Viewing profile — gnfurlong

That's just not true. The original pass is just a single shell script. It's short, pretty easy to read and likely in part because it's so simple, it's also very stable. The only re…

I absolutely adore Hanabi, especially for two players. It's a cooperative game with very limited communication. Also another vote for Splendor Duel. The original Splendor is probab…

I'm waiting for pov perspectives for sporting events and I say that as someone who doesn't really watch sports.

Most of the popular touring bikes fit your budget. Really you're just looking for durable, a wide gear range and the capacity to mount gear. Surly disc trucker has historically bee…

It looks like at least some of the individuals claiming production issues are pulling the latest version of Axios from a CDN. It doesn't seem like they actively pushed a release to…

Delaware definitely replaced their voting machines after that article was published. I think in 2020.

The parent comment is still talking about rootless podman (and really just user namespaces). Root in the container is absolutely mapped to the user executing podman outside the con…

I've happily used systemd-boot in the past, but it's definitely less featureful than grub. Notably, it doesn't support the use of a (LUKS) encrypted boot partition. I'm not even su…

Systemd-homed isn't inventing the idea of encrypted home partitions and fundamentally, what you're saying is that cron is incompatible with encrypted home partitions (or any other …

One of the supposed benefits I remember from his original talk on systemd-homed is better handling of encrypted home directories even for a single user workstation. Even on a singl…

I have to admit, the biggest selling point to me for podman is the removal of the central docker daemon. For my use case (personal workstation and home lab), it seems strange to me…

Have you taken a look at podman / buildah? My understanding is that podman resolves all of the security concerns you highlight above while mostly maintaining compatability with the…

Regarding apparmor/selinux, who creates/audits those profiles to make sure each application only has access to exactly the libraries it needs? It probably defeats the purpose if it…

Chrome didn't exist 20 years ago, but you can trace its lineage back that far. Khtml dates back to 1998 apparently.

Also "Must be real evil"

JSON Schema and Swagger/OpenAPI provide some of the missing functionality described above (type definitions, enumeration, validation). It's not quite the same and in particular I'm…

I'll admit to being ignorant of apt as my primary distributions aren't debian based, but aren't packages cryptographically signed? If package signatures are validated after downloa…

YubiKey is at least supported, but only because it also functions as a pgp smartcard. You can load you pgp private keys on the yubikey and then all decryption will only be done on …

I'm surprised there's not more discussion of passwordstore in this thread. In light of the parent article, I want to point out one of it's killer features (from my perspective). As…

If you want to buy my house, sure. You're free to look at anything you want once you own it. It's yours. What's not okay is for me to build a house and add recording devices all ar…

Passing the "wrong" number of arguments isn't a syntax error in JavaScript. If you pass fewer arguments than declared parameters, the rest are implicitly undefined. The variations …

Node-solid-server is just one implementation of the spec. There's nothing stopping another implementation from having a cpanel like management interface.

I honestly feel the same about Python and to a lesser extent C. But I also know that it's largely a matter of exposure. Every language has its quirks, it's just a matter of learnin…

Wasn't OSX originally a fork of FreeBSD? Parts of it may have been replaced over time, but I would think that a large portion is still written in C.

Admittedly, I haven't gotten around to actually using WireGuard yet, but I think it's pretty much as simple as Linuskendall said. https://www.wireguard.com/quickstart/#nat-and-fire…