markstos

joined 1 year ago
[–] markstos 3 points 1 week ago

This has to be the cheapest coiled split-keyboard cable option. Creative !

[–] markstos 4 points 1 week ago (1 children)

Immich has a whole set of end-to-end automated tests to ensure they don't accidentally make public any URLs they went to be private:

https://github.com/immich-app/immich/tree/main/e2e/src/api/specs

As a popular open source project, that would be e glaring security hole.

Using this proxy puts the trust in a far less popular project with fewer eyeballs on it, and introduces new risks that the author's Github account is hacked or there's vulnerability in he supply chain of this docker container.

It's also not true that you "never need to touch it again" . It's based on Node whose security update expire every two years. New image should be built at least every two years to keep to update with the latest Node security updates, which have often been in their HTTP/HTTPS protocol implementations, so they affect a range of Node apps directly exposed to the internet.

[–] markstos 1 points 1 week ago

Yes, there are broken uses of the HTTP protocol verbs where filtering to GET won’t work.

[–] markstos 8 points 1 week ago (11 children)

A simpler way to protect a private service with a reverse proxy is to only forward HTTP GET requests and only for specific paths.

It’s extremely difficult to attack a service with only GET requests.

The security of which URLS are accessible without authentication would be up to immich.

[–] markstos 3 points 1 week ago (1 children)

Some kind of horizontal deflection — a curve to the side can still be used to slow bikes near an intersection. But here the original design practically required getting off the bike to go through it, while the path around it will hardly slow bikes at all. So both attempts were failures.

Here’s example of a newly constructed protected bike lane which curves as it approaches an intersection to slow bike traffic.

[–] markstos 2 points 2 weeks ago

I think you may be looking for a programmable keyboard.

With one, you can have arrow keys on the home row like vim, and make other universally recognized keys easy to reach including Home, End, PgUp, PgDn, App (right click), and all the modifiers. Some also build pointing devices into the keyboard as well.

I primarily use the Unicorne by Boardsource.

[–] markstos 2 points 2 weeks ago

That’s something! But it doesn’t raise any money from people with other VPN providers or who don’t want to buy a VPN service.

[–] markstos 1 points 2 weeks ago (1 children)

If you are referring to Beth Rosenbarger, she took a job with a different employer some time ago.

[–] markstos 2 points 2 weeks ago

The mayor’s appointment to the historic preservation commission had no experience with historic preservation. The appointment did not get the motion and second required to bring it up for a vote.

[–] markstos 5 points 2 weeks ago

Counterpoint: for those who prefer split ergo keyboards, the internal keyboard on laptops is rarely used.

A tablet where you can bring your own weird keyboard to pair with it is better.

[–] markstos 7 points 2 weeks ago

Signal does a decent job of encouraging people to make one-time or ongoing donations to the service. I’ve supported them multiple times because they gave me a prompt to do so.

I don’t recall Firefox ever asking for a donation or subscription.

[–] markstos 4 points 2 weeks ago (6 children)

Mozilla could have allowed people the option to subscribe for a modest fee in addition to giving it away for free, to diversify their income and be less dependent on Google, but they have not been trying that hard to develop other revenue streams.

 

To open a file relative to the current one in Helix, you can to the do the following with 24.3:

:o <C-r>%<C-w>

Here, the Control-R allows you to select a register and the special register "%" contains the current file path and inserts into the command line, while the final Control-w chops off the last part of the file name leaving with you current directory.

This is like :o %:h from Vim/Neovim

 
 

Started yesterday at 3:40 Eastern. 20 hours later, there’s still no ETA for a fix.

No note about it on their status page. Not impressed.

Not clear how many people are affected. A co-worker two miles away is not.

The GigabitNow status page does mention some maintenance work in area the day before this event. My guess is it’s related.

 

I'm looking for a simple sendmail replacement to receive local mail, such as from cron and service failures and forward it to on to a real SMTP server.

I have used msmtpd successfully but thought I'd ask if folks have other solutions they like.

 

And then I moved colon and semicolon to layers and re-assigned that outer pinky key to my rarely used AltGr key.

view more: ‹ prev next ›