I just recently went through a much more benign, but scary nonetheless version of this.

I realized that my Ansible directory, that I had made public on GitHub to share as an example to some folks, had secrets committed and pushed.

It was the direct URL and credentials of an app I developed to store non-PII customer data. Now, it wouldn’t be the end of the world if someone noticed this and scraped the data, but it wouldn’t be good, either.

Luckily, I have Caddy access logs, and it appears no one ever accessed it.

So I pulled the secrets out of the Ansible directory and made the repo private, I rotated the credentials, and installed Crowdsec to monitor Caddy access logs and ban bad actors.

I only noticed the secrets because I had just setup Authelia as an OAuth2 provider for my homelab, and I was adding it to my backup scripts.

For appimages, I use https://github.com/mijorus/gearlever

Tarn seems like such a genuine, nice guy. He gets it.

Bazzite/Bluefin/Aurora do all updates in the background. Flatpak and Brew as well.

So all you have to do is restart your computer on a regular basis and everything just works.

It’s what make them nice for people who use their computers like a Chromebook.

No one is impressed with this. This is cringe. Go touch grass.

I know people who are ready to leave Windows, but this and kernel level anti cheat games are keeping them away from Linux.

And my constant reminders that they didyn’t need those games doesn’t work.

I was devastated when Google Reader shut down. I switched to another service after that and it shut down not long after that. Maybe a year or so.

I would have paid for that service at the time.

I’ve had two of those in the past and really liked them but they died on me too fast.

Being immutable means you have fewer options for building out specialized hardware support.

With Distrobox you can install any Linux software you could on any other distro. Immutable isn’t the hurdle people make it out to be. It’s just different than what people have been used to for so long.

Regarding certificates. I use Caddy for things like that. Even stuff that I don’t want publicly available. It is technically public, but relatively secure.

I use a combination of basic authentication plus a rate limit so the password cannot be brute forced. And then I have a bypass so that auth is not required on my home network. I think it works pretty well.

What topics are we allowed to bring up, my lord?

Their documentation says Debian is supported.

These ghouls are used to things just working.

Yeah. I can’t tell if it’s a bit, though.

So you just believe that Russia is entitled to the entirety of Ukraine, then. Really living up to your username.

You believe that Russian civilians in Russian-occupied lands are paying taxes to Ukraine?

I understood the context. My comment stands.

You think Russia is occupying parts of Ukraine and is paying taxes to them?

The aggressors are not the victims.

Your critical thinking abilities stop at “Western bad”.

Empire is evil even if you like the color of it’s flag.

Look, I get it, you really want to pay the game. But if it’s a game that might die due to low player count, why bother?

I see two main outcomes: 1) it’s amazing and you have such a great time playing it that you’re extremely sad when it dies, or 2) it’s just a game, you play it for and while and it’s no more fun than any other game you have.

FOMO and hype are extremely effective, but not for your benefit.