khaki54

Yep use syslog server or similar in conjuction with this, which basically gives you something like immutability since the data is on a remote server with hopefully different security controls. You really don't want to be trying to sort an attack out after the fact on attacker-controlled machine. They could of course turn off network links or syslog eventually, but you'd at least have the early stages of the attack and or perhaps be able to detect it before they actually get full access.

Simply Piano and Yousician are pretty close to Rocksmith. A little more focused on teaching though. You can plug in midi or USB to your keyboard or it can use a mic to do note tracking

Hmmm this reads like the author neither understands Docker or Linux, many of the issues they seem to have is just stuff they don't know the right approach to tackling.

Imagine pairing with a mid/Sr and watching them scroll up 40 commands in the terminal and they are complaining that bash won't let them up-arrow 10 lines at a time. In this case, someone writes 5000 words about how they can't get certbot working with their docker setup. They would benefit a lot from working with someone who knows what they are doing.

Yep the best example. Especially if the result is not immediately obvious. Am I commanding "system on" or are you telling me "system on"

Works great in edge on mac

Yeah I had a touch typing class for a quarter in 8th grade. I repeatedly cheated by lifting the paper obscuring my hands and never learned how to type. It's a notable lifetime regret!

seems pretty much perfect including obsidian clipper. Thanks!

A lot of words to bury this being the result of "the state’s botched experiment with drug decriminalization"

You actually don't need to store the pages themsleves, just the indexes. This is a fairly common use case with Marklogic so I'm sure it can be done with other databases.

Netvibes if you set it up that way. I use it for RSS feeds by Federal Agency, filtered by some concepts and keywords.

https://imgur.com/a/TtruELg

Reading through the guide, organizations have to compile their own apk/ipa and deploy via MDM. I'd suspect that "archive server" variable is set at build time. Maybe not and dozens of agencies ATO'd a setup where the data was running in the clear to a vendor, and to a low security cloud environment. I just don't see that happening at the DoD level.

You DO realize that TeleMessage was put in place and procured before Trump took office right?

This may be a factual but not truthful article. This was initially framed to appear like the Trump Administration was doing something out of the ordinary by using Signal. There were also accusations that they were using Signal's disappearing message feature to conceal their activities from the authorities, and that they were breaking the Presidential Records Act, etc. Now it's revealed that they are using a version that actually archives all the messages to be compliant with the law and individual Agency policies. The new theory is that the Trump Administration is doing something especially nefarious by archiving the messages and/or they are doing it insecurely and they are controlled by Israel.

First and foremost, the Signal infrastructure was setup in most cases by the previous administration! Even a cursory search of USA Spending reveals millions were spent on telemessage before Trump was elected. https://www.usaspending.gov/search?hash=d900bda0a5eccae47ba7... I'm not a journalist, but look for yourself.

As for accusations that what the Biden Administration procured and configured is insecure: it's not. TeleMessage has a configuration approved for CUI that integrates with GCC-high (IL4) and O365 DoD (IL5). Thus they are fine to collect and archive unclassified CUI, ITAR, NSS data, command and control/ISR, tactical data, etc.

"TeleMessage can go a long way in enabling regulatory compliance by working with Microsoft to capture, archive, and maintain text messages, voice calls, and other files, leading to stress-free adherence to all the security controls required as per FedRAMP. Crucially, the mobile archiver supports Microsoft 365 Government Community Cloud, Government Community Cloud High, and Department of Defense solutions across all devices, carriers, and instant messengers.

Federal agencies and contractors can issue their own phones to personnel or have their employees use their own BYOD devices because TeleMessage can still securely retain all the communication within its servers or have it forwarded to a data storage vendor of choice. There is also the option of cross-carrier and international mobile text and calls archiving." -- https://web.archive.org/web/20250502041804/https://www.telem...

So far they're good in theory. They decrypted messages are transmitted in at least 1 encrypted wrapper (TLS) to mobile archiver, then ultimately landing in the DoD Azure cloud environment. The question is whether the whole chain after the phone is in the DoD environment, or if it routes through Telemessage's systems.

If you look at the hack (https://archive.ph/yyyLg), initially it leads you to believe that the message archiver doesn't live in the DoD environment and instead lives in AWS commercial or some lesser rated cloud. I think this is only true some of the time. Note in the hack, they only have messages from CPB. They don't appear to have any .mil, cia.gov, eop.gov, etc. CBP doesn't have access to the IL5 DoD Tenant in the first place and their archiver is likely hosted in AWS Commercial or AWS East/West (IL2).

Frankly, I don't think that any of the higher sensitivity organizations will be routing through a TeleMessage controlled server, or any server lower than IL4. They host that piece on their own infrastructure.

Do you think they are using the message archiving version so that they can meet organizational message retention requirements? Maybe they are using signal to ensure they have e2e encrypted messaging on their devices?

Exactly. Signal and Wickr are widely used, and default installed in some orgs.

They use special secure KVM from the major vendors and they are tempest resistant meaning they are shielded from bleeding signals between devices. They also have devices that can use multiple levels on the same screen and keyboard! See Everfox TTC

I personally am drawn to the trades, but something like building high quality furniture in a small shop has a huge appeal.

There is a step up from diodes called [inspecting] data guards and an adjacent technology called content disarm and reconstruct (CDR) that doesn't rely on signatures or heuristics - it just assumes every document is malicious.

Combining these 3 technologies with certain policies, e.g. 2 man rule, the hw/sw itself developed on airgap you can make it practically impossible to attack, even for nation state adversaries.

Edit to point out that these all work in 2-way configurations as well.

Yes, they already have this type of point system in VA. What is the point of allowing this device when they will suspend or revoke your license after a few infractions. Additionally, you'd need to have generational wealth to afford the insurance at that point. On top of that, they have an extensive bus system in the northern VA area and biking routes so it would be pretty hard for someone to say they have some hardhip where you need to keep driving.

I think this will just be another thing leading us to full surveillance state.

It's not like he called Comcast and had them run a line on the weekend and they snuck it in there with no one noticing. He told Comms what he needed and they gave security a business justification to set it up in a way that had an acceptable amount of risk. It's all documented and approved.

And no we don't call these a "dirty" line that's something someone made up for the purposes of the article. We call it "unattrib" and it's quite common, serving many useful legitimate purposes.

One thing that I find surprising about the Hegseth case is that most SecDef do not use the computer in their office it all. A couple recent ones still don't even have a computer in there. Normally staff handle 100% of communication and briefing outside of phone calls and video calls. He's clearly still adjusting to the reality of operating within the _confines_ of DoD headquarters.

Also the article's mention of using Wi-fi in the back of his office doesn't make sense to me, there isn't any Wi-fi available in the suite or anywhere nearby.

Imagine getting smoked by that thing! Pure class -- many worse ways to die.

Personally I think Congress should be obligated to invest in US small cap funds only. Perhaps they could also design state versions and you can invest in some mix between US small cap and state based funds.

Did you consider using lottie and its interactivity? What were the tradeoffs?

There is someone out there who doesn't let LLM touch his code but uses it solely for commit messages.

Imagine being proud of yourself for 25 years, displaying "implemented innovative orbital positioning methodology for Shenmue" on your resume. It was even your promotion case for staff engineer since you did it yourself, and some guy comes by more than 2 decades later and points out that you actually did it wrong

I was reading an article last week where the author did a bunch of testing and found Redis is only 3-5x faster than just using a multi model NoSQL. Basically it rarely makes sense to use Redis. https://adamfowler.org/2015/09/07/hybrid-nosql-marklogic-as-...

Come on friend. I'll rephrase it slightly. All that money would only fund the US gov 6 months. The reality though it that it would destroy the country at a minimum.

What I will say is that during covid billionaires expanded greatly. So, the $6.1T that billionaires are worth, would fund 11 months of US spending ($6.9T)

If you seized the entirety of assets of US billionaires, you could only run the country for 6 months max. So it proves immediately that simply taxing them more isn't the correct answer and won't have any meaningful effect whatsoever.

Anyway, Federal taxes are income based at this time and most billionaires do not have income except when they sell an asset for a profit. Billionaires do tend to pay huge amounts in state and local taxes which are used more efficiently anyway. One billionaire leaving a town during covid due to increased tax burden and SALT exemption reduction effectively bankrupted them and the school district.

A baby born 5 seconds ago already inherits 100k in debt which is nothing other than a delayed exponential tax on top of all the other ones he or she will pay in their life. We have to reduce spending by a massive amount to get to fiscal sustainability.

There's a variation of this http://reallybadchess.com/ -- I kind of like it because I don't remember all the classic strategies... many of these just need to be memorized.

See this is the groundbreaking research NIH should be funding with taxpayer dollars instead of gain of function research in Wuhan.