Bnshsysjab

VPN\seedbox providers probably don’t make the wisest business choices. They may not care bout the longevity of their business even if they do.

Hosting providers that sell bandwidth to VPN services could easily log traffic.

There have been numerous cases where ‘No logs’ VPN providers have been caught logging details. See the recently exposed logstash breach.

I don’t smoke or live in a country where it’s legal. Can you literally go in and knowingly buy strains tested to be low and high ratio? Is it listed in the product description?

That’s an extremely definitive point of view. What if the lawyers agree to give the VPN provider 10% of the proceeds?

Technically they could be equally as secure if the port knocking converts knocked ports into a signature based authentication mechanism ;)

But at that point, you’ve potentially introduced exploitable bugs in the network stack.

You don’t think providers would be willing to sell that information for cheap? They’d just saw off country sized chunks and sell bit by bit

I was a bit young at the time but isn’t this what AOL tried to achieve?

Sure, but I’m sure they leverage portage due to its sheer power and additional scrutiny over any ebuilds they source from upstream. Which, to be clear, the threat model assessed internally is intentionally malicious packages which are unintentionally merged into the portage tree by legitimate and well meaning developers. There’s no immediate issue with the portage or gentoo developers and package maintainers themselves.

If I get breached as a result of using gentoo, it looks bad. If I get breached using Ubuntu it’s at least along the lines of ‘well everyone else is using it anyway’. Semi safety in numbers, semi ‘nobody got fired for buying an IBM’.

It wasn’t my call, and it’s a defense move rather than an opinion on the state of Gentoos security. I know they take things very seriously, but my assertions aren’t enough to make my employer feel comfortable.

I moved to Ubuntu for political reasons outside the fault of gentoo. I really miss the ability to easily patch core libs with custom patches, and portage (when it worked) was a lot easier to deal with than apt.

If you’re developing browsers which deal with modern standards you’re absolutely at the core of the web. Far more so than a typical web dev job.

But it seems that you just wanna piss on Firefox for market share reasons.

Remember that time you were looking for an answer to some obscure question, you find the perfect google result - description, page title and URL all indicate it’s going to answer your question so you click it, and... nothing.. the page cannot be found.

You now have that, with docker.

That may well be true, but now I have to pull images every 6 months, some I very much doubt I’ll ever upgrade but will pull anytime I format the relevant host.

It sucks that this isn’t for new images only. Now I have to go and retrospectively move my old images to a self hosted registry, update all my absolve scripts to the new uris, debug any changes, etc.

If I were to work there it wouldn’t be so much to be an open source contributor but to be at the core of modern web.

I don’t have kids so I don’t know what that part is like, though.

OJ I’m not surprised about at all but milk is way worse than what I thought it’d be!

FWIW, people who cut out alcohol for muscle building reasons (As opposed to direct weight loss/diet reasons) are well aware that the effects of oestrogen release lasts for weeks, up to 6, iirc. It’s a pretty good reason to not drink. For general weight loss, I’m unsure if the alcohol effects anything on a chemical level, but alcoholic drinks are calorie dense as hell.

Interesting. I imagine it may be ips sitting in a pool which are known bad in your case, and in mine known good slightly tipping the black box scales.

I just wish gmail had tech support so I could resolve this directly instead of flailing about trying random obscure solutions.

I have a DigitalOcean mailserver that isn’t blocked by google, or o365 ;)

AWS allows you to switch mail servers to a specific address range which, as far as I know, are treated nicer than the regular address space.

Please provide citations if you’re going to speak so factually.

In the 90’a wifi was even more of a trash fire than it is today.

Gmail blocks my mailserver, I recently discovered it’s the lack of ipv6 that causes it.

Can someone let AWS know? I was annoyed to find out that lightsail does not support IPv6, in 2020...

Is putting all assets into a single png/svg to reduce total requests a dead practice now?

I tried to install qt the other day on Ubuntu, I couldn’t find the free version. I gave up and moved on to an alternative.

Why are they shooting themselves in the foot there?

Sure, I understands your point. My fear is untrusted code executing on my machine. It wasn’t till I ran a tcp dump that I realised my terminal (KiTTY) decided to ‘phone home’ to ‘check for updates’ - I manage everything through apt, and a terminal by nature executes code so I view it as high risk and don’t really like this behaviour.

I would love to see public code reviews of open source projects to highlight this kind of stuff but actually having a community driven effort requires a central vendor to support it cleanly. GitHub/gitlab: I’m looking at you.

11. Do you audit third party libraries for security, malicious intent, and longevity?

I use a RPi to control smart home components including wifi controlled smart plugs. You could use one as a hard power off, and WoL as a soft power on.

Cool, I assume with enough willpower those first two could be solved with a pi too ;)

Out of curiosity do they bring any functionality that this device does not?

> like the performance-hostile calling convention, are harder to fix.

Can you elaborate on what you mean by this? I’m new to go and want to understand the performance implications.