xorcist

32 ms·

751.
by xorcist 3y ago
This was in reference to after every bite, not once a year. Antibiotic resistance is not hyperbole. It is a real problem, and potentially a big one. What would be hyperbolic is if the part of the world that lives in tick infested regions wo
752.
by xorcist 3y ago
Maybe "true" isn't the best word to use. There are too many stories like this for them all to be true. Great story though.
753.
by xorcist 3y ago
> No one has opinions on my database design or architecture. Oh dear, if you only knew ... I have personally seen both those things gridlock entire teams, to the point where people would rather quit than continue working.
754.
by xorcist 3y ago
Absolutely normal in areas where they are common. You learn to pick them quickly after a while. If you have animals such as dogs and cats it's much more than that.
755.
by xorcist 3y ago
After every bite? That is a manual how to breed multi resistant Borrelia burgdorferi, the short version. Please be a responsible human being and consult a doctor. Common symptoms for a bacterial infections are flu like symptoms and a bullse
756.
by xorcist 3y ago
While it is good to take this stuff seriously, there's also no reason to scare people. Having lived in an area where ticks are common, I remove them weekly, if not daily, from myself and the children. There's no reason to be scare
757.
by xorcist 3y ago
This is a nice way to show what you can do with Postfix. But if you actually wanted this functionality, it would be much less error prone to implement this in your delivery agent rather than your transfer agent. For example Procmail or Siev
758.
by xorcist 3y ago
So the suggestion here is to implement source routing on a whim, with a table of 100+k entries? At your peering point? An ISP has to do what it has to do to save their business when a large attack hurts their business. This may be what the
759.
by xorcist 3y ago
Did Linux have version control? That would depend on your definition of version control. It did not have a canonical version control system, but it did have the data structure for it in the form of the linux-kernel mailing list. From that a
760.
by xorcist 3y ago
Accepting connections, yes, but for a client that is dependent on being able to establish ssh connections that is not enough. They would want to be notified on the ability to make successful connections. Keep in mind that this is only a p
761.
by xorcist 3y ago
This seems like a clear case of premature optimization. During the three decades sshd has existed I have never seen a real world situation where the equivalent of Type=exec was not enough. The time window where sshd is started and not yet r
762.
by xorcist 3y ago
I've done IaC is various forms over a decade and I believe the term does more harm than good. It's not "Infrastructure", and it's not really "Code" either. "Infrastructure Configuration as Text"
763.
by xorcist 3y ago
Not sure about the vice versa part. Ansible is pretty much a superset of Terraform. I've used in multiple places to manage vm:s and other cloud services and generally been happy with the setup.
764.
by xorcist 3y ago
I could understand someone nervously hitting ctrl-Q in the 90s, but why would anyone repeatedly send XOFF?
765.
by xorcist 3y ago
They don't, but they were established for a singular reason, to shepherd the term "open source". A term that was chosen on terms of having little previous use. They did not succeed with the trademark application because the t
766.
by xorcist 3y ago
That's what many people seem to think, but it has not been legally challenged yet. We won't know for sure until Google or AWS decides to test the limits, in your jurisdiction. You should probably ask Redis, Inc. what their intenti
767.
by xorcist 3y ago
That has been a popular opinion since FreeBSD was a complete operating system and Linux and bunch of disparate tarballs. Yet here we are. There have been other examples where copyleft products have competed with more permissively licensed p
768.
by xorcist 3y ago
This backdoor resided in git for a year without anyone noticing. It wasn't until it was activated via the tarball that someone found out. One could easily argue that signed tarballs are more vetted than git commits.
769.
by xorcist 3y ago
Right, but the boolean is set by an autoconf script, is it not?
770.
by xorcist 3y ago
You have it backwards. The engineering culture that said autoconf increases attack surface, the culture that said that the design of PAM is too complex, that did not accept the patch to link libsystemd to sshd, is the one that constantly tr
771.
by xorcist 3y ago
Well, not the same vulnerability, as libselinux isn't loaded by sshd. Any such request would probably have a low probability of acceptance among the openssh maintainers. If anything, I think this shows that real world security is hard
772.
by xorcist 3y ago
No they did not. The dependency is still there, it's just being lazy loaded. This would be prevented this particular exploit, which would have needed to take another approach, but at the price of making dependencies invisible and hard
773.
by xorcist 3y ago
Is the argument that well known software should be taken over by professionals? There are many motivated software maintainers, including single guys in Nebraska, who have better operational security than well funded companies. Remember the
774.
by xorcist 3y ago
Re: 1. People keep saying this. We should stop distributing tarballs. It's an argument that completely ignores why we have release artifacts in the first place. A release artifact contains more than just autoconf scripts. There can be
775.
by xorcist 3y ago
Satire is so hard on the Internet and maybe I'm just thick headed. Just to clarify things, is that a suggestion to shove a JSON parser into either bash or autoconf?
776.
by xorcist 3y ago
That's ... how autoconf works? If you explicitly set the enable-landlock flag, configure will fail when the feature doesn't compile.
777.
by xorcist 3y ago
This is just Docker being Docker. If that type of thing is interesting to you, start reading the source code.
778.
by xorcist 3y ago
There could potentially be many things you would not want to commit to git. Binary files and generated files come to mind. There could also be transformations of code for performance or portability reasons. Or ones that require huge third p
779.
by xorcist 3y ago
The point about owing Andres unlimited beer is a good one. He should get something good out of this!
780.
by xorcist 3y ago
I really hate banks, but I hate not being paid even more.

More ›