thesmokingman @ thesmokingman @programming.dev

Posts

1

Comments

630

Joined

2 yr. ago

I highly recommend Empires of EVE. It’s a good history of some of the early period. I’ve observed the game for years but never played. I’ve got a few friends that just read the book and loved it.

In getting the link for you I learned there’s a second volume that I’ll go out and snag this weekend.

It’s no longer your secret then, is it, if someone else is a part of it? That’s part of my point. If anyone other than you knows the secret, you cannot guarantee its secrecy. You can establish some sort of trust relationship and a classification policy. If you’re dead, all bets are off with those things. Some people with intersecting policies, eg doctors or lawyers with professional requirements, will continue to preserve secrets in some cases. Even that’s not a guarantee.

If you didn’t want it shared, why did you write it down? The only way to leave no trace is to leave no trace. Don’t want Alice to know something? Don’t tell Bob. Once the information leaves your control you genuinely have no control over it.

I don’t really care about what happens to my body or my stuff after I die. Growing up in a hoarding home, my goal is enjoy what I have now and minimize what others have to deal with when I’m gone.

If I go unexpectedly, the people in my life need easy access to my stuff to ensure they’re not fucked by rapacious corporations trying to profit off “sorry thesmokingman died someone didn’t cancel the electric so you owe a ton.” Any assets I have (after student loans, of course) should be easily accessible. The people close to me might want some token of me or some insight into what data I like to hoard. I’ve got a dead man’s switch with my password manager that goes to specific people. They can have it all.

If there’s no one in your life, by all means, nuke your shit. If there are people in your life, why do you care what happens to your things when you’re dead? You’re dead.

Your gut reaction about Nord is correct. They completely mishandled a breach a few years ago and never did anything to even attempt to regain trust. I care more about the transparency here than I do about the attack itself.

They’re a bunch of cherry-picked games that have a decent amount of Linux work run on pretty solid Linux hardware that performs well. The tests are legit. They just don’t generalize.

What value do timegates add to video games? How does the user experience improve or degrade if the wait is, say five minutes? One minute? None? Is the point of the simulation to wait for everything? What’s the difference between acceleration humans can’t survive and wait times? What’s the line we can’t cross to suspend disbelief?

I personally think it’s all made up so making me twiddle my thumbs for 10m is fucking stupid. If I wanted a waiting simulator I’d play “kickstarting Star Citizen” or a less punishing game like Desert Bus.

If you’re only on Linux and don’t ever touch containers on Windows or Mac, podman can work fairly well. You need to be comfortable with orchestration tools like k8s to replace compose (or just do a ton of containers) and you can’t use a lot of COTS that has hardcoded dockerisms (localstack, for example, does not work well with podman).

If you have to use Windows or Mac, podman makes life really difficult because you’re running through a VM and it’s just not worth it yet.

I really like that you are benchmarking. I feel like there should also be something actionable here. What do I, as a Linux gaming consumer, need to look for? What are the things that will tell me a game will run better or worse?

Awesome! I can’t wait to generalize the average of 10 cherry-picked games with tons of Linux work against the 2k+ in my library! I bet I can pick up CS2 with this knowledge and get 10%+ better performance!

The video is pretty neat. I’m just not sure what we gain from it.

How do you store other secrets like OP mentioned such as licenses or tokens?

If there is an argument to be made here, it’s whether or not the song calls for intolerance à la the paradox of tolerance. There’s plenty of pornogrind, slam, and other brutal death metal on Spotify that’s thematically horrific. While the subject is definitely about really sadistic shit, there’s no overt message to go out and do that or that there are classes of people that deserve that. If this is just bullshit biblical propaganda, whatever, slam is gnarlier than Lot’s daughters. If this is advocating for the removal of a class of people, it might be warranted.

I didn’t read or search for the lyrics because fuck driving traffic to this garbage.

I worked at one of the majors pre-Microsoft acquisition. “Highly skilled” is actually a relative comparison to the security teams at gaming companies, not an industry benchmark comparison. The bar for highly skilled plummets once you include things like social platforms, launchers, and telemetry.

I’m guessing it’s going to be similar to System Shock, Turok, or the other 90s Doom clone remakes they’ve done. If you like those, you’ll probably like this. If you don’t think those had anything going for them, you probably won’t like this.

I’m honestly not sure which camp I fall into.

Basically the only commits to OpenOffice now are things a full project lint would catch. There are some security updates here and there. Last I looked it’s basically one dev fixing spacing.

I’m not really seeing much in the way of cybersecurity tools in this thread. These are all FOSS and usable without extra cost (although some have paid upgrades)

• Zed Attack Proxy is something I use pretty regularly.
• Snort is a great IPS.
• Metasploit works great with some extra tooling.
• ClamAV is the Linux standard.
• Fail2ban is great for hardening.
• Crowdsec has replaced Fail2ban for a lot of folks.

I’m not sure I follow the closed source bit. For example, Virus Total is closed source but a something used by cybersecurity professionals across the world. Most of the software that powers cloud giants is closed source and security professionals everywhere accept the shared security model.

Closed source matters for encryption, not necessarily tooling. It’s a red herring unless you’re talking about a tool’s ability to encrypt/decrypt.

I don’t think you know what an attack surface is.

I don’t think you understand what an attack surface is.

It doesn’t get rid of passwords, which is what I said when I said it was a disingenuous claim. It just moves the attack surface, like I said before. You haven’t bothered to demonstrate even a passable understanding of my original comment and the security issues I raised as a security professional because you appear to want to dunk on me. I’ve been having this conversation for years so sorry not interested.