Viewing profile — botanicalfriend

On the dynamic linker bypass specifically, have you looked at fapolicyd [1]? It uses fanotify(7) and the top of the README is: > The restrictive policy was designed with these goal…

Paying maintainers doesn't give Red Hat a magic oracle for "which commits matter for security". What you actually end up with is cherry-picking + backporting. Backporting is inhere…

amazing because of the irony, yes?

From my perspective a large factor contributing to its popularity is because of FastAPIs native integration. V2 has broken so much behavior, and the library is generally fragile an…

I have the same worry (although I have no evidence, and haven’t done much research into finding evidence). I've slowly transitioned from FF to Chrome over the past year, for this r…

This looks super useful. It is a bit convoluted to setup WG/PiHole/Unbound/foo and link them all together. But, it is not tedious enough that I’d ever put in the time to make a who…

HAProxy

The “closed door development” is a problem for their business. They don’t have that problem when they maintain it, free software aside.

A very simple haproxy/envoy/nginx config will achieve this, no?

You can encrypt them using something like https://github.com/FiloSottile/age and then just store them in git. When you need to access them, just run "age -d .." If you're paranoid …

Vault X.509