ice3
Basically every completed step is a git commit of a worklog and a commit of the updated "TODO" list. I have a queue of tasks that have to be done, the agent reads that, does some research, updates the worklog (does not commit), does the work, crosses out the task from TODO, updates the worklog and commits.
This started out as a human-in-the-loop setup, but now it mostly just works on it's own.
The initial run is in systemd timer+service. So the whole thing mostly runs on it's own. There are multiple skills - for different tasks.
If there's a crash, pi restarts (some scripts around that), checks the worklog, sees that it's not committed and assumes that it did not finish, updates are handled the same way.
Now the TODO can be wildly different. Read my email, prepare an answer to insurance. Read my email, update my calendar. Figure out and optimize my home assistant automation. Use the ghidra MCP to rev-engineer a crackme.exe. Optimize my Openwrt wifi network (complex topology, multiple APs), rewrite my old java 6 code to modern java with tests, research birthday presents based on hobies etc...
So far I've thrown just about everything into that setup - the only time I actually need to do something is when pi needs me to do something in the physical world - say - a TRV on a radiator got air blocked and I need to bleed it. Or it did the research and I actually need to buy something. I get a notification and a calendar entry.
I do have a similar setup at work, but since my company moves at snail pace compared to development outside, this is my way to keep "up to date".
I do use a git as pi memory with commit history and a worklog. Restarting pi just continues from the worklog + last commit/uncommitted changes.
Durable ... is different but I definitely will try it out.
" The virtual reality film "Trails of Angels", the winner of prestigious international and national competitions, is a work by Kristina Buožytė and Vitalijus Žukas, dedicated to the creations of the artist, composer, and pioneer of abstract art Mikalojus Konstantinas Čiurlionis. "
Available in Lithuania and in couple of locations in US
One of the things that Teleport lacks (IMO) is Wireguard
Talk about action discoverability.
My combined water boiler is set to turn on/off on schedule. When running off electricity it only heats water during the night.
Some other appliances are also set to work on schedule. Washing machine, dish washer etc... usually run overnight.
All computers are set to sleep after 10 min of inactivity. The only things that are on 24/7 are APs, a few cameras and a NAS.
I also have a garden. I grow/pickle my own tomatoes, cucumbers, pumpkins, apples, prunes, mushrooms, nuts, berries. But not potatoes, since those are cheap to buy.
I think in total, it would be enough to last for 3-4 months.
Air source heat pump (split AC unit) is the way to go. Those things have efficiencies of 200-600%.
I'm not. The lower limit of my comfort zone is 19c, anything colder and I can't work.
All the electronics keep the room relatively warm, so most of the heating is actually turned off in that room :)
Set all rooms in the house to 18-19 c. Going to heat my home office/bedroom to 20-21 c only during the day/while being there.
- <odd>.x.x: Linus went crazy, broke absolutely _everything_, and rewrote the kernel to be a microkernel using a special message-passing version of Visual Basic. (timeframe: "we expect that he will be released from the mental institution in a decade or two").
[*] https://lkml.org/lkml/2005/3/2/247
It's really interesting to see Linux getting more and more micro-kernel like features throughout the years.
Reiser4/5 are interesting in concept and I've been running a few boxes on Reiser4 some time ago, but with the name attached, I don't think anyone will be touching it for foreseeable future.
By disclosing the vulnerability, I'd be taking a risk of a criminal investigation. This is not a joke. This has already happened at least once in Lithuania.
I have a job, one that has nothing to do with infosec, but I'd be risking that job if I had an ongoing criminal investigation.
I did send a few reports from throwaway email accounts, but the issues did not get resolved.
I suspect there's another way to go about it - if you're a Telia customer - send them GDPR Article 33 request.
The article mentions a leaked password hash from 2014, but as far as I know, there were at least 3 password (not hash!) leaks over the last 10 years.
Generally, I recommend people buy their own routers and never use the "Self Service" for managing passwords.
As for hostility of service providers - the situation isn't that good.
Some years ago, a white hat reported some data leak vulnerabilities in a medical "self service" portal.
Vulnerability: change your personal code/id (SSN for folks in US) to another person's number in the POST, and voila - you get the medical history of another person.
What happened is that the white hat got blamed for "hacking" that system.
Result: Vulnerabilities aren't getting reported. Bad guys are exploiting them left and right. White hats don't bother disclosing them.
I personally know at least 5 exploitable vulnerabilities in some government websites, but I won't be disclosing them, since that will land me in a lot of trouble.
EDIT: grammar
I've used ShellCheck to catch/fix numerous bugs on some mission critical financial systems (that depend on shell scripts!).
Added it to pipelines and as a mandatory pre-commit hook in git, so all teams started using it (whether they like it or not).
It even caught some places where a rm -rf / could happen because default parameter substitutions were not set ( Same as the Steam bug where it would remove your home directory, but on some big financial systems :) )
All in all - an amazing tool that saved me from a lot of grey hairs throughout the years.