Read the Jesus parts again. Would Jesus like that?

  • 17 Posts
  • 898 Comments
Joined 3 years ago
cake
Cake day: August 12th, 2023

help-circle

  • Clearly you know of lot about this. Here are some comments for the next human.

    Deny all modules seems more possible than a whitelist approach. To deny all, the command is likely “sysctl kernel.modules_disabled=1”.

    Whitelisting is harder. One could store a list of all loaded modules on a working system. Store a list of all kernel modules currently installed on the system. Compare the lists and remove from the “all” list the “running” list (grep will do this) and write it to the blacklist file.

    The problem with the Whitelisting approach is that it needs to run after every kernel module install (which is doable).

    If the above is the case, then someone must have automated this already, but I cannot find it quickly. (I checked Debian’s package repository.)









  • There are more options than the two you mentioned. Listing a few as more people should remember them. I did get a bit off topic…

    1. Use huge company to provide service.
    2. Provide service oneself (, likely with Open Source. )
    3. Use small or medium company to provide service (, likely with Open Source. )
    4. Use huge company for things huge company is great with, but keep “crown jewels” of company on internal self provided systems.
    5. Use a small or medium company to provide a service, and another series of small or medium companies to check on the first company.
    6. Use a huge company based in a country that is very serious about laws and putting CEOs in prison for wrongful acts.
    7. Do not do the thing. (Included for completeness.)
    8. Do the thing not on a computer. (Violation of privacy could result in violation of more serious laws.)
    9. Use an older technology on a computer.
    10. Use the huge company to provide service, but ensure the data includes insane things.


  • business with a contract

    I always wonder at this and have cautioned my managers repeatedly. Yes, we have a contract, but they have a literal army of lawyers and we have less (one lawyer one retainer for hourly work or a small grouping focused on taxes and employment law). As if our ownership won’t bend over backwards to avoid suing a large company like Google, AWS, Microsoft, or Oracle. (Maybe OpenAI and Anthropic are sue-able by a $100 million corp?)

    As proof I offer the lawsuits between businesses that have proceeded far enough the general public has heard about them. Not a specific one, just all of them.




  • Things are not normal. It is like a lot of people are waiting for the next shoe to drop.

    Resistance is legal, so long as it does not go “too far”. I am near an “ICE” city. When empty cars with cut seat belts started showing up, there was an added level of horror film unease. The kidnapping by random “not ICE” didn’t amount to much, though we have yet to truly know who was kidnapped by “not ICE” (likely few). The murders have on not been good, but are at least fairly public.

    No one is arming, as a shooting war on American soil will get everyone killed. There were days I wondered if we would be bombed. So far the “keep calm, and resist.” Crowd is making progress, which helps keep tensions from boiling over.

    Elections are coming up, which is providing an outlet for energy. Real voting won’t be until November, and zero changes will happen until January 2027. Expect crazy shit to ramp up.

    America is huge though. For any trend in one location, the opposite is happening elsewhere.

    This is a very good time for the privileged to take a “mini-vacation”. It both slows production and gives one a chance to enjoy their last days on Earth.





  • Weekend commits are actually less likely to introduce vulnerabilities, but they take 45% longer to fix.

    I can only think of contributors being nice and relaxed, doing their most brilliant work. Work that is a bit too brilliant for the same contributor to fix any bugs found during any other conditions.

    insert that one quote about being too smart for one’s own good

    Edit: Weekend commits are 8% less likely to have bugs, but those bugs take 45% longer to fix! This site is gold.

    Edit 2: that may not mean what it looks like at first blush.