T3OU-736

Consider adding ppid to the mix - cometimes _what_ started a process is also quite valuable (if firefox starts bash, worry more than, say, sshd)

I cannot help but winder if, as a part of 'Fix, don't toss' mentality, there is an attendant[1] additional tenacity present.

[1] Or a pre-requisite. Correlation, not causation and all.

The (Russian version of the notice) points to doc on GitHub repo for DrakonHub self-hosting is 404. Rather, that seems to be the [README](https://github.com/stepan-mitkin/drakonhub/tree/master/docs#...) file itself based on the content.

There is an additional aspect to this, I think - `stace` has a hell (order of 100x AFAIK) of an impact on performance of the process being traced. Aside from obvious, this leads to things like hiding race conditions.

I _think_ you are describing (minus the screen) what a PiKVM and similar would give you.

Right, I wasn't specofic - Ecobee will overcool with the main AC, but it does not have the 'I have a dehumidifier in my HVAC setup, go use THAT' setting.

Another trend I have seen[1] ] (US market, high performance/high energy efficiency homes) is the use of HVAC and separate, standalone dehumidifier to do the same thing - take out humidity out of the air that the AC system has to otherwise both cool and dehumidify on it own.

The framing (at least as I understood it) was more on the psychometric side - 24C@65% relatuve humidity _feels_ worse than 27C@45%RH, but the energy savings aspect is also non-trivial.

As an aside - a fairly large number of central AC systems in the US do not have a humidity censor, so they only go by the temperature set point. Upgrading to control system which does measure humidity, while energy inefficient (because AC would be used to dehumidify the air _below_ the target set point), is an option, though not as good as having a stand-alone humidity control system. Sadly, I am unaware of Nest and/or Ecobee's support for this sort of a setup. Probably not cost effective for them. :\

[1] https://youtu.be/rWWLW4nLNBI?si=Ud1jk3x58H6pnMci

You do not necessarily have to become all these things. There are whole communities around this sort of a thing - Will Prowse's DiY Solar Forum (https://diysolarforum.com/) is an awesome source for learning as an example.

The setup you describe - lacking microinverters - I think there are options there short of wholesale replacement [disclaimer: I, too, am a self-taught in this field, and so am likely wrong in non-trivial ways]

There is non-trivial chance that once these enter the civilian market (say, via a government auction), there will be a requirement for the buyer to add the emissions control components back.

(No horse in this race) https://news.ycombinator.com/item?id=40584606 seems to strongly suggest that Bartender's no longer trustworthy.

PSA: The Linux kernel will only have one console at a time during boot. This means that if both VGA and serial are specified, in that order, the last one is used, meaning there will be no output on the VGA until `getty` starts up on other VTYs.

Unamusingly, there have been instances of Seamless and similar setting up virtual storefronts online for small local restaurants, and then demanding a cut after a phone call order went routed via them. I have caught this a couple of times and have had to work a bit to find the actual restaurant's contact info to place an order.

I cannot pinpoint the source, but for the last two decades, it _feels_ like it is common knowledge that the airframe can tolerate a lot more abuse than the passengers, especially unbuckled ones, can.

Obviously anecdata on my part, but it is interesting to encounter differing situational understanding which remind of non-universal assumptions.

Fair point. When there is proof (as there is with your example), it is a different story. But unsubstantiated claims? Still judging, by way of wanting proof.

> When you complain, people judge you. It doesn't matter what you're complaining about. It doesn't matter what you're protesting or whistle-blowing. It doesn't matter if your life is at stake. It doesn't matter if thousands of lives are at stake. It doesn't matter if the fate of humanity is at stake.

Have to vehemently disagree there. It doesn't matter if you believe that thousands of lives are at stake. I will stipulate, readily, that being able to assert things about one's own life are within the easy realm. But thousands? Fate of humanity? Yeah, no, I am judging - because those seem like hyperbole/manipulative claims (even if made with the best intentions), and is the same conversation device as the use of 'they say' (who's the "they"? what, exactly, was said, and under what circumstances?)

> Telegram was still active early on Saturday, but throughout the day, it has started to be deactivated on some devices.

That seems to imply the carriers are disabling the app somehow. How? Is there more control the telco operators have over their subscribers' phones, or does `deactivacted` means something else?

Google already adjusts a remote employee's comp when they move geographic locations to a lower cost one.

They have smart accountants, after all.

Oh goody! So, what, security licensing, 'lockpicks for certified locksmiths only' instead?

I foresee a 'service' which does this. Start with an EU iPhone. Ship to US. VPN proxy updates? Not sure how Apple detects geo location for updates' purposes.

At some point in the past, I attended a Sun security-themed Thang in Los Angeles (small group).

The presenter was talking about a Solaris PAM integration with LDAP auth right before the break for lunch. The auth was done via a "query-username-and-password-strings-from-LDAP-and-compare-locally" method. I pointed out some issues with that - needing a privileged account for the query since the password LDAP attribute is usually protected, password hash on the wire (l0pht was a thing by then, so it felt wrong to sling those around), couple of others.

To their credit, I spent the lunch break with a couple of their engineers in front of a whiteboard working through a 'bind[1]-as-user-to-auth' mechanism instead. I'd like to think this helped their PAM LDAP module become more secure.

[1] https://ldap.com/the-ldap-bind-operation/

Watching this, a couple of questions came up in my mjnd:

1. Siemens rep physically touching things despite vibration sensors being in place - do they not trust the sensors? If they do not, how are they doing routine monitoring? Have someone sit atop the machine and feel for things 24/7? Or is that just the rep grandstanding for the cameras?

2. Time of grid sync only having hh:mm precision. Nitpick, but at 60hz, that is about 50s of imprecision.

3. The mentioned previous unsuccessful attempts - so went wrong? Dunno, I tend to learn more about systems from failure :)

"Thinking, Fast and Slow" has been debunked? Could you provide a bit more context?

Of the free ones, with a decent API, and a very convenient programming library to boot, NetBox is damned good.

The lack of escape demonstrations are likely, at least in partv due to a fairly low availability of those systems to the security researchers.

I do not want to make it see that LPAR isolation is just waiting to be compromised, but security-by-unavailability also plays a part :)

Thawte happily sold certs to US entities like universities (I was a sysadmin at one of those universities with such a cert :) )

Memory claims: It was RSA in Perl, text shape of a dolphin, but it may be wrong.

Hah. I read 'logline' in the context of logging information by a running process, and thought the post was about log lines that a logging infrastructure would not pass on for some reason.

Been computering too much :)

(SWAG[1]) The reasons are likely because they don't want to anger the carriers by showing reverse-engined list of undesireable-to-that-telco words, and perhaps a bit of marketing - "we have done this work so you don't have to, so use us"

[1] https://en.m.wikipedia.org/wiki/Scientific_wild-ass_guess

(Disclaimer: This is not at all meant as a negative against Tutanota/ProtonMail/et all.)

```We have included a conclusion that Swiss Privacy laws are good, and very similar to German privacy laws.```

This is weird to me in that these are laws of man, and therefore ignorable or lopphole-able by other humans if they can. Usually, by sneaky buggers in the intelligence agencies. It is, after all, their job.

Rather, I would want the standard to be something akin `Our laws do not force weakening of efforts to establish and maintain privacy.` which is to mean no meddling in E2EE, forcing VPN providers to keep logs, etc.

If you have an easy way to do so, you should.

Possibly even proxy the traffic via something able to do SSL strip/re-encrypt and monitor that traffic with an IDS.