Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
(The Center Square) - Following through on a pledge she made months ago, Harris County District Attorney Kim Ogg on Friday announced her office was seeking the death penalty in the prosecution of two illegal foreign nationals from Venezuela now charged with the capital murder of a 12-year-old Houston girl.
Fridays at 10:30 PM ET Episode Archive: https://rumble.com/playlists/XmuKEhvp4Cw Join your favorite Badlanders as they wrap up the week with a fun, casual conversation. Donate to this Show: https://ba
"Kenya has stopped bill gates by Denying him immunity!! Bravo Kenya, Bravo!"
"For we wrestle not against flesh & blood, but against principalities, against powers, against the rulers of the darkness of this world, against spiritual wickedness in high places." Ephesians 6:12 KJV"
"Our public servants fail miserably on all counts."
"Morality has practically gone away Dr John which Breaks My Heart."
The Seven Principles of Public Life, Follow John on Patreon, https://www.patreon.com/c/JohnCampbell2Nolan Principles https://www.gov.uk/government/publicatio...
Controversial viewpoint: you aren't allowed to use an all gender restroom unless you personally embody every gender that exists or could potentially exist in the future.
Crypto is the ultimate right wing "investment" it contributes absolutely nothing to the economy. It doesn't promote or provide any positive functions in the economy or society. All it does is waste massive amounts of energy. It allows people to feel like they are smart and successful while being neither. #crypto #blockchain
You need to have subscription to them to keep working, although some models are free as long as the occupant and their visitors watch the advertising feed that plays on its built-in flat screens.
"Kennedy's Lawyer Has Asked the FDA to Revoke Approval of the Polio Vaccine."
The New Kimber CDS9 is a 9mm Micro Double Stack 1911. Optics ready, accessory rail and a lot of major upgrades over the Micro 9. For those who like the 1911 ...
Rumble Premium https://rumble.com/premium/salty Save $10 Off Subscription Website: https://saltmustflow.com OTHER PLATFORMS: Rumble: https://rumble.com/c/SaltyCracker Locals: https://saltycracker.loca
So under Assad's regime, people got tortured in jail. Israelis torture prisoners in the tens of thousands and sodomise people to death, medieval style.
Andrew Wakefield was a sham. He was paid by an attorney to find evidence that the MMR vaccine causes autism and, when he couldn't prove it, he fudged the study and made up a fake disease. Meanwhile, he intended to further cash in, attempting to patent a stand-alone measles vaccine while claiming the combined vaccine was the cause of his made up disease. This is all well established, and yet he remains a folk hero to the antivaccine crowd. They are aggressively ignorant and wilfully gullible.
Wikipedia is known as “the encyclopedia anyone can edit”. On first glance, it is an idea that is genius, a collaborative encyclopedia project which can be rapidly updated, improved and now has over 6.5 million articles.
Ever wondered how some websites achieve a premium look without a hefty price tag? As an expert who has guided countless small businesses in their online journey, I’m eager to divulge insider secrets on securing outstanding websites without overspending. Let’s explore how to identify cheap web design services that prioritize quality.
Visualize web design as constructing a masterpiece with building blocks—you don’t need the priciest set to create something remarkable. It’s all about strategic planning and efficient use of resources.
Focusing on Core Requirements
Just as you wouldn’t wear your entire wardrobe at once, your website doesn’t require every flashy feature from the start. When searching for cheap web design services, concentrate on the core functionalities. A sleek, responsive website that performs seamlessly across devices serves as a robust foundation—everything else can be layered on top.
Assessing DIY Possibilities
Imagine baking a birthday cake. While it’s enjoyable to bake it yourself, sometimes it’s wiser to seek assistance from a skilled baker. Similarly, while DIY website builders are available, professional cheap web design services can save you time and avoid costly errors.
Implementing Cost-Saving Measures
Utilizing pre-designed templates is akin to coloring within the lines of a coloring book—the structure is provided, and you simply infuse your unique style. Many cheap web design services offer these templates, allowing you to save money while maintaining a polished appearance.
Begin with the most critical pages, such as an About Us and Contact section. You can always expand later, much like adding more blocks to your structure. Remember, even minimalist designs can exude charm if complemented with high-quality visuals and engaging content.
Enhancing Collaboration with Designers
When engaging with cheap web design services, clear communication is vital. Think of it as placing a pizza order—you need to specify your preferences! Share examples of websites you admire, your preferred color schemes, and the functionalities you envision. Be transparent about your budget constraints.
Uncovering Hidden Talents
Sometimes, the most affordable web design services emerge from unexpected sources. Aspiring web designers, often students, bring fresh perspectives and competitive rates. Local designers may offer more personalized service compared to large firms. Some providers bundle services, akin to purchasing a complete meal instead of individual dishes.
Navigating Potential Traps
Just as you wouldn’t purchase a bike without brakes, be cautious of designers who lack a portfolio, make unrealistic promises, or struggle to articulate their processes.
Ensuring Continuous Support
Obtaining a website is just the first step! When selecting cheap web design services, inquire about ongoing support to keep your site secure and updated. It’s akin to pet care—regular attention ensures longevity and health.
Personalizing Your Online Space
The best cheap web design services will help you craft a website that feels uniquely yours. It’s like decorating your home—visitors should immediately sense your personal touch! Incorporate your favorite colors, tell your story through images, and use conversational language.
Envisioning Future Growth
Remember, affordability doesn’t equate to inferiority! Numerous cost-effective web design services deliver professional, functional websites. The secret lies in finding a designer who aligns with your vision and helps you achieve it within your budget.
Consider future enhancements, such as e-commerce capabilities, video integration, or user comments. A forward-thinking website builder will assist you in planning for these additions, even if they’re not immediate priorities.
Whether you’re a blogger, a small business owner, or an individual sharing your ideas, there are cheap web design services available to turn your online aspirations into reality. Just like building with blocks, the key is starting with a solid plan and progressively adding elements.
I'm terrible at coming up with #Volume names for drives.
Under #Windows I literally had my #drives labeled "DRIVE_D", "DRIVE_E", "DRIVE_F", etc. Which did help in the event the drive #letters got jumbled about (which happened about once every six months or so, usually when I'd attach a removable drive.)
Am I crazy for using the drive's serial number as its Volume Label? It is at least allowing me to keep track as to which drives I've re-formatted as #ext4+#Luks and which are still formatted as #NTFS though.
It makes sense in that you end up with a label that's physically on the disk as well as permanently in the queryable device info/firmware, so that's neat, though I prefer to label removable volumes according to their "purpose" if they have one, or if it's too general I won't bother with a label. The file manager will usually fall back to the filesystem UUID in that case though, so from that perspective the serial number really does seem like a better option for visually "mapping" it to the associated physical device.
But for uniquely identifying volumes programmatically (or in fstab for example) I'll always use the filesystem UUID or PARTUUID rather than relying on a label, so I never bother with labels for internal disks or removable disks that have a specific mountpoint
I was in the neighborhood and decided to stop by Greeklivesmatter1970's restaurant. It's a fantastic spot with delicious food! The patrons were all raving about the wings and Greg’s soup. When I arrived, Greg was hard at work behind the stove, exactly as I imagined it. The place was bustling with his regulars, all of whom clearly love the atmosphere and the food! I also met his older brother, John who was busy at the bar!
Those (not us) who thought they were escaping Twitter/X by joining BlueSky might usefully note that a third of the money raised so far to run it was raised as a cross investment from.... Twitter/X.
So while they might be 'safe' from Musk right now, behind the scenes he's hardly disconnected.... oh dear.
If you really want to be in the fediverse you need to be in the fediverse
Good people in the world of tech populate the non-profit communities run by altruistic volunteers with no commercial interests, and therefore no interest in exploiting you, your work, or your data.
Female Prisoners FORCED to SHARE Showers with Male Inmates Irene BritUSA youtu.be/3pINrQkP8fM
"Female inmates at MCF-Shakopee are speaking out a year after five transgender inmates were moved to Minnesota's only al- women's prison. This came after a change in policy by the Department of Corrections and after Tim Walz signed three bills for reproductive rights and access to gender-affirming care for inmates. The female inmates revealed they have to share a shower with male inmates. These showers are unlocked! The women say they are in fear for their safety."
Female inmates at MCF-Shakopee are speaking out a year after five transgender inmates were moved to Minnesota's only al- women's prison. This came after a ch...
I’ve been playing with Expect lately. Expect is an extension of the TCL scripting language developed in the 1990s. Its main purpose in life is to automate terminal interactions and it does that job very well.
I spend most of my day in a shell and automate as much as humanly possible so that I can be as lazy as humanly possible. Using tools like ssh and scp it’s very easy to automate simple commands and simple file transfers. But when these tasks become complex enough that they need to respond to terminal prompts, or provide arbitrary changing input, those tools fall apart.
My particular use case was a need to grep through logs on multiple Linux servers. This would be a trivial task to achieve using plain old ssh except for the fact that I use a Yubi key to log on to the servers. I need to interactively provide the PIN for my Yubi at each login. The same problem exists for encrypted public keys. For a while I just copied the PIN and pasted it at every prompt, but that became a pain pretty quickly so I started casting around for other options.
There’s a few solutions that specifically address the ssh password problem such as sshpass and ssh-agent, but I wanted something more generic that I could continue to use once logged in to do complex things. Enter expect.
Expect can handle some very complex interactions, but at its core is a very simple game of catch. Tell your script to “expect” some output and then “send” the appropriate input. Here’s a very simple example of SSH-into a server with a password.
#!/usr/bin/expect -f set host [lindex $argv 1] set password "password" spawn ssh "$host" expect "password: " send "$password\r" interact
You can chmod this script to make it executable chmod +x script and run it using the format ./script host.com
The interact command is important. It tells expect to release the terminal so you can type things and do things. Without the interact command, you won’t be able to…well…interact. If you’re just planning on executing a lot of commands without any interaction that is fine.
This little snippet is meant as an example and as such it stores the password in the script. Obviously, that’s crap security and you should not do that, but what options are there? One option is to store the credential in a separate file that does not comprise the codebase. Expect can read external files using this format (assuming a file named PASS with just one single line it, your password):
set fp [open "PASS" r] set PASS [read $fp]
This will store the contents of the file PASS in the variable $PASS. You can then replace the send "$password\r" with send "$PASS\r".
Another useful feature is Expect’s logging function. In my case, I am running a bunch of greps on log files and I want to save the output locally to my machine so I can review it later. The expect command log_file works perfectly for this.
Using the command log_file by itself will write a log file into the current directory on your local machine. You can also specify a log file using the format log_file output.log
To start logging, you simply put the log_file command in the script where you'd like the logging to start. If you want to end logging at some point, put log_file by itself again (regardless of whether you specified at log file name or not when you began logging). Expect is smart enough to know it already has a log file open and knows to close it when it encounters a single log_file all by itself.
Let’s put this all together to log into a machine, grep the Apache log file for something, and then save the log for review.
Now run ./script host.com and sit back. In a few seconds you should have a file named website_logins.log in the script directory that contains the output of your grep.
There’s a lot more to learn, but these basic building blocks will get you started.
Expect #scripting has been around a long time, but many #Linux #SysAdmins have never used it. It’s a great tool to use for tasks that…wait for it…expect input! Here’s a (really) quick primer.
expect is what kept me sane at different times during my 30 year IT career. Most of the cool kids today though have moved-on to ansible and similar tools I would expect.
When I got my #NM drivers' license I had to get a NM #auto #insurance policy and of course that means #Progressive insisted I sign back up for "#Snapshot", their #app or #ODB2 dongle that measures your #driving. Honestly I'm not worried about any of the privacy implications of that. I already drive like an old grandmother and if that means I get a #discount on my insurance #premiums then great!
But here's the thing though. I got my #policy in November. It's December 16th, and I'm in my truck every single day running errands and shit.
And the Snapshot app ... their Snapshot app ... has only recorded 3 trips in total. Out of maybe 50 or more since I re-activated the Snapshot thing.
I don't know whether to be happy or nervous. Haha.
The good news is driving a #diesel #Ford #F250 there's no way I'm flooring it to take off or slamming on my breaks suddenly. (I do have a turbo so I could if I really wanted to. I was able to go from 0-85mph in less than 1/4 mile once which for a 7500lb truck ain't half bad.
And here in Albuquerque, unless I'm on the Interstate the speed limit is pretty much 35mph throughout most of the city.
Americans spend more years being unhealthy than people in any other country. The gap between US lifespan and health span was 12.4 years, the world's largest.
Chinese scientists have discovered dozens of human fossils dating back 300,000 years, which are the earliest ones found in East Asia in terms of the evolution process towards homo sapiens.
A reckoning is coming. #democrats #obama #clinton #biden #soros #harris 'The people that are responsible for this s**tshow are the Obama people. They're just grifters,' a well-connected Democratic donor exclusively told Daily Mail. He singled out Jen O'Malley Dillon, who went from Biden 2024 campaign chair to serve in the same role for Harris's camp, and David Plouffe, an ex-Obama 2008 campaign manager turned top Kamala adviser. Democrat 'knife fight' for control after $1.5B Kamala 'circus of lies dailymail.co.uk/news/article-1…
Assigning your copyright to the FSF helps defend the GPL and keep software free. Thanks to Alekseev Nikita, Edgar Vincent, and Toshihiro Umehara for assigning their copyright to the FSF! More: u.fsf.org/3ht #CopyrightAssignments
par FFShukke Sans l'avoir vraiment choisi, j'ai voué ma vie à l'art du clown. Je me suis plongé dans cette figure quasi archétypale. J'ai rencontré ses ancêtres et ses cousins, les fous, les idiots du village, les bouffons, les morosophes, les maîtres du désordre. J'ai pris conscience de Carnaval, ce culte archaïque de l'inversion des valeurs qui nivelle les rapports de pouvoir et crée un simulacre de révolution dans une dissipation-dérision-purgation (selon les termes d'Henri Michaux)
Ça fait 25 ans maintenant que ma vie est articulée autour de cette fonction, cette activité, ce métier, de fripon divin, de tricheur sacré, d'amuseur de trouble, de fauteur public. 25 ans c'est court pour faire le tour de ce que porte cette posture du clown, à la fois sociale et spirituelle, qui profane le sacré et sacralise le profane. 25 ans ça commence à être long du point de vue de ma petite personne, ça représente selon les statistiques, plus ou moins un tiers de son espérance de vie. 25 ans c'est suffisant pour se faire une idée, une opinion et une vision d'un idéal. C'est aussi suffisant pour observer une évolution dans les conditions d'exercice de la fonction, dans le comment elle est perçue, reçue et admise (ou pas) dans la société. Au risque de passer pour un vieux con, j'oserais dire que c'était plus facile avant.
Aujourd'hui, si le besoin individuel et social de divertissement est totalement reconnu et admis, celui de bousculer et de dénoncer est dénié et combattu. Lorsque j'étais enfant, dans le village de Marlhes, il y avait Zouzou l'idiot du village. Tout le monde lui demandait “Zouzou, combien t'as de fesses ?” Et Zouzou répondait “CINQ”, et tout le monde riait, c'était comme un rituel. Zouzou déambulait de maison en maison, il était accueilli partout, il donnait un coup de main par-ci par-là et apportait une espèce de lumière, de fantaisie et de candeur au quotidien. Aujourd'hui, il n'y a plus de personnes comme Zouzou dans les villages. Lorsque j'ai commencé à jongler et dans la rue, les gens s'arrêtaient quelques instants, souriaient, ce qui nous invitait à bonimenter, on était peu nombreux, les chapeaux pouvaient presque nous donner l'équivalent d'un salaire.
Aujourd'hui, il est difficile pour les artistes de la rue de ne pas être assimilés à des punkachiens, des mendiants, des exclus. Au mieux, iels sont ignoré.e.s. Le divertissement virtuel individuel et numérique de nos écrans de poche est tellement plus captivant. Lorsque je suis sorti de l'école de cirque avec mon premier spectacle, nous étions une poignée à entrer dans la profession auréolés des formations des toutes nouvelles écoles de cirque reconnues. Nous jouions sur tous les festivals et ailleurs. Il suffisait qu'on envoie notre dossier papier et qu'on passe un coup de fil et on était programmé. Aujourd'hui les écoles ont formé et forment encore plein d'artistes et c'est la foire d'empoigne sur le marché du spectacle. L'offre est immense.
On nous a rangés quelque part, nous qui échappons aux cases.
Lorsque j'étais enfant, il existait sur une des trois seules chaînes de télévision un programme quotidien où quelqu'un pouvait avoir 5 minutes pour dire, faire et filmer n'importe quoi,auquel personne comprenait rien mais beaucoup de gens regardaient. Cette personne commençait ses spectacles par “on m'a dit qu'il y a des Juifs dans la salle...”, et ça passait. Aujourd'hui, les poètes ont été supplantés par les influenceurs. Là aussi, l'offre est immense, et le discours autrement balisé. Parfois je me dis que plus personne veut de nous, les clowns et tous les dérangés-dérangeurs, qu'on nous a réhabilité en nous donnant une place à l'hôpital, soit soignés, soit soignants. On nous a rangés quelque part, nous qui échappons aux cases. Nos communautés ont oublié Carnaval, le désordre n'est plus admis pour ce qu'il est. Nous vivons une époque tellement vertigineusement instable que la possibilité de s'affranchir des règles et des repères devient inenvisageable pour beaucoup. Aujourd'hui, toutes les sensibilités sont exacerbées dans leur instinct de survie et plus personne n'est prêt à voir son cadre de références malmené par des bouffons.
On veut bien des clowns, tant qu'ils ne dérangent personne.
La monstration n'a plus sa place. Le monstre doit rester caché. Les tenants du pouvoir, conscients de leurs pieds d'argile, ont tout intérêt à museler celleux qui les raillent et à ramener à la norme celleux qui y échappent, à grands renforts d'étiquettes, de diagnostics et de traitements adaptés. Le pouvoir a pris l'habitude d'attaquer et/ou d'invisibiliser celleux qui le tournent en dérision. Il ne veut plus de clowns et de bouffons. Ces appellations sont maintenant fréquemment utilisées comme des injures pour disqualifier les politiques, dans l'ignorance assumée de ce qu'elles définissent en réalité. Par ailleurs, les individus, insécurisés par un environnement social, politique et écologique anxiogène, se cramponnent à leurs valeurs, celles qui font sens à leurs yeux. S'ils ressentent le besoin légitime de rire et de se divertir pour les aider à ne pas sombrer, ils refusent que leurs systèmes de pensée, quels qu'ils soient, soient écorchés par les farces de quelques trublions. Toutes les susceptibilités sont à fleur de peau, et la liste des sujets avec lesquels “on ne rigole pas” s'allonge d'année en année. Le champ des possibles de l'expression des clowns en est ainsi de plus en plus restreint On veut bien des clowns, tant qu'ils ne dérangent personne. Ok si vous apportez du sourire aux enfants malades, vade retro si vous commencez à pointer la vanité de nos misérables existences. En cantonnant ainsi le rôle des clowns au divertissement des malheureux, qui leur permet, par le rire, de dépasser ou d'oublier pour un temps leur misère, on éloigne les clowns de leur fonction primaire, à savoir l'incarnation de Carnaval, qui honore la remise en question de l'ordre établi. On leur interdit le pas de côté qui est à l'origine de leur existence.
Nous devons réadmettre le ridicule et le dérisoire dans nos existences
Et ce, alors même que nos sociétés humaines atteignent des sommets de non-sens et d'absurdité dans le rapport au vivant. Je crois que le retour de Carnaval est une nécessité pour la survie de notre humanité, que le point de vue des fous, des marginaux, des neuro-atypiques, des morosophes, des poètes, doit être mis dans la lumière et considéré, qu'en cela il peut être un facteur d'équilibre pour contrebalancer une norme toujours plus ubuesque.« Est-ce que ce monde est vraiment sérieux ? »Comme le demandait un chansonnier moustachu du sud-ouest... Nous devons réadmettre le ridicule et le dérisoire dans nos existences, comme les maîtres du désordre chez les peuples premiers redonnaient, par la transgression des règles, du sens aux rituels, et de par ce fait renforçaient l'ordre social. Dans un monde qui marche sur la tête, le fou devient le sage, c'est en cela qu'on le perçoit comme dangereux. Il déchire le voile de l'illusion collective. Il incarne la liberté et la légitimité d'exister en dehors des clous , en dehors des normes. En ouvrant la possibilité de voir autrement, d'envisager l'inenvisageable, de sortir des carcans du soi-disant raisonnable, de rire de l'injustice et de l'abjection, il offre de nouvelles perspectives. Alors, bien que leurs espaces d'expression et leurs moyens de subsistance se soient drastiquement réduits, la présence des clowns dans la société me semble aujourd'hui plus vitale que jamais. C'est pourquoi j'honore celleux qui entreprennent maintenant de consacrer leur existence à cette fonction que je qualifierais de quasi christique (dans La planète des clowns, Alfred Simon la décrivait comme une crucifixion en rose), en dépit d'un monde qui les rejette. Je leur souhaite bon courage. Qu'iels soient assez fous pour poursuivre ce sacerdoce qui nécessite abnégation, humour, humilité, détermination et moult prouts.
A Venezuelan migrant is accused of attempted murder after allegedly setting a Fulshear, Texas, home on fire intentionally with three children trapped inside.
Pedro Luis Parra Pulgar, a 46-year-old Venezuelan migrant, was charged this month with three counts of attempted murder and one count of arson following the house fire.
Performing in Afghanistan • Black Hawk Helicopters • Tossed by a Marine • Accents are sexyBrad Williams Fun Size • Full Show, uncut, uninterrupted and no ads...
The thing is about reporting on people like #BillGates, and what they have to say about #OpenAI and #MachineLearning. Is that they have direct financial interest in people getting on the #AI hype train. Reporting on their words at face value, like it's news; is journalistic malpractice.
Not only that, I suspect the reason "anti-Semitism" is increasing is due to the goat fuckers that Switzerland has allowed in, which, to my surprise, is a number greater than zero.
Right now my follower count here is heading down, which means I’m getting closer and closer to just blissfully posting only on Bluesky. Also, fuck you, Zuckerberg.
Google thinks they're too big to be put in their place by a boycott against using them. Show them otherwise. There are lots of good search engines. I can list a bunch if you like, but stop supporting a company that hates what you stand for, namely: freedom, free speech, secure borders and America first! If you're not willing to take a stand, you're part of the problem. thegatewaypundit.com/2024/12/g…
Going live from (cold!) Norway with my weekly vid in 25 mins! Live from Oslo; Dubai Travels; Failed Microsoft Account Logins; Tibber and Yonéma Data Breaches youtube.com/live/f0RlKhBVXbc?s…
Live from Oslo; Dubai Travels; Failed Microsoft Account Logins; Tibber and Yonéma Data Breaches; Sponsored by 1Passwordhttps://www.troyhunt.com/weekly-update...
compatible with #pfSense for firewall management or #OpenWrt for customizable routing
pre-installed #CasaOS (compatible with Linux, Windows, Android, OpenWRT, and more)
#deal #delete I don't know, looks prosumerish but if you're playing with a Raspberry Pi pricetag it's a practical alternative to get pfSense running I guess.
Here’s a sad statistic for you: In the #UnitedStates, we have a whopping 1.4 million people employed with the job of DENYING #HEALTHCARE, vs only 1 million #doctors in the entire #country! That’s all you need to know about #America. We pay more people to deny care than to give it. 1 million doctors to give care, 1.4 million brutes in cubicles doing their best to stop doctors from giving that care. If the purpose of “health care” is to keep people alive, then what is the purpose of DENYING PEOPLE HEALTH CARE? Other than to kill them? I definitely condemn that kind of murder. And in fact, I already did. In 2007, I made a #film – #SICKO – about America’s bloodthirsty, profit-driven and murderous health insurance system. It was nominated for an Oscar. It’s the second-largest grossing film of my career (after Fahrenheit 9/11). And over the past 15 years, millions upon millions of people have watched it including, apparently, #LuigiMangione.
After the #killing of the #CEO of #UnitedHealthCare, the largest of these billion dollar insurance companies, there was an immediate OUTPOURING of anger toward the #HealthInsurance industry. Some people have stepped forward to condemn this #anger.
I hereby give you my Oscar-nominated Documentary on the Killer Health Insurance companies like United HealthCare —SICKO — for FREE… and let’s end and replace this so-called “health care system” NOW
Sadly, we’re no longer able to reliably update Mammoth or operate moth.social at the level we want. Therefore we will be removing Mammoth from sale on the App Store. By the end of the January, we will also shut down Moth.social along with our other project, sub.club. If a community member would like to take over maintaining any of these projects, pls let us know.
I have a PowerMac G4 graphite. DVI to hdmi doesn’t output to a 4K monitor (I guess that should have been obvious). Anyone know what sort of monitor I can hook it up to? I’m trying to build a retro Mac rig for my retro film scanning workflow (I need to run a piece of software from that era)
The Government’s plan to pilot a Central Bank Digital Currency by 2025 would threaten privacy like never before. Find our more, and join our campaign to stop the Spycoin!
Hello everyone, Asahi Lina here! Remember when we tried a bunch of Steam games last year? It's time to see where we're at today! But now we're going to do it...
Back when I was poking around with filesystem fuzzing stuff years back, I noticed something odd:
An EXT filesystem can tell the Linux OS how it should behave "if" the filesystem is corrupt, including triggering a kernel panic. In a world where USB thumb drives exist, this seems... not ideal.
Let's see what happens if we plug such a mass storage device into a fully patched Chromebook in 2024...
The man page for tune2fs is pretty clear about this capability.
The person who writes the data to the USB mass storage device can specify that both: 1) The OS that reads the device should panic if the filesystem has an error. 2) The filesystem has an error.
It's funny (and rather cringe-inducing) to us infosec folks, but to 99% of developers they will always say "why would anyone do that?"
The vast majority just truly have no concept that anyone might want to act maliciously. If the engineer themself wouldn't perform a malicious action, they cannot conceive that anyone else would.
I have run into this issue so many times during my career. I now assume that no engineer will ever consider possible malicious actions taken against their code. To the extent that they do consider malicious actions, it will only be things that they themselves would do.
Modern Linux distros aren't really affected by this. At least in a drive-by sense. Auto-mounting is handled in a safer way than simply telling the kernel to mount the filesystem you just plugged in.
For example, compare the Ubuntu 22.04 behavior (complain that the filesystem is corrupt) vs. Ubuntu 20.04 (panic and reboot). For modern Linux to see the panic, you'd have to manually mount the filesystem (as root/sudo).
ChromeOS, on the other hand, chooses the more YOLO route of auto-mounting via the kernel.
weirdly enough, I foresaw the "logic flaw" due to weird issues with VMs and moving disks around where the policy of the source would affect the destination
I just forgot that "cause a kernel panic" was an option instead of "fail to mount/lazy unmount"
dies that mean unless the device is removed (or fixed by fsck on boot), the system will be stuck on a reboot -> kernel panic loop, or does it only work like that on first plugin?
I can even see the use case for such a feature - if filesystem integrity is more critical than availability
but honestly, I see very little use case for a desktop operating system respecting -e panic, and almost no use case for anything to respect it on removable media unless explicitly opted into by the user - fall back to -e remount-ro or unmount it IMO, but not a panic.
ext filesystems also have file ownership, suid capability, etc. The worst of this can be mitigated with mount options (maybe panic on error can too?) but ultimately it's not a suitable fs for external media and should not be auto mounted by anything unless you have a sandboxed FUSE driver for it in place of the kernel one.
I remember testing that feature before I had a computer with USB. It also works with floppies.
There is a mount option which can override that behavior. If that mount option is specified the value specified on the file system itself has no effect.
It's a questionable feature. I think it would make sense to remove the ability to specify it on the file system. Having the mount option makes some kind of sense.
damn. I was waiting for the video to loop or precisely: the notebook stay in a panic-reboot-loop. Some minutes later: Chrome OS isnt rebooting that slowly, right?...
... no. The video just stopped. Feels like bamboozled on 9gag.
While the security implications are bad, the practical joke implications are amazing. Right up there with palming a small neodymium magnet to trigger the lid sensor on coworkers' laptops.
I had an external hard drive that did that when plugged into my Macbook Pro, back when people still used Apple stuff. But only if I used USB 3.0. So by using a USB 2.0 cable I could avoid the panic and access my data. That was most likely a USB host bug though rather than a filesystem feature (it was using HFS+ anyways).
This kind of thing is why my personal CI engine uses tar archives to get data out of the virtual machine where the CI run happens. The tar archive may be corrupt, but it it's really difficult for that to corrupt or crash the kernel.
(I know there's ways to trick software that extracts tar archives to overwrite files, and other problems, but I rely on the system tar, which is usually the GNU one, to do this well. If the system tar is vulnerable, that's a whole world of pain in itself.)
HunDriverWidow
in reply to HunDriverWidow • • •The Week in Pictures: Drones and More Than a Penny
Steven Hayward (Power Line)Icare4America reshared this.