jcgl

19 ms·

331.
by jcgl 1y ago
> That's a lot of "e-waste" that Google only recently stopped generating. ;) Yep, agreed. While my "e-waste" epithet was deliberately inflammatory, I really do have a problem with what they and others were doing
332.
by jcgl 1y ago
Well, every timer needs a service to activate. And at a cursory glance, this project has oneshot services, which is what I would expect for something like this. So your units (e.g. a webserver) would take After= and Wants=/Requires= on
333.
by jcgl 1y ago
If you can find me credible evidence that Unihertz will support the device for 5+ years, delivering major version upgrades and timely security patches, then I'll take back what I said. In 2025, a lax approach to the OS lifecycle (espec
334.
by jcgl 1y ago
I’d love the Jelly, but all of Unihertz’s stuff is basically devoid of software updates :( I’m not gonna buy e-waste.
335.
by jcgl 1y ago
It wouldn't specifically have to be a systemd project or anything; you could make a systemd generator[0] so that you could list out certs as units in the Requires= of a unit. That'd be really neat, actually. [0] https:/&#x2F
336.
by jcgl 1y ago
Go would be my top ask. Shell and make would be nice bonuses.
337.
by jcgl 1y ago
As long as the salt is secret from the attackers (which is not a given, of course), the length of the passwords shouldn't matter all too much; the input to the hash (i.e. password + hash) would still have enough entropy to not be brute
338.
by jcgl 1y ago
Until $/GB drops to comparable to HDDs, large-scale storage will continue to use HDDs.
339.
by jcgl 1y ago
I use opensnitch and has always wondered what that was. Thank you!
340.
by jcgl 1y ago
No, systemd absolutely does not replace Unix. Systemd-the-project and systemd-the-service-manager (“init”) are two different things. The former is a project with numerous components (e.g. resolved) that actually _are_ rather modular; they u
341.
by jcgl 1y ago
> I think it should be done by the maintainer of the software not by the distro Why would you say that? I would agree that the developer likely has better insight into what the software needs. But the security boundary exists at the inte
342.
by jcgl 1y ago
> this will not take off I'm afraid, because locking these unitfiles down is offloaded to the end-user Maybe your point is that this isn't done by the vendor in practice. And I'm sure there's room for lots of improvem
343.
by jcgl 1y ago
I only started packaging relatively recently. Using OBS definitely made things easier, but it's crazy how much nicer RPM is than dpkg. So much better to have more-or-less everything inside a spec file with macros, versus dpgk's me
344.
by jcgl 1y ago
Yeah, I'd probably call systemd something like "an event- and graph-based orchestrator."
345.
by jcgl 1y ago
What would be so hard about it? Also, this is not docker--it's podman. Which has a much simpler execution model than Docker. With it, it shouldn't be any harder to narrow down what the problem is, compared to running a non-contain
346.
by jcgl 1y ago
That’s a totally different problem than what you were saying before. This problem is one inherent to VPN technology writ large.
347.
by jcgl 1y ago
No? You put in a/your randomly generated account number for attribution.
348.
by jcgl 1y ago
I wanted to quickly double-check my (albeit limited) experience against docs. The RFC[0] implies the possibility of what I described (provided a well-behaved ACME client that doesn't clobber other TXT records): 2. Query for TXT r
349.
by jcgl 1y ago
Gitpatch looks really great. And I greatly appreciate you listing out alternatives. Do you have any plans to allow for self-hosting?
350.
by jcgl 1y ago
> Now you can of course debate on what "decenttalized" means, but in a social network easy migration between servers is the crucial feature that would allow the decentralized network to emerge. I totally agree. However, a lot o
351.
by jcgl 1y ago
Afaiu, that's only a problem for trying to _delegate_ to multiple clients. But routine operation with multiple clients works just fine in my experience (doing multi-region load balancing). Multiple TXT records are created, I think (spe
352.
by jcgl 1y ago
But then you have to redistribute the cert from that single server to all the others. Which, yes, can be done. But then you've gotta write that glue yourself. What's more, you've now chosen a special snowflake server on whom
353.
by jcgl 1y ago
Knotty softwoods can make perfectly suitable furniture. They can (and are) grown at scale. I’m sympathetic to the viewpoint that the supply particleboard furniture has suffocated the marketplaces for mid- and low-end wooden furniture. Such
354.
by jcgl 1y ago
Using CNAMEs with the _acme-challenge, plus API keys with fine-grained authorization, you can manage what each of those colleagues or teams can issue certs for. Disallowing wildcard certs for them, for example :)
355.
by jcgl 1y ago
No, that’s just one of the use-cases. Also: - wildcard certs. DNS-01 is a strict requirement here. - certs for a service whose TLS is terminated by multiple servers (e.g. load balancers). DNS-01 is a practical requirement here because only
356.
by jcgl 1y ago
Private equity? Either there’s a story I’m missing, or you’re mischaracterizing F5 as PE.
357.
by jcgl 1y ago
Oh thanks, I totally missed that distinctions. You’re right. My first thought is to wonder: why would systemd care about this then? Any idea? My second thought is: with a merged /usr, where /usr/{bin,sbin} are on the same fil
358.
by jcgl 1y ago
You may not like it, but “arbitrary” isn’t a fair description; there’s reasoning behind it that is over 10 years old: http://0pointer.net/blog/projects/stateless.html https://www.freedesktop.org/wi
359.
by jcgl 1y ago
That is preposterous. Thanks for sharing. Really disappointing to hear that people who presumably care a lot about health and safety can be so blind on this stuff. I wonder how successful it would be to have a hypothetical campaign like &qu
360.
by jcgl 1y ago
My only familiarity with what you’re saying comes from a Not Just Bikes video. Pretty striking, though I’ve not done any research to corroborate it.

More ›