fak3r

I've been running GrapheneOS for over a year and have had zero issues with 3 different banks, and all credit cards. I'm sure there are issues with some banks, but I've never seen them. I don't use Google Wallet, and never wanted to so if that's a consideration...

Interesting post, but all I hear is the classic Slashdot troll; "I don't mean to start a flamewar, but... BSD is dying!"

I agree, it's like robots.txt, you don't have a link to it from the webpage, but it's always (well it's supposed to be...) there. However I can see how normal folk wouldn't look for a feed like I would on a site: right click -> view source, control-f `rss` or `feed` to get the RSS url.

+1 on XHTML by hand, I'd always have the XHTML 1.0 badge up to brag about it too: https://en.m.wikipedia.org/wiki/File:Valid_XHTML_1.0.svg

This has been my practice for 20+ years of running SSH, that and using Ansible to keep sshd hardened. https://github.com/dev-sec/ansible-collection-hardening/tree...

Down for me too at the moment:

----------------------- We'll be right back

There's a technical issue with our site right now. If you need help with something urgent, you can contact our support team 24/7 or check out the Help Center.

Thanks for your patience, we'll get you back on your way shortly. -----------------------

Once again, Gov Parsons makes me embarrassed to be a Missouri resident.

For me: rsync > tarsnap

I have a backup rsync script that parses a file I have that lists every path I want backed up. Yes, this considers dotfiles, so the poster's .env file would have been backed up. My script runs locally, backs up to my main (home) server, and then does another rsync to a 'cloud' server. Want to backup a new file or path? Add it to the manifest file. Adding another server or device? Build another manifest script, have rsync write to the same dir on the server, it'll automatically get sync'd to the cloud server too.

My first thought, also always run long running jobs like this in Screen or Tmux! As it is, it's a good learning post that others should be able to build on (and don't hit control-c just bc it's taking too long!)

I've used this project off and on for years, and it's always worked perfectly. I'd have an infosec conference to go to, I'd setup a host with wireguard, give my friends the cert, we'd all tunnel out though that, then tear it down after the con. Total cost a few dollars (most are $5/month)

"get your hands dirty with tlp"

I always go with the defaults, so my hands get dirty by:

`apt-get install tlp tlp-rdw`

That's it - by default it starts, and is enabled to come up on boot. Works for me, and I far prefer Linux, even on my Macbook Air

Like you, I know I'm not the typical Linux user, but I took started out with Linux (Red Hat) in 1996, then got into learning Linux with Slackware. Today I have servers at home and 'in the cloud' all running Linux (mostly Debian), and home systems (old iMac 27", Macbook Air 13") running Linux only (ElementaryOS and Budgie Ubuntu) and couldn't be happier. I use i3 on the desktop and just work so much better/faster than in any other OSs. You get closer to the real power of the hardware too, amazing how much faster everything is w/o the bit OSs of macOS and Windows. At work is a diff story, depending where I am (I'm an IT contractor), but when I have a Windows laptop, I do 95% of my 'real' work on a Linux server I ssh to. I've also gotten into FreeBSD and OpenBSD on servers and they're fantastic there too, but being in a Linux desktop is where I'm happiest.

TL;DR me too ;)

Looks cool, I especially like the proposed Signal support... how can I download the Linux Beta? Not finding a link, and since it's not open source I assume the code isn't on github. Good luck, looks interesting

"Wuba duba lub lub!"

Fact: Slashdot is dying

It is official. Netcraft now confirms: Slashdot is dying

One more crippling bombshell hit the already beleaguered Slashdot community when CmdrTaco confirmed that he is resigning from Slashdot, now that Slashdot market share has dropped yet again, now down to less than a fraction of 1 percent of all geek news outlets. Coming on the heels of a recent Netcraft survey which plainly states that Slashdot has lost more market share, this news serves to reinforce what we've known all along. Slashdot is collapsing in complete disarray, as fittingly exemplified by failing dead last [samag.com] in the recent Sys Admin comprehensive geek news reading test.

You don't need to be the Amazing Kreskin [amazingkreskin.com] to predict Slashdot's future. The hand writing is on the wall: Slashdot faces a bleak future. In fact there won't be any future at all for Slashdot because Slashdot is dying. Things are looking very bad for Slashdot. As many of us are already aware, Slashdot continues to lose market share. Red ink flows like a river of blood.

Slashdot YRO is the most endangered of them all, having lost 93% of its core contributors. The sudden and unpleasant departures of long time Slashdot contributors only serve to underscore the point more clearly. There can no longer be any doubt: Slashdot is dying.

Let's keep to the facts and look at the numbers.

Slashdot leader CmdrTaco states that there are 7000 users of Slashdot. How many users of Ask Slashdot stories are there? Let's see. The number of Ask Slashdot stories versus Slashdot posts is roughly in ratio of 5 to 1. Therefore there are about 7000/5 = 1400 Ask Slashdot stories users. Slashdot book reviews (or, 'Slashvertisements') are about half of the volume of Ask Slashdot stories. Therefore there are about 700 Slashvertisments. A recent article put Slashdot Security posts at about 80 percent of the Slashdot market. Therefore there are (7000+1400+700)*4 = 36400 Slashdot users. This is consistent with the number of Slashdot posts.

Due to the troubles of OSNews, abysmal sales and so on, OSNews went out of business and was taken over by Digg, another troubled geek news site. Now Digg is also dead, its corpse turned over to yet another charnel house.

All major surveys show that Slashdot has steadily declined in market share. Slashdot is very sick and its long term survival prospects are very dim. If Slashdot is to survive at all it will be among geek news dilettante dabblers. Slashdot continues to decay. Nothing short of a miracle could save it at this point in time. For all practical purposes, Slashdot is dead.

Fact: Slashdot is dying

(source from Thursday August 25, 2011 @12:39PM: https://slashdot.org/comments.pl?sid=2397584&cid=37209054 also notice I got a n00b to respond to me... oh, such simpler times ;) )

In case the site is down, here's a mirror http://www.invitinghome.com/Mirrors/img/mirror-1534.jpg

Finally read last week, really enjoyed it, so that was the first thing I thought of when I saw this story. logs into OASIS to search for the egg

Working with Docker at a previous gig, after wrestling with docker-for-mac and boot2docker for months I just stopped witl all the hacky work-arounds and just used Vagrant or Ubuntu AWS nodes for Docker development. Also, I have to say that Docker ONLY got a 'prune' option with 1.13 is amazing - I had aliases to do that years ago and was always a huge pain point! Why wasn't this rolled in last year?

BFA with emphasis on interior design and studio art. I still paint and love it, but been doing Linux/Open Source stuff for over 20 years now. When I got into Linux it reminded me of when I was a kid on the old Apple ][, that's when I knew I was on to something. I don't regret anything, loved college and what I learned, and will paint for the rest of my life. Still joke about going back for a Master's in Art History one day, whenever I retire I want to travel more and see all the great art museums in the world.

Meh, I'll install it later.

Is there a way to hook into keybase? https://keybase.io/ This project looks great, I use Fastmail but would like to have an IMAP web front end I host (I used to host my own stack), so I may give this a go. Thanks for sharing it!

It's pronounced `hax0r`

I was very interested in this back in the day, in fact, I wrote a HOWTO to get the desktop bit run under Ubuntu: https://fak3r.com/2006/01/31/howto-mezzo-desktop-on-ubuntu/

I'm sure that's not going to work anymore, but I got a lot of questions and comments about that post, there was significant interest. Here's hoping a new release comes out in January and people can try it out.

Mine is on my keychain, plus you need my username, password and yubikey to authenticate, so if someone steals my laptop (oh noes!) they still have hurdles to jump.

I want to help raise awareness to show that we stand with people like Jess who are having to deal with this bullshit. Where can we order the t-shirts? We must make it clear that this kind of bs will be met with fierce resistance from now on.

"How do you stay motivated to work on side projects?" By going to work everyday.

Yes, yes, 100 times yes. I'm so sick of the shallow, mindless BS these sites repost constantly. Great post, great details and investigation. Thanks

for nginx look at Limit Requests http://wiki.nginx.org/HttpLimitReqModule - or if not running 0.7.20 or newer, try Limit Zone. This is the best if you're just looking to control things with nginx, but I would also recommend putting HAproxy in front of it and have it handle the connections limit, a much richer feature set to handle such things. It handles slow DDos attacks like Slowaris automatically http://www.snapt-ui.com/haproxy/defend-against-slowloris-wit... - and is able to do tons more. Here Willy (HAproxy developer) talks about other things he's done with it http://www.mail-archive.com/haproxy@formilux.org/msg00291.ht...

The problem is most of the people that filter through the resumes are HR folks, in one case I heard of one dropping a resume because the IT candidate didnt' have "TCP/IP experience" on their resume, so the format matters less than the content in this case. Still, .doc is the standard, I write mine in Open Office, but test it in MS Office since that's what they'll open it with. I always have a PDF on hand as well, but when you're searching for a job you don't want to be the one sub'ing a resume in a format they're not expecting.

Of course when I review resumes I prefer text, with extra credit if it was written with vi!

It's a great question, with all the data that people willingly share online now, there's little thought to what happens to it if it's not cared for/looked after. What is the companies legal obligation once they no longer have a need for the data? Do they destroy it? Who checks on this? Or do they simply drop it into an xls spreadsheet and auction it off to a spam house...