socphoenix

joined 2 years ago
MODERATOR OF
[–] [email protected] 35 points 1 month ago (12 children)

That is 10,000% people who don’t do creative work especially professionally. I am fine with gimp and darktable versus anything Adobe/paid but I also barely use them lol. I would be back off Linux in a heartbeat if I honestly couldn’t use something I needed even though I prefer it.

[–] [email protected] 10 points 1 month ago

To add on to this, it’s also why liberal talking points tend to really highlight savings from programs. As another easy example of good spending: if it costs $50k to send someone to drug rehab versus $75k to house them in prison for a year, with respective rehabilitation rates for 65 and 48 percent, you save and make money twice. Not only is it cheaper up front to send them to rehab, but the lack of a criminal record leaves that person more free when searching for jobs later which can make them a much more productive taxpayer from an input to the economy standard.

[–] [email protected] 17 points 1 month ago (1 children)

Is there a specific item you’re looking at? The issue here is in a few different areas but largely breaks down to

  1. It’s not one person but multiple
  2. A checkbook is a terrible analogy that at least in the US is just used as a way to make political points.

To 1, imagine you and someone else who disagrees with you on basically every financial aspect has to decide how to spend income together. That is likely not going to be a short or fun process.

For 2, a lot of what they are actually talking about here is debt. Debt gets trickier at a nation-state level as it’s not as simple as how much can I repay. Economies all use at least some debt and that debt comes with economic complications. For instance, let’s say we take on debt that pays for roads that will improve shipping times by 25% while reducing vehicle deaths by 5%. Both of those are economic boons, reduced shipping times means potentially more money from in country sales and exports and removed the economic losses of both the death itself and the loss of future economic gains from that individual. This kind of debt quite literally brings in more money than it costs to service that debt.

On the other hand debt that say gets wasted say reopening Alcatraz is debt that won’t go towards any meaningful economic gain and we lose money on it.

Basically (for the US at least), any time someone mentions the term checkbook when referring to the government they are either purposefully trying to mislead you, or are not appreciating the full range of government spending in a way that is a massive detriment to the way we choose to run our government.

[–] [email protected] 72 points 1 month ago (1 children)

Wonder how much of a bonus the sick fuck who pitched that got for the idea?

[–] [email protected] 6 points 1 month ago

Personal experience it is either extreme hate or extreme respect for the institution with no in between. The idea of not caring about them isn’t possible out here from a religious perspective

[–] [email protected] 22 points 1 month ago (3 children)

“People are worried, even some people who voted for you, saying ‘I didn’t sign up for this.’ So how do you address those concerns?” ABC host Terry Moran asked Trump.

“They did sign up for it, actually, and this is what I campaigned on,” Trump replied. He added, when questioned about price increases on electronics, clothing and homebuilding, that “China probably will eat those tariffs.”

Man I hope democrats use that ammunition he left sitting there for the next 80 years.

[–] [email protected] 2 points 1 month ago

I’m not sure if it’s plastics alone or if there’s also something with the pesticides or some other contaminant, I generally cook everything from scratch here and still felt like a million bucks eating like shit in the UK…

[–] [email protected] 29 points 2 months ago

That is already a rule on the books. This EO is just a dog whistle for racist idiots.

[–] [email protected] 18 points 2 months ago

From my personal experience the bigotry towards non white non male folks in the industry can be pretty extreme, so off the very top of my head I can think of several ways a bombastic EO could inflame that worse. Not to mention I’d like my government to focus on fixing shit instead of meaningless performative bullshit

[–] [email protected] 76 points 2 months ago (6 children)

It’s already part of the federal commercial driver regulations too… so no. No they have not. The most they’ve seen is someone with a heavy accent and maybe broken English.

[–] [email protected] 4 points 2 months ago* (last edited 2 months ago)

From what I’ve found reading terms on some of these it’s fees baked into them that are pretty dang steep compared to interest if you pay them off immediately. Many then balloon once you get past some arbitrary point between 30-90 days. Might take a look at this to get an idea. I’ve seen these guys recently at a mattress store and googled a cost estimator to see how they worked.

[–] [email protected] 2 points 2 months ago

Oh I know! I about have everything diagnosed and despite the rabbit trails the fixes are all pretty cheap. Smoke was 2 separate issues: clogged pcv hose, and dying cdi boxes causing incomplete ignition. The check engine light is the upstream O2 sensor, so now I’m just waiting on parts.

 

Posting this for visibility: cross-posted from: https://lemmy.world/post/1299831

Hi all,

If you're just now signing in for the first time in 12+ hours, you may just now be finding out that Lemmy World and other instances where hijacked. The hijackers had the full abilities of hijacked user, mod, and admin accounts. At this time, I am only aware of instance defacing and URL redirections to have been done by the hijackers.

If you were not forced to sign back in this morning, contact your instance admin to verify mitigations were completed on your instance.

How?

This occurred due to an XSS attack in the recently added custom emojis. Instance admins should follow the issue tracker on the LemmyNet GitHub, as well as the Matrix Chat. Post-Incident Activity is still on-going.

Currently, it is likely that just your session cookie was stolen, with instance admins being targeted specifically by checking for navAdmin, an HTML element only instance admins had. I do not believe this to affect users across instances, but I have yet to confirm this.

What happens next?

As I am not the developers or affected instance admins, I cannot make any guarantees. However, here is what you'll likely see:

  1. Post Incident investigation continues. This will include inspecting code, posts, websites, and more used by the hijackers. An official incident writeup may occur. You should expect the following from that report:
  • Exactly what happened, when.
  • The incident response that occurred from instance admins
  • Information that might have helped resolve the issue sooner
  • Any issues that prevented successful resolution
  • What should have been done differently by admins
  • What should be improved by developers
  • What can be used to identify the next attack
  • What tools are needed to identify that information
  1. A CVE is created. This is an official alert of the issue, and notifies security experts (and enthusiasts), even those not using lemmy, about the issue.

  2. A code security audit is done. This will likely just be casual reviews by technical lemmy users. However, I will be reaching out to the Mozilla Foundation and Cure53 as they recently did an audit of Mastodon. If there is interest in an external audit of lemmy and the costs are affordable, I'll look into crowdfunding this cost.

 

I'm trying to set up rules so I can access a few different containers from zerotier. I've already set up an ssh-x11 container and the passthrough is working fine with:

rdr on $ext_zero proto tcp from any to $ext_zero port 8000 -> 10.1.1.3 port 22

where $ext_zero is the variable for the zerotier bridge.

However, trying to stream music with jellyfin with:

rdr on $ext_zero proto tcp from any to $ext_zero port 8096 -> 10.1.1.6 port 8096

I get consistent connection refused messages.

The full pf.conf for redirections: Code:

table <jails> persist
nat on $ext_if from <jails> to any -> ($ext_if:0)
rdr-anchor "rdr/*"
rdr on $ext_zero proto tcp from any to $ext_zero port 8000 -> 10.1.1.3 port 22
rdr on $ext_zero proto tcp from any to $ext_zero port 8096 -> 10.1.1.6 port 8096
rdr on $ext_zero proto tcp from any to $ext_zero port 8920 -> 10.1.1.6 port 8920
rdr on $ext_zero proto udp from any to $ext_zero port 1900 -> 10.1.1.6 port 1900
rdr on $ext_zero proto udp from any to $ext_zero port 7359 -> 10.1.1.6 port 7359

The system is FreeBSD, the jails are roughly equivalent to a docker compose install.

Jellyfin is set to accept remote connections, with the whitelist left blank as per their instructions to allow all addresses. Why will ssh connect but not jellyfin?>>

view more: ‹ prev next ›