I have no idea why slashdot is mangling quotes from iOS. Oh how the mighty have fallen.

With the upswing in supply chain attacks, local only is still a huge deal. In this context, if Iâ(TM)m understanding this correctly, itâ(TM)s not a huge jump to have an isolated, unprivileged package install trigger a root level exploit.

I havenâ(TM)t swapped distros in a long time. Whats it like? Any useful utilities for making the transition not awful, or do we still just make backups and restore?

Am I the only one noticing a huge escalation in the number of seemingly rookie mistakes at large companies that are leaning into AI the hardest? The internet has seemed a lot more feeble lately. I encounter pretty large bugs on a regular basis, downtime seems to be going up across multiple respectable services. I do try to not pin a convenient narrative on a series of anecdotes but it is definitely standing out to me.

To me the hoops that smoothbrains will jump through to avoid IPv6 and stay on legacy IPv4, especially when hosting, is pathetic. NAT, port forwarding, tunnels, blah blah blah blah.

I have something like ~1.2 trillion times the number of routable addresses that the entire IPv4 space has. Not all are reachable, of course, just the services that need incoming access and they're each on their own isolated DMZ.

Forgot to add: if you enable IPv6, be sure to use the browser extension IPvFoo. It shows a small 4 or 6 in your URI bar to let you know what protocol you're connecting to. Once enabled, you'll see just how much stuff out there actually is IPv6.

Started the move about 18 months ago when I decided to get off my lazy ass. My ISP gives out a /56 prefix, so that lets me run 256 /64 subnets/VLANs in the house, currently there are ~10 in use. Everything get a GUA through SLAAC and I use RAs (Router Advertisements) to give ULAs to everything. Any external facing services get their own VLAN and /64 for the system(s) as needed. Firewall blocks all incoming as they usually do by default and I punch a hole for the external-facing systems. They can't reach back into the network, they only answer the phone. All the systems update DNS dynamically if the prefix or full address ever change.

I have an SSH bastion set up. In all this time there has not been a single SSH attempt from the internet. On IPv4 it was constant background noice.
For those legacy IPv4-only systems on the internet, I set up NAT64. I have an IoT VLAN and IoT 2.4 GHz wireless network that are only IPv4 because a lot of IoT network stacks are junk.

I'm still farting around with it, but man oh man, there's no way I'd go back to IPv4. It was one of the best moves I've done in ages.

I'm not seeing a paywall on the site. uBlock Origin must be doing something.

The UHF app on our Apple TVs & iOS devices and the UHF Server in Docker to act as a PVR gives us everything for a few $ a month paid in crypto.
We haven't had cable since ~1999-2000. Downloading and the *arrs have kept us happy, but the better half wanted to check out some live sports. So IPTV it was.

One of our guys said something to the effect of "Copilot is Corporate Chat. It knows all the useless filler of management-speak, but lacks the competence of the people in the trenches.

Ouch.

I've used Claude at home for ages. Work was wanting to get some AI stuff for us and the only 'blessed' one is CoPilot. Everything else it blocked. All senior management seems to know about AI is "Hurrr... Copilot and ChatGPT."

Out team of ~8 (pentestesting & VA) were unanimous about Copilot being crap and Claude being the top dog. So some higher ups OK'd a Claude Teams package for work. To bypass the CorpSec tards, we use it from our lab environment that has its own unmonitored link and IP range.

Anthropic/Claude is just so far ahead of OpenAI/ChatGPT and MS/Copilot it's not funny.

I ran a dedupe on my drive and eliminated 8 redundant copies of the goatse guy.

#SaveWaterWithGoatse

My wife worked extensively with Michelin-starred chefs in the Bay Area for a decade. I've been lucky enough to get to know some of them and their mentality.

The best of the best are always trying to be, well, better. Food is only one of the aspects that they think about- they also want you to feel welcome and respected. As the article mentions, some chefs have kept notebooks of guest preferences in the past. If they can use someone's Instagram account to get a sense of who they are before they come in, they can make sure that the waitstaff are treating them in a manner they would like. For example, if someone seems like they are introverted, then maybe they back off on the social interactions with them. If they seem to be someone more extroverted, then they get more attention.

Chefs want anyone that comes in to feel like they are special. This is just a new innovation in that direction, and it's not something that you're going to find happening at Chili's anytime soon.

Last October, YouTube removed his Jellyfin tutorial, though that decision was quickly reversed after appeal. This time, his appeal was denied.

OpenSSH is the best known OpenBSD project, but they also makes pf (used in pfSense, OPNSense, etc.), OpenBGP, OpenNTPD, OpenSMTPD, OpenIKED, LibreSSL, etc.