Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)H

Helix 🧬

@ helix @feddit.org

Posts
1
Comments
82
Joined
2 yr. ago

<a rel="me" href="https://layer8.space/@helix">Mastodon</a>

  • Ways to Expose Services Publicly

    Jump

  • If you use TLS like you should, your domains will be on the internet in the certificate transparency log. Yes, you should use a wildcard cert if you want this security by obscurity, but it's still security by obscurity.

  • PSA: the bitwarden clients got an upgrade that makes them incompatible with vaultwarden

    Jump

  • The whole client is open source, but idk if you can simply call the API with a token for a linked device or something. Pretty sure Signal doesn't want "chatbots" on their networks and it might be against ToS.

  • PSA: the bitwarden clients got an upgrade that makes them incompatible with vaultwarden

    Jump

  • Would love this to work with Signal and Matrix!

  • [AIT] What do you use to summarise YouTube videos?

    Jump

  • My brain

  • 432 Linux kernel CVEs published in the last 24 hours

    Jump

  • Still, 432 in 24 hours is a lot. Looks like someone made their job way easier with AI, however I refuse to believe this is slop, as these are some of the most important maintainers on the planet who wouldn't just throw AI on reviewing code like that.

  • Google pays $250K for Linux vulnerability allowing guest VM escapes

    Jump

  • Nice try Mr Hacker, you're not getting anything out of this BOFH 🙃

  • Start of a /c/Selfhosted Wiki [CBH]

    Jump

  • I have a wiki! Covers way more diverse topics than self-hosting though. It's mostly a copy pasted stream of consciousness and links to other resources, with varying quality. Lots of stub articles.

    https://wiki.tilde.fun/

  • Google pays $250K for Linux vulnerability allowing guest VM escapes

    Jump

  • Using Ansible, but it still means I need to run it and schedule patches etc. – you can't just patch stuff when people are currently working on it.

  • Managing podman quadlets, users subids and such

    Jump

  • You can use configuration management software like Ansible or Puppet. I wouldn't write my own scripts when there are good Ansible modules.

  • Google pays $250K for Linux vulnerability allowing guest VM escapes

    Jump

  • You quoted something directly contradicting what you said. Nothing is concealed, every line of erroneous code could have been analysed for 15 years. All information needed to find the bug was public since it the code has been written and checked in publicly.

  • Google pays $250K for Linux vulnerability allowing guest VM escapes

    Jump

  • You confused "obscurity" as in a synonym for low popularity with the word "obscurity" as in people not knowing how it works and people deliberately hiding the inner workings of a system.

    Everyone using Linux can know how it works, that's the opposite of obscurity in the sense it is used within "security by obscurity".

    Apart from that, Linux is very popular, just not on the Desktop. It is therefore not obscure in the sense of popularity either, at least the components which are hit by the bug mentioned in the article.

  • Google pays $250K for Linux vulnerability allowing guest VM escapes

    Jump

  • ugh shit next week will be awful at work patching all those servers. At least they found it before bad actors did.

  • Is they're an easy way to make my Jellyfin accessible outside of my home network for free?

    Jump

  • What benefit does that give you for media viewing?

    What exactly about X.509 is trash for that use case?

  • Is they're an easy way to make my Jellyfin accessible outside of my home network for free?

    Jump

  • Sadly couldn't find anything. Thing is, if you watch your own media, why use TOR?!

  • Removed Locked

    Most slopcode projects are abandoned and deleted within months of release

    Jump

  • you’re not actually against AI, you’re against hustle culture, influencers and unsustainable practices.

    96.5% of all AI projects are linked to that. If 96.5% of my tap water tastes like poop and 3.5% are potable, I'd still not want to drink it.

  • Homepage - Selfhosting Dashboard

    Jump

  • I always wonder if veterans really need to know that much information at all times.

    Actually I suffer from something called "monitoring fatigue" or "notification fatigue" at work. There's so many monitoring notifications, half of which are nothingburgers, that I seriously hate that part of my job is responding to them.

    I already disabled notifications for my email in our monitoring system and now there's just another department monitoring the monitoring system and creating tickets for me. I can't escape it.

  • Removed Locked

    Most slopcode projects are abandoned and deleted within months of release

    Jump

  • I'm in the "Fuck AI" crowd even though I currently heavily use LLMs, specifically for the reason that slopcoders, techbros and memelords destroy the planet.

    I'm in the same boat as those people and that's specifically why I hate it.

  • Removed Locked

    Most slopcode projects are abandoned and deleted within months of release

    Jump

  • Sounds interesting.

    Can you link those projects please?

  • How to Setup Authelia in Docker with SWAG Reverse Proxy (2026)

    Jump

  • Your link is broken and currently displays a Claude Code announcement. Are you even real?

  • Ask Lemmy @lemmy.world
    Helix 🧬 @feddit.org

    What song is the song for you and your best friend forever? "Our song"?