towerful

joined 2 years ago
[–] towerful@programming.dev 1 points 3 months ago (1 children)

A founding member of NATO...

[–] towerful@programming.dev 8 points 3 months ago (13 children)

Who is externally reaching these servers?
Joe public? Or just you and people you trust?

If it's Joe public, I wouldn't have the entry point on my home network (I might VPS tunnel, or just VPS host it).

If it's just me and people I trust, I would use VPN for access, as opposed to exposing all these services publicly

[–] towerful@programming.dev 4 points 3 months ago* (last edited 3 months ago) (1 children)

That's just people not used to dedicated cycle paths.
You would likely have as many issues of a pedestrian trying to cross a road and not seeing a cyclist, as you would travelling on a dedicated cycle path with an ignorant pedestrian.

It just needs everyone calling out people on cycle paths. They likely aren't even aware they are on it.

But that's a lot to read into a single picture. Maybe they have checked both ways, and know nobody is coming (like they would with cars on a road)

Edit:
The 2 people further down don't look like they are crossing!

[–] towerful@programming.dev 12 points 3 months ago (1 children)

I can understand.
We have some new dedicated cycle lanes in our city (I mean, they are a few years old now. But fairly unique in our country).
I feel bad for the cyclists. They have a dedicated path, which pedestrians are super ignorant of (they are better marked than this picture).
My parents think they are a menace when they visit, because they are unaware of them and get menaced by cyclists.
Except, that's literally what roads are. They just grew up with roads and (even faster) cars.

So, I am understanding of the transition.
And everyone needs to call everyone out over it. It will make everyone safer

[–] towerful@programming.dev 10 points 3 months ago

WRT macros & VBA conversion:

with AI to save time and avoid errors

Maybe it saves time, but I doubt it avoids errors.
I would rather the time spent to develop this was spent on improving the plugin/extension/macro development ecosystem.
I know they have an SDK, and I'm sure it's great.

But with MS Office, I can install Visual Studio, create a new VSTO plugin for what I'm targeting (excel, word, powerpoint, outlook etc), and get into coding. When I hit Play (as in run with debugger) it will launch the targeted application and build/hook in my plugin.
It's literally idiot proof, until it gets to writing code (then it's c#).
And Visual Studio is a decent IDE.
The only thing really holding it back is the terrible documentation from Microsoft regarding the VSTO or Com Interop or whatever it's called. It's truely terrible, trying to figure out how to implement your idea.

Make Codium systems similar to Platform.io (which is for Arduino, ESP32 etc), except for your given office suite.
Make it better than the Visual Studio VSTO experience.

That's what I really want.
And more people to use it, of course. I'm so fed up of Microsoft crap

[–] towerful@programming.dev 3 points 3 months ago

Reason number 75 people should always be well clear of these test.

Yup, except for the really important guage that is installed on the pad, that only Elon musk is smart enough to be able to understand.
He absolutely has to monitor that guage in realtime.

[–] towerful@programming.dev 4 points 3 months ago (1 children)

I guess if the rocket hadn't disassembled itself, then it could be used again.
I think static fire is part of the testing to proceed to a launch? So, now they have to build another and static fire that as well in order to get back to where they should be.

[–] towerful@programming.dev 9 points 3 months ago (2 children)

I remember when the first looks at (or poster of) the sonic movie came out, and it was ripped to shreds.
A prominent visual redesign of sonic went viral, and - credit where credits due - the studio reworked the movie to adopt the changes.
https://www.radiotimes.com/movies/sonic-the-hedgehog-design-changed/

Human teeth? I mean, really?

[–] towerful@programming.dev 5 points 3 months ago

I had an offline windows account on my laptop.
I was freelancing for a company that gave me a Microsoft account.
I logged into teams, but was very careful not to assign my laptop to that account. I had to use teams, but I didn't want my client to manage my device.

Shortly after I installed Linux, which broke windows bitlocker, and I had to get my bitlocker key.
I hadn't set up bitlocker, I wasn't expecting it. As far as I was concerned, I had bricked my device.
On a hunch of "hmm, maybe", I checked my Microsoft account from the client, and it has a bitlocker key which unlocked my windows install.

At which point, I disabled bitlocker and now primary Linux.
But yeh, in my experience bitlocker is transparently applied during windows install and you never know your bitlocker key. If you never log in to a Microsoft account, you will never be able to recover it if you don't save it in advance. And if you don't know its happened, why would you know to save it in advance?!
The fact that I was able to recover my bitlocker key for my offline/local windows account because I had installed & logged-in to teams via a client provided Microsoft account is strange as fuck.

[–] towerful@programming.dev 7 points 3 months ago

Nothing better than a properly formatted data file.
Self hosting teaches you this

[–] towerful@programming.dev 5 points 3 months ago

The issue is big companies.
Google/Amazon/Microsoft can now fork sudo-rs and not have to upstream their changes.
So then Google fixes an exploit for their sudo-rs implementation (or whatever software) and patch it under a different licence. Now the upstream, Amazon and Microsoft forks don't know if that exploit is also in their implementation, is related to their implementation, or how to potentially fix it.

The only way it works is if sudo-rs is implementing new features in a way that it benefits Google/Amazon/Microsoft to contribute back to upstream so they don't have to keep merging/fixing their exploit code.

For something as stable as sudo, it actually benefits Google/Microsoft/Amazon NOT to share their changes.
If they are rolling and recommending their own distros (which I'm sure they already are) that include their forked changes, then they can say that their software is more secure than other brands. It benefits them for their competition to suffer security breaches, especially if they trace back to these kinda changes.

Which makes everything worse for everyone.

[–] towerful@programming.dev 31 points 3 months ago

Your threat assessment is way off.
So, you import a phone. What sim do you use? Where do you use it? When do you use it? Who do you contact with it?
All of that is more valuable and easier to get for the police than some sort of modification of firmware or platform as it passes through customs.
If in doubt, flash your own firmware.

If this is actually a threat assessment to you, asking on Lemmy is the wrong place. You need people with the same experience that an entire country has at their disposal.

If it's a concern as opposed to an actual threat, buy some 2nd hand phones from random places and buy some prepaid sims (ideally via smurfs or black market means). And be aware of how you use them

view more: ‹ prev next ›