• 1 Post
  • 513 Comments
Joined 2 years ago
cake
Cake day: May 31st, 2024

help-circle


  • No one “forgets” temperatures dude, 17°C might be meaningless to you but to me it’s just shirt and light jacket weather. Nobody forgets what the body temperature in Celsius is. It’s two digits, your brain can do it.

    Fahrenheit simply puts the human at the center where physical phenomena like water freezing and boiling happen at “random” points on its scale, while Celsius takes two simple, constant (as long as you’re not on a mountain), verifiable points based on physics, where the temperature of a human body falls on a “random” place on it.

    The point is very simple: if you have an unlabeled thermometer and need to calibrate it, you stick it in freezing water, mark 0, stick it in boiling water, mark 100, divide into equal segments, and it will be exactly right. If you want to do the same for Fahrenheit, you need another reference thermometer. (Unless you happen to have the same unspecified mixture of water, ice, and ammonium chloride that Fahrenheit supposedly originally used to mark the 0 point)













  • unless I put SELinux in permissive mode, which the Internet says is a bad thing.

    I am also The Internet, and I say unless it is an internet-exposed service, just do it. More security is never bad of course, but process isolation and privilege escalation prevention is pretty low on the list of security measures you should focus on. First thing, unless it’s meant to be a “public” service (one that someone without pre-authorization may access), it shouldn’t be exposed to the internet at all, and that alone brings the threat model from “definitely will be scanned and automatically attacked, decent chance it gets pwnd if you don’t have good passwords and update often” to “someone needs to be both skilled and targeting you”. Spend an afternoon or two setting up a VPN so you can access your services from wherever, and share them with select people.

    SELinux is the cause of many headaches, and its main proposition is against untrusted code or in a shared system. If it’s your box, in your network, and you’re not aiming for a Red Hat certification, it’s ok to disable it.