And despite security recommendations, too many IT depts still force password resets every 90 days…

It could be for contractual or for insurance reasons. We have some contracts with government agencies that require it, and our cyberinsurance also does. Even though NIST has been recommending for years to do long passphrase + MFA and no reset unless you suspect compromise.

So yeah, the reason behind this might not be just plain incompetence.

This is why I got all of our devs to start building with the target of a Docker container in mind.

And for the ones who still won’t or can’t wrap their brains around Docker, I run their shit through a Github Actions workflow that spits out their ugly baby as a Docker container. In the end, I don’t give a shit what it is, your Rube-Goldberg piece of shit is getting stuffed into a Docker container.

“It works on my machine!” Yeah, well, your machine is now everyone’s machine thanks to the magic of containers. Now fix your broken shit so PagerDuty doesn’t call me at 3am again. Fuck.

Never going to happen, same for Excel.

Whatever future iteration of ChatGPT that eventually enslaves the human race will be using Outlook and Excel to keep track of the genocide.

All the while they uphold objectively-racist comments despite several reports. Fucking weird.

I mentally checked out of reddit when I got a comment deleted and a 3-day sitewide ban for saying:

“It is always OK to punch a Nazi.”

It was a literal comment, not figurative, nothing was being compared, etc. Just a straight statement about actual past and present-day Nazis. Ban.

The 3rd-party app fiasco happened a couple of weeks later, and that was the second sign that I needed to GTFO.

I’ve been doing -fr like forever. Don’t know why

BURN THE HERETIC

Well you see, finding a way to reliably deliver ads via the API would have taken far too much developer brainpower for a company that can’t make a functional video player or a mobile app

It honestly wouldn’t be that hard at all. You deliver ads via the API alongside actual posts, as if they are an actual post, and forbid altering them in the developer ToS. If you want to be anal about enforcement, run popular 3rd-party apps in an emulator to verify that the JSON returned by the site is unaltered when it’s rendered in the app. You could put this together in a weekend.

Which really just speaks to quality of talent at reddit, or the management at reddit suppressing that talent. Or both.

His mind’s gonna be blown when he finds out about Mode averages.

WSL is actually pretty OK now, it’s lightyears ahead of what it was. You can even run systemd in it now.

Even now, the only thing that Javascript has going for it is that it’s not Groovy…

I hate Node and NPM so much that I have a physical reaction to just seeing the words now.

I already disliked Node & NPM quite a bit, but the hatred and disgust got to the point it is now after having to write a CI/CD pipeline in Groovy/Jenkins for a Node site that that our devs were building. I had to automate the build/deployment of Satan’s favorite framework in Satan’s favorite language. I came pretty close to quitting.

It’s out the door now, but I’m in the middle of reimplementing the pipeline in Github Actions so I don’t drink myself to death when they come knocking to do it again.

I’ve been using Linux professionally for a couple of decades and using it altogether since like 1996. I never knew about the timeout command. I’m gonna have some fun with that.

I wonder if I can set someone’s shell to it…

More like <esc><esc><esc><esc><esc><esc><esc><esc>… Just in case

MY PEOPLE!

VSCode is what made me finally switch away from vim for anything but minor edits. It’s just too good.

I did set up vim keybindings in it, though.

I first settled on vim as a teenager because I was a fan of… performing surprise penetration tests.

It defaults to opening files read-only, so you don’t have to worry about the access/modified time on the file changing if you open one for… science reasons.

Man, this comment made me feel a little embarrassed at myself. I saw the shortcuts and thought about how I have a tradition of going to the top of the file when I’m done editing and about to save/quit. I always hit the shortcut for it and think “gg boys! Good game” and then quit out of vim.

Stop judging me.

Quick editing for me is in vim. Anything else is in Visual Studio Code. Which I have set up with vim keybindings.

Edit: on the other hand, does the latest nginx get pulled at time of creation?

It depends on how you have your docker compose file set up. If you pin the version, no, it’s never going to get updated unless a new version with that exact tag is released. If you omit the tag, it’s going to default to whatever is tagged as latest in the image repository, and that’s only going to actually update the image when you either manually pull the image or relaunch the compose stack.

If you want it to auto-update without relaunching the stack or manually pulling the latest image, you’d have to set up something like Watchtower and have it monitor that container.

That certainly makes me feel better for letting the Magic Smoke out.

I don’t think it became easier at all until it was forked off into Xorg and they started making dramatic improvements.

I think it was trial and error for hours at least.

It certainly was until I discovered the monitor I hadn’t fried had the modelines printed on a sticker on the back…

Yep. I’m not making a proclamation, just stating an opinion. I don’t have a problem with what they’re doing, and if other people do, that’s fine. Some people like their cucumbers pickled, let them have their pickle.

I actually wouldn’t be surprised to see it go open source in the future, Microsoft has been doing that a lot recently, like VScode and the whole of .NET and friends like PowerShell. Pretty much the only things worthwhile from Microsoft are already open source, except Copilot.