On the dynamic linker bypass specifically, have you looked at fapolicyd [1]? It uses fanotify(7) and the top of the README is: > The restrictive policy was designed with these goals in mind: > 1. No bypass of security…
Paying maintainers doesn't give Red Hat a magic oracle for "which commits matter for security". What you actually end up with is cherry-picking + backporting. Backporting is inherently messy, you can introduce new bugs…
amazing because of the irony, yes?
From my perspective a large factor contributing to its popularity is because of FastAPIs native integration. V2 has broken so much behavior, and the library is generally fragile and slow. Credit where it is due, it is a…
I have the same worry (although I have no evidence, and haven’t done much research into finding evidence). I've slowly transitioned from FF to Chrome over the past year, for this reason. I still use both, but am trying…
This looks super useful. It is a bit convoluted to setup WG/PiHole/Unbound/foo and link them all together. But, it is not tedious enough that I’d ever put in the time to make a whole UI to improve it. I’m glad someone…
HAProxy
The “closed door development” is a problem for their business. They don’t have that problem when they maintain it, free software aside.
A very simple haproxy/envoy/nginx config will achieve this, no?
You can encrypt them using something like https://github.com/FiloSottile/age and then just store them in git. When you need to access them, just run "age -d .." If you're paranoid you can use GPG + a smart card like a…
Vault X.509
On the dynamic linker bypass specifically, have you looked at fapolicyd [1]? It uses fanotify(7) and the top of the README is: > The restrictive policy was designed with these goals in mind: > 1. No bypass of security…
Paying maintainers doesn't give Red Hat a magic oracle for "which commits matter for security". What you actually end up with is cherry-picking + backporting. Backporting is inherently messy, you can introduce new bugs…
amazing because of the irony, yes?
From my perspective a large factor contributing to its popularity is because of FastAPIs native integration. V2 has broken so much behavior, and the library is generally fragile and slow. Credit where it is due, it is a…
I have the same worry (although I have no evidence, and haven’t done much research into finding evidence). I've slowly transitioned from FF to Chrome over the past year, for this reason. I still use both, but am trying…
This looks super useful. It is a bit convoluted to setup WG/PiHole/Unbound/foo and link them all together. But, it is not tedious enough that I’d ever put in the time to make a whole UI to improve it. I’m glad someone…
HAProxy
The “closed door development” is a problem for their business. They don’t have that problem when they maintain it, free software aside.
A very simple haproxy/envoy/nginx config will achieve this, no?
You can encrypt them using something like https://github.com/FiloSottile/age and then just store them in git. When you need to access them, just run "age -d .." If you're paranoid you can use GPG + a smart card like a…
Vault X.509