News for hackers. Stuff that matters.

christphrdunder

Re:More random home lab things I've recently learned on Friday October 17, 2025 @05:45PM (#45622483)
> should be a systemd service

"should be" according to your goals. "should not be" according to mine:

1. run untrusted code in a reasonably secure way. i don't care how many github stars it has, i'm not rawdogging it. nor is my threat model mossad, so it doesn't have to be perfect. but systemd's default security posture is weak, hardening it is highly manual (vs. "run a VM"), and must be done per service to do properly (allowlist syscalls, caps, directory accesses, etc.).

2. minimize cost. it's orders of magnitude less costly for most people with the skills to run a homelab to:

   a) spend 50% more for compute & storage than a single hour of handwriting & tuning reasonably secure systemd services, wiring up dependencies, etc.

   b) build a backup and migration strategy once and reuse it for everything. this is technically possible with systemd, too, of course, but way more costly to setup.

   c) one single universal solution. practically everything will run in a VM. this is not true for systemd, esp. isolated systemd services.
if you want to optimize for "learn how to configure systemd", "learn how to hyperoptimize cpu usage", or whatever it may be then great. if other people aren't, they're not necessarily wrong, they may be choosing different tradeoffs. understanding this is an essential step in maturing as an engineer and human being. i truly mean this as encouragement - not rebuke. Otherwise i wouldn't have paid the relatively high cost in time to write it afterall :)
i have heard that the problem with this is that #1 ("relate to the employer's business") can potentially be interpreted to include most / nearly all tech if the employer is a Big Tech Co (due to the enormous scope of technical projects/ventures these companies have).

i am curious what if any precedent exists here.

obligatory IANAL

Re:The Landlord's Game on Wednesday April 21, 2021 @02:48PM (#26893857)
it's almost as if technical solutions can't solve problems with humans/humanity...
Re:Qubes-Lite with KVM and Wayland on Tuesday March 16, 2021 @01:27PM (#26479932)
proxmox security is pretty thin last time i checked. everything in dom0 runs as root...
Re:Qubes-Lite with KVM and Wayland on Saturday March 13, 2021 @02:53PM (#26449409)
This is awesome! I've been using Qubes for 5 years. I really want to use Qubes as my daily driver. I continue to find that it's not reasonably usable. My issues are the same as the author:

1. Poor hardware compatibility - due to clinging to Xen (dead/dying)

2. Poor performance (youtube @480p or xfce desktop @4k run at 5fps on a high-end system, don't even try 3D accleration) - due to not treating performance needs seriously[1]. GUI domain[2] and hiring a community manager are signs that they're starting to listen, but it looks like it will take years to land in full.

I pray that Qube's devs are taking this project (and others[3]) as a wake-up call: there is a huge unfulfilled need that people are willing to do a lot to satisfy. Leveraging more modern projects (like crosvm & Wayland) can hopefully help reduce the cost ("evolve or die").

[1]: dozens of mailing list threads reflecting a stance of "it's the users who are wrong"

[2]: https://www.qubes-os.org/news/2020/03/18/gui-domain/

[3]: https://spectrum-os.org/ "a step towards usable secure computing" (an obvious wink to qubes), https://github.com/nrgaway/qubes-kvm-dev, etc.

Re:California bill would decriminalize psychedelics on Sunday February 21, 2021 @01:54AM (#26211440)
you're still attacking a straw man
Re:California bill would decriminalize psychedelics on Sunday February 21, 2021 @01:52AM (#26211431)
heroin's not part of the bill. did you even read the article?
Re:The U.S. Senate has blocked the Cybersecurity Act of 2012. on Thursday August 02, 2012 @08:35PM (#4331857)
http://www.reddit.com/r/watchingcongress/

All bills in the House and Senate are posted by a bot, and editorializing is done in the comments. (The bot is also a github project.)

Re:Your Bash Prompt Needs This on Friday April 27, 2012 @02:32PM (#3900456)
alternate solution using readline: set echo-control-characters Off
Re:Nice guys finish first. Eventually. on Sunday January 22, 2012 @04:19PM (#3497723)
A "recent study by professors from several leading business schools" is wrong because the author thinks "in the end the girls realised that they were better off marrying the nice guys."

This is the echo chamber they speak of.

Re:Creativity requires isolation on Friday November 25, 2011 @01:42PM (#3277841)
I find, personally, creativity requires 3 modes, and maintaining a balance between and within each mode: Input, Output, Sleep.

Input:

-Objective research: (left-brained) Keep your idea of the problem and the reality of the problem in sync, or else any solution you come up with is useless, no matter how creative.

-Creative inspiration: (right-brained) Reductionism is a great tool, except when it runs amok. If you could truly understand everything, you could never be surprised by anything. "The most beautiful thing we can experience is the mysterious. It is the source of all true art and all science."

Output:

-Left-brained: This is what the author of this article seems to refer to. Spending time proceeding step by rational step through a large problem. This process requires high focus, so isolation often helps.

-Right-brained: aka "stop thinking about it and just do it [by feel]." Our left-brains revolt at the idea of doing something without having thought through every possible decision and outcome in terms of every scientific field and level of abstraction. But at some point we form habits, and, for the sake of time, we should be incredibly grateful for this. If you form good habits you can trust, your efficiency can skyrocket.

Sleep:

-Running other threads while you're awake: The classic example of this is "Eureka!" Some of us seem to do our best thinking while showering, driving, exercising, cleaning, or studying another science. Refine your meta-heuristics by working in a very different problem domain.

-In a bed: dreams: a very different problem domain. Go through a few thousand of them.

Lastly, it's important to consider the contiguous time I spend in each of these modes 3 modes. If I spend a week in relatively isolated, left-brained output, it's quite likely I'll feel creatively sapped by the end, and will need to spend the following week almost solely in input. By the end of that week, my brain will be so overflowing with ideas that I can't even listen to music without wanted to silence the input so I can get back to output. Oscillating at extremes is extreme. Whereas, while socializing an idea I effectively go from input to output (mostly right-brained, off the cuff) every few seconds. Both feedback loop lengths - and everything in between - have their advantages and disadvantages.

Ultimately, it's about finding a balance both between and within each mode. All things in moderation, including, of course, moderation.

Re:Ask HN: How would you beat Craigslist? on Thursday November 24, 2011 @12:01AM (#3273142)
There's plenty you could do to make a better Craigslist, simply because they're so slow to roll out any new features. As a result, there's a large number of websites and mobile apps built to augment the basic functionality of vanilla Craigslist.

But I highly doubt you could have any success grabbing market share, because none of these functional shortcomings are enough of a problem to the Average User that they'd be interested in using a service with no reputation. Not to mention the network effect.