago
> Look at France, they have nuclear and they have energy security. Look at Germany and how foolish they were to deprecate all nuclear stations. They both depend on Russia, one for liquid gas the other for nuclear fuel [1]. They are quite
2.
by geggo98 11d ago
I have no insights in Swedish politics. His actions could be really bad, or mean nothing at all. Without proper context, it’s hard to say.
3.
by geggo98 6mo ago
Just make two plans and switch, when one of them is exhausted.
4.
by geggo98 1y ago
Not sure where gp lives. But most banks here restrict you to 4 digits as the password. So basically a PIN. If you are lucky, you get 6 digits or even letters. But be careful: if you use “fancy letters” (symbols, umlauts, …) you risk locking
5.
by geggo98 2y ago
If you have the time, could you please post the list of plugins you are using?
6.
by geggo98 2y ago
That’s true. On the other hand, Apple isn’t some kind of Borg like swarm intelligence. While Apple’s upper management doesn’t want back doors in their products, someone in middle management might have come to a different opinion.
7.
by geggo98 2y ago
That’s a good start. In the long run probably three things are necessary: 1) wiring critical software in a language that protects better against such exploits. Might be Rust, Go, perhaps also C# and Nim. 2) Making reproducible builds the no
8.
by geggo98 2y ago
You are right, it took quite some time. On the other hand, it looks like the legitimate part of contributing to xz was only a part time job for the attacker. The rest of the time, they either worked on the exploits, or in other things, like
9.
by geggo98 2y ago
Expecting liability coverage for source code people publish for free on their own time has very strong implications on free speech, freedom of arts, and freedom of science. I don’t think this is possible in a liberal society. On the other h
10.
by geggo98 2y ago
I think there were some open PRs from that account, that got scrubbed from the account after the back door in xz was discovered. But probably nothing got merged.
11.
by geggo98 2y ago
My suggestion: Put your SSH behind WireGuard and/or behind a jump host (with only port forwarding allowed, no shell). If you don’t have a separate host, use a Docker container. If you use a jump host, consider a different OS (e.g., BSD
12.
by geggo98 2y ago
Using a jump host could help, only allowing port forwarding. Ideally it would be heavily monitored and create a new instance for every connection (e.g., inside a container). The attacker would then be stuck inside the jump host and would ha
13.
by geggo98 2y ago
Actually you have a point. A collection of shell scripts (like the classical init systems) have obviously a smaller attack surface. In this case the attacker used some integration code with systemd to attack the ssh daemon. So sshd without
14.
by geggo98 2y ago
Unix pipes have built in back pressure. A very simplified view, assuming blocking calls and single threads: if the process on the left side of the pipe produces data too fast and fills up the buffer, the operating system won’t give it any a
15.
by geggo98 2y ago
From the screenshots it looks like there is an activation limit, with a maximum of four devices. Reading the license, I could not confirm this. Is there a limit, and if, what is the maximum?
16.
by geggo98 3y ago
While you are here: the Node.js syntax highlights on you QuickStart docs seems to be broken. Tested with Safari and Chrome on a recent macOS. That’s not a huge issue, but makes it a bit harder to grasp what’s going on and how the Dagger SDK
17.
by geggo98 4y ago
> But I have been told “video off” is passive aggressive so I don’t know how much longer I can pull this off. “Video off” is often necessary, because your laptop runs low on battery, or has run too hot. Sometimes your Wi-Fi might just be
18.
by geggo98 5y ago
> Pension: Germany has a pyramid scheme and it collapsed a while back. The system did just fine, but was plundered by politics. During the German reunification, the people from the former Eastern Germany were added to the public pension
19.
by geggo98 5y ago
The blog post you mentions brings two arguments: first the database would require looking. Second the database would need tradeoffs between reading (polling) and writing (adding and removing to the queue). The original article handles the f
20.
by geggo98 6y ago
To my understanding this plan should include the spouse and any number of kids up to the age of of 23 (age limit for the kids, not for the spouse of course). Dental care and eye care might be a bit limited in these kinds of plans. This mean
21.
by geggo98 8y ago
In the Cassandra case, you would not write the persistent data in the Docker image (that's the part of the file system mounted as a layered file system, using AUFS or OverlayFS). Instead, you would write it in a volume. For a local vol
22.
by geggo98 8y ago
There is no blame on you. There is no way you can provide a configuration that will be secure on every server. My recommendation: add a big warning message that there is at least one known security hole and many unknown ones in the server c