arianvp

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

lobre

Zig Type System

Zig aims to be a simple language. It is not easy to define what simple exactly means, but zig is also a low-level programming language that aims for c-compatibility. To reach this goal, it needs good semantics in its type system so that developers have a complete toolbox to manipulate data.

So types in zig are composable, but this can become rapidly overwhelming. See those examples. Are you able to understand them at a glance, as soon as you read them?

*const ?u8
?*const u8
*const [2]u8

digitalknk

#
# NixOS Configuration for Framework Laptop
#

{ config, lib, pkgs, modulesPath, ... }:

{

  boot.kernelParams = [ "mem_sleep_default=deep" ];

probonopd

Think twice before abandoning X11. Wayland breaks everything!

Wayland breaks everything! It is binary incompatible, provides no clear transition path with 1:1 replacements for everything in X11, and is even philosophically incompatible with X11. Hence, if you are interested in existing applications to "just work" without the need for adjustments, then you may be better off avoiding Wayland.

Wayland solves no issues I have but breaks almost everything I need. Even the most basic, most simple things (like xkill) - in this case with no obvious replacement. And usually it stays broken, because the Wayland folks mostly seem to care about Automotive, Gnome, maybe KDE - and alienating everyone else (e.g., people using just an X11 window manager or something like GNUstep) in the process.

Feature comparison

ZenulAbidin

╔██╗╔██╗╔██╗ ╔██╗╔██╗╔██╗  ╔███████╗      ╔███╗   ╔████╗
║██║║██║║██║╔████████████╗╔██╔██╔══╝╔██╗ ╔███╔╝  ╔██╔╗██
║██║╚══╝╚══╝╚╗██╗╔██╗╔██╔╝╚╗██████╗ ╚══╝╔███╔╝   ╚╗████╝╔█╗
╚══╝        ╔████████████╗ ╚═╗██╗██╗   ╔███╔╝╔██╗╔██╔╗███╔╝
╔██╗        ╚╗██╔╗██╔╗██╔╝╔███████╔╝  ╔███╔╝ ╚══╝╚╗███████╗ 
╚══╝         ╚══╝╚══╝╚══╝ ╚═══════╝   ╚═══╝       ╚═══════╝
╔███╗ ╔████╗╔████╗  ╔██╔██╗   ╔██╗                     ╔███╗
║███║╔██╔══╝╚══╗██╗╔███████╗╔██████╗                  ╔███╔╝
╚═══╝║██║      ║██║╚╗██╔██╔╝╚═╗██╔═╝    ╔█████╗      ╔███╔╝
     ║██║      ║██║ ╚══╝╚═╝   ╚══╝   ╔█╗╚═════╝     ╔███╔╝

werrpy

[Unit]
Description=rclone google drive media mount
After=network-online.target

[Service]
Type=simple
ExecStart=/usr/bin/rclone --config /root/gdrive/config/rclone.conf mount media-remote-secret: /mnt/gdrive-media --allow-non-empty --allow-other --read-only --dir-cache-time 48h --vfs-read-chunk-size 32M --vfs-read-chunk-size-limit 2G --tpslimit 5 --tpslimit-burst 5
ExecStop=/bin/fusermount -quz /mnt/gdrive-media
Restart=on-abort
RestartSec=5

The-OMG

#!/bin/bash

# requires gcloud command line tools
# go to https://cloud.google.com/sdk/docs/quickstarts to get them OR you can install with Node (npm) "npm install --save -g @google-cloud/cloud-sdk"
# max 100 service accounts per project
# run "gcloud init --console-only" first and select a project; run it again to select another project to create more service accounts

# Location of where service account keys will be created
KEYS_DIR=keys

ohhdemgirls

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

(A Russian translation of this article can be found here, contributed by Timur Demin.)

Why not?

eliot-akira

==========================
How Software Companies Die
==========================
 - Orson Scott Card

The environment that nurtures creative programmers kills management and
marketing types - and vice versa.

Programming is the Great Game. It consumes you, body and soul. When
you're caught up in it, nothing else matters. When you emerge into

Avaq

const I  = x => x
const K  = x => y => x
const A  = f => x => f (x)
const T  = x => f => f (x)
const W  = f => x => f (x) (x)
const C  = f => y => x => f (x) (y)
const B  = f => g => x => f (g (x))
const S  = f => g => x => f (x) (g (x))
const S_ = f => g => x => f (g (x)) (x)
const S2 = f => g => h => x => f (g (x)) (h (x))