Skip Navigation

User banner

The Stoned Hacker

@ erev @lemmy.world

Posts
6
Comments
104
Joined
3 yr. ago

Just passin' through

  • Microsoft's Windows 11 push backfired, so it's quietly keeping Windows 10 alive for another year

    Jump

  • I personally recommend Fedora KDE. It's polished and set up reasonably for the average person so you should never need to even open the terminal (you might need to fiddle with some stuff like enabling flatpacks but thats all sone in a GUI application), and it's reasonably up to date withour shipping broken packages.

  • What actual damage do you secure your servers against? Whats the attack vector?

    Jump

  • You're wrong, containerization is a massive security measure that shouldn't be ignored. Proper containerization allows you to segment the namespacing of a single server by user and application; this helps massive with esrablishing boundaries that are still very difficult to cross under normal circumstances. Keycloak is an IdP which only provides one layer of security; good swcurity implements defense in depth where every layer of the system has securiry measures. Just because Linux recently had two vulnerabilities that bypass a lot of those doesn't mean they're worthless; you still need initial access to a nonprivileged user to exploit those and layered security can help prevent that from happening in the first place.

  • Correlation implies causation

    Jump

  • When datacenters are being powered by unregulated natural gas generators then it has a massive impact

  • What actual damage do you secure your servers against? Whats the attack vector?

    Jump

  • Also worth mentioning that Linux recently has had two massive privilege escalation vulnerabilities that bypass system namespacing and thus also provide container escapes.

  • The prices differences of different providers for the same domain is crazy.

    Jump

  • Certain domains stipulate user verification. Porkbun has to legally comply with this

  • What was your experience with organized crime like?

    Jump

  • All of the examples you just gave are not victimless crimes. Besriality is an abuse of power and at best coercion but more normally just straight up animal sexual abuse. Absence of consent is just rape, and children can't consent to sexual activity. Unless you dont consider animals, people, or children to be capable of being victims none of those are victimless.

    Kinks are consensual, that is the difference.

  • This community isn't your personal adviser

    Jump

  • and if everyone who asks that question has that mindset then we end up with no answers longterm.

    its annoying to scroll through 15 threads asking the same thing looking for an answer, but its infinitely worse to find no threads related to what you're trying to do.

  • You're immortal and sent back to Dec 1945. How do you survive until modern day?

    Jump

  • a lot of indigenous cultures have really interesting cultural perspectives on gender. i think id enjoy traveling and connecting with people all over the world and immortalizing their stories in me

  • You're immortal and sent back to Dec 1945. How do you survive until modern day?

    Jump

  • tomato tomato

  • You're immortal and sent back to Dec 1945. How do you survive until modern day?

    Jump

  • It's gonna be tough being a queer POC but I'd probably just be a sidequest queen and travel the world doing random shit, trying not to stay in the same place for too long and not return until i can reasonably claim to be my own child

  • You're immortal and sent back to Dec 1945. How do you survive until modern day?

    Jump

  • Im assuiming doctor who rules where just dont interact with yourself

  • What do you love about your job and what do you hate about your job.

    Jump

  • I love my team and the people I work with; they're awesome and why I've stayed at my current company (and yes my manager and ever his manager are included in this).

    I hate that they're shoving AI down our throats and is the primary reason I will be searching for a new job once I finish my degree.

  • Deleted

    Permanently Deleted

    Jump

  • Yes and no.

    Yes becuse our new C-suites are pushing it heavily and my boss (who only cares that we use AI as much as we need to not draw ire) has warned AI usage is a tracked metric that may be used for perfamnce reviews, bonuses, promotions, and raises.

    No because I know my immediate chain of command does not fully believe in AI or are skeptics, and when the bubble bursts the price per token is going to slyrocket. Suddenly minimal AI usage as a tracked metric will probably look pretty good.

    Either way once I've finished up certain things I intend to look for a new job. I love my team but I fear the writing is on the wall, and even if they try to reverse course I'm skeptical that the company will be able to.

  • Can a transgender woman be a lesbian?

    Jump

  • Slight correction: the contemporaneous usage of the word lesbian in the queer community does not specifically say it is wlw, but that it is femme/non-masculine attraction to femininity/non-masculinity. In that sense it may be more closely aligned with being sapphic than strictly wlw.

  • Deleted

    Permanently Deleted

    Jump

  • As a trans person in the US, i believe they knew as far as they had accepted the idea of revolutionary suicide. Why did I bring up I was trans? because i intend to soon start medically transitioning and I have to question if i want to legally transition as well, and to what degree because the laws in the US are making it increasingly difficult to legally exist as a trans person. Either I repress myself and exist to conform or i live as myself and risk death/rape for that. and even in the former case it is unlikely i exist without scrutiny or repercussion given the fact I'm clearly not quiet about this.

    similarly if you are an activist or revolutionary on that level you have to accept that the state is trying to suppress if not kill you; either you repress your own grievances and continue to let exploitation happen unchecked or you fight back and likely pay with your life. But again, anyone willing to consider the latter is still likely to face repercussions even if they choose the former. choosing to exist or operate outside of the hegemonic system of thought will lead to oppression in all forms, and anyone who is pragmatic will understand that being faced with that option typically means you have already gone too far to turn back. You either rebel or capitulate, and being a bootlicker doesn't mean you live longer it just means you'll be remembered as a traitor.

    Thus i believe MLK, Malcom X, and Fred Hampton all knew they were going to die even if they did everything to prevent that outcome, but I don't believe they knew they would die when they did though. At least for Fred Hampton he had a son and a wife; while i dont imagine myself having children i cannot fathom that someone with so much empathy could stomach the idea of leaving their child behind if they could prevent it.

  • Mint

    Jump

  • please do! native flora are super important, especially since large monocultures of a useless crop (grass) have become popular. if your yard is gonna be filled with plants that you aren't using, you might as well fill it with plants that are useful to the environment

  • Why don't they get this?

    Jump

  • In the US it makes sense. Much of our corn is grown for ethanol so ot can be used for fuel. Replace that with solar and we reduce our reliance on a monocrop and end up with far far more power.

  • Homelab for DevOps experience?

    Jump

  • W answer (although im considering moving to neovim due to vim using AI code)

  • Why allow "everyone" to have read write permission?

    Jump

  • I do this for my containers. I have a completely domain-managed network, so my docker/podman host mounts an NFS share that contains all the data volumes for my services. Each one only has read permissions for the service account that runs it (and has nogroup). Each OCI container mounts their data volume(s) from their respective directory as well as a kerberos user TGT and credentials cache. Each OCI container runs as the service account, which uses the kerberized credentials to access the mounted data volumes (this is necessary), and thus I acheive separation. Even if a threat actor were to compromiee a service they would still be locked down to that service account and only able to access/modify the data of this service. This is still be very bad for services like keycloak, but for other trivial services it almost guarantees more than adequate segregation. This does fall apart a little bit with the recent copyfail and dirtyfrag exploits which allow for easy privilege escalation, but I don't allow root squash so the data volumes on the NFS share are still service_account:nogroup even when accessing as root. Now an attacler could go through and use the KRBTGTs that are stored for each service account to access the data, but at that point I am dealing with a dedicated threat actor. Defending against someone explicitly seeking to compromise me is a different situation altogether, and still requires initial access through a vulnerable application that is sitting behind an SSL termination proxy and an NGFW with IPS capabilities.

  • Selfhosted @lemmy.world
    The Stoned Hacker @lemmy.world

    My Unifi Dream Machine Pro's ad-blocking was doing more than I expected

  • Selfhosted @lemmy.world
    The Stoned Hacker @lemmy.world

    What do you prefer to selfhost?

  • Selfhosted @lemmy.world
    The Stoned Hacker @lemmy.world

    Good file servers for Proxmox?

  • Ask Lemmy @lemmy.world
    The Stoned Hacker @lemmy.world

    What's a common occurrence in your hobby that you think shouldn't be?

  • Selfhosted @lemmy.world
    The Stoned Hacker @lemmy.world

    What is a good multirole server setup for a racked server?