johnklos

27 ms·

331.
by johnklos 2y ago
There are lots of people out there saying to get one of these low(er) power Intel systems instead of, say, an Orange Pi 5 or some other ARM machine, but I think some of the information from the comments tells us a little more about their su
332.
by johnklos 2y ago
"No, Mom! I wanted a Commodore 64 for my birthday, not a Core 64!" Neat, although I really want something with 4096 bits for storing my ed25519 private key.
333.
by johnklos 2y ago
And they rightly deserve to lose the business to AMD. Intel to Apple: "We're too big to deliver what you want for cell phones." Apple: "Ok. We'll use ARM." Intel to Sony: "We're too big to commit to p
334.
by johnklos 2y ago
Thank you. This makes much more sense. Whoever made that page should've had some better information.
335.
by johnklos 2y ago
Ah - it's a project that's only for computers that use apt, and probably only amd64. How uninteresting.
336.
by johnklos 2y ago
No, I'm really not trying to take things out of context, but what you wrote really makes it seem like the person who reports it matters. Ignoring that, I agree that it's a dick move, but it's like our famous "well, techn
337.
by johnklos 2y ago
So you're saying out loud that the person reporting the issue matters. It shouldn't matter who tells you that you have a security issue.
338.
by johnklos 2y ago
> cannot be flagged or stopped You know, these things are sometimes not much more than theoretical ideas meant to alert us to the possibilities of what someone with time and resources can accomplish. They're important whether they
339.
by johnklos 2y ago
> before the disclosure and had reached out to the reporter(0). First, the only link you provided doesn't look to be related to this issue. Edit: I see it bizarrely redirects to " https://discourse.nixos.org/t&#x
340.
by johnklos 2y ago
Of course Windows is a huge factor, but 1) nobody said anything about giving users root access, and 2) this has happened plenty of times with data stored on non-Windows systems, too, that weren't compromised. Trying to make it an eithe
341.
by johnklos 2y ago
Someone who writes a response to a security vulnerability report, includes nobody else in the discussion, then leaves for vacation within 15 minutes of sending that report is irresponsible. Giving someone a week to respond is not unreason
342.
by johnklos 2y ago
I don't get why someone who responded to this calls this something other than responsible disclosure. puck clearly writes, "at this point the disclosure timeline has passed". It's on Nix to meet the disclosure timeline.
343.
by johnklos 2y ago
Reconsider your assumption. Why does ransomware work? It's because the same people who have habits and/or systems that make compromise of them possible and likely are also given full write and delete access as well as, of course,
344.
by johnklos 2y ago
The world's smallest cloud provider could be someone running a single Raspberry Pi Zero. "Cloud" doesn't mean much more than "computer connected to the Internet".
345.
by johnklos 2y ago
I had it custom made. Sorry that I can't point you to something already done :( It's much easier and cheaper than in the past to just go to Ali-express and find a shop with good feedback and cotton shirts, upload a graphic (even i
346.
by johnklos 2y ago
This seems like it's just extra work in place of ssh -J, perhaps even just ssh -J through a Tailscale ssh daemon. Or am I missing something?
347.
by johnklos 2y ago
> anyone refer to themselves or anyone else as "Doctor". Reminds me of the t-shirt I had that said, "Ok, Ok, so you've got a PhD. Just don't touch anything."
348.
by johnklos 2y ago
I agree with Christian about pretty much everything here. We self-host for multiple reasons, and we don't necessarily need others to necessarily understand our rationale, although that'd be nice. For me, one thing that stands out
349.
by johnklos 2y ago
IPMI has its place, but it clearly shows how none of us can trust commercial entities to properly support hardware long term. The OS that runs on IPMI is usually relatively secure when the system is new, but as soon as there's a new CP
350.
by johnklos 2y ago
Let me make a small example that may illustrate the issue. You can download the NetBSD source tree and compile it with any reasonable c compiler, whether you're running some sort of BSD, macOS or Linux. Some OSes have much older gcc (R
351.
by johnklos 2y ago
I'm not a fan of this inexact and incorrect language. "Rerouted" means that the route was changed, not that the trajectory was changed. The route was planned before launch, and that hasn't changed. The headline makes it
352.
by johnklos 2y ago
It's not really a "dangerous security bug" unless you're running an insecure OS. Personally, I'm looking forward to having my choice of OS take advantage of this "bug" to run the kernel at the highest priv
353.
by johnklos 2y ago
I think they burn their coffee so it gives the appearance of having more uniformity. Also, I seriously wonder how little a share of their sales are just coffee these days. Even the Starbucks fanatics I know never actually buy regular coffee
354.
by johnklos 2y ago
tinc [1] is very lightweight and simple to set up. There's also ssh -w for quick and easy tun-over-Internet connections. [1] https://www.tinc-vpn.org
355.
by johnklos 2y ago
The old equipment is fascinating. Ethernet makes for a wonderful look in to how hundreds of companies can actually make interoperable hardware, with various media types and varying methods, and it can all Just Work™ (mostly). I still use 10
356.
by johnklos 2y ago
Nice! My next tiny machine may be a Radxa Zero 3E. A tiny form factor machine with ethernet is definitely appealing. My current portable uses a Raspberry Pi Zero (not Zero 2). Lower overall power is much more important than performance, and
357.
by johnklos 2y ago
Does anyone really NEED anything? That'd be a tangent. I want a portable server because I want my data to be in my physical possession. Also, I enjoy telling people I'm already doing the thing that they're telling me can&#x27
358.
by johnklos 2y ago
There's a short video of the printer printing towards the bottom of the article. You can see the printing in that. On the other hand, a Snoopy calendar printed on that would be cool :)
359.
by johnklos 2y ago
I read this part: > Replace your battery in 10 seconds without killing the power! as a suggestion that you'd have four batteries total, and you'd have two that're fully charged, and you'd replace one battery, and with
360.
by johnklos 2y ago
I'd love one of these! I just built a portable enclosure with a charge controller, USB hub, ethernet and four 18650 batteries. While The Hackberry Pi Zero would've been a lot easier (assuming I'd've just bought one inste

More ›