Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)JA
Posts
0
Comments
20
Joined
1 yr. ago

  • Yes, Xorg being suid is stupid. That used to be needed due to several historical reasons, but is not any more.

    But for 'su' or 'sudo' suid is still the right mechanism to use. Capabilities won't help, when the tool is supposed to give one full privileges. Of course, in some use cases no such command is needed, then the system can run with no suid. Similar functionality could be implemented without suid too (e.g. ssh to localhost), but with its own security implications, usually bigger than those brought but a mechanism as simple as suid (the KISS rule).

  • Amazon already makes money on many products that should not be sold, as are fake or/and dangerous. They will still be making money by selling smuggled good. 'It is not us, it is the independent seller. We just provide a platform. Will still work.'

  • In case of Stellaris it is more like you would buy Stellaris, Steallaris 2, Stellaris 3, etc. Each big DLC is like another game in the series. And the smaller ones (like species pack) are completely optional. For me this is an example of DLC done right.

    It is not like e.g. City Skylines, that most DLCs just give some minor additions and for a meaningful change in the game you would have to buy lots of them.

  • nets

    Jump
  • Single use plastic items laying on the beach is what bothers people the most, but this doesn't mean it is the biggest problems. There is much more plastic in the oceans that we do not see.

  • When the corporation controls the hardware and the OS it can easily break any encryption running there. Just include key loggers, break RNG entropy, extract keys from memory, or just capture any data before they are encrypted. Or just let the governments into the OS so they can do all that.

  • I can confirm that 'error' and 'mistake' is the same word in Polish. I don't think it matters here, though. And I am sure that Mr Sikorski knows the difference. His speech, although often harsh, is very diplomatic. When he says 'Trump made a mistake' it can safely be read as 'Trump is a complete idiot'.

  • I send mail directly. I have a public IP address. I had to remove it (a few times) from a list of 'dynamically residential address space'. I have configured the server carefully and implemented SPF, DKIM and DMARC. I have proper revDNS records. Currently my mail doesn't seem to be considered SPAM by Google or others more often than other mails.

    When filters consider some mail spam there usually is a reason. The trick is to find the reason and understand how to mitigate it. Some anti-spam measures are not fair (like blanket blocking whole countries or ISPs), but I was lucky enough not to be bothered by those.

  • It is not that bad. I have been running my own mail server for 20 years and i generally don't have more problems with it than users of 'big and known' mail server do (it is not like GMail is perfect). And when there are problems I am usually able to tell what happened.

    But this does not mean I would recommend self-hosting mail server to everybody. I am an expert, have been doing this professionaly for years. And it is an ongoing fight. It is not like I set it up in 2000 and it has been working since then without changes or incidents.

  • Probably the logic of the ruling party: this president is not great, but if we impeach him now there will be elections and a new president will be elected, this time one from the opposition party. Competent president working for the other party might be considered worse than an incompetent and corrupt one.

    I am sure they would vote for impeachment if they had real chances of winning the presidential elections.

    Disclaimer: I know nothing about Korean politics, except some recent headlines.

  • Valid point, but leaving thins as is does not seem like the optimal solution. Maybe the mods could occasionally post examples of removed spam/bot content, for transparency and awareness. Leaving this to random users can end with more mistakes and actual abuse.

    Also, the troll/bot comments and discussion around them will less disturbing outside of the intended context (where they were posted to cause disturbance or misinformation).

  • no idea why

    Because it makes initial connection much slower. Dumb switch - you insert a cable and it works. STP-enabled switch: you insert a cable and it takes a while until the port is enabled (unless you do extra configuration, appropriate for your network topology). This is annoying and for inexperienced users it could seem like the switch 'does not work'. It is easier to sell a switch without such a feature enabled by default.