c45y

With some small systemd configs each native app is essentially a container these days. The overhead of unique kernels per app would really restrict what could fit on a small box like this

DynamicUser and ProtectSystem keep me sane.

Probably in the way Minio did. Technically the source is still available but the controlling entity behind it have shut down all changes

Yeah I really like not having a touchscreen that I have to worry about bumping while I'm reading, a backlight is the only addition I would enjoy to the current x4

That was the big surprising win for me too, it just fits so comfortably in the hand

I would love it if more systems just understood SRV records, hostname.xyz = 10.1.1.1:2222

So far it feels like only LDAP really makes use of it, at least with the tech I interact with

As I understand they weren't building tunnels, so every time a legit client wanted to it has to wade through all the bad nodes to find a good one, so everything slowed right down. I was building at about 3% success rate during the issue which enables general eepsite browsing but torrenting was essentially dead

Extremely easy copy paste deployment into projects

Probably an expectation for floating IPs for load balancing instead of DNS.

Relatively simple inside a network range you control but no idea how that works across different networks in geographical redundant setups

I use thunar with niri and some of the taskbar applets for bluetooth etc in waybar

Officially no deaths caused by police.

Chan yin-lam case is one that always sticks in my head.

I can well believe correlation is sometimes the answer but the odds of an award winning swimmer doing a midnight dip and washing up naked the next day, with a rushed police investigation and extremely expedited cremation is a fair bit to accept as coincidence

https://yggdrasil-network.github.io/ for the most part enables this - otherwise I2P and Tor for the most part facilitate this with the bonus encryption element.

We might one day have it natively with ipv6 adoption increasing.

I really appreciate the k3s default with HelmChart type and operator installed. Makes working with charts simpler in my view

Innocent until the courts say otherwise. It's why we apprehend people for crimes instead of just shooting them (in most countries)

How one person can be so good at putting out useful security tech is just wild.

I'll add this to my pile of filo made security I consistently rely on

It should be exactly that for exactly that reason

They bundle versioned API schemas....looooots of them.

It would be a garbage fire in any language

You can do a lot with seccomp filters that would stop even root messing things up too badly, down to path level io filtering unless I misremember

Replacing systemd seems to be the goal

It's just a ~/.config/containers/systemd/ folder for rootless containers, I stuff the whole thing in a git repo

You can have multiple trusted CAs which I've found to make rotation a non issue with tooling like Ansible etc.

New CA is minted, public key is added to the accepted list, client signing start using the new CA and you remove the old after a short while.

If missing servers is a common problem it sounds like there are some other fundamental problems outside just authenticated user sessions.

CA key also allows those servers to avoid reaching out to some central location to validate which I've found to be a nice side bonus for disaster recovery type scenarios.

In this case PAM is the name of a type of security product and not the Linux PAM system.

Bcachefs allows it

Having made the switch from sway to labwc nearly a year ago I've edited the config maybe all of 3 times

It's xml but at least it's plain and well documented with sensible defaults

It mostly matters because like all good laws it will likely be used to erode privacy in an effort to enforce it.

In context with the assistance and access act 2018 this is just another step towards the encryption with government backdoors future ASIO have been calling for in order to "protect us"

I believe basically any filesystem will work if you have it on LVM. Bonus of lv snaps being thin snapshots too

Have been running labwc with waybar for a few months now and it's been a good replacement for my old xfce.

Theming seemed fine? I picked up someone's stylesheet off GitHub and that was it.