• 12 Posts
  • 333 Comments
Joined 2 years ago
cake
Cake day: August 10th, 2023

help-circle




  • Yes, it’s worth using. It’s fairly easy to install, as it’s almost always packaged, and that makes it easy to use.

    But it’s not really enough. For example, tools like Lynis usually miss containers.

    A modern version of this stuff, I would probably recommend scanning all running containers with something like trivy, and then deploying wazuh on the machines. Wazuh can scan the system for misconfigurations in a similar manner to Lynis, but it is also capable of acting as a central logging server and a few other things.



  • I took a look through the twitter, which someone mentioned in another thread.

    Given the 4chan like aestetic of your twitter post, I decided to take a look through the boards and it only took me less than a minute to find the n word being used.

    Oh, and all the accounts are truly anonymous, rather than pseudoanonymous, which must make moderation a nightmare. Moderation being technically possible doesn’t make it easy or practical to do.

    I don’t want an unmoderated experience by default, either.

    No, I’m good. I think I’ll stay far away from plebbit.




  • There’s only one project that provides truly static/relocatable python that work on both glibc/musl: https://github.com/leleliu008/python-distribution

    There is the python provided by APE/cosmo. They also have two other distributions containing various goodies, pypack1, and pypack2. https://cosmo.zip/pub/cosmos/bin/

    But this came at the cost of discontinuing support for Android & Windows

    I don’t care about android support, but for the competition, and I don’t really know about Windows support. Right now, RDP is used to authenticate and managed the machines, but maybe a portable VNC we can quickly spin up, so more than one person can be on the same machine, would be useful.

    My original thought was to replace in place, insecure services with secure one’s via something like docker containers or nix. But I think many of the machines have too little ram bundled libraries for the services to be viable. I actually tested replacing apache, but it simply wouldn’t launch (I think the machine only had 2 GB of ram?).