Viewing profile — s_ting765

I use Flatpak/bubblewrap instead: https://news.ycombinator.com/item?id=48978112#48980221

The solution is not to use docker to sandbox Opencode. It is to use flatpak/bubblewrap/flatseal. I have vscode running in flatpak with directory permissions handled by flatseal. Vs…

Kubernetes is good for two things. Zero downtime deployments and self-healing (where the looping state mechanism comes in). There are people who want k8s to handle every single ope…

1.98.9 has already been tagged since bulletin was published (don't know why they chose on github to tag but not release). 1.98.9 version exists! That's not the question. It should …

I don't see the point of publishing a security bulletin if you are not going to timely push the fix to artifacts on all affected platforms. Tailscale needs to do better on their re…

Same here. Even though my homelab runs on a VPS. https://github.com/rhee876527/expert-octo-robot

Sure. After you have located root and the boot partition which is what this addresses.

Partition autodiscovery is pretty neat. I did my archlinux install with it using this guide[0]. I have never touched /etc/fstab and I have had zero to worry about corrupting a boot…

Pausing software updates by X days old is a hack at best for specific distribution platforms (npm), not a general security recommendation.

You can do the same from an USI made from mkosi (mainstream distros support) with kernel boot parameter systemd.volatile=overlay. https://github.com/rhee876527/UKIfy-Xubuntu

Well, open source AI is mostly coming from China. Title should have been China must win.

This decision tree doesn't make much sense to me. Why you someone forego performance today in favor of adding a completely unnecessary network layer to every DB query in order to "…

> Vladimir Fedorov is GitHub's Chief Technology Officer .... He currently serves on the board of Codepath.org, an organization dedicated to reprogramming higher education to create…

What makes you think simply throwing random crap on a home VPN network is secure? Tailscale/Wireguard is overkill because it is not needed where access controls work fine which is …

Tailscale is an overkill solution. Opening ports 80 and 443 for a reverse proxy is enough security provided your apps don't have broken authentication. I've been doing this for yea…

Double checking Github actions does not mitigate threats from supply chain vulnerabilities. Forking an action moves the trust from a random developer to yourself. You still have to…

Pinning github actions by commit SHA does not solve the supply chain problem if the pinned action itself is pulling in other dependencies which themselves could be compromised. An …