Elvith Ma'for

Ironically that won’t help. Email is unencrypted and you’re not allowed to send “sensible data” over it as it would be violating the GDPR.

On the other side you’re technically not allowed to use a fax machine for that either as the recipient might forward faxes to an email inbox and that’d be unencrypted.

But nobody talks about fax being unencrypted either… Also the argument for fax is that POTS is a direct connection between two fax machines while the internet wouldn’t be and were easier to eavesdrop on. Since everything is SIP nowadays,… But I don’t know what they’re thinking besides “we’ve done that for all those years why wouldn’t it work now?”

My gaming PC survived from 2021 to 2026 without “overclocked” RAM because the BIOS would just error out in the POST when I enabled DOCP to boost it from 2600 to 3200 MHz.

A Bios update this spring finally solved it. It was a nice little performance boost, but not that much as I expected. So I guess you’re fine with slower RAM.

My current setup for this:

I own a domain - say homelab.com - and use it exclusively in my internal network.

The public DNS records do only resolve to 127.0.0.1 (as my domain holster doesn’t want me to have no A record).

In my home network I have a pihole running that resolves this domain and it’s subdomains locally (say pihole.homelab.com, proxmox.homelab.com and so on).

For HTTPs: As this server is not publicly reachable, I use the DNS API of my domain host to get a let’s encrypt certificate with the DNS-01 challenge. That way, the internal systems do not need to be exposed to the internet.

Edit: Caddy can do DNS-01, but you usually have to compile it yourself to include the plugin for your provider. To circumvent that, I’m just using plain old certbot and told Caddy to use the certs that are already on the machine

I usually fall asleep very quickly. Yes, having some kind of anxiety about the next day or such can keep me up and sometimes there’s a night where I just don’t seem to fall asleep instantly by myself.

Rule number one: Keep your bed the place you sleep in. Don’t do anything else in it. You can’t fall asleep because of anxiety? Get up, go somewhere else, try to deal with it/calm down and then get back to sleep.

If you don’t know why you can’t fall asleep, get up, try to wind down a bit. Maybe drink a little bit of water, go to the toilet, whatever then come back and try again. Try to keep the lights off or as dimmed as possible in that time.

Sometimes if that doesn’t help, you can use some relaxation techniques to help. My go to: Lay down, find a comfy spot. The easiest: Focus on you I this moment. How does it feel in your bed? Focus on the warm fluffy place you’re in. “Feel” how you sink in more and more into your pillow and mattress with every breath. Usually that’s enough to get me to sleep. If you can’t fall asleep doing this, go a bit further. Imagine you’re in a meadow/on a beach/wherever in nature. Feel the imaginary sun on your skin. The sand/gras/moss/… Under your bare feet. Breathe the fresh air. Focus on your imaginary sensations and observe them.

Those imaginations can be hard if you’re not used to them. It’s OK if you’re not focused on them in the beginning and that some random ideas and thoughts cross your mind and keep breaking the illusion. Find a way to deal with them. Accept that it has happened and move on. My preferred way to “block them”: imagine a red heavy curtain falling like in a theater completely blocking your view of those thoughts/images. Acknowledge that you identified and consciously ignored them, “turn around” and return your focus to your imagination.

Still up for me on the original site.

Combine that with deduplicating file systems that will break fuels into chunks and if some of those are the same as another file, it will only get referenced, not stored twice. This then even works if two users upload the same file without sharing it. (Assuming files aren’t encrypted by the user)

There are many layers and interpretations of confidence there that you mix up. I’m assuming this works somewhat like where I live. Its the confidence that the government is in a functional state/working somewhat efficient vs the confidence of fair elections. There are mamy ways where parties can essentially block progress or the government in general. That’s somewhat fine and can be an important instrument to use (especially when in the opposition). But that doesn’t necessarily mean that the people causing it want to get rid of fair and free elections. Some kind of “shutdowns” and other grind locks can be very detrimental to a government and there need to be a mechanic to be able to solve them. In this case: We have no confidence the current parliament with the current distribution of seats is working as it should be. We tried everything, we need to restart.

Since it’s a quite drastic process, it’s not something invoked lightly.

Assuming you get to check every (docker) command and then potentially deny it, it might work. But that’s annoying AF depending on what you use it for.

The docker daemon runs as root. And as such, it can access anything initially. If your container doesn’t explicitly (or implicitly) change the uid or drops capabilities, the container also runs as root (ok, IIRC some capabilities are always dropped, but the container stays almost root). It’s still locked in its own little sandbox, but the mounting of those paths etc. happens with root.

If you enter a docker command (docker run ..., docker build ..., …) this command will not run the containers by themselves, but instead call said docker daemon (that is running as root) by using a socket (/var/run/docker.sock).

To only allow trusted users to interact with the docker daemon, this socket can only be accessed by root or by users in the docker group. That’s why you usually need to type sudo docker run.... Sadly many tutorials tell you to just blindly add your user to the docker group so that you do not need to use sudo to interact with docker. BUT that now means that you gave you or those users basically full access to your whole filesystem (and thus system configuration) without sudo. Any programs (or viruses or AI Agents or…) running with these user accounts also get this group and thus docker’s capabilities.

That’s why you should NEVER add your user to the docker group or enable passwordless sudo, as you’re just one simple command/tool/script/prompt/… away from a privilege escalation.

You can configure docker to run rootless with only your user’s capabilities and rights, but at that point… Why configure docker to do something that other docker compatible projects like Podman offer out of the box?

… especially if your user is in the docker group and doesn’t need sudo, LOL

Another thing Claude tried to do on my coworker’s machine yesterday was basically:

✨ Yes, that is easy, let me just generate a systems unit file for you…

[Generates file]

Should I install that unit now for you?

Yes

Alright, let me do that for you

[Saves file]

[Tries to run systemctl daemon reload]

[Tries to activate the unit]

It looks like I have insufficient rights to proceed, let me try another way…

docker -rm -v /etc/systemd/system:/mount:Z -v ./unitfile.service:unit file.service:Z alpine /bin/sh cp ./unitfile.service /mount/

Here, I installed the unit for you!

I guess they always meant to train the swamp and heck are they doing it

DOUBLE_PLUS_UNTRUE

Well… This may explain it: https://lemmy.world/post/48221943

“I’m in this meme and I don’t like it”-comment

https://xkcd.com/1161/

Guess where they’ll build the stadiums… I heard they currently have a huge area of land paved flat

I � Unicode!

Probably fed with pie. Or trampled over by Mastodons.