HN user

nicce

5,473 karma
Posts0
Comments2,686
View on HN
No posts found.

The most time consuming part of recovering from an attack is validating everything. It takes more than a few hours to validate the infra that stays put isn’t compromised, the IaC code itself isn’t compromised, deploy the infra, bring a copy of the offline backup of your data (your IaC can’t drive to another site and bring the backups, then make a copy, unless tou are really sure you removed any trace of compromise), validate that the backup is sound, then restore it.

In some cases the infrastructure part is the least time consuming. Some platforms are straight forward enough that even manual deployment is fast. But after a hack you can’t trust anything so you need to do the slow validation that takes longer than your projected “hours”.

Your IaC is supposed to be on those offline backups too, and should be able to do everything from clean hardware.

The most time consuming part is to identify what caused the compromise. After that, you can put everything back online and then at the same time start to analyse who did it/what they did and so on. If the root cause for the breach is identified, you also know the time most likely and can trust the offline IaC backup.

Valve has truly headless runner (gamescope) for Linux, e.g. you can start it manually from command-line over ssh

  gamescope \
    --backend headless \
    -W 1920 -H 1080 \
    -w 3840 -h 2160 \
    -r 60 \
    --cursor-scale-height 1080 \
    --force-grab-cursor \
    -- steam -gamepadui -pipewire-dmabuf

You still need the initial setup for pairing.

But it has many issues compared to Games on Whales, for example, which is much more efficient and scales cursor better.

https://github.com/ValveSoftware/gamescope

While the hardware is no longer being sold the software sort of lives on. In an android app among other things.

It is built-in on every Steam. You can basically press two buttons and stream from your desktop to laptop if both have Steam with same accounts logged in.

Tangentially it almost feels like steam could make a stadia like thing work. They have most of the moving parts including crucially, the bit google didn't, an established base of customers. Tomorrow steam could introduce a "play your games anywhere on any hardware" feature and no one would be surprised.

Already possible. While not so optimized as Games-on-whales.

but in terms of stability it's terrible and segfaults 20x as much as node (I base that number on newrelic telemetry)

In Chrome or Firefox, a segfault is usually automatic CVE and in most cases a bounty of thousands of dollars…

TS7 is going to cause problems for downstream users because Go is the wrong language to use for something that has to run in WASM.

Is there a huge need to run that typechecking on browsers?

Codex Resets 4 days ago

OpenAI obviously is doing it to gain mindshare but they're burning money before their IPO and can't sustain these resets.

We don’t know that. If they have already paid for the hardware and it is not running 100%, and customers would not pay to get reset, they don’t really lose money.

Is there some public research that how often, for example, people download malware that allows this?

You can limit it a lot to minimize the abuse. In free entrypoint, set token and context limits to be very small. Limit to 2 prompts per IP or something every X hour. That is already a substantial limit where bypassing might not provide much benefits.

Now you can survive by working as a clerk in McDs, but in the stone age you needed to be on your toes and smart af.

In stone age, you had to focus on other things than thinking to have enough food for the next day. And to survive otherwise.