socphoenix

joined 1 year ago
MODERATOR OF
[–] socphoenix@midwest.social 53 points 3 weeks ago (1 children)

I use FreeBSD on a desktop as a server and for desktop usage with a touchscreen to run a virtual pipe organ that needs an obscene amount of resources to run. There’s a few things that I see as pros:

  1. Zfs on root/by default. Absolutely love zfs and not having to screw around with dkms/kernel issues etc to get it running is a huge plus imo

  2. Jails - I cannot stand docker. It’s opaque and I’m stuck trusting that whatever image I’m downloading is updated/secured and or running multiple extra containers to stack together. With jails I spent my time setting up the jail once (installing services etc), and using a jail manager (bastille) I can maintain what I think is better control of the internals and updates etc. the commands mirror the os as well which is nice

  3. Integrated world - the way bsd integrates the core system and separates out the packages means most security updates just need a service restart not a full reboot so uptime between OS patches can be months at a time. They’re also very conservative about changing how the core system functions so how I install/set up/maintain the system in 2007 is the same as today.

  4. The manual. Anything I need to know when adding services including edge use cases is in the manual on their website. Much cleaner written than the arch manual, and has a pdf download available if you aren’t going to always have the internet (and a terminal interfaced manual option to download).

For my usage there’s not much I can think of for cons, but I will say laptops and particularly WiFi suffer currently. There’s funding and works in progress to fix this but still idk I’d use it on a laptop today without carefully checking support for the hardware like I would’ve with old school Linux. They’ve come a long way recently with edge cases for instance I’m currently running a windows vm with gpu pass thru using their bhyve vm manager, something that wasn’t supported a year ago, so I am optimistic the funding will help in the next few years on some of the laptop issues.

[–] socphoenix@midwest.social 21 points 1 month ago (1 children)

These advanced reactors are safe, efficient and ‘leaner’ than the first and second generations of nuclear power technology. Of course, you already know that this source is neither renewable nor clean, which is not a good idea, according to what we think.

These authors don’t sound like they have a very good grasp of the tech they’re “reviewing”…

[–] socphoenix@midwest.social 1 points 1 month ago

This happened to me by even though I had never hard configured anything… had to go to the config folder and find the offending definition and delete it

[–] socphoenix@midwest.social 4 points 1 month ago

Almost certainly, and get security updates something I’d very much want if I let the tablet off the local network. I would love to see this thing get to that point to ditch android entirely.

[–] socphoenix@midwest.social 29 points 1 month ago* (last edited 1 month ago) (5 children)

If your kids software is available in Ubuntu maybe? At a glance I’d wonder how power efficient it would be (my $100 Walmart tablet lasts all week with light usage, I doubt this could compare), and would have to wonder as well on gpu performance. It’s likely not optimized yet so idk I’d trust 800 mhz as enough.

I think the article sums it up best:

RISC-V computing is a promising field but best ploughed by developers, early adopters, and tech enthusiasts at present. RISC-V chip performance is improving, but it’s not “there” for mainstream adoption — yet.

It’d be a ton of fun to tinker with and if you have the money to risk I’d say go for it! But I wouldn’t buy this for a kid unless I had the extra $150 to potentially get them a normal android tablet if this didn’t work as well as hoped.

[–] socphoenix@midwest.social 1 points 1 month ago (1 children)

I certainly hope that’s true if I do catch it again!

[–] socphoenix@midwest.social 18 points 1 month ago (3 children)

Got Covid for the first time last October and ran a 103 degree fever for days and struggled to feel completely normal for almost two weeks. I was already planning to keep getting the shots prior to catching it but definitely keeping up with them now. I hope to never catch that one again.

[–] socphoenix@midwest.social 3 points 1 month ago (1 children)

That’s still owing money for something I would have never had a say in so call it whatever you want but it meets the definition of debt.

[–] socphoenix@midwest.social 5 points 1 month ago* (last edited 1 month ago) (4 children)

Only partly true there I’m afraid. Pennsylvania allows for children to be responsible for medical and long term care bills from their parents under a filial support law:

https://www.legis.state.pa.us/cfdocs/legis/LI/consCheck.cfm?txtType=HTM&ttl=23&div=0&chpt=46

[–] socphoenix@midwest.social 36 points 1 month ago

I get to handle over $1 million in musical instruments every day for my job.

(I’m a church organist and pipe organs are insanely expensive)

[–] socphoenix@midwest.social 4 points 1 month ago (1 children)

I’ve never had an isp complain about me using my own router in the US, is this just common in other countries or have I just been lucky?

[–] socphoenix@midwest.social 2 points 1 month ago

That is my biggest fear health wise. Losing $7,800 in premiums and out of pocket plus copays for medicine and office visits would be painful to say the least

 

Cross-posted from hocker@lemmy.ca (Memmy doesn’t have cross posting yet)

 

Posting this for visibility: cross-posted from: https://lemmy.world/post/1299831

Hi all,

If you're just now signing in for the first time in 12+ hours, you may just now be finding out that Lemmy World and other instances where hijacked. The hijackers had the full abilities of hijacked user, mod, and admin accounts. At this time, I am only aware of instance defacing and URL redirections to have been done by the hijackers.

If you were not forced to sign back in this morning, contact your instance admin to verify mitigations were completed on your instance.

How?

This occurred due to an XSS attack in the recently added custom emojis. Instance admins should follow the issue tracker on the LemmyNet GitHub, as well as the Matrix Chat. Post-Incident Activity is still on-going.

Currently, it is likely that just your session cookie was stolen, with instance admins being targeted specifically by checking for navAdmin, an HTML element only instance admins had. I do not believe this to affect users across instances, but I have yet to confirm this.

What happens next?

As I am not the developers or affected instance admins, I cannot make any guarantees. However, here is what you'll likely see:

  1. Post Incident investigation continues. This will include inspecting code, posts, websites, and more used by the hijackers. An official incident writeup may occur. You should expect the following from that report:
  • Exactly what happened, when.
  • The incident response that occurred from instance admins
  • Information that might have helped resolve the issue sooner
  • Any issues that prevented successful resolution
  • What should have been done differently by admins
  • What should be improved by developers
  • What can be used to identify the next attack
  • What tools are needed to identify that information
  1. A CVE is created. This is an official alert of the issue, and notifies security experts (and enthusiasts), even those not using lemmy, about the issue.

  2. A code security audit is done. This will likely just be casual reviews by technical lemmy users. However, I will be reaching out to the Mozilla Foundation and Cure53 as they recently did an audit of Mastodon. If there is interest in an external audit of lemmy and the costs are affordable, I'll look into crowdfunding this cost.

view more: ‹ prev next ›