Arrowmaster

6 ms·

31.
by Arrowmaster 4mo ago
You can expect it to not work. SteamOS is not designed or meant for installation as a generic OS. It is only designed to run on the specific supported hardware devices that it comes preinstalled on. No matter how many times you see LTT inst
32.
by Arrowmaster 4mo ago
At least the signal one is using the new DEB822 format, but whomever wrote that missed the fact they could have just embedded the key into the sources file and it would be a very simple command. I'm fairly sure both of those are availa
33.
by Arrowmaster 4mo ago
It's not in Debian 13, the package was flagged with a critical bug and was not fixed prior to release.
34.
by Arrowmaster 4mo ago
This has been their policy but now it's more explicitly defined. Go look through the submissions on https://github.com/flathub/flathub/pulls?q=is%3Apr to understand how bad the problem they are dealing with i
35.
by Arrowmaster 4mo ago
I went back and checked. It was not Plaid but Trustly. I've never heard of either before but Trustly's name makes me want to trust it even less than Plaid. And I'm more concerned about all of my personal information such as m
36.
by Arrowmaster 5mo ago
That blog post is a perfect example of when RFC5737 should be used. https://datatracker.ietf.org/doc/rfc5737/
37.
by Arrowmaster 5mo ago
Yesterday I was renewing my vehicle registration through my US states website. They offered a range of payment options using embedded options on the site. The direct bank account option had the lowest fee but when I tried it I was immediate
38.
by Arrowmaster 5mo ago
What products? Cisco hasn't built a product in decades, they only acquire companies and throw their name in front of the existing product. Do they mean they will only be purchasing AI built products by the end of 2027?
39.
by Arrowmaster 5mo ago
If they MITMed the console then they have probably MITMed the entire deployment process and now have the one time use key already.
40.
by Arrowmaster 5mo ago
What exactly are you talking about? Those don't seem related.
41.
by Arrowmaster 6mo ago
20 some years ago when cable broadband was new, you connected a computer and got public IP. For this example let's just assume it was a public/24. Back then there was no firewall built into Windows, it didn't ask you if you w
42.
by Arrowmaster 6mo ago
Yes. Every clone of this idea does the same thing and a new one pops up every week. When I try to point out that the secrets should be exposed through file namespaces instead of ENV vars, the amount of hostility is shocking.
43.
by Arrowmaster 7mo ago
Honestly I was expecting more. There are many languages that support Unicode in variable or function names and I expected it to be used there. It sounds like Python only allows approved Unicode characters to start a variable name but if it
44.
by Arrowmaster 7mo ago
You know that QR code is just text you can read right? It's just an otpauth:// URI you can copy and paste into most password managers. We even have these amazing things that securely share passwords or other secret data betwe
45.
by Arrowmaster 7mo ago
The latest release was June 2022 and the last non dependabot commit was March 2023, until new activity 4 days ago using AI. Why should anyone use this?
46.
by Arrowmaster 7mo ago
Part of how the USA got that way is hilariously enough, anti-corruption policies.
47.
by Arrowmaster 7mo ago
Disagree, the best way to pass secrets is by using mount namespaces (systemd and docker do this under /run/secrets/) so that the can program can access the secrets as needed but they don't exist in the environment. The p
48.
by Arrowmaster 7mo ago
I'm currently in the endless email loop because someone named Raymond used one of my Gmail names to register with State Farm. One of their agents even emails me directly when he gets really behind on his payments but won't do anyt
49.
by Arrowmaster 7mo ago
Not just idiots, rich idiots that will make more from the hype and publicity than we normal people could make in a few years.
50.
by Arrowmaster 8mo ago
This would be perfect if it also was able to expose secrets as files scoped to the process ala /run/secrets/secret_name.
51.
by Arrowmaster 8mo ago
The problem isn't the .env file itself but using environment variables at all to pass secrets is insecure.
52.
by Arrowmaster 8mo ago
While this is a good feature, I fear most people aren't aware of git archive. Of the more basic CI tools I have looked at, I didn't notice any of them using git archive. Capistrano is the first I now know of that does this. Are th
53.
by Arrowmaster 8mo ago
The author makes a very common mistake of not reading the very first line of the documentation for .gitignore. A gitignore file specifies intentionally untracked files that Git should ignore. Files already tracked by Git are not affecte
54.
by Arrowmaster 8mo ago
I did a full security system replacement for my previous employer in our data center. Replaced all the old IP cameras that connected directly to a small black box nvr with UniFi camera recording onto a UniFi Video server writing to a NAS ca
55.
by Arrowmaster 8mo ago
From DHHs company for those that matters to.
56.
by Arrowmaster 8mo ago
I had to look it up and I think it was a mix of user error and a bad container. At one point I had been trying to use the nicolaka/netshoot container as a sidecar to troubleshoot iptables on another container and it is/was(?) miss
57.
by Arrowmaster 8mo ago
While gluetun works great, there are other implementations of wireguard that fail without the kernel modules. I've also ran into issues from containers wanting the kernel modules for iptables-nft but Synology only has legacy iptables.
58.
by Arrowmaster 8mo ago
The extremely old kernel on Synology makes it hard or impossible to run some containers.
59.
by Arrowmaster 8mo ago
Some Tesla models have backup manual releases on the inside that are hidden behind panels you have to remove. I believe one of the manuals even says you should inform all passengers of the location of the emergency manual releases, because
60.
by Arrowmaster 8mo ago
I hate the Aptfile format after looking at it. The ppa directive hints that this is intended for Ubuntu because otherwise installing PPAs is a great way to break a non Ubuntu distro. The deb directive uses the old and soon to be deprecated

More ›