Notices by clacke (clacke@libranet.de), page 9

@mansr This style can opener? Or ones with moving parts or worse leverage?

handla.ica.se/produkt/2000037

@loke

@jay I'm guessing most people find that sufficent, but I wonder if some setups regulated by PCI DSS, ECB etc are required to resolve this OS vs app conflation.

I'm particularly curious if minimal sshd implementations exist, that don't expect to run as root and don't provide any functionality other than jumping, rather than just trying to fortify a full-fledged OpenSSH sshd with the right configuration.

@loke Fifteen years ago, IKEA HK had cheese slicers. Eight years ago, no more slicers.

If I need to replace one of my slicers, I'll go on a pilgrimage to northern Europe.

Same with usable can openers. ICA MAXI in Sweden is where the good household stuff is.

@mansr @notclacke

When you join early, everyone’s virtual note takers join early too.

I spend the first few seconds screaming about how I’m on the Titanic, we’ve just hit an iceberg, the end is near, and I need immediate assistance.

I then do the rest of the meeting normally.

When the meeting ends, everyone gets an emailed transcript where the AI summary is:

“Chris hit an iceberg, is trapped on a sinking ship, and general Q2 pricing updates”

xcancel.com/ChrisJBakke/status…
/via twink.men/notes/a985akr1crs902… @link
RE: twink.men/notes/a985akr1crs902…

@graydon I can imagine e.g. a scenario where a surface would reflect a wave, and also reflect the wave a quarter a cycle out of phase.

Hmm, but the superposition of those two waves wouldn't have a component of a shorter wavelength, it would just be the same wavelength, with a phase between the phases of the superposed waves.

I just want to make sure I'm not missing something by thinking too particle-centric. Waves do strange things.

@mansr Yes, I explained that to him and it blew his mind.

@notclacke That's because cheese slicers are rare outside of Scandinavia.

When you have an ssh jumphost, the trivial setup is one that conflates OS access and application access.

The application is ssh, providing the jump to the privileged network, but ssh also allows OS access, potentially allowing privilege escalation within the jumphost.

Are people taking this seriously and e.g. running an unprivileged sshd inside a container? Access the OS over port 22 to the privileged sshd, restricting that to the segregated admin network, access the jumping over port 2222 and minimize the attack surface on the outer host?

#infosec #bastion #jumphost
#ssh #sshd #OpenSSH

Glad midsommar!

Happy midsummer, summer equinox or winter equinox, depending where you are and your traditions!

Fern Brady: "... and I'm a vegetarian, which is the bisexuality of diets."

Ow. But yes.

I feel like popular music didn't really change in character for the last 20 years, except for the stupid stuff.

But maybe that's a huge carve-out and this is how every generation felt.