helix
@helix@feddit.org
<a rel=“me” href=“https://layer8.space/@helix”>Mastodon</a>
- Comment on PSA: the bitwarden clients got an upgrade that makes them incompatible with vaultwarden 1 day ago:
Would love this to work with Signal and Matrix!
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 1 week ago:
Nice try Mr Hacker, you’re not getting anything out of this BOFH 🙃
- Comment on Start of a /c/Selfhosted Wiki 1 week ago:
I have a wiki! Covers way more diverse topics than self-hosting though. wiki.tilde.fun
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 1 week ago:
Using Ansible, but it still means I need to run it and schedule patches etc. – you can’t just patch stuff when people are currently working on it.
- Comment on Managing podman quadlets, users subids and such 1 week ago:
You can use configuration management software like Ansible or Puppet. I wouldn’t write my own scripts when there are good Ansible modules.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 1 week ago:
You quoted something directly contradicting what you said. Nothing is concealed, every line of erroneous code could have been analysed for 15 years. All information needed to find the bug was public since it the code has been written and checked in publicly.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 1 week ago:
You confused “obscurity” as in a synonym for low popularity with the word “obscurity” as in people not knowing how it works and people deliberately hiding the inner workings of a system.
Everyone using Linux can know how it works, that’s the opposite of obscurity in the sense it is used within “security by obscurity”.
Apart from that, Linux is very popular, just not on the Desktop. It is therefore not obscure in the sense of popularity either, at least the components which are hit by the bug mentioned in the article.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 1 week ago:
ugh shit next week will be awful at work patching all those servers. At least they found it because bad actors did.
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 2 weeks ago:
What benefit does that give you for media viewing?
What exactly about X.509 is trash for that use case?
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 2 weeks ago:
Sadly couldn’t find anything. Thing is, if you watch your own media, why use TOR?!
- Comment on Homepage - Selfhosting Dashboard 2 weeks ago:
I always wonder if veterans really need to know that much information at all times.
Actually I suffer from something called “monitoring fatigue” or “notification fatigue” at work. There’s so many monitoring notifications, half of which are nothingburgers, that I seriously hate that part of my job is responding to them.
I already disabled notifications for my email in our monitoring system and now there’s just another department monitoring the monitoring system and creating tickets for me.
- Comment on Most slopcode projects are abandoned and deleted within months of release 2 weeks ago:
Sounds interesting.
Can you link those projects please?
- Comment on Most slopcode projects are abandoned and deleted within months of release 2 weeks ago:
Usually these tools are very basic.
If you read this community in the last weeks you’d know that slopcoders don’t stop at basic projects.
- Comment on Immich v3.0.0 is out, with Workflows preview 2 weeks ago:
For Android there’s PhotoSwooper which works somewhat similar @uuj8za@piefed.social
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 2 weeks ago:
Here, a random link explaining why using bandwidth for no reason while people provide it to you for free might be ethically questionable
tor.stackexchange.com/…/tor-streaming-videos-is-i…
Should I explain it further?
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 2 weeks ago:
Or to not do security by obscurity at all.
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 2 weeks ago:
Streaming videos puts a huge burden on the TOR network. Please don’t do it if you don’t need to, setting up a VPN is faster and doesn’t slow TOR down.
- Comment on Dawarich 1.9.1 4 weeks ago:
If you’re tracking your location anyway, consider adding support to send your location to OpenCellID and BeaconDB to improve FOSS location services and data :)
- Comment on Tips on speeding up remote connection to personal server? 4 weeks ago:
I found IPv6 is usually faster than IPv4. Which do you use to connect?
- Comment on Redlib is running on borrowed time — so I built a Reddit front-end that archives what it serves 4 weeks ago:
Can you edit your post to be shorter and more concise and add an AI disclaimer about how much of your project is done with AI and in which capacity you use LLMs to write it?
- Comment on Redlib is running on borrowed time — so I built a Reddit front-end that archives what it serves 4 weeks ago:
That’s because it’s written by Claude, an LLM. It’s trained on corporate bullshit. The author seems to be a proper software engineer assisted by Claude Code which is OK in my book. They seem to be Chinese and translate everything into English with AI. Since I can’t read Chinese I can’t tell you whether the Chinese readme is also generated:
I wouldn’t call this project slop, as it clearly has a human touch and not completely written by AI it seems from a first glance at the code, but that’s the reason the writing sounds so “grating”: Chinese person feeding an LLM with idioms not present in English language.
- Comment on Voiden - CLI runner (update) 5 weeks ago:
I feel the void whenever I need to script APIs, it’s fine.
If you POST into the void long enough, one day, the void POSTs back.
- Comment on Is there room for Windows selfhosters? 5 weeks ago:
Did you install the guest tools and set the CPU governor to the correct scheduler? Do the Windows boxes host the same applications as the Linux boxes?
- Comment on HELP : Cannot upload files bigger than ~180MB to matrix server 1 month ago:
That’s synapse, not continuwuity, correct?
- Comment on What to do after getting a domain name? 1 month ago:
Don’t run services like these on a free domain. Get a very cheap domain from almost any provider. These free ones often try to get you to buy their domain name for outrageous prices with tricks and footnotes.
- Comment on What's your contingency plan for the apocalypse? 1 month ago:
I mean, you’re not doing huge batches. If my life depended on meds I’d be damned if I didn’t learn how to cook them myself or with the help of my PhD friends 😄
- Comment on What's your contingency plan for the apocalypse? 1 month ago:
Can you get equipment and recipes to synthesise these meds yourself or have someone do it? Befriend some pharmacists and pharma PhDs?
- Comment on What is the current state of Matrix? 10 months ago:
If you want a conduwuit sucessor, I’d choose the continuwuity project over tuwunel.
You realise that sounds insane, right?
- Comment on What is the current state of Matrix? 10 months ago:
I recently shut down my server because it’s a high traffic, high risk software. You should have an eye on it, I’d say at least half an hour every week…