waz0wski

Hate to break it to you..

> Notepad in Windows includes AI features powered by Copilot that help refine and shorten text with the assistance of GPT. By default, these AI features are enabled on managed devices

https://learn.microsoft.com/en-us/windows/client-management/...

> This is our world now... The world of the electron and the switch, the beauty of the baud

https://phrack.org/issues/7/hackers-manifesto

Really not surprising given the history of sloppy coding, elementary authentication mistakes, outsourced "support", and anecdotal reports of horrid internal culture over the past few years

[2026] Erosion of Trust @ Azure

https://news.ycombinator.com/item?id=47616242

https://isolveproblems.substack.com/p/how-microsoft-vaporize...

[2026] https://www.microsoft.com/en-us/security/blog/2026/05/18/sto...

[2025] https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft...

[2025] https://www.securityweek.com/all-microsoft-entra-tenants-wer...

[2024] https://www.cloaked.com/post/microsoft-data-breach

[2023] https://www.reuters.com/world/us/chinese-hackers-stole-60000...

[2023] https://www.wiz.io/blog/storm-0558-compromised-microsoft-key...

[2022] https://www.spiceworks.com/it-security/cloud-security/news/m...

[2022] https://techcrunch.com/2022/03/23/microsoft-lapsus-hack-sour...

[2021] https://www.cpomagazine.com/cyber-security/microsoft-power-a...

[2021] https://www.darkreading.com/cloud-security/microsoft-azure-c...

And this is just the Azure / O365 stuff - there's been thousands of Windows client/server and Office software exploits across the same time period

> one vendor relationship to manage

Anyone that's had to deal with Microsoft will tell you this means nothing

If you can even get attention from someone, you'll be bounced between teams and people who barely know the products they are "supporting"

Don't get me started on the Azure and O365 management portals

The only worse support experience I've had was with Oracle where it could take days just to get the boilerplate "send us your logs" response on a Sev1 issue, despite the logs already being provided in the initial ticket

In both cases, this is while at F100 companies with millions of dollars of licensed software and premium support contracts

Yep, but it was an easy zero-touch MITM vector for billions of devices that's only now being closed down

India has state-mandated spying on network traffic (69B & Telecom Act 2023) so as dumb as this looks, it's possible this could've been purposeful

Every blog post on this site is AI generated and covers bugs and exploits that were uncovered also by AI

So, sort of like fuzzing. There's a scary amount of exploitable stuff like this sitting in every BSD and Linux system out there, including every embedded system running old kernels in routers, cars, plcs, on and on

Currently testing out FreeBSD jails, but with OCI images and Podman :)

https://daemonless.io

BastilleBSD is another great way to run FreeBSD+jails using their templates

https://bastillebsd.org/projects/bastillebsd/

https://github.com/BastilleBSD/templates

Jeff Geerling blogged about his demo setup - https://www.jeffgeerling.com/blog/2025/15-tb-vram-on-mac-stu...

Uses Exo - https://exolabs.net

You can do it with other software, that's just one of the quick-and-easy setups if you've got a spare 40-60k for studios sitting around

This doesn't stop the vehicle from recording telemetry, just transmitting it

Take your car to a dealership for service and one of the first things their software does is download all of the data and phone it home

To me, doesn't feel much different than when infra-as-code became popular in the 2010s

It was a huge shift in the world of system administration, gave birth to devops, and, along with the rise of containers & cloud computing, it radically altered how companies ran their infrastructure

Some people leaned into it, others didn't and a huge rift opened up between them

I used to say "automate all the things" - I still do, but I used to too

AI tools are just an acceleration of that mindset and in my world of cloud/devops/sre I'm heavily leaning into AI-driven development and daily workflow

> // Assume everything in the dir is a vaild image file

Yep..

And image files were, and continue to be, a huge exploit attack vector

I've moved from gitlab -> gitea+drone -> forgejo+woodpecker

Works great for small-medium scale

Yep, same here

MAC + Temporary Containers extension is how web browsing should be handled by default imo

No website deserves permanence of any data in my browser unless I so choose

I haven't seen similar functionality in any of the new generation of browsers, nor any of the Firefox spinoffs as-yet

That's the direction container runtimes are trending

Amazon has been doing it with Firecracker for a while and Kata containers is another popular one

https://github.com/firecracker-microvm/firecracker

https://github.com/kata-containers/kata-containers

What a surprise, a brand new account that seems to only spew negativity and false information. Reddit might be more your style ;)

I just replaced a 2009 MacPro

It had many hardware upgrades over the years - upgraded CPUs, 128GB RAM, 4TB NVME storage, a modern AMD GPU, USB3/c, thunderbolt, etc

The only reason it got replaced is because it became too much of a PITA to keep modern OSX running on it (via OCLP)

Replaced with an M4 Max Mac Studio, which is a nice and faster machine but with no ability to upgrade anything and much worse hardware resale value on M-series I'll have to replace it in 2-3 years

Yes you can still update to 15.7.3 the usual way in Settings

It'll present you the Tahoe upgrade but underneath in small print it'll show other updates, which you have to then open and manually select the 15.7.3 update

And you really should keep up on the point updates because there's been a ton of major security patches since 15.4

What you call scaling up sounds more like monetization. Others (especially customers) might call it enshittification instead. Youtube is a great example of how bad it can get.

Why Mozilla won't let people financially contribute directly to Firefox development and continues to pursue these stupid monetization paths is a mystery.

HN hasn't focused on those topics in a long time, they rarely are on the front page. Skip the top 20 articles and you'll start to see some interesting content instead of all the VC & AI drivel.

Hackaday is a content aggregator site that usually has more content on these topics - https://hackaday.com

Or there are still some good old blogs out there with RSS feeds http://www.righto.com/ http://oldvcr.blogspot.com/ https://blog.ret2.io/

Possibly the most common open source mailing list software, mailman, has had configuration options to address both email address and header exposure for at least 15 years

At least with email, you're in control of what shows up in your inbox as well as message routing with filters of your choice

Interesting to see this utilizes kata-containers project alongside virtualization.framework. Cool project.

https://github.com/kata-containers/kata-containers/

I keep a SPARCStation 20 around for some nostalgia

NetBSD still supports it, and a wide variety of other SPARC systems https://wiki.netbsd.org/ports/sparc64/

Agreed

cries in .x3f & Sigma Photo Pro

The gaming isn't quite like CS, more 'tactical' oriented, but the modding scene is good - Ground Branch

It's worse than that - SLS siply can't do what it was supposed to on paper even after 10's of billions, resulting in the secondary boondoggle of the Lunar Gateway which will waste billions more and still fail to achieve lunar-relevant

> can someone outside of NASA send requests to Voyager to change its code?

Unless you've got your own very-very high power transmitters and large dishes, you're not communicating with either Voyager satellite

"Newer" science & research satellites from the late 2000s onward do support a variety of encryption in transit and authentication from the ground stations

Surely the corporation that built the on-device scanning and recognition that runs on your opaque little computer box to find pictures of your dog wouldn't lie or "accidentally" keep the csam scanning running on the device too?

And certainly the corporation couldn't be be coerced by the government that's built the largest surveillance apparatus in human history to keep the csam feature running on billions of devices?

Yes, the corporation can be trusted.

/s

Depends on your workloads and needs. It's not as mature as k8s and there are rough edges but if you're into the Hashicorp ecosystem and can run your workloads in FreeBSD jails it's pretty slick - think golang & rust apps, web, gaming servers, etc

A couple of tools which are both working on jail management & packaging

- bastille https://bastillebsd.org

- pot https://potluck.honeyguide.net

bastille is great for personal and small setups, pot is aimed at larger scale and meant to be used along with hashicorp nomad+consul