Sheogorath

I guess you'll need privileged SCC or roll an own SELinux policy, since it'll finally be SELinux that stops you from accessing that device.
You can use the privileged SCC to run as SELinux contect SPC, and then drop all capabilities and change your UID using the security context. That's not amazing, but I'm reasonably sure it should work.

2025-03-10 18:24:55 UTC

- reply

If you pay by credit card, I recommend to go through the credit card provider. It usually helps a lot in getting your money back. You can certainly say that you only authorized the payment of the $44 subscription.

2024-12-17 17:14:08 UTC

- reply

wasn't this a try to do that? https://github.com/zidansec/CloudPeler

2024-10-27 02:06:18 UTC

- reply

Me thinking you were talking about your vacuum robot and a potential miscalculation/mismeassurement in home assistant. But no, it's just factorio :D

2024-10-24 18:02:20 UTC

.__. My energy provider wants to change my electricity meter and hired a third-party company to do this, to confirm the appointment they have a webapp. With predefined username + passwort… that you can't change…
Despite the energy provider running a keycloak instance which they could just use to do SSO with OIDC :/
Why is it so hard for developers to not implement own account systems all the time?!!

2024-10-23 10:42:13 UTC

What is going on with web components, I haven't heard about them in Ages and in the past two weeks I see the third blog post claim how awesome they are or aren't.
Are we on the next trend? Back to the DOM?

2024-10-21 16:14:41 UTC

- reply

Sind wir doch froh, dass die nicht alle bei gmail sind :)

2024-10-17 15:01:56 UTC

- reply

PM=Prime Minister?

2024-10-12 21:55:18 UTC

- reply

It's always a good time to learn something new. It doesn't have to be an either or decision.
You might want to look into cockpit which provides a nice management UI for containers and VMs on a single machine.
Or you go for proxmox which will run LXC containers and VMs.
If you want to go down the OCI container path, you might just use them inside your VMs, makes it easier to back things up and bring them back ;)

2024-10-11 07:14:45 UTC

- reply

https://www.youtube.com/watch?v=lmbZXsyQKcM 🎵

2024-10-08 18:49:13 UTC

- reply

They will of course use BGP on their home routers!
Wait, there are only 4294967295 ASNs… whoops!

2024-10-05 02:06:34 UTC

- reply

just finished the episode and when you talked about how people "don't care about security" and the information disadvantage, I came back to this study published by IEEE I read years ago.
They asked people how they find a secure messenger and the main criteria for most people in the study was: it looks nice.
I highly recommend giving this one a read, if you haven't already: https://www.ieee-security.org/TC/SP2017/papers/84.pdf

2024-10-04 17:04:00 UTC

- reply

Cheap cars?

2024-10-02 14:57:19 UTC

- reply

If you are interested, I have a more complete documentation on this, including running costs, etc.
https://gitops-docs.s3.shivering-isles.com/hardware/node.html#cost
If you are interested I can even send you the original Spreadsheet I made for this.
(Also recently created one for NAS, which I haven't published anywhere yet.)

2024-09-14 19:21:18 UTC

- reply

Isn't stalwart trying to do that: https://stalw.art/

2024-09-13 10:04:01 UTC

Is it just me or has the amount of instructions (shared) to install fail2ban recently exploded?

2024-09-07 18:24:35 UTC

- reply

You know the Raspberry Pi can do PoE natively, if you add the right hat to it? https://www.jeffgeerling.com/blog/2021/review-raspberry-pis-poe-hat-june-2021

2024-09-03 19:03:26 UTC

Yes, I want to see the world burn. Please make txt a real TLD :D

2024-09-01 20:21:13 UTC

The year is 2024 and we still see UTF-8 problems .-.

2024-08-28 05:06:41 UTC

- reply

uhm, no, I mean the kind of systems where you need to have some formal introduction to use them.
To select a silly but obvious example: There was a time when "driving an elevator" was a job, until we replaced it with a bunch of buttons.

2024-08-28 01:54:58 UTC

Thought: Have you noticed we constantly cut expert systems in favour of amateur systems?

2024-08-22 13:11:10 UTC

- reply

you need google play services but then it works fine :)

2024-08-15 15:52:23 UTC

- reply

tailscale expects such a delegation for self-hosted SSO over OIDC.
And you can use it to redirect things like blog mentions, or use any account handle on a domain you own to redirect to your mastodon account on any mastodon instance.
Have the domain example.com and want @flowers@example.com to point to your gardening profile on gardening.example.net? Webfinger can do that for you.

2024-08-15 15:49:50 UTC

- reply

webfinger is a protocol that allows you to delegate a domain to various features of that domain's accounts. E.g. what is the login provider for an account? What is the fediverse handle of this account.
My mastodon handle for example is @npub1frk…5a27 but on Shivering-Isles.com you'll only see my blog. So webfinger is used to delegate the account "sheogorath" for the feature of a fediverse handle, to my mastodon instance microblog.shivering-isles.com.

2024-08-15 15:38:31 UTC

- reply

my hero! Wanted to build that for a long time, but always found something else to do :D

2024-08-05 11:24:24 UTC

- reply

I mean, it's probably a life or death situation for the company, not surprised they push that :D

2024-07-08 17:12:27 UTC

- reply

This is quite the coffee drinker propaganda you have going here 👀

2024-06-28 08:49:37 UTC

- reply

I would have thought they utilise the OS keystore/keyring 👀
But maybe that's to unreliable or too much hassle when migrating between devices?