s_ting765

15 ms·

1.
by s_ting765 1mo ago
If one is so worried about zero days in openssh, the more practical solution would be centered around these 2 questions: 1. "would you know if you got breached?" 2. "would you have any reaction time?" A simple solution t
2.
by s_ting765 1mo ago
There is Open Build Service from openSUSE which allows you to create packages and repos for a handful of distros. https://build.opensuse.org/
3.
by s_ting765 1mo ago
I use Flatpak/bubblewrap instead: https://news.ycombinator.com/item?id=48978112#48980221
4.
by s_ting765 2mo ago
The solution is not to use docker to sandbox Opencode. It is to use flatpak/bubblewrap/flatseal. I have vscode running in flatpak with directory permissions handled by flatseal. Vscode only has access to my dev folders and nothing
5.
by s_ting765 2mo ago
Kubernetes is good for two things. Zero downtime deployments and self-healing (where the looping state mechanism comes in). There are people who want k8s to handle every single operation that can run on a server, do not listen to those kind
6.
by s_ting765 2mo ago
1.98.9 has already been tagged since bulletin was published (don't know why they chose on github to tag but not release). 1.98.9 version exists! That's not the question. It should already have been made available for Linux distros
7.
by s_ting765 2mo ago
I don't see the point of publishing a security bulletin if you are not going to timely push the fix to artifacts on all affected platforms. Tailscale needs to do better on their release process, docker hub shows last update was 8 days
8.
by s_ting765 3mo ago
Same here. Even though my homelab runs on a VPS. https://github.com/rhee876527/expert-octo-robot
9.
by s_ting765 3mo ago
Sure. After you have located root and the boot partition which is what this addresses.
10.
by s_ting765 3mo ago
Partition autodiscovery is pretty neat. I did my archlinux install with it using this guide[0]. I have never touched /etc/fstab and I have had zero to worry about corrupting a boot with wrong fstab entries. [0] https://
11.
by s_ting765 3mo ago
Pausing software updates by X days old is a hack at best for specific distribution platforms (npm), not a general security recommendation.
12.
by s_ting765 3mo ago
You can do the same from an USI made from mkosi (mainstream distros support) with kernel boot parameter systemd.volatile=overlay. https://github.com/rhee876527/UKIfy-Xubuntu
13.
by s_ting765 3mo ago
Well, open source AI is mostly coming from China. Title should have been China must win.
14.
by s_ting765 4mo ago
This decision tree doesn't make much sense to me. Why you someone forego performance today in favor of adding a completely unnecessary network layer to every DB query in order to "satisfy" future imaginary "scaling conce
15.
by s_ting765 5mo ago
> Vladimir Fedorov is GitHub's Chief Technology Officer .... He currently serves on the board of Codepath.org, an organization dedicated to reprogramming higher education to create the first AI-native generation of engineers, CTOs,
16.
by s_ting765 5mo ago
What makes you think simply throwing random crap on a home VPN network is secure? Tailscale/Wireguard is overkill because it is not needed where access controls work fine which is true for the majority of the popular self-hosted apps.
17.
by s_ting765 5mo ago
Tailscale is an overkill solution. Opening ports 80 and 443 for a reverse proxy is enough security provided your apps don't have broken authentication. I've been doing this for years now.
18.
by s_ting765 5mo ago
Double checking Github actions does not mitigate threats from supply chain vulnerabilities. Forking an action moves the trust from a random developer to yourself. You still have to make sure the action is pulling in dependencies from truste
19.
by s_ting765 5mo ago
Pinning github actions by commit SHA does not solve the supply chain problem if the pinned action itself is pulling in other dependencies which themselves could be compromised. An action can pull in a docker image as a dependency for exampl
20.
by s_ting765 6mo ago
Coding agents are like asking a genie for code. They will give you the code you ask for alright but you never know what kind of curse has been crontabbed for you.
21.
by s_ting765 6mo ago
It should have been FastAPI instead.
22.
by s_ting765 7mo ago
Interesting blog post. For what it's worth, I count 7 em-dashes used.
23.
by s_ting765 7mo ago
> Ptyxis: Your Container-Oriented Terminal for GNOME > A modern terminal emulator built for the container era. Seamlessly navigate between your host system and local containers like Podman, Toolbox, and Distrobox with intelligent dete
24.
by s_ting765 7mo ago
I tried this out after getting annoyed for the 100th time by a recent bug in kgx/console that will occasionally fail to launch windows leaving incomplete windows as tabs. Console has long since become abandonware pushing people towards
25.
by s_ting765 7mo ago
Ask the LLM to create for you a POC for the vulnerability you have in mind. Last time I did this I had to repeatedly make a promise to the LLM that it was for educational purposes as it assumed this information is "dangerous".
26.
by s_ting765 7mo ago
I revived a once popular Youtube frontend called Cloudtube. All the Youtube media url deciphering is still done by Invidious and I use it more like a frontend for invidious. https://github.com/rhee876527/clean-youtube&#
27.
by s_ting765 8mo ago
Opensuse have been working on making secure boot/TPM FDE unlock easy to use for a while now. https://news.opensuse.org/2025/11/13/tw-grub2-bls/
28.
by s_ting765 8mo ago
Same with <svg> but Firefox's XML parser will not greenlight you.
29.
by s_ting765 8mo ago
Docker provides some host isolation which can be used effectively as a sandbox. It's not designed for security (and it does have some reasonable defaults) but it does give you options to layer on security modules like apparmor and secc
30.
by s_ting765 9mo ago
The perfect lighthouse score might have changed since this was last updated. Am seeing 97% on accessibility.

More ›