Spyke

Replies

Comment on

For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?

I have HTTP(s) exposed, plus a wireguard port. HTTP points at a traefik gateway running in a kubernetes environment, based on hardened talos and using cilium network policies to isolate and direct traffic. I know that I am not super safe, but given this weeks news I think the only way to be truly safe in terms of cybersecurity is to use paper notebooks, snail mail and a subscription to the local print newspaper and no digital services whatsoever. In other words: how certain can we be that tailscale, or wireguard in general, or any other securit tool isn‘t suddenly at risk? Can we live with that risk? There always was a trade-off you had to make. Unfortunately „just use lets-encrypt, fail2ban and key-auth for ssh“ isn‘t really cutting it anymore.

Comment on

Helldivers 2 sees over 2,600 negative Steam reviews in one day, a 40x increase from 2 days ago, as players accuse Arrowhead of forging the Galactic War narrative and apparently forget how war works

the continued fall of Super Earth cities has rekindled old accusations of Arrowhead cooking the books to make certain Galactic War outcomes much more likely, or all but impossible, to shape the broader narrative and set up plot twists.

Isn‘t that just how storytelling works? I guess with this many players, there will always be a large number of players that disagree with the game master or see through some of their shenanigans.

Comment on

Which kind of hardware (used computer/single-board computer/dedicated server machine/NAS/something else) and operating system do you recommend for a home server like this?

I would always recommend good old Debian for a mostly „it just works“ experience. You‘ll find debian packages for most if not all the things you mentioned. Alternatively you could go the steeper route and use an immutable OS like Fedora CoreOS or Fedora Silverblue for a more desktopy experience.

Hardware wise I‘ve been told the Intel NUC kits work wonders, or similarly specced boxes from Asia. You might get like 32GB RAM, a fairly recent CPU for <400€. Personally I‘m using a 12 year old Mac Mini until it dies, running debian.

Comment on

sudo makes no sense

Reply in thread

The prompt for your password is to prevent someone that happens upon your unlocked computer to take it over. Also I think knowing which commands can be run as superuser by a given user is considered a security issue, hiding that info behind a password prompt should at least help.

You can turn just turn the prompt off by adding NOPASSWD to your account in the sudoers file(s).

Comment on

unofficial chatgpt?

What is an unofficial ChatGPT API supposed to be? One where you dont have to pay? I‘d hazard a guess that if that exists, it would just be a wrapper around someone elses API token, for which they are paying. Questions is whether they know about that usage…

Comment on

Production breaking driven developer

Reply in thread

There are certainly different kinds of developers writing different types of tests. I usually only write the tests first if I‘m adding a critical functionality to some method or function already present. However having automated tests can help you when you can‘t easily understand the code or when you want to refactor that code to make sure you‘re not breaking existing functionality.

What you‘re describing with external devs often happens when these devs can‘t access the real data - plus you often want these tests to be automated, which usually brings with it the requirement of atomicity, i.e. you want one test run running in parallel with another not effecting each other. That usually doesn‘t work well with a real database (unless you really take your test engineering to the overengineered tier).

games

Comment on

Got Kingdom Come Deliverance 2 (retail, PS5) early, AMA

Reply in thread

To be honest, it’s still a little hectic for me, but I feel the most notable change is that you can avoid being countered / masterstriked. By positioning your weapon, you can block, perfect block (allows you to strike back) or masterstrike which remains unblockable. There is now an interesting back and forth between blocking, striking back and being blocked, which can go on forever - until someone has no stamina left or someone pulls off a masterstrike.