I looked at vault, but I opted for a simpler, less flexible solution: rrsync (restricted rsync) to a tree available only to an account with its .ssh/authorized_keys populated with the host public keys with forced rrsync commands restricted to that host's secrets. Root is the only account that can read a host's corresponding private key, so that means an attacker must crack root to get this extra access - but why bother when the secret (e.g. private certificate) is already on the host for root to read? Code to translate the known_hosts into the .ssh/authorized_keys file is a dozen lines more than a perl one-liner only because of triple checking to prevent damage to the result, e.g., in file system full circumstances. Chicken/egg: other means must manage host private keys and ssh_known_hosts. But you had to do that anyways.
I'm more than half the time figuring out the environment. Just as you learn a new language by doing the exercises, I'm learning a bunch of stuff while I try to port our iptables semantics o firewalld:
[a] gitlab CI/CD instead of Jenkins [b] getting firewalld (requires systemd) running in a container [c] the ansible firewalld module doesn't support --direct required for destination filtering [d] inventing a test suite for firewall rules, since the prebuilt I've found would involve weeks of yak shaving to get operating. So I'm simultaneously learning about four environments/languages at once - and this is typical for the kind of project I get assigned. There's a *lot* of exploratory coding happening. I didn't choose this stuff - it's part of the new requirements. I try for simple first, and often the tools don't support simple.
Is that not presumed by capitalists as well? It appears to me the difference between the two lies in the expectations (Marxist: bad outcome; capitalist: good outcome) and the degree to which moral judgements adhere (ironically, the putative "scientific" Marxists seem more moralist than the capitalists).
At the end of the article, Cockburn complains that asking ChatGPT about Palantir work with the IDF gets a hallucination in response. I just queried duckduckgo.com with "IDF Palantir", and receved links to several news articles from relatively mainstream news sources. If the point is that LLMs are currently unreliable, then sure. If the point is that we can't know whether Palantir is working with the IDF, then there is available evidence
...for those lucky enough to be able to do so. I've been promised the Red Hat Enterprise Linux 3 systems will be replaced in two years. 10 years ago, they were to be replaced in one year.
I was quite aware that our (different company) time server was based on getting CDMA signal, and - oh, wait - CDMA was retired last year? Luckily, we could open our internet firewall to let it talk to external stratum 1 servers and configure it to be stratum 2, rather than the stratum 1 we bought. Replacements using GPS are in process, but are impeded by weak GPS signal in the data centers. Antennas are to be implemented...
We were using the weave CNI on our kubernetes cluster. It started failing, so we called weaveworks to try to buy support. They said no, recommending a different CNI which would necessitate a disruptive cluster replacement. Once that was a necessity, all the other CNIs were on the table and we went with cilium, which has been ok with k8s 1.22 on CentOS 7, but which is now having undiagnosed trouble with k8s 1.24 on Red Hat 8. The messy process of figuring that out is underway.
A decade or so ago, we had an ice storm take out power for much of the town for five days. Because the copper pair was still intact and powered by the central office, we never lost phone service.
This week, after heavy rain, the copper lines, which one technician said had cheap paper insulation, stopped working. A different technician got outgoing calls working again, but incoming calls (the higher voltage ring signal) were still failing, and AT&T told their technician not to fix it. We were forced to transfer our service to fiber, which was already present for internet. The AT&T fiber router can drive our existing handsets, with replacement crawlspace wiring reasonably priced.
My UPS lasts 90 minutes, nowhere near five days. Sometime over the next year, I'll probably get a Generac attached to our gas line - the tree canopy makes solar impractical.
I'm lucky that I can afford these worse alternatives. Many can't.
Enshittification is seeping into the physical layer.
If we can formalize our ignorance, then it can become knowledge. Uncertainty is another name for ignorance, and quantum mechanical formalism of uncertainty has been enormously useful.
[Edit] Quantum mechanics makes enormous and pervasively verified predictions. This theory will be useful to the extent it makes such verified predictions.
I too am Catholic, and understand the Catholic teaching that, within its domain, science honestly pursued tells scientific truth, e.g., evolution. Science trespasses when it leaves its domain to make assertions about God or the soul. That you encountered so many Catholics bereft of that understanding is sad.
I don't find the "we're in a simulation" argument convincing: Moore's law of exponential growth is bending into the S-curve dictated to all initially exponentially growing physical systems, and thus we will never have arbitrarily deeply nested simulations with atomic granularity on a planetary scale, to say nothing of a galactic or universal scale. Even more, were there containing universes with physical laws and resources sufficient to such simulations, the idea that the operators were teenage boys bored into cruelty is anthropomorphism at its most absurd.
So you needn't do so: SEEK_HOLE does not occur in the GitHub.com repos for postgresql, mariadb, nor sqlite. Are there system libraries they incorporate which use SEEK_HOLE?
Historically, very few colleges admitted women, thus when they began doing so, they became "coeducational" institutions, but the prominent feature of such institutions was the (then minority) presence of women, who thus became associated with the term. There's little in history or language that is symmetrical or equitable - although, these days, the smart money on the unspecified college student is that she's a woman.
"Though a program be but three lines long, someday it will have to be maintained."
I am instantly reminded of /bin/true which originally was a 0 byte length file with the execute bits set. Then the edict came down that all programs were to bear an AT&T copyright...
“Our entire belief in objects,” [Bergson] wrote in Creative Evolution (1907), “indeed rests upon the idea that time does not bite into them."
The only "objects" I know of that time does not "bite into" are mathematical abstractions such as integers, or God existing outside of time. No physical entity (Einstein was concerned, after all, with physics) escapes being embedded in time. Can love transcend time? Only to the degree it, like mathematics, transcends physics.
The Moms for Liberty agenda is to abolish public schools because public schools undermine their ideology. Anything that damages public schools advances their agenda. Free public education was always a socialist conspiracy.
The body says large trees are more susceptible to drought, but the first companion article in the list below the article says large trees are less susceptible to drought. There needs to be a reconciliation.
Doing devops/sysadmin, I frequently find myself spending 90% of my time on the last 1% of systems that I can't declare out of scope but that are broken/nonconforming for "business reasons". I'd be 10x more productive if I could just turn those off. Every time, I try to make the fixes/write the code that will smooth the next time, but the next thing always arrives before I finish. I've written enough code to recognize the same pattern in any large codebase.
Perl was published by Larry Wall in 1987; Perl 5 appeared in 1994 and has been remarkably stable since then -- I have code from 1998 that still works great. It feels like a more powerful sed or awk, and has an enormous available online library at cpan.org. There are many books describing it; start with "Programming Perl" by Larry Wall; get advice on elegance from "Modern Perl" by Chromatic; if you want to build an Internet component smaller than an available module (or get guidance on the implementation thereof), "Network Programming with Perl" by Lincoln Stein is superb.
Before reading the article, I imagined myself asking that question, and it was the rude or exasperated version of "What must I do for you?" (to make you stop bugging me). The polite or generous version is "What can I do for you?". I'm lucky enough that I get to ask the latter far more frequently than the former.
I thought that was how book clubs worked: they picked a book, the members then read it over a reasonable period, then reconvened to discuss it and pick the next.
I worry about those interconnections and the risk of cascading failures. I know just enough about it to worry that the problem might be order NP, and a directive to go faster when the modeling, aka software, just can't, could be disastrous. Can someone who knows better reassure me?
I'm unfamiliar with Blake Smith's work, or with the usual tenor of literary criticism in general. By about the third paragraph I wondered if this was what the word "snark" was invented for, or the phrase "backhanded compliment", and, now, why do I want to emulate it? Just how different from a large language model am I?
I was completely taken in until the octopus hat. There's no way 1920s fashionistas go from feathers to a pile of brown turds on their heads. The 2nd ddg hit was the Wikipedia article, the second word of which was "fictitious".