Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M

moonpiedumplings

@ moonpiedumplings @programming.dev

Posts
49
Comments
916
Joined
3 yr. ago

  • Easiest to set up IAM solution? (OIDC, OAuth2, SSO, etc.)

    Jump

  • Void auth, or kanidm look like easier alternatives.

  • What Are Btrfs Subvolumes? And Why They’re Better Than Traditional Linux Partitions

    Jump

  • I have installed an OS onto just the btrfs root subvolume, leaving the home directory intact. This is how I originally swapped from Manjaro to Arch. The arch manual install instructions helped.

    But this should be a feature of the graphical installers imo.

  • What Are Btrfs Subvolumes? And Why They’re Better Than Traditional Linux Partitions

    Jump

  • Transparent fileystem compression and deduplication (btrfs feature not in ext4) compresses data while still having it be accessible normally. This leads to big space savings.

    You can use the tool compsize to check it out.

  • Martin Fowler: ORM Hate

    Jump

  • Postgres jsonb?

  • Martin Fowler: ORM Hate

    Jump

  • How to confine an existing distrobox container?

    Jump

  • Flatpak sandboxing uses bubblewrap, which uses seccomp and can filter syscalls.

    LXD/Incus can run qemu-kvm virtual machines in addition to containers. In fact, I like the security posture of LXD/Incus better here because they use cgroups, namespaces, seccomp, to sandbox the qemu process, which libvirt also does but proxmox does not.

  • Martin Fowler: ORM Hate

    Jump

  • I like ORM's because they prevent sql injection. Mostly. Sql injection is a really bad vuln that's nowhere near as ubiqitous as it used to be for every php app, and that's partly due to ORM's.

  • Latest MSI BIOS update implements "anti-cheat mechanism"

    Jump

  • It's all about control. They demand control over servers, not allowing you to self host. They also demand control over communities, by putting them all in one big server or other controlled channels (but sometimes refusing to properly moderate them like in league of legends).

    Now, they want to control your device.

  • Bring Back RSS for Operational Security

    Jump

  • lisp is an old language,but not dead. What is it actively used for these days?

    Jump

  • I don't hate on any language's syntax tbh, but the tooling for nix is absolutely miserable compared to similar.

    People hate on yaml a lot, but I can start typing and then press tab and it completes a whole template for whatever k8s objecy I am trying to make. Having to copy from my other project's shell.nix/whatever into the new one feels miserable in comparison.

  • Latest MSI BIOS update implements "anti-cheat mechanism"

    Jump

  • Sometimes I wonder if Vanguard is actually a government pet project for practice blocking and executing malicious pci devices.

    You take one of those pci dma cheat cards, put a modem in them, and you've broken secure boot. And nation states have done such a thing to compromise laptops or other devices after getting physical access to them for a bit.

  • Latest MSI BIOS update implements "anti-cheat mechanism"

    Jump

  • They do it though. People all of a sudden are motivated and able to enable bitlocker and secure boot and update their bios when they need it to play le funni video game.

  • Latest MSI BIOS update implements "anti-cheat mechanism"

    Jump

  • https://www.riotgames.com/en/news/vanguard-security-update-motherboard

    I am so deeply annoyed that

    1. Vanguard demands this level of control over user systems

    2. Vanguard seems to be the only entity handling a threat vector most people simply ignore. I suspect not even crowdstrike and the like could handle malicious pci devices. Well, vanguard can't either, it's just a cat and mouse game. But they are definitely trying in an area where most seem to have given up, but it's absurd that it's a fucking game anticheat that's doing this.

  • Is it safe to assume that all apps from the software store (Discover in my case) are safe?

    Jump

  • Debian repos are basically guaranteed safe: https://programming.dev/comment/22863237

    Flathub is much, much safer than say, the google play store, but it ultimately does follow a model of app developers submitting packages which get reviewed and approved. In theory, someone could sneak malware past that, although there haven't been any incidents (perhaps flathub's review is very effective?). But the snap store, which follows a similar model has had malware. But canonical hasn't been the best steward of that one.

    In addition to this, not all stuff on flathub is open source, which is definitely concerning.

    Thankfully, flatpak has a built in sandboxing system, which lets you limit what the appps have access to. KDE has a UI for it, and there is also the GUI app flatseal.

  • Is it safe to assume that all apps from the software store (Discover in my case) are safe?

    Jump

  • malicious code does occasionally sneak into Debian distributed apps

    Do you have an example of this? The xz utils backdoor did not make it into debian stable, only unstable.

    Debian stable essentially forks every package, maintaining a custom codebase. They then cherry pick security updates only (ignoring feature updates or minor bugfixes), and applying those. This makes it extraordinarily resilient to any form of supply chain attack.

  • Is it safe to assume that all apps from the software store (Discover in my case) are safe?

    Jump

  • Flatpak's show up in discover, and aren't by the distro. Usually it's flathub.

  • NaiHe – lightweight E2E encrypted chat over any self-hosted MQTT broker

    Jump

  • Journalists communicating with sources in censored regions

    Whistleblowers sharing information securely

    You and your peer agree on an encryption key (any string).

    This is unacceptably unsecure for the usecases you mention. There is a reason why the most secure messaging apps don't use symetric encryption, don't use passphrases, and they also possess forward secrecy.

    It's pointless to push this as a censhorship circumvention method when many other methods exist that already do so 10x better, in a secure way, over decentralized, hidden and unblockable infrastructure. (Tor's meek-azure bridges use microsoft's infrastructure, which nobody is able to block because everybody depends on it, even China).

    I appreciate the project, and I am always happy to see people learning, progressing, and publishing their results, but you need to be honest about the weaknesses of your software compared to established solutions. It's not impossible for you to one day produce a secure messaging app, but today is not the day. Right now, using this is just a fast way to get killed.

  • Continuing my work on my Personal Home Page (PHP) site, very long post

    Jump

  • How to connect to local private network?

    Jump
  • Linux @programming.dev
    moonpiedumplings @programming.dev

    AnuraOS — web based OS that uses a wasm emulator to give you a real linux system, running entirely in your browser

    github.com /MercuryWorkshop/anuraOS
  • Linux @lemmy.ml
    moonpiedumplings @programming.dev

    Benefit of a subvolume below the top level btrfs subvolume?

  • Free and Open Source Software @beehaw.org
    moonpiedumplings @programming.dev

    Video editor with the ability to filter out only a single person's voice?

  • Ask Science @lemmy.world
    moonpiedumplings @programming.dev

    Are certain typos/grammar errors harder to read than others?

  • Asklemmy @lemmy.ml
    moonpiedumplings @programming.dev

    Are certain typos/grammar errors harder to read than others?

  • Selfhosted @lemmy.world
    moonpiedumplings @programming.dev

    Alternative to docker-tcp-switchboard, but for tcp (lo';) and virtual machines?

    github.com /OverTheWireOrg/docker-tcp-switchboard/
  • Linux @lemmy.ml
    moonpiedumplings @programming.dev

    Alternative to docker-tcp-switchboard, but for tcp and virtual machines?

    github.com /OverTheWireOrg/docker-tcp-switchboard/
  • Linux @lemmy.ml
    moonpiedumplings @programming.dev

    Trying to get secure boot + full disk encyrption + bootable timeshift backups working. How to make grub verify nothing?

  • Linux @lemmy.ml
    moonpiedumplings @programming.dev

    Is it possible to have a share a singular interface on a vps for openstack neutron?