Desde que volví del HackMeeting mi equipo ha sufrido una modificación importante
#viernesdepegatinas

This morning, I have successfully installed #NetBSD on the newish laptop. After 30 years of running Linux exclusively in this house, today is the beginning of a new era. #RUNBSD

@samir Luckily, most of them are. But sometimes I can't disclose them. Especially if they have an happy ending, I protect the customer and/or the persons involved.

We all can make mistakes. But if we perseverate and continue to insist we're right even when disasters happen...well... 😉

Ok, looks like this is the week of funny experiences.

Customer: "I had an AI check our server and it says the SSH port is open and that's not very secure."

Me: "Yes, you asked us to open it so you could access the server via SFTP (actually, you wanted FTP, but we discussed it a bit and found this compromise). Don't worry, it's only accessible from your IP and you land in a dedicated FreeBSD jail. From there, you can only access the 'exchange' directory on your server, where you can upload and download files without affecting the application."

(NB: I had suggested a VPN, but they declined because it was too complicated.)

Customer: "Yes, but maybe it's still insecure. Can't we close it?"

Me: "No, unless you want to lose access to that directory."

Customer: "Ok, thanks."

One hour later:

Customer: "Hi, I think we've found a solution. We've just created an app (!!!) with AI that lets us access the files anyway, but more securely than SSH (!!!). Can we install that and close SSH? Oh, and not in the dedicated jail, but directly in the application's jail, because it needs access to the application's files."

Me: "Frankly, I trust SSH in a dedicated jail, restricted by the firewall, a lot more. I don't think this is a good idea."

Customer: "Ok, thanks."

Half an hour later:

Customer: "Ok, now it's secure. I had another AI check it and it found some security issues, but it fixed them all. Can you install it and disable SSH?"

Me: "I strongly advise against it. I can see problems coming."

Customer: "Ok, thanks."

One hour later, my phone rings.

Their internal IT guy (who has access to the machine, which, after all, belongs to them) had given the AI the login credentials to go ahead with the operation.

Except the AI had managed to lock itself out via the firewall, without even starting the app. And now they couldn't get back in.

Fortunately, I had my own access, via VPN, to a separate jail that the AI hadn't touched (or even considered).

Customer: "SORRYSORRYSORRYSORRYSORRY! From now on, we do things your way."

Well, at least it ended well.

PS: The customer knows I'm sharing this story and agreed to it.

#IT #SysAdmin

@FossThought or on a BSD. Maybe NetBSD. It's there. It works. It's portable.

ソースネクスト、セキュリティ関連のソフトを手がけているらしいけどパスワード平文で保存してたの​​

あっごめん！
手がスベスベになった！

The Funny Number Paradox states that there is no least funny number, because while the theory informs us that the least funny number is 68, that actually makes it incredibly funny

@violet0461 In this case you are hopefully not part of the "some cases". Otherwise it is in the process of investigation.

~ @beowulf

@violet0461 Do you experience any issues?

~ @beowulf

Varjokirjamessut

https://varjokirjamessut.org/fi/

Toivotamme sinut lämpimästi tervetulleeksi Helsingin Varjokirjamessuille, tuttavallisemmin Varjiksille, Pasilaan lokakuussa. Varjokirjamessut on vaihtoehtoinen kirjallisuustapahtuma, jossa käsitellään laajasti yhteiskunnallisia teemoja, kuten antifasismia, antimilitarismia, anarkismia, ilmasto- ja ympäristökysymyksiä, eläinten oikeuksia, tee-se-itse-kulttuuria, feminismiä, antirasismia ja queer-aiheita.

Tänä vuonna meillä on ilo järjestää Varjokirjamessut kolmipäiväisenä tapahtumana perjantaista sunnuntaihin 23.–25. lokakuuta 2026. Varjokirjamessut järjestetään Rauhanasemalla (Veturitori 3) ja ohjelmaa on tänä vuonna lisäksi Pasilan kirjastolla (Kellosilta 9) sekä ensimmäistä kertaa Naapuruustalo Pasilassa (Topparikuja 2).

Tää on ollu kiva aiemmin, suosittelen! Ja ilmainen on, toisin kuin se toinen tapahtuma.

#kirjat #kirjallisuus #tapahtumat

Attention: We currently advise against upgrading to Forgejo 17.0.0. An issue is currently being investigated that prevents pushing, merging, or other code operations in some cases.

If you haven't updated yet, please wait until the issue has been investigated more thoroughly, if possible.

@sladew 🙌

DUO PRE-ORDERED

Feliz viernes a quien se lo merezca

@glyph I've been saying this for years ever since "it just speeds up the boilerplate" first ruffled my feathers and I had to sit and examine why.

If boilerplate is somehow prohibitively uncomfortable to write, that's a pain signal here to tell you something. You're missing an abstraction! Just like touching a hot stove should signal you to not do the thing. Choosing to just do the boilerplate faster with stolen training data, even if it's a task the bot can easily do correctly, is like shooting up morphine instead of moving your hand off the stove. And nearly all LLM apologia is like this!

If nothing else, I have a far more fundamental respect for friction* and pain signals than I did five years ago.