Hard Pass

For those unaware, Linus Torvalds this year has deeply cast his lot with the hyperscale LLMs for development of Linux code, dismissing arguments that this is an abdication of responsibility over that code base.

Had to evict a big ass spider from my room today and was reminded of this meme template. At least it's easier to evict spiders than cats, the latter don't fit in measuring cups.

“I call him Mohamed Al Fayed. And uhhhh— His name is— Abdul, but I think I— call him Mohamed Abdul Al-Sayed.”

This fucking idiot can’t even get the GOP’s infantile smear campaign right. El-Sayed’s full name is ‘Abdulrahman Mohamed El-Sayed,’ and Republicans use that full name as often as possible, because I guess that’s supposed to make him sound more like a terrorist — you know, like that other famous terrorist, Barack Hussein Obama.

But Donny’s too demented to get it right. The name his collapsed cortex shits out instead is ‘Mohamed Al Fayed.’ 

If that name’s familiar, it’s because Mohamed Al Fayed was a billionaire who, during his life, had over one hundred credible rape accusations made against him, his youngest victim being 13 years old at the time. Great guy, right? Well, there was one person who actually thought Al Fayed was a ‘great guy.’

You’ll never guess who it was: Preznit Fuckwit.

Donald Trump gushes over ‘great guy’ Mohamed Al-Fayed’ in resurfaced interview

You know, most of us manage to go through life without having even one dead pedo bestie. Dear Leader has at least two and counting. What a strange coincidence, am I right? Every time we turn around with this guy, new shit comes to light.

via

Archived copy of the article

Hi selfhosters,

I'm considering improving the security of my homelab/server setup and I'd love to hear some more experienced opinions on my plans.

Like most self-hosters, I started out with a single-server setup: I cobbled together some old hardware, slapped on a NAS-style OS, bolted on Docker and started experimenting. As things go, my setup has grown a lot over the years. I'm running a lot on that machine - NAS capability, local DNS via pihole, a Wireguard VPN endpoint (so I can tunnel into the LAN from outside), many private services (accessible only from inside the LAN), but also some public ones accessible from the open web.

Although I've tried to do my homework in terms of security (various hardening measures for SSH and Docker, reverse proxy, proper SSL termination for everything), I realise I've put a lot of eggs in that one basket and I might want to introduce some network segmentation.

I don't think I'm ready for getting a hardware firewall or a router/switch capable of VLANs just yet. What I'm considering, though, is putting my services available from the open internet on a separate server inside my network - a little Pi 5 I've still got lying around. My idea is that if a container on that is breached and if an attacker manages to escape the container to gain root access, compromise would be limited to the few of publicly available services I have on the Pi, thus limiting blast radius. If combined with (software) firewall rules that make the Pi a 'pariah node' (dropping all incoming connection efforts), lateral movement to other devices on the network could be contained.

An alternative would be to finally make the move to Proxmox. Everything would still be running on one physical machine, but I'd create several VMs: there would be one for private, one for publicly available services, and I'd firewall the latter off rigorously so it cannot connect to anything else.

I'd like your opinion on these plans. Which one would you recommend? Are they both sound, or is there anything I haven't considered? Are there other (easy, non-hardware intense) things I could do to improve security even more?

After putting out a nearly three-minute video decrying Trump’s repeated attacks on her Democratic colleague from Minnesota, Jayapal reminded social media users of the president’s “border czar,” Tom Homan, allegedly accepting a bribe in the form of a paper bag stuffed with $50,000 in cash.

...

“If the administration wants to investigate anyone, maybe they should look at themselves first. Anyone remember this?” Jayapal wrote alongside a photo of media coverage that notes Trump’s Department of Justice (DOJ) closed the probe into Homan last year.

Archived at https://web.archive.org/web/20261016192100/https://www.commondreams.org/news/tom-homan-bribe

I considered it a fine whine.

cross-posted from: https://slrpnk.net/post/43922924

cross-posted from: https://feddit.online/c/tech@piefed.world/p/2034236/90-of-us-working-hours-are-spent-on-tasks-not-covered-well-by-ai-benchmarks

happy spooky season! i already had like 5 pumpkins

Disgraced music mogul moved to Pennsylvania prison after reports of perks and fight injuries at New Jersey lockup

I've had several occasions in my life where I've tried to switch to Linux only to run into hardware incompatibilities that would have taken me man-months to solve. Thanks to GPT my primary personal PC, home media and project server is now running Linux and fully functional. I've got Jellyfin, NextCloud, Navidrome and Joplin all happy. I've also been able to wipe an obsolete MacOS off my 2017-era Macbook Pro and it's happily running Mint.

There's a deep irony in Windows being enshittified by AI, while the same AI makes Linux about a billion times more usable. Now I have a leftover Windows micro-PC running a local LLM model, so I can be less dependent on GPT, as long as time isn't a factor...