udev4096

6 ms·

91.
by udev4096 11mo ago
I have switched to incus and it's really great. It's lightweight, has a working terraform provider, easy-to-use cli, pre-built images (LXC and VM) of major distros (while in proxmox, you have to create templates all the time for V
92.
by udev4096 11mo ago
MBAs need to read this: https://geohot.github.io/blog/jekyll/update/2025/10/15/pathe... tldr; GTFO!
93.
by udev4096 11mo ago
Agreed. It's just a classic way to manipulate the viewers. They just wanted to sound edgy for not paying a ransom, which is definitely a good thing. Never pay these crooks but you left a legacy system online without any protections? Th
94.
by udev4096 11mo ago
There are definitely companies who have never been breached and it's not that hard. Defense in depth is all you need
95.
by udev4096 11mo ago
Since when did owning up to a data breach become such a noteworthy event? Less than 25% sounds more like exactly 25% of impacted customers
96.
by udev4096 11mo ago
I would highly suggest to block JS while you're only browsing. It loads fast, most trackers won't load and better security as most browser exploits leverage JS all the time
97.
by udev4096 11mo ago
Docker is not a sandbox, IT'S NOT! If you must, use gvisor or kata runtime for actual sandboxing
98.
by udev4096 11mo ago
bubblewrap escapes are not unheard of. Infact, it's a common theme that the general linux landscape lacks strong sandboxing, even if you use bwrap, firejail, etc. Especially linux desktop, a security firehazard to say the least unless
99.
by udev4096 11mo ago
distrowatch? lmao. no wonder you took the pill and i am not surprised with the omarchy's userbase, it's full of normies anyway and couldn't care less
100.
by udev4096 11mo ago
Instead of securing the "chain", we should instead isolate every library we import and run it under a sandbox. We should adopt the model of QubesOS. It follows security by isolation. There are lots of native sandboxing in linux ke
101.
by udev4096 11mo ago
keepalived is just a blessing for almost effortless HA
102.
by udev4096 11mo ago
It's not even a distro lmao. You are fully DHH-pilled. I would point you to this article: https://xn--gckvb8fzb.com/a-word-on-omarchy/ , although it hardly covers the main points, it's still good enough to exp
103.
by udev4096 11mo ago
Skill issue. It works just fine
104.
by udev4096 11mo ago
I am not surprised that you have such a horrible taste. HN userbase is full of normies now, especially the ones who cannot think and have no more than 1 brain cell but yet again, that's the actual definition of a normie if I am being g
105.
by udev4096 11mo ago
The whole ecosystem of charm tools are well made. But most of them are extremely bloated and requires tons of dependencies to build a TUI
106.
by udev4096 11mo ago
How long have you been using ubuntu? From my past unpleasant experience of using it, one thing I learned is never rely on apt for package updates. Most will just keep rotting and hardly get any updates. It's the same with debian. Eithe
107.
by udev4096 11mo ago
omarchy is a shitshow. Please stay away from it. It's a disaster waiting to happen. It's the most bloated install script I have ever seen. DHH is fucking liar and taking up all the credit for himself by ripping off of bunch of wel
108.
by udev4096 11mo ago
No one ever said TUIs are a new thing. It's been there since the beginning, when programs explicitly ran on terminals before WWW took off. It's the bloated web which ruined a lot of things
109.
by udev4096 11mo ago
Totally unrelated, I like your nickname :)
110.
by udev4096 11mo ago
Any application can literally log EVERYTHING! It's good to see wayland getting better everyday
111.
Landlock: The Linux sandboxing mechanism [pdf](landlock.io)
2 points by udev4096 1y ago|0 comments
112.
D.J. Bernstein: The Good News Archive(aaronsw.com)
1 points by udev4096 1y ago|0 comments
113.
by udev4096 1y ago
You have google to blame. GrapheneOS tried very hard to make sure they have those security patches as google delays publishing the source tree and it's only available to OEMs
114.
by udev4096 1y ago
Why spread FUD? Why prove to the world how fucking dumb you are? Graphene is non-profit. It doesn't allow criminal activities at all. It was never made for it. They do real security research and used to report lots of CVEs to google. I
115.
by udev4096 1y ago
He's a fucking ignorant normie. He has never even tried to install GOS because if he did, he would know how almost identical the experience is with Android and there are no privileged google processes running on your phone which not on
116.
by udev4096 1y ago
Put up what exactly? You think privacy and security is readily available to everyone who just desires so? If by "put up", you mean not even putting normal efforts, then sure. That user, along with you, fully deserves to get tracke
117.
Hacking Printers Using Fonts(haxx.in)
15 points by udev4096 1y ago|0 comments
118.
by udev4096 1y ago
Luckily, no one uses azure and it's fully expected from azure to go down all the time! Keep it up!
119.
by udev4096 1y ago
AppArmor itself is utterly useless without any profiles. Only installing the package does next to nothing
120.
Breaking Trusted Execution Environments(tee.fail)
16 points by udev4096 1y ago|0 comments

More ›