Gigachad

Ubuntu made more sense when you installed end user apps from the apt repos and wanted updates more than every 2 years. These days with Flatpak you are better off on Debian.

I agree, with a big tech deployment process this would be less impactful. But getting from a company used to manual testing and weekly deployments to a fully automated CD pipeline is more work than a single Claude prompt.

Unfortunately I work with users who get upset when the app goes down or features break.

We are capped by testing and PR review. The junior devs can spam out a million PRs a day but we keep having production incidents from not carefully scrutinising the changes. So the speed of code generation is limited by how fast we can actually accept those diffs.

Avoiding 3rd party libraries seems like a false sense of security. You’ll stop seeing CVEs on the scanner reports, but the bugs are still there, just in your own code that is less well audited than public libraries.

The upper management and security team came knocking and told us all of the CVEs from the scanner need to be addressed right now. And the only way to deploy without having to wait for QA approval is to not merge feature changes.

The physical world comparison is interesting. In the real world we have a small amount of security, but most things could be broken in to. Instead of fortifying everything, we just imprison the people breaking stuff.

Obviously this doesn't work on the internet since most hacking comes from overseas out of our control. Which makes me wonder if there is a possible future where we just block packets coming from countries that don't lock up the hackers.

At work we have put a full halt on feature work because the number of security related tasks has become staggering and urgent.

We will hopefully get over this wave and be able to move forward with much more secure software, but it's crazy right now.

I wouldn't be surprised if Google is experimenting with exactly that right now.

I’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.

It’s also never been easier to replace C programs with safe alternatives.

Supply chain attacks through distro repos haven’t really been a thing.

Random npm packages are another thing.

I wouldn’t be surprised if we start seeing individual drivers and subsystems move over.

The Linux maintainers have been extremely conservative with the Rust introduction but after the endless CVE apocalypse they might be more receptive.

Probably best to not leave any ZFS system connected to the internet then.

The only way to survive is to just update everything daily or faster.

At work we currently have a weekly release schedule but im going to push to speed it up because 1 week is far too long to leave packages out of date.

On the other side we have a Linux networking stack written in Rust.

My memory of it is fuzzy but I feel like that exemplifies the point more. No one really faces any consequences for this stuff leaking unless it’s truly bad. After all these hacks everyone is going to have embarrassing details leaked but it probably won’t matter.

I think we are approaching a future where no one will care. An example would be the Canadian prime minister who had photos of him doing black face as a teenager emerge. And nothing happened because everyone has embarrassing teenage past actions.

The same tech does Passkeys too. I suspect in the future we will move to passkey/yubikey only auth and store as little user data as possible.

Unless you had a unique email just for that service, you could just cross link it with another leak that contains your name.

Sure it’s possible to have perfect op sec but almost no one does in reality.

At this point it’s all public. Everything you do on the internet is or will be public.

I was also in the furaffinity leak lol. Though ultimately everyone is in so many leaks it won’t even matter. Unless you have committed some kind of crime, having possibly embarrassing personal details leaked is the reality for everyone right now.

They kind of want a small amount of downloading to work because legitimate YouTubers use clips from other videos to make their own fair use reactions and responses.

They likely want to block alt clients that strip adverts while allowing the small amount of downloading to still work.

The whole situation is suboptimal because the manager uses Claude to generate tickets, the developers copy and paste the whole thing in to Claude and then post a PR they didn’t understand a thing about, and then it gets to me and I just don’t have time to review 4000 lines of code. So it ships having not had a single person understand what it does or was even for.

I’ve been assigning the copilot review thing on all of these PRs, but I’ve noticed lately it’s started writing really difficult to verify review comments. It would take you literally all day to understand and test the things it’s commenting to check if they actually are issues, so as a result we all just ignore whatever the copilot review says and no one does any review.

Reddit as a platform is completely dead at this point. It’s nothing like it once was.

I’ve had some luck in telling people I don’t need them sending me a 1000 word claudeslop technical change, I have the same model they do and can generate the same thing if needed.

But then I have to repeat this lecture to so many people it’s wearing me down. I’ve mostly resorted to just not reading it and simply ignoring any AI text sent to me.

In my experience they charge for a static IP but not to turn off CGNAT. Obviously depends on the isp but I’ve tried a few.

One of them I had to call phone support and they asked me why I wanted to turn it off. I said I wanted to run a server and they turned CGNAT off on my account.

Only today we would have put everything behind something like NAT anyway because your devices would be getting hacked constantly.

On IPv4 with CGNAT you get blocked and sent millions of captchas because you are sharing an IP with 5 IoT devices actively running a botnet.

On v6 you don’t have that problem.

I’ve found that YouTube just uses it anyway in software decoding. 4k AV1 video seems to use about 10% cpu on my M1.