fail2ban is mandatory equipment for any ssh server accessible to the public especially on its default port. It’s highly configurable, but the default settings will do fine at making it statistically impossible for any user or password to be brute forced.

China. The people are super nice, sweet, helpful, lovely people. It’s just their government I hate. I don’t know if they hate it too or not since they’re not free to say but I think they’re nice people and they deserve better.

Yeah he’s got some serious abusive spouse energy going on at times with all the emotional whiplash. Beats the shit out of you and then “aww baby, come on, you know I love you” then beats you some more.

I guess they ran out of Public Integrity to report on, there’s none left.

Who would’ve ever thought we would’ve ever needed something like this. I am glad my veteran father never lived to see this happen, it would’ve broken him. This is what he fought against.

Yeah when I first started there was one guy whose code reviews I dreaded, he would nitpick every detail and he would stand by it, he would tell me to do it a completely different way that was 10x more work. It felt like I would never get my stories done because I had drawn “that asshole” in the code review lottery.

Years later, I came to realize that he was actually the best, he taught me so much about the way I should be thinking of things and structuring things, that have saved so much time and trouble later on, I now specifically reach out to him for a review when I am trying to do something complex because I know he’s going to give me an honest, thorough and useful review. Nobody’s doing anyone any favours in the long run by rubber stamping things, it may help you keep your sprint velocity up, but it’s not going to result in high quality code, and the bad quality code will inevitably bite you.

I actually dare them to try. I’m really looking forward to the massive paychecks I’m going to get when companies are panicking to try to untangle all the absolute nonsense bullshit these AI companies are about to unleash into corporate codebases. The AI-slop bugfest will make the Y2K issue seem trivial. I’m so excited, the future looks very bright for human software developers.

My advice: Practice going over other people’s code with a fine-tooth comb looking for bad architecture, flaws and inefficiencies. You won’t always be right, you won’t find them all, but you’ll learn lots of skills you’ll need in the future. Whatever you do, don’t undersell yourselves, remember that your experience is valuable, and AI has no experience, it just has a huge library it can shotgun “solutions” out of. Half the time they don’t even compile, nevermind work properly, or efficiently.

I feel like 99% of the time that’s just a lazy or misleading excuse. I’ve worked in proprietary software development for 25 years and I’ve never worked for a company that didn’t avoid restricted third-party code like the plague at all times. In the few, rare cases when we did have to use some proprietary third-party licensed library, it was usually kept very compartmentalized and easy to drop out of the code specifically because we were always afraid the other proprietary code vendor could fuck us and jack up their prices or find some nasty way to make our lives difficult.

The excuse that there is some secret but legitimate third-party code they’re not allowed to share simply doesn’t hold water in the vast majority of cases.

More likely answers are that some beancounter somewhere still imagines that the proprietary source code could possibly be valuable in some hypothetical future acquisition (nonsense of course) even though it has no real commercial value, or fears that it could expose the company to liability if some security flaw or licensing violation is found (more plausible).

Ironically, perhaps the most likely reality for this resistance is that the software actually includes code that dictates they were actually always obligated to publish the source but never did. ie, GPL-based code. GPL violations are all too common in proprietary software and very few organizations have codebase governance effective enough to keep the situation under control with developers copy-pasting from anything they can find on Google. Releasing their plagiarized GPL source code would reveal to the world that they were not in compliance all along. Let it quietly die, and nobody ever finds out and they get away with it. It’s not simply that they’re embarrassed by bad code, it’s that their bad code will potentially incriminate them. Not worth the risk, and sometimes it’s not just a risk it’s a certainty.

The proprietary software industry relies on open source so much and rarely gives much of anything back. I’m fortunate that the company I’m working for now actually takes licensing seriously and does contribute to open source projects to some degree, although I keep insisting they need to do better.

There is always going to be some level of interpretation. You are looking for an absolute truth that, while it may theoretically exist, cannot be reliably perceived through a human lens, which you are guaranteed to have at least 1 of (yourself), and almost certainly 2 (the source), and maybe many, many, many more in between.

Imagine you had a time machine that could bring you back into whatever time you’re interested so you can watch it unfold first-hand. Ok, great. But do you trust your eyes? Did you see everything that happened? Even if you can invisibly go and explore the aftermath. Even if you can go back to the same point 100 times, 1000 times, and meticulously detail everything you find. Do you now have the perfect and unambiguous truth? Of course not. You can make mistakes, you can misunderstand. Even our eyes lie to us. Even our brain misremembers things. Different people using the same time machine to travel to the exact same point in time may see what happens in an entirely different way, may see things that you did not see. Who’s right?

I know you think you’re looking for the absolute unvarnished truth, but you are chasing a phantom. Your goal is not realistic. At some point you have to arbitrarily accept and define what errors and limitations the sources you’re drawing your understanding from might have, and attempt to make your own interpretation of what the facts actually are. You will never know what really happened with absolute certainty. Absolute certainty is its own kind of myth and there’s some very fundamental metaphysical reasons for that. You’re not going to find a magic textbook of trustworthy history that solves that problem.

Understanding history is a process that requires connecting many different pieces of variously flawed contexts and information to paint your own, interpreted but hopefully relatively accurate picture. No matter what book you read, you cannot guarantee its accuracy and it is a fool’s errand to try, but you can continue to try to collect more evidence, more pieces of context, more clues to add more details to your picture. Perhaps you will never be satisfied with the detail of the picture you’ve created, sometimes you will have to throw your whole picture away and start to create a new and different picture on the basis of some details you find that don’t fit. You’re never going to have a perfect picture, but I think a lot of people have managed to create really pretty good ones based on a whole lot of research of many different sources and pieces of detail, not just written records alone but cultural references, archaeological artifacts, scientific analysis, and sometimes just assumptions about basic human behavior. You just have to learn who and what you can trust and how far you can trust them. Both as sources, and as interpreters. And you are always welcome to argue you own interpretation.

Basic rules: Have a strong password. Don’t reuse that password on other sites because it’s more likely one of those sites will get hacked then all your accounts with the same password will get hacked. For sites that support it, enable 2FA/MFA codes or email verification. Keep your email accounts and cell phone number/identity locked down like Fort Knox, since email and phones can be used to password reset just about anything you have, usually with little difficulty.

That said, if the accounts had no activity for 2 years, they were probably created intentionally for the purpose of spamming/selling. They may have been saving them to see if the value goes up. They might have just recently been sold to a spammer and activated in their spambots.

OpenXcom is a fantastic reimplementation of the original, and has some even more fantastic mods. I agree if you’ve never played it before and aren’t too familiar with old school “Nintendo-hard” games, it can be extremely challenging even on the lowest difficulty. Fun fact, the original had a broken difficulty selection and reset to the “easiest” difficulty after reloading any save game, so most people never truly experienced a full run at any difficulty above “easiest”, so that’s just naturally perceived as the way the game was meant to be balanced. Don’t be ashamed of playing on the easiest difficulty or using “cheat” mods if that’s what makes it playable for you. There’s nobody to judge you but yourself and what matters is that you’re having fun. And it is a ridiculously fun and replayable game, to me at least.

Lots of leopards eating people’s faces these days. Probably shouldn’t have voted for the leopards eating people’s faces party.

If you yourself use/are familiar with Linux and willing to actually test and polish your Linux version to the same standard as your Windows version, then a native Linux version is always appreciated.

However these days, it’s probably not necessary and a lazy afterthought Linux version is like a bad console port, and because we DO have the option to run the Windows version, it’s probably worse than no Linux version at all.

So it really depends on your personal feelings towards Linux, and nobody’s going to judge you for not providing a native version you can’t personally test and support. That’s why we have Proton.

Violence is an intrinsic part of fascism. It is the inevitable consequence of “might makes right”. Be prepared for a lot more violence. Probably on both sides.

They may seem like nerf when they first come out of the AI, but they turn into real bullets once they start filling people’s heads with convincing enough lies and falsehoods, and those people start wielding their own weapons against minorities, democracy, and the government. If the election of Trump 2.0 has not convinced you of the immense danger of disinformation and misinformation, I have literally no idea how anything could ever possibly get through to you.

That was unconfirmed but Louis Rossmann blew it up into a big thing. Don’t get me wrong, I love the guy, he’ll be the first one to admit he’s not perfect, but that was not his finest work and nothing about it was convincing. Brother isn’t perfect either, but as far as printer manufacturers go, they’re pretty okay.

The user is also a Russian propaganda outlet, probably.

I think context is what’s going to kill LLMs. They keep throwing hacks on top of it to try to make it understand context, but it never really “understands” it just makes it look like it is following the context by simulating a few pertinent cues. Every interaction is essentially a fresh slate with a few prompts hiding underneath to seed it with what looks like context, but trying to actually preserve the context of the model to the level that we would consider actual “intelligence” never mind long term planning and actual “thinking” would explode towards infinity so fast there are probably not enough resources in the universe to even do it once.

Back in the old days, a lot of people went through the “Linux From Scratch” process to literally build up the OS from absolute scratch. No distro, no packages, no precompiled kernel, nothing but the raw ingredients. It is a good way to really understand the fundamentals not just of Linux but of the whole computing paradigm our systems are built on. It is not as hard as it probably sounds, but it’s an investment. It takes some time and you need to put your brain in gear to actually learn.

Yeah, that’s all it is. Calibre Portable. In a folder on Nextcloud.