mjochim

Choosing some other port than 22 is not a measure to make things more secure; as you say, it would be security by obscurity. But it massively unclogs audit logs if, for some reason, SSH is exposed to the internet.

If you don’t really trust the remote box, then storing a key on it – even one created solely for that box – might not be a good option. Doesn’t really matter whether the key is completely and permanently unencrypted or you only decrypt it during use.

To my understanding, by forwarding the SSH agent you can keep the private material on the local box only. I’d have to read up the details before I could be sure this is true, but that’s also what the linked article says:

> The [...] ssh-agent [...] supports [...] a way to forward access to private keys to remote hosts, without exposing the private keys themselves.

Creating a separate private key solely for this box – but storing it locally – is then a measure you can take additionally.

I would argue that it’s O(n), increasing linearly with number of pages of the document ;-).

Caution, CVS-2021-22205 has later been found to be exploitable without authentication. No need to be "able to upload an image," unfortunately. Also no need to take the detour through a mirrored repo as sibling suggests; so long as the GitLab instance is accessible from the internet.

Lojban also hasn’t shown that it would retain its principles after years of broad day-to-day usage. And I dare speculate that it would not.

I’ve been using grml’s zsh config [1] for years. It’s one file, I’ve never installed a single plugin, and it’s been doing a lot. Couple of examples:

- When I auto-complete a path, the shell prints all options and I can navigate between them with either tab or arrow keys

- For many tools, like git, auto-completion shows an annotated list of possible options/subcommands (and again, you can navigate them with tab or arrow keys)

- If I type something like chmod 644 and then start auto-completing the filename, the suggestions exclude every file that is already 644.

Also, there is a format to add auto-complete information for more tools. I’ve never actively used it, though, and I don’t know if it’s been adopted by any other shell/tool. I don’t even know if it’s specific to zsh or to grml’s config or to something else entirely. It has just stayed out of my way, while greatly facilitating my shell usage.

As a last point, none of these examples have been added recently. They have all been there for years.

This is not to pick on fig, but rather to show what zsh has been doing all along (and I suppose other shells like fish, too, but I’ve never tried).

[1] https://grml.org/zsh/

I like the impression of your tool, but I share Frost1x’s reluctance. However, I was pleasantly surprised to read this up front:

> Free planning and projection tools that will never ask to link your financial accounts

If it were followed up by convincing me that my data is stored in LocalStorage and doesn’t leave my browser, I’d be sold :). I know I’d still have to trust you that you’re actually implementing what you claim, but I think I’d be willing to. After all, the same would be true for an application running natively: those, too, can submit my data “to the internet.”

For me personally, having an Electron app would not make much of a difference. Do I run your code in my Firefox or in a separate process? I’m still running your code on my machine. Maybe browser-based even has some advantage because it is sandboxed filesystem-wise. Not sure whether this holds true for Electron.

Import/export as CSV or whatever format would also be a huge plus for me.

As a last point, I’m not sure I understand the status quo: you are saying all caluclations are done client-side – but the results are stored server-side?

Nice work!

I Agree very much with the general idea. One addition, though:

> Unfortunately, you have to take projects’ words that they do this on good faith as an end user

The same is true for applications running natively. Of course, those can be firewalled from any outgoing and incoming network traffic more easily. And they don’t feel like and don’t default to using a network connection all the time. But still, they could.

I sure did ;)

Very interesting, I don't think I've ever talked to someone who would choose to disable syntax highlighting. Do the colors actively annoy you or is it just that you don't care?

Did you upload all the messages from your client to fastmail or were they copied directly from Google to fastmail?

Not the person you were asking, but you can host it the same way you host the HTML file containing the <video> tag. Both files are served as static content by any web server you choose (eg nginx, Apache). You also get "streaming" for free because the browser will request the video file in portions instead of "the whole thing at the same time." Web servers support this out of the box.

Or maybe cp, or rm, or rsync, or mount, or wget, or netcat (both gnu and bsd) ... it’s really pretty reasonable to expect -v to mean verbose ;-).

"Schadenfreude" comes to my mind, and the proverb "wenn sich zwei streiten, freut sich der dritte" (when two are fighting, the third is the lucky one). But Schadenfreude is more general than what you are describing and the proverb is not quite on spot, because you are not really involved in the story. I'll probably spend the next hour trying to think of a better word ;).

Is it for English sites only? Do you think it make sense for a ring to be multilingual?

This should be possible, since everything you mention are realm-specific settings (i.e. you create one realm per customer), including that a user can be admin in one realm only.

I'm saying "should be" because personally, I have only used single-realm setups in production so far.

Must say I'm a big fan of Keycloak.