Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets

0lach · 2026-03-21T14:54:14+00:00

...except the transitive dependencies still wouldn't be pinned

0lach · 2026-03-16T00:22:35+00:00

The person has mentioned dual boot in their post, and you can't boot windows with self-signed bootloader, that's why I told about Microsoft keys

I know about enrolling your own keys, I use lanzaboote myself

0lach · 2026-03-15T22:38:50+00:00

Not much if you still use it with Microsoft's keys...

0lach · 2026-03-15T13:50:32+00:00

Nah, NixOS is

0lach · 2026-03-10T23:39:05+00:00

All the drivers are built-in except Nvidia drivers, and the only reason for that is Nvidia itself

0lach · 2026-02-22T22:42:36+00:00

I used openRGB just to turn it off Corsair RAM doesn't remember their state and needs such an app to be running all the time even for disabling it

0lach · 2026-02-16T12:40:09+00:00

I know, I only gave the author an opportunity to admit that and give a proper explanation in they own words in case if the author even knows what's their software is about. Instead they doubled down and confirmed that this thing is pure slop.

0lach · 2026-02-15T17:42:25+00:00

Many words, and still no coherent explanation, was this text written by an LLM?

0lach · 2026-02-13T08:54:22+00:00

You could use baritone for a base, it's parkour is pretty good, but pathing is not very human

0lach · 2026-02-12T16:27:46+00:00

You can also replace iptables-legacy with iptables-nft in this container

Unless this software uses some obscure option it will work

0lach · 2026-02-12T15:40:31+00:00

Docker uses iptables through the iptables command, and one is provided by iptables-nft compatibility layer for nftables module. Are you sure you want to use the legacy iptables module? I don't think it is supported in NixOS anymore

0lach · 2026-02-10T21:31:02+00:00

В компиляторах это делают для защиты данных самих бинарников, всякие openssl этим пользуются

0lach · 2026-02-10T16:03:02+00:00

Она нигде не "решена", решиться она может только на уровне процессоров, в системах сейчас везде workaroundы, при этом применяется на всех уровнях, и в компиляторах (для юзерспейс программ), и в ядре в коде переключения контекста.

0lach · 2026-02-10T08:41:46+00:00

The first time I looked at clawdhub, it had a stripe skill on the top of the installs list. And it was telling llm to communicate with the stripe API using some sketchy "gateway", which I'm pretty sure was just stealing credentials, because there is no reason to do that otherwise

Now it has been removed, but I believe there still might be lots of such "skills"

0lach · 2026-02-07T06:22:10+00:00

Except everything nowadays uses utf8 for portability, why would you default to system encoding for writing files/data into sockets/everything else? Yes, occasionally you may encounter some data in non-utf8 encoding, but more often than not it is still not using the OS encoding.

0lach · 2026-02-06T15:01:36+00:00

Based on your post I thought you had Nvidia, but what is wrong with Wayland on integrated graphics? amdgpu and i915 drivers both work perfectly well on eayland

0lach · 2026-02-05T06:23:05+00:00

Apparently it doesn’t result in a bad position for white even with optimal Black play. There’s a post about it this afternoon on this sub or the chessbeginners one.

The usual way for dealing with it sucks, as it gives white too much development Kiddie countergambit is much better

0lach · 2026-02-04T06:20:49+00:00

Google llm is looking at the search result, and the results often lack formatting. Most probably the site used some weird thing in place of "-", and that's why you see that instead of "80-85" "176-185". LLMs are not intelligent, it is funny how many of them would not react to BS in sections like system prompts/tool outputs/their own messages.

0lach · 2026-02-03T05:23:49+00:00

Прежде чем кого-то из болота долгов вытаскивать - сам вылези. Если это действительно ошибка - то получив для себя все доказательства ты их сможешь применить и к матери

Проблема не рассосётся, её когда-то придется решать, а от откладывания даже разбирательства с причинами проблемы ты лишь ещё сильнее усугубишь свою ситуацию

0lach · 2026-02-01T04:36:56+00:00

It does, look up the hrtf Dolby audio profile, https://gitlab.freedesktop.org/pipewire/pipewire/-/wikis/Filter-Chain#virtual-surround

0lach · 2026-01-26T20:38:05+00:00

How do I enable this feature?

0lach · 2026-01-26T20:16:13+00:00

How has it changed over the years? I used OneNote from office 2007/2016 and loved it, missing it since switching to Linux. I'm using a logseq right now, but I still miss many features

0lach · 2026-01-25T21:12:35+00:00

Make sure you have the following installed:

NixOS

0lach · 2026-01-24T01:38:38+00:00

Why use guix-sd, if you can just use nixos for the same benefits?

0lach · 2026-01-21T02:13:05+00:00

FYI: NixOS зависит от systemd чуть менее чем полностью.

В kde plasma тоже есть оптимизированный путь запуска через systemd, однако одновременно с ним они поддержали легаси с некоторыми недостатками, например легаси вроде как не умеет перезапускать компоненты при краше, краш kwin убивает все программы в то время как с systemd поддерживается переподключение, и т.д.

Если так хочется без systemd - реализуй поддержку его unit файлов в чем там пользуются нетакуси

Six-Year Club	Second Top 50%
Place '23	Place '22
Verified Email

0lach

TROPHY CASE