jayofdoom

6 ms·

1.
by jayofdoom 17d ago
I work on OpenStack, which is a project folks work on primarily due to sponsorship -- not many people who want to do security/stability work for a cloud "for the fun of it" :D. So mentees I've worked with have usually co
2.
by jayofdoom 18d ago
Nothing. And that's the problem -- the issue isn't "should a contributor be able to use AI" it's quickly becoming "is this entire contributor an AI agent". Every actual-human who gets a bad first experienc
3.
by jayofdoom 2mo ago
Honestly they kinda screwed over people -- like me -- who tried to avoid the MAX planes for a while. I'd specifically book around the MAX planes and then they would change equipment at the last minute into a MAX. There is no meaningful
4.
by jayofdoom 2mo ago
Thunderbird has spun off from the usual Mozilla stuff. I would be shocked if they moved in this direction.
5.
by jayofdoom 3mo ago
They sold >100,000 of them, including one to me. The F-150 Lightnings are coming off lease and are available used now for a reasonable price.
6.
by jayofdoom 3mo ago
No, you don't support Linux. I just tried to download it and got a "coming soon". Please don't post misleading things to HN :(. Kagi has a good rep; misleading comments like this hurts it.
7.
by jayofdoom 4mo ago
It's pretty consistent. If you check out something from a Gentoo-official repo, it's going to have been created by humans without the use of LLM tooling. LLM tooling is used for the kernel, systemd, and a litany of other packages
8.
by jayofdoom 4mo ago
We've had similar issues with Openstack documentation in Google.
9.
by jayofdoom 5mo ago
This workaround only applies to kernels with the impacted code compiled as a module. RHEL, Fedora, and Gentoo (we use a modified Fedora config) all are configured to build this in directly. Without a patch or config change (as Sam from Gent
10.
by jayofdoom 5mo ago
These categories of vulnerability are not new: https://dgl.cx/2023/09/ansi-terminal-security -- any time you take any untrusted data and do literally anything with it, you're at risk.
11.
by jayofdoom 6mo ago
I used this for a while. It doesn't display HTML emails just fine. It only supports a subset of stuff which -- as a geek is awesome because it protects me -- but would be hideous to give to a normal user. Literally less than half of my
12.
by jayofdoom 6mo ago
There are over 600 different people contributing to OpenStack in a given six-month release cycle. Approximately 60% of total code by commit count is from Red Hat employees. I'm one of the 600 that don't work at Red Hat, and there
13.
by jayofdoom 6mo ago
This is true, sadly -- but the documentation exists and community is friendly to those who wanna build those skills. It's extremely difficult to build something the size of OpenStack without making it so configurable that operating it
14.
by jayofdoom 6mo ago
There's a reason I point out the longevity of OpenStack. As a project, it has significant corporate sponsorship and policies to ensure that one entity can't take over control of it. For instance; the OpenStack Technical Committee
15.
by jayofdoom 6mo ago
I'm saying not that OpenStack can replace LocalStack, but instead that LocalStack, by building a project on top of proprietary APIs, set themselves up to fail.
16.
by jayofdoom 6mo ago
More reason to run your infrastructure using open source software in your own datacenter. OpenStack has been around for closing in on two decades, running clouds and being mostly governance-drama-free. It's not surprising that a propri
17.
by jayofdoom 6mo ago
The only reason I run android over iOS is the freedom to install things I want on it. A waiting period is unacceptable as Android has proven that it can't be trusted not to tighten the grip further. Reconsider.
18.
by jayofdoom 7mo ago
I had the same thought, as an OpenStack developer as well (TBH I don't remember if my username here identifies me or not). Yeah, we can apply as an exceptional case, but realistically us being excluded shows the criteria is very much d
19.
by jayofdoom 7mo ago
I used to go to a members-only bar in Apex, NC (in NC, at least at the time, if >50% of your sales was alcohol, you had to be a "club"). The last time I ever went there was when someone called the bartender and "reported&q
20.
by jayofdoom 7mo ago
Hard agree. I have their doorbell and some of the wifi light fixtures (that go into mains power). They integrate great with home assistant and record locally.
21.
by jayofdoom 8mo ago
Slackware has no package manager or installer. It's just an extra step removed. I didn't say Gentoo has no package manager (it does; and it's great!)
22.
by jayofdoom 8mo ago
Thanks for posting this! It's been a nice first year as a Gentoo developer. Everyone has been kind and helpful to me as I've been figuring things out. I want to highlight something: Gentoo's developer onboarding system is EXC
23.
by jayofdoom 8mo ago
I always tell people this: With Red Hat, Anaconda is the installer. With Ubuntu, ubiquity. etc ... With Gentoo -- YOU are the installer. This means you have to be ready to perform -- more or less manually -- many of the tasks automated in o
24.
by jayofdoom 8mo ago
Gentoo is often at the forefront of identifying and helping resolve integration issues between different software projects, particularly when it comes to compiler tech (e.g. fixing packages so they can be built properly with LTO, or with LL
25.
by jayofdoom 8mo ago
OP's statement matches my understanding; parts were gentoo-based at one point.
26.
by jayofdoom 8mo ago
Honestly this is just sorta a Tuesday for an advanced Gentoo user? There are lots of ways to do this documented on the Gentoo wiki. Ask in IRC or on the Forum if you can't find it. "Catalyst" is the method used by the interna
27.
by jayofdoom 8mo ago
This is called "digital sovereignty", and it has been a major topic for OpenInfra foundation and other open source cloud foundations. Open source, and open cloud software, is the way to ensure your data can stay inside your own bo
28.
by jayofdoom 9mo ago
In OpenStack, we explicitly document what our log levels mean; I think this is valuable from both an Operator and Developer perspective. If you're a new developer, without a sense of what log levels are for, it's very prescriptive
29.
by jayofdoom 11mo ago
Yep. Vimeo is the tech infrastructure from the original collegehumor, and Dropout still uses it.
30.
by jayofdoom 11mo ago
It is. Most distros have a verify built into their packaging systems. For example; https://docs.redhat.com/en/documentation/red_hat_enterprise_...

More ›