0xC0ncord

I received an email this morning where someone created an issue in a public repo with a title containing a racial slur and mentioning a bunch of users, including me. This is just one example as far as I know.

Veritasium has a great video[1] on NIST's Standard Reference Materials including their peanut butter. It talks about some of the other aspects of NIST's business in selling these items, their history, why they exist, and some of the other interesting ones like their standard reference cigarettes.

[1] https://www.youtube.com/watch?v=esQyYGezS7c

This video[1] on reverse-engineering parts of Guitar Hero 3 covers a few similar techniques that were used to heavily obfuscate the game code that you might find interesting.

[1] https://www.youtube.com/watch?v=A9U5wK_boYM

Thanks Matthew for reassuring that FOSS Synapse isn't getting left behind. I really do want Matrix to succeed and get the funding it really needs. I'm aware it's been a long-standing issue.

My voice is mostly coming from the perspective of someone who has tried repeatedly to bring friends and family to Matrix but every time the experience is subpar. It's frustrating because most of the problems they experienced (including performance) have been known about and complained about for a long time.

Maybe the messaging in the article was a little off. The "attack" it makes on FOSS Synapse reads to me like it will never get the fixes it needs to make using Matrix more approachable to new users.

Dendrite was officially cancelled late last year. The repo was archived.

https://github.com/matrix-org/dendrite

This is incredibly disappointing to me.

Performance has always been one of the most glaring issues with using Matrix. The article seems to be intentionally obfuscating the fact that performance and scalability issues stem from the activity a server participates in rather than just the number of users it has. If you're in a rather large room with hundreds of members and it's constantly active, you'll quickly notice your server struggling to keep up.

As a Matrix user, I feel like I'm being rug-pulled because Element HQ decided to gatekeep their solution to this problem that has plagued the community for more than half a decade.

While I never personally had an interest in these kinds of games, this is quite unfortunate. For a long time, a major selling point of being an Apex Legends player was that it was officially supported on the Steam Deck since its launch, while Epic Games vehemently opposed bringing Fortnite to the platform. This is pretty sad news to anyone who fell into the former category.

pam_namespace normally isolates /tmp by user or SELinux context, so your example might require a couple tweaks. I haven't tried any of these but I'm thinking any of:

1) You could modify the namespace init script used by pam_namespace to also mount a shared directory under each user's /tmp, and do this only for the users who need it.

2) Rely on a different shared directory for the users who need it.

3) Configure namespace.conf to isolate by SELinux context and put each user who needs a shared /tmp into the same SELinux role.

I'm amazed that polyinstantiation of directories via pam_namespace.so[1] is so unheard of. Setting this up fixes almost all of the qualms mentioned in the article by giving each user their own mount namespace with an isolated /tmp directory (and others if configured). Still though, this wouldn't prevent poorly written applications using /tmp from clashing with others that are running under the same user.

It's relatively easy to set up[2] and provides a pretty huge defense mitigation against abusing /tmp.

[1] https://www.man7.org/linux/man-pages/man8/pam_namespace.8.ht...

[2] https://docs.redhat.com/en/documentation/red_hat_enterprise_...

This exact thing is possible with pam_namespace.so!

I too have been having AMD GPU video artifacting lately, but so far that is the only regression I've noticed in 6.10.x. I am still on 6.10.8 so I'm not sure if 6.10.10 will contain a fix for me just yet.

I think a reasonable counterargument to this is a theoretical internal outage at iCloud and one or more machines storing data needed to be restored from backups. The backups contained "deleted" photos from before users deleted them.

I wonder if Discord may end up using this in some capacity to determine whether someone may be under the age of 13, which is the minimum age you need to be in order to have an account according to their terms of service.

Is there a reason why you can't just tip your driver in cash?

Subject: Woof! Body: I SEE SOMETHING!

I love it.

The administration needs to put an end entities giving out these insane loans that no one is realistically able to pay off in a reasonable amount of time IN ADDITION to paying them. I share your sentiment but the more the government keeps "forgiving" student debt the more these types of loans will continue to exist.

I was thinking the same thing! I don't get spam calls often but when I do I really want to punish them for wasting my time.

The author's previous video[1] explains the technical details regarding this behavior.

Basically the way GBA sound works is there is a buffer in RAM that the audio is streamed from, and an interrupt is supposed to signal the hardware to begin reading data from the beginning of the buffer again. However, if the interrupt is never fired (such as when the game crashes), the audio stream will go beyond the buffer and read other parts of memory.

[1] https://www.youtube.com/watch?v=wSWNkpqjtQY&t=361s

I wrote a Prometheus exporter for metrics gathered from the air conditioning unit in my home lab. The A/C unit has a slot for a network management card (NMC) which is a tiny Linux machine that exposes a web interface and SNMP while communicating with the A/C. I wanted to just use SNMP for this but for some reason there isn't any useful data specific to the A/C being exported, only typical Linux machine data. I did some additional searching and found that there was an API available on the web interface and sought to just scrape that instead.

Normally I would have written this kind of thing in Python since I'm more familiar with the language, but I wanted to take the plunge into Rust and this is the first project I created using it. There's still a couple bugs that I haven't gotten around to fixing like finding out why the Prometheus metrics descriptions don't get displayed in Grafana or finding out why the NMC itself just seems to need to be manually rebooted every few weeks. Other than that it's been working great.

https://github.com/0xC0ncord/padm_exporter

Quadlet is specific to systemd. It's actually just a systemd generator that looks for related files in /etc/containers/systemd or the user's ~/.config/containers/systemd to generate units from that can then be started as services. When you create or edit a file here, you then do 'systemctl daemon-reload' which re-invokes all systemd generators, quadlet included.

A "demake" is just a spin on "remake". Instead of remaking a game to be newer and "better", you remake it to be "older".

Edit: adding that most demakes specifically involve remaking a game on much older hardware.

A lot of times a demake is a challenge. Video game technology has evolved significantly, and being able to take a (relatively) modern video game and remake it on much older hardware while still having most of the game's original features is an impressive feat.

It's worth mentioning that the author has a YouTube channel[1] where he periodically posts videos showcasing updates he's made to the game over time. I'm surprised there isn't a link or even any kind of screenshots of the game on the Github repo, even if it is still very early in development.

[1] https://www.youtube.com/@happycoder1989/videos

The threat vector mitigated by Clevis[1] is someone with physical access (e.g. an insider) removing the server from the data center and being able to access its data.

[1] https://github.com/latchset/clevis

A hardware security module (HSM) is a physical computing device that safeguards and manages secrets (most importantly digital keys), performs encryption and decryption functions for digital signatures, strong authentication and other cryptographic functions. These modules traditionally come in the form of a plug-in card or an external device that attaches directly to a computer or network server. A hardware security module contains one or more secure cryptoprocessor chips.

https://en.wikipedia.org/wiki/Hardware_security_module

The 4-digit number after your username is randomly assigned after you create an account or change your username. You can manually change this number to a custom one (if it's not already taken) if you pay for Discord Nitro.

It seemed to me that the original target audience for this is users already familiar with systemd's unit syntax, so making these "unit files" use it as well was a sensible choice.

Worse, the DNT header is often used as just another metric to fingerprint users.