If I’m not mistaken, people who said they don’t have any are beeing held for questioning and interrogations, or maybe even denied access. I vaguely remember reading an article about this a while back, so it may not help you as much as you think.

They can (how long can they hold you based on suspicion alone?) and will cause you a lot of trouble if they don’t like what you give them.

I have no experience with React, so I couldn’t tell. Thanks for the info, I’ll keep it in mind.

I think I’ve seen it mentioned that in case RSC isn’t used, it might be vulnerable but it’s not really confirmed, but you’re right that it probably doesn’t warrant shutting down the server.

I don’t really need it that much, though, so I’ll just wait for the update, take a scour through logs and use it as a learning opportunity for forensics, and skip the reinstall.

Well, Element seems to still be running at the unupdated version even after update, so I’m just shutting the server down.

I’m bummed that it took me 5 days to learn about it, does anyone have some tips how to get early warnings for techs you’re using? I’m guessing there’s a way with npm.

Also, anyone has some tips how to properly compromise-check your server? I’m guessing there are logs to check for compromise, and audit your startup scripts for persistence? Any tools that could help with that?

Fuck, Element for Matrix is apparently build on React, and I was updating like 4 days ago after few months.

Well, time to update again, I hope it’s fine. Never really learned how to properly compromise-check your server.

If I understood it right, one of the projects he was working on as part of the experiment was the website.

Figures.

I was planning to look into Zig for this year’s Advent of Code. Haven’t really looked at it yet, but I’ve heard good things about it. Nowadays I mostly write in C# or Python for smaller scripts, so I kind of expect getting back to C-style code might have some friction, but it’s about time to refresh my memory. I had a pretty good time with Rust for AoC in the previous years (not that I ever used it for anything else), but I guess it’s time to try something else.

To be honest I never really looked into Budhism, but my only experience with the practice is from the amazing Mind Illuminated book, which I think is loosely based on their practice as far as meditation goes, while providing a reasonable context and arguments about why it works. Learning to consciously control your subconsius feels kind of reasonable, and I highly recommend the book to anyone interrested in that.

Tbh I’ve never really looked into or talked with almost anyone who’s into oculltism. I do know a few friends who are heavily into the unformalized new-age stuff, and they are definitely not ok to the point it controls their life, but I realize that it’s a spectrum (and I don’t mean it as “it’s autism” way, but that the way people approach even to the new-age stuff can be a spectrum of reasonable-dangeeous). I’m mostly sad because you can’t really talk to people like that, and share cool lore on a topic most people consider downright crazy, because there isn’t any or they haven’t done any research. Even astrology has some cool lore and manuscripts, but they usually don’t care.

I just think it’s cool, and reading about the practices of different cults and orders is extremely interresting.

I’d vager a guess that “chaos magick” has a similar problem to LaVeye’s Satanism, where you get a lot of edgy people researching the bare minimum, if even that, and just being edgy. Not that it wasn’t edgy, it’s one of the few movements that was downright off-puting for me due to how extremely selfish and arogant it is (IIRC it’s basically “I m a massive dick and walk over anyone”), but people who don’t even know what they are subscribing to are worse.

I never got that feeling from chaos magick, it felt just like you said - extremely rational, and was actually the first movement that made sense, as in “I can imagine this actually working”, with the argument “rituals work by nudging your subconsciousness to the direction you need”.

That’s basically the same as Budhissm does, just by hacks and symbols instead of just sheer practice and will. And we kind of have a proof that budhism works.

And even for someone who doesn’t really believe in magic, this makes sense and I can imagine it actually working.

Plus, doing rituals is fun, and a little faith gives a pretty fun amount of LARPing into your life, as long as you don’t let it control you and are reasonable about it.

That’s actually exactly how the 70s “chaos magick” (I.e Peter J. Caroll or Phill Hine, to list some authors) occultism works. If you get past the cringy name, it was one of the more interesting occultistm movements which actually kind of make sense even to me, as someone who’s not really into esoterism (or rather - I like researching it because it’s extremely interesting - the actual formal occultism, not new age bullshit, but would feel dumb practicing since I’m skeptical)

Their core idea is that all of the other occultist movements and orders are basically all the same - through belief, rituals and symbols you affect your subconscious to manifest change (in your subconscious behavior, not “summoning money” or “cursing my ex”), and it doesn’t matter what “flavor” / dogma / lore you choose to believe in. What matters is that you really truly belive.

So, a wiccan making circles in a forest while invoicing spirits or someone making a pizza pentagram while invoking Garfield is the same,as long as he believes into it.

The only thing that matters is that it works for you, and to find what does and what doesn’t they work with “paradigm shifts”, where you decide that " I"m going to try wicca for a year", and then you delve deep into that practice, trying to trully accept it and go all in, noting your experience and results, to see if it works for you. Some even suggest throwing a dice each morning to see what you’ll do today.

After a year, you review your results, and move on to other practice, I.e “I’ll be a christian for a year”, and you really get into it, going to churches, practicing all the daily prayers and rituals, and the like.

It’s my favorite occultism movement, because it’s one of the few where I can imagine that it actually makes sense and could work for making your life better, if you have grounded expectations of course. Having an open mind and just experimenting, as long as you are safe and don’t let it control your life, should mostly be just a net-positive, plus it’s actually fun

You’re right, I used a wrong word there. It wasn’t science, more like public perception maybe? I’d consider lack of research as a part of science, though.

I’m not sure what better word would fit there instead. I wouldn’t say it’s the fault of marketing, I’m giving them the benefit of the doubt that they thought it’s actually healthier to use this kind of filter.

The comparison that sparks to my mind are vapes. There’s AFAIK lack of research that can tell us anything about long term issues, but a lot of people consider it as healthier. But in this case, common sense is also not correct - because it kind of makes sense that it probably isn’t, and it’s just marketing.

But in the case of an asbestos filter, I can see why people (and common sense at the time) would asume that it helps.

So, I guess common sense is the word that I should’ve used, because that’s what was wrong at the time.

While I get where are you comming from, and I’m also not fan of smoking, isn’t asbestos extremely worse?

I remember my friend had a roof over his summer house that was using asbestos, and it was extreme problem. Like, you can’t even take it down without investing heavily into protection, or hiring a company that specializes in it’s diasposal, because it’s just that much toxic to handle.

My favorite asbestos trivia, which I learned only recently, is that at the start of public realozing that smoking causes cancer, one company came up with the solution of “cigaretes with asbestos filters”.

It’s kind of morbidly funny reminder how catastrophically wrong can current science be.

I second this. I only started slowly switching to nvim few months ago, and I already can feel slightly annoyed when I have to take off my hands of the keyboard to reach for a mouse, or when I’m editting a text in i.e a browser, want to make an edit few words back, and I have to spam keys like a madman instead of just jumping where I need to be.

It’s addicting and extremely comfortable, having a good keyboard navigation controls.

I really need to look into tiled window managers and a browser.

I do also like all the alt and ctrl combinations with arrow keys to move lines, blocks and jump over words.

That’s what I love the most about VIM, that it has dozen little tricks like these. Need to jump over a word? Jump to next occurance of letter L? Jump five words? Jump to second parameter of a function definition? Jump to matching bracket? There’s a motion for all of that, and more. Including “go to definition” or “go to references”, if you set up your vim correctly.

I don’t even know where to start to make vim or neovim do all that.

What I did was simply install IdeaVIM into my Rider, so I can start learning the motions while also keep the features of the IDE I’m used to, but also more importantly installed LazyVim, which is a pre-made config for nvim that can do most of that by default, or has a simple addon menu (LazyExtras) that automatically download and install plugins relevant for a language you are working on. I.e I need to work in Zig, I just open LazyExtras menu, find zig-lang, and it install LSP, debugger, linter, etc that’s specific for that language.

There are some ways how to get around NAC. If it’s older 802.1x, you can use https://github.com/s0lst1c3/silentbridge, but what usually works for us is simply cloning the printer MAC, because older printers can’t do authentication and rely on MAC whitelisting.

Making a MITM device that just clones the MAC when you plug it between the printer and the network isn’t that difficult.

But I agree, NAC is important!

It depends on how well segmented is their network, but all you might need for that is a Raspbery PI with ethernet and GSM.

I’ve done some engagements where we sent someone into the company to get in as an air conditioning tech, and when they got in he planted that device between a printer and the network. It was set up to forward all traffic, but also allowed us to connect through GSM and get into the network.

It takes like a few seconds to plant it.

Or if it’s really bad, then you might be able to reach it from the WiFi.

I’ve done exactly that, worked as a Red Team Lead, and the success rate is pretty disturbing. That, and vishing - calling people from the company you find on Linkedin from a spoofed number of their IT that they fucked something up and need to download and run this .exe to fix it before The Audit that’s currently happening notices it.

Even if we do internal infrastructure tests where they let you in, switch AVs to “detect mode” instead of “block mode” and the goal is to find as many unpatched systems/vulnerabilities as you can (instead of, well, testing the AV solution), what we usually do is run a password spray for all domain accounts with a combinations (you can try like 3 to not lock the accounts) of “<month><year><companyname>” we every single time got at least few accounts.

Fortunately this kind of tests are getting more popular, and passwords such as this should’ve definitely been caught in some kind of security test. But it is also pretty depressing, when you repeat the same test next year, and 80% of the passwords are still the same, and vulnerabilities are still not patched.

If I got a Copilot license, I’d definitely make sure to expend my quota every single day and use it as much as possible. Especially if I was “highly encouraged” to use it.

Just run a markov chain and let it talk to the thing. It’s expensive to make the queries, for MS.

My absolutely favorite take about art is the one from the edge of the 19->20th century, where they got obsessed about art having to be absolutely separated from reality, to be even worth considering, since that would only taint it, and just be perfect.

So in that case, I have no issues with separating the art from the artist. Or, since they also tried to make art out of their lives (the whole dandy thing), which made basically professional posers, I also don’t mind separating morality/reality from the artists and viewing their life as art. For example, Motley Crue were extremely bad people to be around, but their lifestyle was portrayed well enough that it does sound kinda fun (as long as you don’t actually live like that in reality), so I don’t judge and kind of appreciate them trying.

On the other hand, if someone is a dick as an artist without their behavior being refined enough to pass as an art/pose/dandyism, I make sure to not give them any money whatsoever, or promote their products, and just shittalk and laugh at them. Even if their actuall art is good, which I will probably enjoy, but will definitely not pay for.

Is it a good take on the question that makes sense? Probably not, but it does work for me.

Is it a problem anymore with proton?

Or rather – is testing the game on Linux via proton sufficient, or do you actually look for native Linux builds?

I’m honestly interested as a dev who recently released my game I worked on free time, and I decide to go the route of single Windows build + proton, since it makes the build and release process a little bit easier, since I have a custom CI/CD pipeline and adding a Linux support into it would take some time.

And as someone who has a Linux as a daily driver and game only on Linux, having the game run on it was important to me, but I honestly didn’t see a reason why go with a native build and the additional trouble it would cause with testing - because now I can just test one windows build on my Linux desktop through proton, and be fairly sure that it runs OK on both.