Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)KA
Posts
0
Comments
236
Joined
2 yr. ago

  • The "tank" has an immobile or mostly immobile turret, depending on the particular design of this piece of battlefield ingenuity. Units appear to be making these modifications at the frontline to improve survivability against FPV drones but there isn't a standard package.

  • Your dog is probably just dreaming.

    Mine does it and she sometimes starts making small barks in her sleep and twitching her legs while she does so. I assume that she's dreaming about a long fun chase.

    Do keep an eye on it and reach out to a vet if you're concerned, but it sounds pretty normal based on what you've described.

  • It's not quite what you've asked for here, but as a Dev I'd be remiss if I didn't shill for Gentoo.

    It ticks your rolling release box, has fantastic docs, a huge package repository (and the community repo Guru), and by design enables almost infinite configurability and customisation. We also have a binary package repository now for popular architectures, so you can choose to avoid compiling if you don't want to deviate from sane defaults (or only compile in cases where you do!)

    On the hardware side, we have fantastic support for a number of architectures, I recently brought up a SPARC system and have some arch64 and riscv in the past.

    Finally, even if you just decide to check the distro out, the process of installing, configuring, and maintaining a Linux system is outlined in detail within our handbook, and can provide a peek behind the scenes at what some other distros abstract; it's a fantastic learning experience for those interested.

    Finally, we have fantastic support through volunteers in official IRC channels and forums, as well as unofficial hubs like discord.

    Hopefully I've planted a seed and you'll check it out down the line. :)

  • Contrast that with CLI where if you forgot or don't know any command there is little help or indicator of what's available and what can be done without external help.

    man would like to have words with your strawman.

  • I'm a huge proponent of Gentoo Linux as a learning experience. It's a great way to learn how the components of a system work together and the distro enables an amazing amount of configurability for your system.

    Even following a handbook install in a VM can be a good experience if you're interested.

  • You don't think that by just putting the name of a license in some prose that LLM companies will ignore it and not use it in training data, right?

    They most certainly will not. For all they know you're just helpfully linking to the creative commons.

    I don't think your plan is workable, but if you're going to persist at least add some boilerplate: "the above content of this comment is licensed under..."

  • TL;DR don't worry (for now) - it only impacts rpm and deb builds and impacted releases only really made it into OpenSuSe tumbleweed - if you're running bleeding edge maybe you need to worry a little.

    A laymans explanation about what happens is that the malicious package uses an indirect linkage (via systemd) to openssh and overrides a crypto function which either:

    • allows access to the system to a particular key
    • allows remote code execution with a particular key

    Or both!

    I have secondhand info that privately the reverse engineering is more advanced, but nobody wants to lead with bad info.

    As for what you should do? Unless you're running an rpm or deb based distro and you have version 5.6.0 or 5.6.1 of xz-utils installed, not much. If you are, well, that comes down to your threat model and paranoia level: either upgrade (downgrade) the package to a non-vulnerable version or dust off and nuke the site from orbit; it's the only way to be sure.