angry_octet

5 ms·

61.
by angry_octet 2mo ago
"Is there telemetry? Yes, and it is opt-out: set ANTE_TELEMETRY=off" Opt-out every time is unacceptable. If you opt out once it should be enough. One accidental execution path without the right environment and you're spewin
62.
by angry_octet 2mo ago
This is a very dangerous site for train travel geeks. Like, what am I doing with my life? I should be catching the Nile Valley Sleeper, 879km "Overnight up the Nile past Luxor’s temples: wake to feluccas and the First Cataract at Aswan
63.
by angry_octet 2mo ago
Who do you think created firecracker? gVisor?
64.
by angry_octet 2mo ago
LLMs are great at finding 0-day, and people are rubbish at updating their containers and hosts to patch b-day. Containers have access to the kernel ABI, and as shown in the latest kernel exploits, all the memory handling surface that expos
65.
by angry_octet 2mo ago
Bubble wrap is just containerisation no?
66.
by angry_octet 2mo ago
Oh no, you should definitely be worried about that. Podman might make it harder to escalate to host root, or manipulate other containers, but it is still vulnerable. Now I'm curious to know how hardened the Docket Sandbox orchestration
67.
by angry_octet 2mo ago
It's a VM.
68.
by angry_octet 2mo ago
I'm confused as to why Apple rejects astrology apps. They accept Bible and Koran apps...
69.
by angry_octet 2mo ago
...andd they are now working for ICE HSI for higher pay.
70.
by angry_octet 2mo ago
Exactly the opposite of what I wrote. The OpenSSH team have taken extensive efforts to mitigate against bugs; they suspect themselves of erroneous thinking.
71.
by angry_octet 2mo ago
I can think of better straw men. But if they had approached their task with half the seriousness of the openssh maintainers then they probably wouldn't be failing to check the return value of authentication functions. OpenSSH authors h
72.
by angry_octet 2mo ago
It's more likely to interfere in politics to achieve this objective: - Socialists are taking control of the town, we need the state to step in a protect jobs. - The councillors are protecting illegal migrants. - There's a pedo rin
73.
by angry_octet 2mo ago
I would love than, and it might happen as a process of natural selection, but instead we will get automated AI patch generation and patch application, and agentic EDR and agentic SIEM. All the while generating vast amounts of new vibe coded
74.
by angry_octet 2mo ago
That's what attackers do now. Exploring is required for discovering exploits. But that is also where tricks like Canary Tokens and honeypots are useful.
75.
by angry_octet 2mo ago
The way they had Artifactory configured was poor, and they were too reliant on it working perfectly, with no reason for such faith. Their config lacked any defence in depth and consideration of having a small TCB. Part of the problem might
76.
by angry_octet 2mo ago
Because of the architecture of Artifactory. It's design is premised on the idea it is bug free. What incredible hubris. Licencing fee structures and human laziness motivates single instances. Feature growth results in multiple independ
77.
by angry_octet 2mo ago
These attacks are also incredibly loud . Many attackers are motivated to operate very quietly. We haven't seen any tradecraft from these machines, it's all noisy and bombastic. When we see them mount a quiet backdooring campaign,
78.
by angry_octet 2mo ago
Maybe read the article before leaping to conclusions.
79.
by angry_octet 2mo ago
Is Chrome?
80.
by angry_octet 2mo ago
This is revolutionary stuff. It crystalises latent thoughts I've had about how to safely integrate agentic capability for serious work. We're starting to see indifferently architected AI creep into every engineering tool, from req
81.
by angry_octet 2mo ago
Where do PVs work best? Since you can't put them on the roof, out in the back yard. So you run a long extension cord and plug them into a power board. Or in an apartment, there might be one circuit with an outside outlet, so they all p
82.
by angry_octet 2mo ago
Traditionally we have been quite prescriptive about what people can do electrically on their side of the meter, in the name of protecting people from themselves. (Even with a grid isolation switch.) Allowing generation that isn't wired
83.
by angry_octet 2mo ago
If you have no grid connection then everything will go offline, unless you do something illegal. The situation can occur if loads and sources are on the same circuit, e.g.: Grid | Meter | CB | |--battery1 |--batter
84.
by angry_octet 2mo ago
If it's long enough it's fine. They key property for passphrases is being able to remember them. But diceware phrases where you actually roll dice are stronger, and has evident verifiability. RNG on computers is still hard, and a
85.
by angry_octet 2mo ago
You can have multiple loads and sources that are in-spec but the wiring between them is overloaded.
86.
by angry_octet 2mo ago
800W peak * 3 is only 2400W which is fine, it's very unlikely to be pumping out that for long. Now if you put in 6 of them you will have problems, but this is the same problem as people plugging in multiple loads, and circuit breakers
87.
by angry_octet 2mo ago
There are multiple circuits on each phase, you would still need to limit current per outlet to 10A (8A sustained). If it's a dedicated circuit then 15A is fine, but usually that means a separate run, and in that case you can just have
88.
by angry_octet 2mo ago
It would be very unlikely that your 240v system would all be on the same circuit, unless you have an antique UK ring main.
89.
by angry_octet 2mo ago
Incredible hyperbole from the Amicus guy: "This is hugely damaging to the people who believe that 8 billion people will hold their Bitcoin in cold storage in the future," Lawrence said. "That dream is over. Done." Sky is
90.
by angry_octet 2mo ago
The problem with the long lived credentials is that they were not bound to origin/destination. Even though the origin for a CI pool should be a small number of CI orchestration boxes, and the destination should be a CI box. In Tailscal

More ›