mastodon.online is one of the many independent Mastodon servers you can use to participate in the fediverse.
A newer server operated by the Mastodon gGmbH non-profit

Server stats:

11K
active users

#configuration

6 posts6 participants2 posts today

🎉 Oh great, another "🤔 game-changing" #configuration #language by a lone genius named #Henry, because what could possibly go wrong with yet another #unreadable way to replace INI files? #Confetti promises to make you feel like you're reading the love child of Unix and Lisp, with all the user-friendliness of a brick. 🧱 Who needs JSON or XML when you have this dazzling new way to spend hours #debugging your configuration errors? 🥳
confetti.hgs3.me/ #gamechanger #HackerNews #ngated

Confetti Configuration LanguageConfetti: A Configuration File Format for Humans.Confetti is intended for human-editable configuration files. It is minimalistic, untyped, and opinionated. Schema conformance is validated by the user application. Confetti does not compete with JSON or XML, it competes with INI files.

TIL that Git only tracks the "is executable" permission on files. Proves to be an elegant way to clean up permissions on config files if you ever find yourself in that messy situation.

git init .
git add .
git commit
rm -rf *
git restore .
rm -rf .git
ls -al

Guide to Interpreting Security Incident #Announcements:

"extremely sophisticated attack" : The attackers put more time into the attack than we spent designing our defences.

"no evidence customer #data was accessed" : We lack audit records and the logs have been rotated out.

"due to a misconfiguration issue" : We deployed with default #insecure settings.

"possible for only a short window" : We didn't dig too deep to determine how far back the bug existed.

"crafted invalid request data" : We forgot to add input #validation.

"supplementary fix" : We didn't understand the problem as well as we thought, so our previous fix was insufficient.

"may have been exploited" : We're positive they got away with data, but they deleted our #logs.

"multiple threat actors" : Everyone was in our systems before we noticed.

"most customers are unaffected" : There are corner cases that aren't as #vulnerable.

"error in a third-party component" : We forgot to update our dependencies.

"could lead to remote code execution" : You're #p0wned.

"malicious activity has been observed" : The issue has already appeared in the press.

"review equipment inventory to verify if devices require other mitigations" : You need to buy new stuff.

"remotely exploited to allow authentication bypass" : We forgot to require #login for this function.

"not aware of any exploits in the wild" : The attackers aren't bragging on darkweb fora yet.

When I decided to backup the main configuration of my FreeBSD laptop — I found nothing more interesting than to write a new blogpost about it :dragnloaf:

While writing it, I read the FreeBSD Handbook for the nth time and found some little nuances about USB tethering, X server configuration and so on 🙂

eugene-andrienko.com/en/it/202

Dragon’s notes · FreeBSD 14.2 and Thinkpad X220
More from Eugene :emacs: :freebsd:

I've pushed an update to #emacs #substrate, my rock-bottom emacs #config starter. I've decided to cement 'straight' as the base package manager and done some rework on the base package install. I had to change the default theme from evangelion-theme to challenger-deep. I suspect this is because evangelion does not support emacs 30.1.

github.com/Etenil/emacs-substr

Bare-bones emacs configuration starter. Contribute to Etenil/emacs-substrate development by creating an account on GitHub.
GitHubGitHub - Etenil/emacs-substrate: Bare-bones emacs configuration starterBare-bones emacs configuration starter. Contribute to Etenil/emacs-substrate development by creating an account on GitHub.

Заводить ли личный блог или сайт? Часть II. Конифгурация сервера с помощью Ansible

Пришло время продолжить цикл статей о запуске личного блога. На очереди конфигурация сервера с помощью Ansible. На очереди конфигурация сервера с помощью Ansible. Данная статья будет разделена на три блока: несколько слов о результатах первой статьи, блок о самом инструменте Ansible и блок о конфигурации сервера с помощью него.

habr.com/ru/articles/888014/

ХабрЗаводить ли личный блог или сайт? Часть II. Конифгурация сервера с помощью AnsibleПришло время продолжить цикл статей о запуске личного блога. На очереди конфигурация сервера с помощью Ansible. Данная статья будет разделена на три блока: Несколько слов о результатах первой статьи ;...

I may apply some of these configurations.

"In this post, I’ll go through some of the perhaps obscure Git config settings that I have personally globally enabled and go into them to explain what they do and why they should probably be the default settings.

Also, it turns out that I learned most of these from the people who actually work on the core Git codebase every day."

blog.gitbutler.com/how-git-cor

GitButler · How Core Git Developers Configure GitWhat `git config` settings should be defaults by now? Here are some settings that even the core developers change.