rysiek ✅ @rysiek@mastodon.social

SMH

#MastoAdmins

Please set a password for Redis on your instance:

Add REDIS_PASSWORD to your .env.production config and use the same password in your redis configuration, with the requirepass configuration directive.

Without a password you are a single server side request forgery vulnerability away from someone gaining shell access to your instance. SSRF vulnerabilities are not that rare that it never happens.

How many of these can be applied to #Brexit? I've noticed 12/14

https://social.coop/media/22xAz_tvs_srD_1cCOo

Still using RSA for OpenSSH authentication?

You should read: https://latacora.singles/2018/08/03/the-default-openssh.html

tl;dr: OpenSSH uses by default the md5 hash of your password to encrypt the id_rsa private key.

Good news, you can fix it by running this command (with -o it uses the improved key-format):
ssh-keygen -o -p -f ~/.ssh/id_rsa

Or even better, generate a new ed25519 key (they use the improved key-format by default):
ssh-keygen -t ed25519

Thanks @amenthes for pointing me to the article!

#openssh #infosec #linux

https://www.youtube.com/watch?v=89ZkydX0FPw

#trans writers, aspiring writers and those with something to say...

Shon Faye has put call out for articles in Broadly from trans people..

Please boost for visibility!

Full text version at the link below:

https://docs.google.com/document/d/1rxq6t28iYPj1tTGqP5T8VyUsZgq8QnKokxO7GFCfDME/edit?usp=sharing

How birdsite feels: I need to be more popular so people will care about me

How the fediverse feels: I want to find new friends and share stuff with them, because everyone already cares

Since moving here, my mental attitude has improved drastically. I no longer feel the need to win some arbitrary popularity contest to feel validated.

Thanks for being here, guys.

RIP my notification tab. 😋

🤔
@futuristbot@twitter.com

#GDPRHallOfShame

also this

At the same conference, I was talking to a woman who was enthusiastically describing her company's tech. I asked, "are you a founder, developer?" She was a founder.

Always assume people are experts, even if they don't "look like" your conception of an expert.

You'll either be right, or if you're wrong, it'll still be a respectful assumption. And it'll probably be a relief to people constantly needing to justify why they belong in a space.

At a conference recently, I went over to a table of guys around a computer.

Asked "Whatcha working on, can I join?"
One of them says "It's very complex stuff," with dismissive body language.
Guy I know says "jay can handle it" and makes room for me to sit down.

Yeah, I facilitated multiple sessions at the conference on this, and just spent weeks implementing a related feature.

One rude person doesn't ruin my day anymore, but this type of thing beats down beginners.

p o s i t i v i t y

i love that a broad coalition of leftists can all get along and shit-toot together in harmony on this website

When emergencies are announced primarily on twizzler, it is potentially dangerous for those of us who don't partake.

@rysiek happy to help. More details on the pref switch if anyone's intended implementation might needs the use of no addons https://blog.mozilla.org/tanvi/2017/10/03/update-firefox-containers/#comment-36309

@rysiek it's a bit of a doozy

https://medium.com/@calerogers/gpu-virtualization-with-kvm-qemu-63ca98a6a172

and this

https://github.com/RadeonOpenCompute/ROCm_Documentation/issues/15

@thog https://medium.com/@calerogers/gpu-virtualization-with-kvm-qemu-63ca98a6a172

fuuuuuuuuuck yeah!

VFIO GPU passthrough to QEMU

only took me two days (ffs)

Please stop telling people who don’t know better not to use SMS 2FA. Some other factor is better than no other factor, and not everyone has an adversary that will do SIM cloning or an SS7 attack

@galaxis @maloki #Firefox Containers have been available for 2 years. The project has matured and now right in core. You do NOT need an addon to use its basic functionality. HOWEVER a design decision was made to allow devs access to its functionality through APIs. Some of the stuff you seek is available in add-ons. Try "Firefox Multi-Account Containers", "Container on the Go", "Context Plus"

2016 launch of test
https://blog.mozilla.org/tanvi/2016/06/16/contextual-identities-on-the-web/

2017 project maturity
https://blog.mozilla.org/tanvi/2017/10/03/update-firefox-containers/