320 karma · joined January 14, 2017
As an administrator, I wish MediaWiki had a built-in updater (bonus points if it could be automated).
Your private keys are more likely to be compromised when you store them on untrusted systems. SSH-Agent allows you to avoid that risk.
Another mitigation is to use a dedicated agent per private key (or group of keys) to prevent forwarding keys to destinations that don't need them.
SSH agent restriction (ssh-add -h) looks promising, but support isn't widespread and it doesn't cover all use cases.
The article assumes a remote attacker, but the attacker can more easily be your boss or team. Keep this in mind whenever you forward your agent and plan accordingly.
But relying on SSHFS in production... Yeah, that's insane.
In my experience, it isn't necessary to configure ChromeOS by logging into a Google account after enabling Developer Mode, if you simply want to ditch ChromeOS and flash the UEFI firmware. Just press ctrl+alt+F2 to get a shell, login as chronos (no password), then type `sudo bash` or `sudo -s` to get a root shell.
In addition to the other recommended distros, NixOS runs well on all my converted ChromeOS devices.
It's a great way to get continued use out of hardware that no longer receives ChromeOS updates. Even underpowered devices can be appealing for some tasks because they're lightweight and fanless.
I imagine any color light or other type of distraction would provide the same results. It's not even a placebo effect, so much as the fact that a lot of these procedures are well within most people's pain tolerance and/or can be over in a minute.
I gladly went under general anaesthesia to have my wisdom teeth removed, however.
When the model is no longer supported with MacOS updates, I wipe the disk and install Linux. Sometimes I'll keep a copy of MacOS on an external drive if I need to access or troubleshoot specific features of that model (like digital optical audio before support matured on Linux).
I've used Nix/NixOS for years and still don't have a use case for flakes. I only enabled it this week to restore some functionality to the nix command, which is still a work in progress.
Getting there was painful and required a deep dive into the documentation. In the end, it was as simple as adding this line to my configuration.nix:
nix.settings.experimental-features = [ "nix-command" "flakes" ];
The flexibility of Nix is one of its main selling points, so it's impossible to say that "everyone" uses it in a similar way. Flakes are a welcome, but disruptive, enhancement. Hopefully, the experimental phase will end soon.Go for a walk. Did you see an interesting bird, insect, or plant? Take a picture or commit to memory and try to identify it when you get home.
Got any broken stuff? Look up information on how to fix it. Then fix it.
Has it been over a year since your last physical? Make an appointment with your doctor. Look up any new terminology from your visit or test results.
Seek experiences, then supplement them with related information. Emphasize quality over quantity.