At first I thought there was a cat under the hat in the pics where it is just on the surface instead of your head.

the malware likely targeted millions of Linux servers in recent years and possibly caused infections in several thousands of them.

As long as the success rate seems to be that low I am not sure I would consider it wide-spread. A few thousand servers could literally just be a few dozens admin organizations each running a couple of hundred servers badly.

Shouldn’t that be

Microsoft Windows is now 100% secure after Total Recall of all copie

?

Mostly it is dealing with the fact that these tools tend to be language/build tool specific and most of them implement the spec badly. Then there is the part where you actually need to have something like Dependency Track setup which compares the versions in the SBOMs with the versions in security reports (such as CVEs, GHSAs,…) but most of those don’t really take into account distro level patches. I suspect the latter will be the largest part of the work for something distro-like such as FreeBSD.

I assume you meant PII?

From what I recall Kerberos didn’t work all that well in environments with NAT so it is unlikely to replace modern single sign on systems like OpenID Connect.

Please stop recommending people disable IPv6 as if that is an optional feature. This only further delays the much needed transition away from IPv4 where we ran out of addresses years ago at this point.

Restarting a system gets it into a known state making debugging easier.

And what are you going to debug when the problem does not occur and you do not know how to reproduce it? There is a lot of information you can only gather while the problem occurs. And yes, this is from the software developer and sysadmin perspective, not from the layman perspective. I would rather spend a little bit more time on the problem now instead of having it occur again and again without getting any closer to an actual solution.

It is also a good idea for computing devices in general since not restarting means effectively restarting and finding out that the restart didn’t work properly or that you do not have all the information needed to log back in at the worst possible time, one you didn’t choose yourself. And if you do it often enough the number of updates/changes that could be the cause is significantly lower than if you keep things running for a long time before a restart.

It solves virtually none of them, it is pretty good at destroying all the evidence needed to actually fix the problem for good though.

Well, that and bikes just being inherently significantly more space-efficient so those lanes are not clogged when the car lanes are.

, it’s there to efficiently move as many people as possible, as safely as possible.

So you are saying you are in favor of banning cars from the street too then?

The hated minority being inferior but also immensely powerful is a pretty standard feature of anti-minority world views of all kinds. It is pretty much required to justify the extreme actions they want to take against the minority.

IPv6 binds on wildcard addresses include binding to the IPv4 addresses.

What does ss -tlnp return? Does the process listen on any ports?

That should only affect ports below 1024.

Your two bind addresses might be in conflict with each other since [::]:5234 includes binding to the first one.

Or, you know, not that crazy after all if germ can survive that process.

A lot of software writes to log files or temporary files or lock files or database transaction logs as part of its normal function and when those writes fail due to a full disk the software doesn’t work anymore.

It is not that the regular frontend doesn’t work and alternative frontends do, it is that half of the stuff on their server (including image uploads and the frontend) don’t work because the admin has no time to deal with it. The problem isn’t the software used but the lack of maintenance.