miduil

Bento is perfect reasonable name for an all in one solution - no?

https://en.wikipedia.org/wiki/Bento

Not to confuse with the really long running IT-Security conference DeepSec :)

https://deepsec.net/

Not "yet" with "virtio-balloon", so basically where firecracker was for quite some time. With that you can only grow, but not shrink memory if I understand correctly. So useful for "I'll run and terminate" but not for "I'll run next to others with varying runtime and memory usage".

Will be interesting to see how https://github.com/rust-vmm/rust-vmm is going to develop, sounds like something like that could have a lot of use-cases for privilege separation but also embedded testing frameworks.

Kinda wild that in primary/early middle school basically Knoppix and Wienux live distributions set me up for what has later become a career working with Linux/DevOps/SRE. Can't thank everyone who made Linux so accessible to people at a young age enough.

same just cancelled it and left Elon Musk as a reason

I was just looking into the topic recently, there is a decent graphic explaining how fiber is already used for submarine communication for quite some time.

Page 13 shows the diagram of an undersea fiber network separating into durable heavy and lightweight wires.

    Sea surface
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        |
        | near-surface armored cable
        |
     [Depressor]
          \
           \  fiber cable
            \  0.010 inch diameter
             \ up to 40 km long
              \
            [Float pack]
                 \
                  \ 50 m secondary cable
                   \
                 [Vehicle]

You can skip inotify tools altogether and do use systemd like this to trigger `rm -rf`:

    `~/.config/systemd/user/remove-thunderbird-dir.path`

   [Unit]
   Description=Watch for unwanted ~/thunderbird directory
   

   [Path]
   PathExists=%h/thunderbird
   Unit=remove-thunderbird-dir.service
   
   [Install]
   WantedBy=default.target

It's poisoning the filesystem cache, if you don't have a setuid binary handy you just poison anything else that gets executed by the host.

Yes, it demonstrates that it's possible to harden well - at least for some cases. It appears depending on the environment hardened kernel / runtime environments are pretty much possible to have safeguards working today already.

This again does not work under Android, at least in termux compiled with clang/gcc.

I wonder if this is the reason for Google not majorly renewing their Pixel line since Pixel 9 till 11.

New MRI only use 7 Liters (25 Cups) instead of ~1500L (~330Gallons) of liquid Helium due to better sealed magnets.

https://mriquestions.com/uploads/3/4/5/7/34572113/philips_bl...

But lossy-codecs job is to utilize psychovisual tricks to discard as much high-frequency information as possible, whilst remaining similar visual effects. If you increase the brightness in RAW and then re-encode the JPEG - more noise is being pulled up in the visual spectrum, therefor less of that information (filesize) is discarded.

For example, if you render Gaussian noise in photopea and export as JPEG 100% quality, it has 9.2MB. If you reduce the exposure by -2 it goes down to 7.8MB. That's partially because more parts of the noise are effectively black pixels, but also I believe because of the earlier mentioned effect.

Good for them, I cancelled my subscription simply because Linux support is so awful. It's impossible to watch in 4k, and even with 1080p you frequently get automatically downgraded to lower res bitrate whenever the window isn't focused. Absolutely daunting.

[...] due to some dipshit blonde not paying attention [...]

Wow, instantly stopped reading after this. I can't comprehend how someone would even remotely have the courage writing such in a public posting.

Wow, that's wonderful. There is a store that sells original Woodblock prints in Vienna, close to the Opera. Every time I'm passing by I take a few moments to look and reflect on those prints, it's great recognizing some on this website now.

Arguments against proactive MRI scanning always seem to have a whiff of status quo bias to them

More and more European countries are currently adopting Lung Cancer screening programs. It's usually limited to people with a certain amount of cigarette-pack-years, but still gives the opportunity for driving more of the innovation you're talking about. I think the main challenge at the moment is that nothing in healthcare is prepared of looking at those scans effectively, a radiologist has full medical education + additional specialization - without effective procedures you'll never be able to provide full-body scans with any meaningful impact.

Hehe, I'm eagerly waiting for this one as well as I'd be extremely happy to replace some hack to run docker images with `systemd-nspawn` served from the nix store.

What a story. Be friendly to your neighbors, otherwise they might turn off your TV!

When I was living in Berlin, the entire apartment complex had a WhatsApp group and people would (of course it's Berlin) party a lot. People would ask each other to turn down the volume, which worked for the most part - at least for severe partying. Best messages were like "you've been partying all night, it's 2pm, I need some silence to have a meeting.

Back then I was dreaming of some shared application, people could put on their phone or laptop and then the collective could decide or at least hint through that software that the volume was up too high.

Platform was dying for years before it was finally financially interoperable, before that they've lost over a year worth of contents due to some corrupted hardware. I can't exactly remember for sure that this happened during a migration, but the corruption of the main database was the main cause to lose that data.

In the end, there was just not enough money to justify keeping it alive.

Yeah because soup.io (Blogspam Link today) simply lost its data because they didn't migrate and the hard drive crashed.

Checkout the Settings panel, in the GitHub screencast this feature is shown in the there.

Wow, Noctalia looks amazing! I'm especially excited about the automatic theme by background image, that means my live updating wallpaper also tweaks the theme :) super fun.

Push notifications can be used to read messages.

Are you trying to imply that WhatsApp is bypassing e2e messaging through Push notifications?

Unless something has changed, this table highlights that both Signal and WhatsApp are using a "Push-to-Sync" technique to notify about new messages.

https://crysp.petsymposium.org/popets/2024/popets-2024-0151....

Oh cool to hear! I didn't knew people were trying to build this - I think that's pretty fascinating, although also a difficult to pull off as a community - how do you manage malicious actors both on the ingress but also at the service layer if there is no commercial "contract". Currently those questions are even hard to address on a single-IP vHost level, so I'd be curious to hear what your thoughts are on that topic.

With the non-profit doesn't mean non-commercial, so what is your idea in that regard?

Do you mean something like gVisor?

Did you give https://gitlab.com/RadianDevCore/tools/gcil a try yet? The developer has been a pretty long record of maintaining the project and it allows you to get some level of debugging locally before pushing.

yes, and as long people don't start exploiting that.

Same experience, GitLabs CI/CD language is to me so much better - it has really strong abstractions and you can model a lot of developer experience into it. Especially when it comes to security practices of GitLab CI, but also custom runners, web terminals, ... there is just so much that is shining much more than any other Git forge with built-in CI/CD.

Yeah, I mean thinking about it - you could also just use HN to host that image. I believe gdrive et al would just do the job.