Viewing profile — 3np

Quadlets aren't what I'd personally use for local dev. They are good for running a local headless persistent service. So I wouldn't use it for your service-under-test but they can …

> "Write your own Dockerfiles" is not useful security advice. I actually think it is. It makes you more intimate with the application and how it runs, and can mitigate one particul…

Two paths: - Configuration management (ansible, salt, chef, puppet) - Preconfigured images (NixOS, packer, Guix, atomic stuffs) For a one-off: pssh

> Not if you run it in rootless mode. Same as for docker, yes? https://docs.docker.com/engine/security/rootless/

Hey, thanks for taking the time to share your learnings and engage. I'm sure there are HN readers out there who will be better off for it alongside you! (And good to hear you're le…

Thanks! Would be cool to have it packaged for alpine since firewalld requires D-Bus. There is awall but that's still on iptables and IMO at bit clunky to set up.

This affects podman too.

It still says: > IT NEVER ESCAPED. You haven't confirmed this (at least from the contents of the article). You did some reasonable spot checks and confirmed/corrected your understa…

> I also enabled UFW (which I should have done ages ago) I disrecommend UFW. firewalld is a much better pick in current year and will not grow unmaintainable the way UFW rules can.…

As sibling mentioned, unless you or the runtime explicitly mount the docker socket, this particular scenario shouldn't affect you. You might still want to tighten things up. Just a…

> > Onboarding is bad > Sorry, but you have to run an auth server (matrix-authentication-service) if you want Element X to work. This is a bit outrageous IMO. Actually breaking and…

The answer seems obvious but one that won't be spelled out in SCMP.

Great you found something that works for you and that you managed to dodge the parts of the community that somehow managed to turn this into identity politics . Still, the gaps are…

Cheers! 10% is nothing to scoff at! ...While I have your ear: IME ReThink DNS often runs into bootstrapping problems since 1) preconfigured DNS servers are referenced by hostname, …

The currently latest stable release of Debian (13.1) ships a broken version of systemd-networkd which may break networking completely for affected users. Maintainer response is les…

Tried Brave?

Wayland is great and ready for (idk) 95% of users/use-cases. There is a long tail of more-or-less critical stuff that depend on X11 and do not have working Wayland substitutes. Whi…

How is this spam not autoflagged by now? https://news.ycombinator.com/from?site=reddit.com

> The bullet engravings are well known You can read anything you want into those if you want to. To me they reek weeb culture (as opposed to furry like everyone else jumps to - the…

> I don't think you can get much further right than he was though. Groypers.

Perhaps the people you see as cynical have more research and/or experience behind their views on OpenAI than you. Many of us have been more naive in the past, including specificall…

How recently was this experience? TFA frames this all as recent and ongoing learnings and changes at F-Droid. Given the notability of your project (kudos and thanks), perhaps they'…