That needs to be in the form of a question, right?
It’s worse. We are reverting back to the age of lügenpresse and hearsay comes in short-form video formats.
Many people simply do not care (or are even aware) if a source is trusted if the message aligns with their own bias or the message is presented as a new “fact”. Trust is irrelevant, unfortunately.
“real” is subjective.
I would look into something like Doppler instead of Vault. (I don’t trust any company acquired by IBM. They have been aquiring and enshittifying companies before there was even a name for it.)
Look into how any different solutions need their keys presented. Dumping the creds in ENV is generally fine since the keys will need to be stored and used somehow. You might need a dedicated user account to manage keys in its home folder.
This is actually a host security problem, not generally a key storage problem per se. Regardless of how you have a vault setup, my approach here is to create a single host that acts as a gateway for the rest of the credentials. (This applies to if keys are stored in “the cloud” or in a local database somewhere.)
Since you are going to using a Pi, you should focus on that being a restricted host: Only run your chosen vault solution on it. Period. Secure and patch it to the best of your ability and use very specific host firewall rules for minimum connectivity. Ie: Have one user for ssh in and limit another user account to managing vault, preferably without needing any kind of elevated access. This is actually a perfect use case for SELinux since you can put in some decent restrictions on the host for a single app (and it’s supporting apps…)
If you are paranoid enough to run a HIDS, you can turn on all the events for any type of root account actions. In theory once the host is configured, you shouldn’t need root again until you start performing patches.
Mostly by Indian and Vietnamese slave labor: https://www.androidauthority.com/where-are-samsung-phones-made-3251712/
That’s what you just got shown: Shove the configgy bits into Git.
You will likely have to find the configs you want to save first.
Instances don’t have to be federated and instances federate and defederate from each other often enough. The goals of instances may not align, and to keep conflict low(er) it’s better if some instances cut ties.
TBH, this sounds like a technical issue between ml and nl or just a typo in the way you are posting.
While I thought it was basically an on/off switch for defederation, I suppose there could be a way to block updates from instances without fully defederating.
I am not going to get into the drama, but ml is defederated at a little higher frequency, but it’s not as high as some others. It’s because reasons, and is not relevant to this particular thread.
“the gays” in Russia:
Conspiracy theories were supposed to be fun and not really taken seriously. Once “groups” like Q-Anon showed up, all the nutters quickly linked everything to politics and the conspiracy theories that may have had a believable hint of truth just got destroyed by complete bat-shit crazy rambling.
Sorry if it sounded like my rant was directed at you as it absolutely wasn’t. Your comment triggered me, because I absolutely fully agreed with yours as well. ;)
setenforce 0
is much cleaner, I have found.
Its just complex
When a security mechanism becomes more complex to manage than what it is supposed to protect, it becomes a vulnerability itself.
If you had a minimal system that you built from the ground up yourself and wanted to only have that system function in very specific ways, SELinux would be perfect. I would go so far as to say it would be nearing perfection in some ways.
Sorry, but in the real world, ain’t nobody got time for that shit. If you use auto configuration tools or pre-canned configs for SELinux on a system you are unfamiliar with, it’s more likely to cause application issues, create security gaps and will likely be shut off by a Jr. admin who really has no fucking clue what he is doing anyway.
It’s just easier to keep your system patched and ensure basic network security practices anyway.
It’s not impossible to manage these days. In the early days it was, but most everything is automagic now. If I am not mistaken, SELinux can be enabled to ‘log only’ which would give you data better handled by a HIPS anyway. (Don’t quote me on that.)
Holy fuck you are whiny. You really don’t understand the fundamentals of how these platforms work, do you?
I mean, sure. You are exploiting your whining for attention, so you understand that, at least. To everyone else, you just seem like you are stirring the pot because you like it. That is just toxic.
Unfortunately, AI has the creativity of a turnip.
“I was training my AI on porn.” Problem solved.
“Political headwinds” is putting it mildly.
You paid for a Reddit account? I was on there for 11 years and I don’t recall an option to pay for an account. (I probably just ignored it… Was it an ad-free thing?)
Both Buddhism and Taoism have some really good aspects. I would say they are philosophies and not religions and probably not in the context of a “faith” for this post. (If someone else wants to consider Buddhism a religion, you go right ahead. I won’t argue but assume I silently disagree.)
I am absolutely atheist, but still having some guiding principles is still important. If a concept sounds good and seems like it has good intentions I’ll just add it to my collection, discarding any pointless rituals or “magic”.
Doing good things makes me feel good and I like feeling good. I say that it’s ok borrow from any ideology that has well intentioned principles.
I’ll add the disclaimer that the term “good” is subjective and I still had to learn what “good” means to me over the years. Buddhism and Taoism have always been aligned with the way I perceive life and are decent enough to extrapolate what the word “good” should mean.
Am I dual faith? No. If we ever get in a deep discussion about core ideals, there are going to be similar concepts I share with many religions, though.
Banned from /r/Movies for calling out Tom Cruise as a scientologist piece of shit and encouraging people to boycott his movies. It was on a Mission Impossible circle-jerk post, so it likely did ruffle some feathers.
(I got a 3 day ban for something dumber, but I consider the /r/Movies ban more brag worthy.)