

Go is verbose? Have you ever written Java?


Go is verbose? Have you ever written Java?


I just wanted to show how Docker can be abused for privilege escalation, when it’s not properly configured


docker run --rm -it --privileged --pid=host debian:12 nsenter -a -t1 "$(which bash)"
If your user is in the docker group, and you are not running rootless Docker, this command opens a bash shell as root.
How it works:
docker run --rm -it creates a temporary container and attaches it to the running terminal--privileged disables some of the container’s protections--pid=host attaches the container to the host’s PID namespace, allowing it to access all running processesdebian:12 uses the Debian 12 imagensenter -a -t1 enters all the namespaces of the process with PID 1, which is the host’s init since we use --pid=host"$(which bash)" finds the path of the host’s bash and runs it inside the namespaces (plain bash may not work on NixOS hosts)

I have managed to get to locked out of my own Nextcloud. It was encrypted, and I didn’t know that I had to keep a backup of the keys in its config files. I only had a RAID1 for the user data.
Heroes of the Storm also works in Lutris


No, there is only one definition for open source:


I use a VPS for port forwarding. Maybe my case is more special, as I already had the VPS for web hosting.


Keep in mind that a lot of webpages block traffic from datacenters, as they are trying to protect themselves from AI scrappers. I recently had an issue with OpenAI making thousands of requests to one of my servers.


blocked in acpi
install Linux
Huh? How could Linux solve an ACPI problem?


This doesn’t answer the Linux part of the question.
What does “licensing issue” means for the laptop itself? Is HEVC disabled at BIOS/firmware level, or it is just disabled at Windows driver level?
In the latter case, HEVC should work with Linux, as it uses generic Intel/AMD drivers, instead of specific Dell/HP ones.


Some people don’t know it, but public transit is not always an option. Examples:


Could this voluntary chat control be a weapon to kill encrypted messaging, through defamation?
If the non-encrypted messaging apps start promoting that they have implemented measures to protect children, could this be used to make people believe that other services support child abuse?


Did you bother to read the 3rd part of my previous comment?


If I understand correctly, those mirrors will reflect sun rays, that would otherwise be wasted across the universe, to earth.
So, you are fundamentally wrong. The very idea is to reflect sunlight that wouldn’t otherwise hit the planer. This WILL add extra energy to the planet.
Even if they used sunlight that bounces off earth, they would still cause issues, just a little less serious. This is because they would be trapping energy that tries to leave the earth.
Maybe… I haven’t tried it to be honest. I will need to setup a VM for that, as my personal files would get wiped anyway.
If you want to test it yourself, try to rm while nixos-rebuild is running.
NixOS has rm. But it’s not under /bin. There is no /bin in NixOS. The user’s programs are inside /run/current-system/sw/bin, and those are symlinks from files hidden in /nix/store.
Running rm -rf / --no-preserve-root under NixOS, will not nuke the entire system, since /nix/store is mounted as read-only, and only remounted as rw when new applications are downloaded, or older unused ones are wiped.
Please use “/usr/bin/env [command]”. Otherwise, it will not work on NixOS


It can be simplified with the use of runCommand:
{
boot = {
plymouth = {
enable = true;
theme = "breeze";
logo =
with pkgs;
let
src = fetchurl {
url = "https://raw.githubusercontent.com/NixOS/nixos-artwork/refs/heads/master/logo/nix-snowflake-rainbow.svg";
sha256 = "sha256-gMeJgiSSA5hFwtW3njZQAd4OHji6kbRCJKVoN6zsRbY=";
};
in
runCommand "out.png" { } "${imagemagick}/bin/magick -background none -size 200x200 ${src} $out";
};
};
}


It’s time to switch to IronFox
Can you elaborate? To me, Go seems to have less boilerplate.