[-] biscuitswalrus@aussie.zone 9 points 2 weeks ago

I've seen similar on my desktop on proton when on wake it crashes the display manager and shows my locked desktop unlocked with all the running applications before it finishes crashing closing all my applications and then going back to login screen.

[-] biscuitswalrus@aussie.zone 12 points 1 month ago* (last edited 1 month ago)

Telegram isn't encrypting chats (only secret chats).

As far as reproducible builds telegram has got instructions and caveats or excuses around builds for the same issues signal does: https://core.telegram.org/reproducible-builds#reproducible-builds-for-ios

Both easily make Android reproducible builds. This Twitter message is a rock being thrown in a glass house, knowing most people who consume Twitter like it's a firehose, won't swallow the nuance of the details.

I don't even, not to complete lengths.

[-] biscuitswalrus@aussie.zone 16 points 1 month ago

Reasonably sure they mean telegram. Only secret chats are encrypted. Telegrams chat otherwise is basically transport layer encryption.

https://www.wired.com/story/telegram-encryption-end-to-end-features/

[-] biscuitswalrus@aussie.zone 13 points 1 month ago

Australian native bees can't sting, do a great job of pollinating, and make a little honey on the side. They're very curious from experience with a swarm making a home on my water meter box, but not very scary.

[-] biscuitswalrus@aussie.zone 21 points 4 months ago* (last edited 4 months ago)

The messaging around this so far doesn't lead me to want to follow the fork on production. As a sysadmin I'm not rushing out to swap my reverse proxy.

The problem is I'm speculating but it seems like the developer was only continuing to develop under condition that they continued control over the nginx decision making.

So currently it looks like from a user of nginx, the cve registration is protecting me with open communication. From a security aspect, a security researcher probably needs that cve to count as a bug bounty.

From the developers perspective, f5 broke the pact of decision control being with the developer. But for me, I would rather it be registered and I'm informed even if I know my configuration doesn't use it.

Again, assuming a lot here. But I agree with f5. That feature even beta could be in a dev or test environment. That's enough reason to know.

Edit:Long term, I don't know where I'll land. Personally I'd rather be with the developer, except I need to trust that the solution is open not in source, but in communication. It's a weird situation.

[-] biscuitswalrus@aussie.zone 12 points 4 months ago

It should make me irrationally angry, but no, it's a rational hatred. It burns even more intensely.

[-] biscuitswalrus@aussie.zone 9 points 5 months ago

I have to ask, do you think the websites you use or the places you post run on Windows?

[-] biscuitswalrus@aussie.zone 10 points 6 months ago

I'm just going to give you props. I have worked in Managed IT Services for a dozen years and some of the worst clients are construction, engineering and architects who use solidworks, autodesk and archicad products.

You've eaten humble pie and admitted that using computers as a tool, and systems design are different and though you might understand a lot, just like I can build a 3d model, the devil is in the detail.

Building robust solutions that meet your business continuity plans, disaster recovery plans, secure your data for cyber risk and to meet ISO and yet are still somehow usable in a workflow for end users is not something you just pick up as a hobby and implement.

The way I handle technology Lifecycle is in 5 steps: strategy, plan, implement, support, maintain. Each part has distinct requirements and considerations. It's all well and good to implement something but you need to get support when it goes wrong or misbehaves. You need to monitor and report for backups, patching, system alerts. Lots of people might do the implement, but consider the Lifecycle of the solution.

People do these things at home but they're home labbing, they're labs. Production requires more.

Anyway a bunch of people closer to your part of the world will probably help you out here.

I just want to again recognise and compliment you on realising and openly saying you want help rather than just do the usual "oh I know best" that I hear over and over usually just before someone gets ransomed on their never patched log4j using openssl heartbleed publicly exposed server infrastructure.

[-] biscuitswalrus@aussie.zone 9 points 6 months ago

Hahaha all the ones that don't like their job retried.

[-] biscuitswalrus@aussie.zone 14 points 6 months ago* (last edited 6 months ago)

Seems like my Samsung TV app is being hit by stuff too, I had 5 unskippable ads and can't seem to get stable 1080p at 60fps any more despite gigabit fibre and cat6. Meanwhile getting 4k on my YouTube app on Android on WiFi.

Go figure.

YouTube is so desperate to fight this war that they're harming legitimate watchers meanwhile my rockpi running Android TV seems to keep running sTube just fine.

[-] biscuitswalrus@aussie.zone 17 points 7 months ago

My favourite thing is that files are sorted automatically by date if you use yyyy-mm-dd. Sometimes there are just practical reasons.

[-] biscuitswalrus@aussie.zone 13 points 7 months ago

It takes a hash.

view more: ‹ prev next ›

biscuitswalrus

joined 1 year ago