I had a friend who liked to sulk around in a trench coat. He bought a grocery store donut and promptly tossed the receipt.

He was soon stopped by grocery security for theft. After some hassle they tracked down his receipt and let him go, but yeah that’s what donut receipts are for.

This coverage provides an example of what is sent, and it includes neither MACs nor HDD serial numbers.

https://ostechnix.com/manjaro-data-donor/

After Ubuntu for many years I switched to Arch because they packaged a number of things I wanted that Ubuntu did not.

If you are happy with Ubuntu stick with that. I have friends and family that use it and it’s fine.

Good example. It’s true that an even a GET request not designed to mutate data might still fail to validate input, allowing a SQL injection attack or other attack that escalates to the privileges that the running app has.

This has to be the cheapest coiled split-keyboard cable option. Creative !

Immich has a whole set of end-to-end automated tests to ensure they don’t accidentally make public any URLs they went to be private:

https://github.com/immich-app/immich/tree/main/e2e/src/api/specs

As a popular open source project, that would be e glaring security hole.

Using this proxy puts the trust in a far less popular project with fewer eyeballs on it, and introduces new risks that the author’s Github account is hacked or there’s vulnerability in he supply chain of this docker container.

It’s also not true that you “never need to touch it again” . It’s based on Node whose security update expire every two years. New image should be built at least every two years to keep to update with the latest Node security updates, which have often been in their HTTP/HTTPS protocol implementations, so they affect a range of Node apps directly exposed to the internet.

Yes, there are broken uses of the HTTP protocol verbs where filtering to GET won’t work.

A simpler way to protect a private service with a reverse proxy is to only forward HTTP GET requests and only for specific paths.

It’s extremely difficult to attack a service with only GET requests.

The security of which URLS are accessible without authentication would be up to immich.

Some kind of horizontal deflection — a curve to the side can still be used to slow bikes near an intersection. But here the original design practically required getting off the bike to go through it, while the path around it will hardly slow bikes at all. So both attempts were failures.

Here’s example of a newly constructed protected bike lane which curves as it approaches an intersection to slow bike traffic.

I think you may be looking for a programmable keyboard.

With one, you can have arrow keys on the home row like vim, and make other universally recognized keys easy to reach including Home, End, PgUp, PgDn, App (right click), and all the modifiers. Some also build pointing devices into the keyboard as well.

I primarily use the Unicorne by Boardsource.

That’s something! But it doesn’t raise any money from people with other VPN providers or who don’t want to buy a VPN service.

Counterpoint: for those who prefer split ergo keyboards, the internal keyboard on laptops is rarely used.

A tablet where you can bring your own weird keyboard to pair with it is better.

Signal does a decent job of encouraging people to make one-time or ongoing donations to the service. I’ve supported them multiple times because they gave me a prompt to do so.

I don’t recall Firefox ever asking for a donation or subscription.

Mozilla could have allowed people the option to subscribe for a modest fee in addition to giving it away for free, to diversify their income and be less dependent on Google, but they have not been trying that hard to develop other revenue streams.

You linked to How Not to Die, which is by the same author as How Not to Diet.

He advocates WFPB. I have read How Not to Die and it was more interesting and funny than I expected. It’s a good tour of the scientific studies related to the foods correlated with the most common causes of death.

Studies about longevity have reached the conclusion that WFPB is best for long life as well. The Blue Zone diet focused on longevity also emphasis a plant-based diet with less processed food.

WFPB is a vegan way of eating focused on health. It recommends minimizing processed foods, especially added sugars and oils. Stricter versions also limit fattier foods like avocados and nuts.

When following WFPB closely, it’s necessary to count calories, because you are eating so much nutrient-dense food with lots of fiber and relatively fewer calories. So you get full without a lot of calories.

Although, If I have my own Amazon referral link in my blog post and they replace the referral code in their feed, I would not be happy about that.

They could be injecting their own ads or affiliate links into the content.

For example, if a post links to Amazon.

I have not looked at the source code.

I ended my Zellij eval when I ran into this dangerous bug when Sync and Fullscreen are combined.

It potentially sends commands to a server in a hidden window you can’t see.

https://github.com/zellij-org/zellij/issues/3458

Tmux doesn’t have this problem.

Interesting research project but it’s not Linux and doesn’t natively run Linux apps.

https://www.theregister.com/2024/02/21/successor_to_unix_plan_9/