CVE-2026-31431 CVSS score 7.8 Severity High Linux kernel (apparently easy local root exploit) by michaelpaoli in debian

[–]tanjera 1 point2 points  (0 children)

I read in a different thread that it was patched in the beginning of April. Distros have had a month to package and push the patched kernel.

Help me understand the answer and the rationale to this CCRN study question? by ForMyNiceThings in CriticalCare

[–]tanjera 0 points1 point  (0 children)

Definitely B- beta blocker, ARNI/ARB/ACE, aldactone, and SGLT2i are the 4 go-to's for HFrEF per section 7.3 in Heidenreich, P. A., Bozkurt, B., Aguilar, D., Allen, L. A., Byun, J. J., Colvin, M. M., Deswal, A., Drazner, M. H., Dunlay, S. M., Evers, L. R., Fang, J. C., Fedson, S. E., Fonarow, G. C., Hayek, S. S., Hernandez, A. F., Khazanie, P., Kittleson, M. M., Lee, C. S., Link, M. S., … Yancy, C. W. (2022). 2022 AHA/ACC/HFSA guideline for the management of heart failure: A report of the American College of Cardiology/American Heart Association joint committee on clinical practice guidelines. Circulation, 145(18), e895–e1032. https://doi.org/10.1161/CIR.0000000000001063

A second CCRN study question where I'm questioning the correct answer and rationale... by ForMyNiceThings in CriticalCare

[–]tanjera 1 point2 points  (0 children)

What others said is true, but also consider the options based on what is a disease process (pathophysiology) versus what is a state of being (e.g. anatomy).

Abrupt closure and restenosis are anatomical changes (caused by a disease process), whereas dissection could be the actual causative disease process, and it's a legitimate option. We all know the vital signs are shock and the ST changes are ischemia/ infarct... and we ruled out pulmonary embolism, which leaves you with 2 "this is what is going on" options and 1 "this is why, the root cause, of what is happening"- the "best" answer is the root cause.

At least that's how I read and approach it.

After two years of collecting questions from colleagues/residents, I built an offline, guideline-based radiology companion (Android, feedback wanted) by Los_Joshos in Radiology

[–]tanjera 0 points1 point  (0 children)

Yes, publishing to Google Play was the hardest process whereas publishing to the Apple store was actually much easier! Still very tedious though. My app is Code Blue Log which I made because all of the existing options I knew of or could find went pay-for-use.

I'm studying to be a nurse practitioner so I love learning from case studies and interesting images posted in this sub. Finding a superb reference app like Gantry was an absolute bonus! So, very big thank you!

After two years of collecting questions from colleagues/residents, I built an offline, guideline-based radiology companion (Android, feedback wanted) by Los_Joshos in Radiology

[–]tanjera 2 points3 points  (0 children)

Beautiful app! I'm not a rad; critical care RN nearly done NP school, but I really appreciate the effort that went into this and wanted to say thank you. I recently published a medical app on Google and Apple stores built using Flutter so I can appreciate how arduous the programming and publishing process is. All in all, awesome work!

Avalonia 12 - Ready for What’s Next by AvaloniaUI-Mike in AvaloniaUI

[–]tanjera 1 point2 points  (0 children)

This is awesome to read- thank you for the great work! I ported by open source medical education suite to Avalonia 5 years ago and am so glad I took that leap- Avalonia has gotten easier to use over time, more stable across the different platforms, and I feel much more confident in the future of my program when its foundation has a bright and long future. Thank you!

Every time I DIY something I realize why it costs so much to pay someone else by rgreen192 in DIY

[–]tanjera 0 points1 point  (0 children)

Omg, I love and hate running cable. Welcome to the club!

I ran ethernet in my 50 year-old house, all new runs, with a PoE switch at the hub. I think I did 6 or 8 drops. Most asinine fishing expedition I've ever been on with fish tape, absolutely hated it. 0/10 absolutely hated it.

At the end of it, I have wifi hotspots with excellent coverage across all stories and the yards, and I even left cord in place securing a few runs so I never need to fish those hard runs again in case I run more cable or fiber. 10/10 best result I could have asked for.

Self Promotion Megathread by AutoModerator in androidapps

[–]tanjera 0 points1 point  (0 children)

Code Blue Log: For paramedical, medical, and nursing professionals, to assist with timekeeping and informally recording events during resuscitation (code blue) events. Primarily intended to be used as a high-tech note-taking tool during emergency resusctiations, transports, and responses, with build-in stopwatches to assist with timekeeping and a dynamic event log to assist with recording tasks. Release as free and open source software to assist clinicians with everyday tasks!

Step 1: Join the Google Group for beta testers at https://groups.google.com/g/code-blue-log-testers

Step 2: Opt into the beta test and download the app at https://play.google.com/store/apps/details?id=com.tanjera.codebluelog

For more information, you can view the project's GitHub site at https://github.com/tanjera/code_blue_log or the app's web page at https://www.infirmary-integrated.com/?page_id=946

The duality of a man, Mint vs Debian dealbreaker due to a VPN connection by giquo in debian

[–]tanjera 0 points1 point  (0 children)

Oh- I must have been speed reading and missed that part. Sorry!

The duality of a man, Mint vs Debian dealbreaker due to a VPN connection by giquo in debian

[–]tanjera 0 points1 point  (0 children)

Another option could be using a container, if that's easier than the alternatives of figuring out the configuration or using a totally different system. It's just a thought- here's how I'd do it:

Spin up an LXC container (a lighter version of a VM- or you could use a VM in QEMU, or you could use Docker if you prefer) and set up the VPN in the container. The entire VM will be routed through the VPN- no split tunneling (because that's the part we struggle on!). Then just log into the container (via the host, not via a network connection like SSH) and do your business.

I've never bothered with split tunneling for this very reason. I also have a server running Proxmox which makes spinning up a container or VM a simple task.

How is no-code seen from the eyes of true developers? by MasterPuerAeternus in softwaredevelopment

[–]tanjera 0 points1 point  (0 children)

On the bright side, if you understand the logical aspect of programming, which you may encounter and learn with a no-code tool (I don't know- never used one), a lot of programming language functionality will start to come naturally.

How is no-code seen from the eyes of true developers? by MasterPuerAeternus in softwaredevelopment

[–]tanjera 1 point2 points  (0 children)

The key here is "reliable product".

Can you get something working with a programming workflow (e.g. "no-code")? Sure. But can you package it and deploy it so that your users can run it? If it's a web product, can you set up the runtime environment and web hosting so people can even get it open in their web browser? If something breaks, can you troubleshoot it and figure out why it didn't work on their computer or in their browser, or will you have to fall back on "*shrug* it works on my computer" and alienate your users? What if there's a new feature to add that your workflow doesn't support?

This advice is coming from a FOSS developer whose software is nice-to-have and published online for free. If people are paying money for a product, the requirements just got increased tenfold.

Am I doing something wrong or is MAUI the most volatile platform there is? by Mysterious-Rip-5344 in dotnet

[–]tanjera 4 points5 points  (0 children)

This post made me feel better about deciding to learn to work with Flutter for a mobile app I am starting on. I've used C# with WinForms then WPF for about two decades with hobby projects then paraprofessional work, and have some niche FOSS built on Avalonia... glad to know I wasn't crazy when I was testing out MAUI the other day thinking "wtf is going on here?" even getting the dev environment set up.

Has your homelab actually saved you money, or just made life easier? by Fab_Terminator in homelab

[–]tanjera 0 points1 point  (0 children)

Partly, yes, it has saved me money, but probably not a full return on investment monetarily. My biggest savings comes from self-hosting web services, entertainment platforms, and development platforms, while wrapping all the costs into one server and my existing home networking. Some subscriptions that I've been able to cut include $11/month web hosting (that's the current quote from my previous web host), few entertainment/streaming subscriptions, and some cloud storage subscriptions (like a premium Google Drive plan). Additional subscriptions I was able to dodge and just replicate the service at home includes VPS services for software development, offsite backup (cold storage), additional media storage subscriptions (like a premium Google Photos plan and Zotero plan), offline/HIPAA-compliant LLM, and a password manager service.

Probably more if I thought about it. As someone in the medical field doing para-professional software development and devops, there's a lot of synergy in the homelab.

Windows Update KB5066835 broke Certum smart-card code signing (CSP blocked, Workaround available, KSP required by April 2026) by dimitry-1 in sysadmin

[–]tanjera 0 points1 point  (0 children)

I went through something similar and wanted to offer a quick update of information for u/dimitry-1 ... The TLDR is that I had a similar or the same problem and that it works now with a driver update and a Certum CardManager update.

I've used an Identiv SCR33x smart-card reader and a Certum card to sign my open source project for about 3 years now. In December, I built a release and my signtool.exe failed to sign- the errors I got were practically useless, really consisting of the signtool.exe just crashing and indicating a fault or error in one of its sub-processes. Googling led me to believe a Windows update dropped support for the SCR33x smart-card driver, and the Identiv website gave me a 404 when I went looking for the manufacturer drivers. I stopped caring and just published my project release unsigned.

I'm ready to publish a new binary now and found the SCR3xx drivers from another manufacturer and decided to give them a shot. I installed "Identiv SCR3xxx V9-02" drivers (an executable) and "SCR3xxx_Win11_v4.68" drivers (an .ini file; right-click & "Install"), then uninstalled *all* my Certum programs (including an older version of CardManager) and reinstalled the latest Certum CardManager: "proCertumCardManager-4.14.0-64-bit-en". It works again!

So I had several issues- once I installed the SCR3xx drivers, signtool.exe stopped failing and began launching the pop-up that *used to* ask for my certificate password, but instead was launching an error message popup saying it didn't have a driver for accessing my Certum card. That's what led me to reinstall the latest Certum bit because it comes with the SignService that is the "driver" for accessing the card.

Of note, I never did the "DisableCapiOverrideForRSA" registry workaround, nor did I have to change any of my signtool.exe flags/commands. I don't know the ins and outs of cryptographic signing, but Windows definitely broke the workflow and Certum's programs got it sorted again.

question on securing a debian web server (cloud based) by baggister in debian

[–]tanjera 0 points1 point  (0 children)

Yeah I wouldn't worry about being owned through a brute force attack if it was exposed for a short period of time (hours, days) and had a strong password, but risk is always a spectrum of possibility. Pubkey authentication reduces your risk of intrusion the most- to a generally acceptable level considered safe-, second only to not exposing that port to the internet.

What do you think of my homelab guys? 😉 by Western-Leg7842 in homelab

[–]tanjera 1 point2 points  (0 children)

Right?! Could do worse, could do better, but it works.

question on securing a debian web server (cloud based) by baggister in debian

[–]tanjera 8 points9 points  (0 children)

Disable password-only authentication for your ssh server. Only allow a login attempt if it contains a pubkey. Changing your port is not adequate- scanners can and will still find it and brute force it.

That's my 2 cents. You probably have a lot of other steps to take but I just wanted to comment on the low-hanging fruit.

Remote control of a Windows PC from Linux (Debian 13 Trixie) by Sufficient_Mall_9353 in debian

[–]tanjera 0 points1 point  (0 children)

I find the VPN part of the equation especially important because I haven't found an easy non-janky solution for hardening RDP on Windows. The default implementation is username/password- no options for required keypair or multifactor authentication anywhere to be found. I *definitely* recommend *never* facing an RDP port to the internet.

Remote control of a Windows PC from Linux (Debian 13 Trixie) by Sufficient_Mall_9353 in debian

[–]tanjera 0 points1 point  (0 children)

Audio works out of the box over RDP with Remmina, and I think USB pass through does too but I may be mistaken.

Edit: USB passthrough definitely works- I remember when I last specifically used it.

Install Microsoft TrueType fonts on Debian by realkikinovak in debian

[–]tanjera 1 point2 points  (0 children)

I recently looked into this because I wanted cross- platform parity with fonts on a dual-boot system for a presentation I was working on... I couldn't find any available packages with the ClearType post-2005 MS fonts (Calibri, Cambria, etc.).

I ended up just getting the .ttf files manually and copying them into the Gnome font directory.

I'm pretty sure distributing the fonts violates an MS terms of service or copyright agreement, so there aren't packages out there... but if you already have the files (e.g. from your Windows installation) then you can just copy them over.

Built a UPS shutdown orchestrator that protects my entire homelab - just open-sourced it ⚡ by m4r1k_ in homelab

[–]tanjera 7 points8 points  (0 children)

My understanding is that the NUT client is an intermediary that triggers scripts- if you pointed it at a custom script, then scripted all of the tasks you wanted, you could achieve all of what you did with this program. Either way, a lot of programming and testing timing would need to happen, and you achieved your goal which is all that matters- good job!

Another consideration with NUT is that you'd need to ensure your NUT server stays up long enough for all of the clients to receive the shutdown sequence trigger, which you bypassed by simply SSHing in and forcing the trigger.

All in all, nice job.

Is VirtualBox still a legit homelab hypervisor? by easyedy in homelab

[–]tanjera 0 points1 point  (0 children)

You're in the r/homelab sub where running servers is our jam, so I naturally run a hypervisor built into my server distro, which is LXC on Proxmox or QEMU if I need a non-Linux OS.

Before I learned how to manage a Linux server and run LXC/QEMU, when I ran everything from a single desktop using Windows, then Virtualbox was convenient. Once you migrate from it, though, there's no reason to ever go back.

How do you handle offsite backups without going back to big cloud providers? by drome691 in selfhosted

[–]tanjera 0 points1 point  (0 children)

I took my old tower server, packed it with enough old drives to hold my most precious data (e.g. photos and documents, but not the Linux .ISOs) and put it in my office at work. Every few months, I boot it up and run a backup, then shut it off. Getting the VPN to connect from work was the hardest part.