• 0 Posts
  • 458 Comments
Joined 3 years ago
cake
Cake day: July 29th, 2023

help-circle



  • GitHub gets autoscanned by thousands of malicious actors for keys and credentials on every commit, including the comments lol.

    The fact that CISA themselves never saw an automated breach attempt only minutes after pushing to github is the more interesting story here.

    Either the contractor is so incompetent that they didn’t have any logging set up and the breach went completely unnoticed for 6 months.

    Or this really is some fat honeypot that they won’t admit is a honeypot because they’ve been using it to watch or bait APTs.

    Currently, there is no indication that any sensitive data was compromised as a result of this incident

    This is literally impossible unless it really was a honeypot. You can demo this yourself in real time. Make a throwaway cloud account on your favorite provider, commit the cloud auth token into a repo, and you will see an automated bot login within minutes.

    Commiting any secrets to a public repo should just be considered auto compromised because of how potent it is.

    That stuff ususlly gets exposed via poor CI/CD permissions where credentials are required, but straight up file commit is like publicly announcing exactly where you left your house keys lol.





    • Anything that you can shove hardware into (CPU, RAM, HDDs, maybe a PCI slot), so any used workstation is a great start, and don’t bother splurging initially, just follow the quality tool rule and only buy when something becomes inadequate. If you want to jump straight into loud and noisy severs, you can pick up used servers for cheap like R730s which there’s a ton of out there. Just avoid 2.5" drive bays because 3.5" HDDS are way cheaper per Gb.

    • Would recommend podman over docker as its matured to the point where it has a lot of better features like rootless, quadlets, etc that you might want to take advantage of in the future. OS is whatever linux you prefer, but I recommend you stay away from Ubuntu. If you want something RedHat but not as cutting edge as Fedora, I’ve heard OpenSUSE is pretty nice.

    For apps, If you want to do HTTPS via GUI then npmplus is nice option, Otherwise caddy can do the same with text config. Rest is whatever you want to try out :)

    EDIT: If you start making an *arr stack, I would recommend recyclarr to handle the quite expansive content filter settings for sonarr and radarr.


  • I hate to break the news but the issue with Bitwarden is that the client sucks total ass, and there are no drop in 3rd party replacements for the browser plugin.

    Been running Vaultwarden for a while now and even though the sync implementation is nice and clean, it’s just not worth the end user experience.

    This is really dumb when compared to literally every other password manager, open source and enterprise which does a much better job of actually being a password manager and not a glorified encrypted text file.

    I’m eventually going to switch back to KeePassXC and just suggest setting a master password with Firefox’s builtin password manager for everyone else who just wants a painless user experience and not have to deal with syncing vaults.



  • NIMBY is usually more to do with perceived loss in value though no?

    People don’t want AI datacenters because they are directly offloading energy costs to neighborhoods via substantially higher power bills. Which is happening because the demand is so high, they can’t compensate by building more power sources in the same time frame.

    That and the poor reception to the AI market, which is wrecking jobs, the economy, etc.

    Otherwise, datacenters were pretty well known for being built with very little resistance before this, especially since lots of providers, like Google, would fund geopower sources to power their datacenters which would add power to the grid with surplus.


  • mlg@lemmy.worldtoLemmy Shitpost@lemmy.worldJust say no
    link
    fedilink
    English
    arrow-up
    16
    ·
    4 days ago

    Reminds me of some funny old posts on r/sysadmin of greybeards who had essentially automated their entire jobs and life in perl lol.

    Best one was a script that would auto text message his wife he would be coming home late if he still had an active terminal session.

    There was a recent post around here or reddit that was about management trying to gauge performance via AI use, and how they had caught on to the token spending tricks people were using, but honestly it doesn’t seem that hard to fake around it if it ever came up.

    Just throw some agent work at it like codex and watch it burn tokens running grep lol.





  • Switch was what made me realize golden era of gaming was over, but it took about a year to set in because of the disconnect between the NX presentation and the actual product.

    Seriously, go take a look at the original NX Switch presentation and it would almost seem that Nintendo was selling a completely different product.

    All of the Wii era inspired hardware went mostly unused because the Switch couldn’t play Wii games, and Nintendo didn’t bother to even port their own titles outside of recycled Wii U content that didn’t sell well on the original console.

    The software similarly was a joke. I have more functionality on a Nintendo DS than a Switch, and that isn’t even including “unofficial” homebrew. You can’t even voice chat with your friends without using an external app, which is insane considering the DS, DSi, 3DS, Wii, and Wii U that preceded this.

    Major features that gave Nintendo the edge were gone. DS Downlaod Play, Streetpass, included minigames & apps, themes, free online, eshop points, wifi events, etc.

    On top of that, the library was just not interesting enough to warrant paying $60 a pop for single player games, and the multiplayer selection was sparse, despite the main feature of the console being joycon controllers.

    I got bored of it after only a year, and ended up having to change the joycon c-sticks a couple years later because of the drift issues.

    IMO it was a massive success just because of the portable format allowing you to play big name games on the go, but it absolutely fails as a handheld console when compared to the DS line, which did so much more for so much less.

    Now that other handhelds like the Steam Deck, AYN stuff, Legion, etc exist, there’s really no need to buy a Switch (2) for third party titles, which makes it a complete Nintendo only buy in.

    The kicker is that Nintendo made absolute bank which is now why the Switch 2 is going for $450 (soon to be $500) and bumped their game prices to a whopping $70-80 because they know people were fine with it.

    If I had more time on my hands, I would legitimately go make a modern version of Streetpass and download play for modern handhelds because that stuff was so cool and useful.



  • This is funny because I recently retired my 750ti which I had been using for server work and it ran great with the latest Nvidia driver (although I heard they’re gonna drop support soon and move the driver into a legacy package on rpmfusion).

    The poor thing couldn’t even do H.265, had 2 Gb of VRAM, and needed specially compiled libraries for pytorch/tensorflow stuff because CM 5.0 was over 10 years ago, but it chugged along just fine.

    I’m personally still on a 1660ti because despite OpenCL’s best efforts, CUDA has everyone by the balls, but now that I have a beefier server setup, I’ll probably go with AMD on my next build.

    Assuming I’ll actually want to make a new build with these insane prices lol.