Companies attacking security researchers always goes so well for them.

This headline! Yes! We have mechanisms for that! But if the parties in power abdicate their responsibility to act then no, we can’t do anything.

Truth.

I feel like Calvin can probably be placated with Minecraft.

The right is ramping up attacks on Wikipedia for “partisan bias” right now. If you think Wikipedia has partisan bias, it’s a really good indicator that your beliefs are out of line with reality.

Meh. I’ll be impressed when it plays Aria Math.

(j/k, this is awesome, I love it)

Second Forgejo. Easiest deploy I’ve ever done.

Corporate America doesn’t share progressive values and never has. They rainbow washed themselves and tried to project an image of inclusivity and diversity for decades, but it was never who they were or what they wanted. Art isn’t and never has been safe with titans of profit as its masters. Why is “Artist” and “Creative” such a disadvantaged, competitive and marginalized profession when art is ALSO the most powerful weapon that can be wielded against authoritarianism?

You’ll get more insight from a brainrot dictionary. The conclusion of the article is “Who understands kids these days?”

Well yeah, they can’t keep training their models if all the available data is slop from their models.

A future is coming where it can just be your job to let an LLM observe your life 24/7… And that might be the only job available.

I mean, I didn’t bother reading the OpenAI ToS or privacy policy.

I just assumed they were recording everything I did and would probably sell it given the opportunity.

Donald Trump fucked children.

A friend who is a long time sex worker told me she believes it’s all about VERY repressed men with unmanaged mental health issues trying to turn their sexual fetishes into law.

Clarence Thomas for example becomes a lot easier to understand if you conceptualize him as someone who gets off to being dommed by white women who call him the N word… But has never been able to process it, admit it, or have a normal safe conversation about it because of the culture he’s enmeshed in, and has instead grown old after decades of repressing himself.

Please don’t promote Red Cap politics disguised as software.

systemd’s networkd has a built-in DHCP server; check option ‘DHCPServer’ and section ‘DHCPServer’ for that (same man page as above).

Is that true in Debian? If so, cool. I did not know that.

I’m happy to answer specific questions as you dig into it. :) Good luck.

This is extremely possible and I have done a lot of stuff like it (I set up my first home built Linux firewall over 20 years ago). You do want to get some kind of multiport network card (or multiple network cards… usb -> ethernet adapters can do OK filling in in a pinch). It also gives you a lot of power if you want to do specific stuff with specific connections (sub netting, isolation of specific hosts, etc).

There’s a lot of ways to do it, but the one I’m most familiar with is just to use IP tables.

The very first thing you want to do is open up /proc/sys/net/ipv4/ip_forward and change the 0 to a 1 to turn on network forwarding.

You want to install bridge-utils and isc-dhcp-server (or some other DHCP server). Google or get help from an LLM to configure them, because they’re powerful and there’s a lot of configs. Ditto if you want it to handle DNS. But basically what you’re going to do (why you need bridge-utils) is you’re going to set up a virtual bridge interface and then add all the various NICs you want on your LAN side into it (or you can make multiple bridges or whatever… lots of possibilities).

Your basic iptables rule is going to be something like

iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE, but again there’s lots of possible IP tables rules so read up on those.

At a guess, the Venn diagram of people who would happily regularly pay for apps and people who have heard of flathub is teeny tiny.

Qubes or gtfo (troll answer, don’t listen to me)

I’m working with a team where my business partner and I are external consultants, but they also have internal developers (who are mostly very junior and need hand holding with things like using git).

Anyway, the CEO (without talking to us first) hired a pure vibe coder with no software engineering experience to build the user interface. Super nice guy, super easy to work worth, super eager to learn but OH MY GOD THIS CODE.

A lot of my work is / has been in cybersecurity (mostly for the space industry / NASA adjacent projects, but also less recently for start ups and fortune 500 companies). This app is the worst I’ve ever seen. The AI writes things SO weirdly. 30k lines of typescript to do something we could have done in 6k. Reams of dead code. Procedural code to do repeatable tasks instead of functions / classes (10 different ways of doing the same thing). API keys / data base credentials committed to git. API Keys stored in .env but then ALSO just hardcoded into the actual API calls.

AND no. At the end of the day, it wasn’t cheaper or faster than it would have been to hire us to do it right. And the tech debt now accumulated to secure / maintain this thing? Security is a long term requirement, we’re bringing a buddy of mine in to pentest this thing next week, I expect him to find like 10-12 critical vulns. Wow.

tl;dr: If a project requires security, stability, auditability, or the need to quickly understand how something works / why something happens, DON’T vibe code it. You won’t save money OR time in the long run. If you’re project DOESN’T need any of those things (and never will), then by all means I guess, knock yourself out.