[-] [email protected] 0 points 1 day ago

It's difficult to "scam" someone whose """job""" it is to take your hard-earned money to sit on their ass and make housing unaffordable.

[-] [email protected] 45 points 2 days ago

Anyone else using this to find new """woke""" games to play? (After reporting for bigotry, of course)

[-] [email protected] 5 points 2 days ago

This contributes nothing to the conversation and comes off as conspiratorial.

[-] [email protected] 3 points 4 days ago

Okay, so it's just like Yubikey-type stuff? I've thought about that before but it seems very risky - they recommend you get two and set both of them up so you have a backup, but that would require all websites to support that, right?

Pretty much. I suppose that's a very real disadvantage to using physical passkeys. If you lose it, unless you have multiple passkeys configured, or have access to an account recovery method, you lose that account.

But, like you mentioned, using Bitwarden would sidestep that issue, and they do support passkey emulation.

[-] [email protected] 5 points 4 days ago* (last edited 4 days ago)

I'm not an expert, so this is an oversimplification, but:

Passkeys are essentially like authenticating the same way you do via SSH, but with websites. The site will use a public key for your account. Your passkey holds the private key. That's it, as I understand it.

The advantages are that your accounts secured by passkeys will be inherently more difficult to crack than even the most complex, random passwords and it can't be phished (if you're using a physical passkey).

The disadvantage is that the standard is still being worked on, and bad actors (MS, Apple, Google, etc.) are eager and willing to sucker people in to using their vendor lock-in software implementations of them. If you want to avoid this, either use real, physical FIDO-capable hardware authentication keys, or use a FOSS password manager that is capable of emulating them.

[-] [email protected] 7 points 4 days ago* (last edited 4 days ago)

This isn't inherent to passkeys or the standard that they use. This has to do with the configuration of the service being attacked and the fact that once you've achieved MiTM, the sky is the limit for what you can do.

Passkeys use the same underlying protocol as hardware authentication keys (FIDO, not the YubiKey auth protocol) and should be roughly as secure and vulnerable as that type of MFA method.

[-] [email protected] 13 points 4 days ago

It's a two-step process:

  1. Misuse the word "groomer" until it means "anyone that isn't strictly heterosexual" (while also taking away useful vocabulary to describe a real abuse tactic).
  2. Make cruel and unusual punishment legal for "groomers".

Make no mistake: they want you dead. It's that simple.

[-] [email protected] 42 points 4 days ago* (last edited 4 days ago)

It's almost everything. You can play most games on Linux. You can't bolt-on the quality of life features that Valve has on Windows.

There's a reason most Steam Deck users don't install Windows on it, even though you can.

[-] [email protected] 0 points 5 days ago

This is the correct answer.

[-] [email protected] 3 points 5 days ago* (last edited 5 days ago)

imagine fleeing an argument you're wrong on this way 🤡

[-] [email protected] 3 points 1 week ago

Yep. Fuck Nintendo. I don't care how good their games might be, they're not getting another dime from me for as long as they're hostile to their community and customers.

[-] [email protected] 3 points 1 week ago* (last edited 1 week ago)

I've only ever heard disingenuous, white, anti-vegan leftists ever make the claim that veganism is anti-indigenous.

10
submitted 5 months ago* (last edited 5 months ago) by [email protected] to c/[email protected]

I am looking for something that can take a Dockerfile, like the following as an input:


FROM --platform=linux/amd64 debian:latest
ENV DEBIAN_FRONTEND=noninteractive

RUN apt update && apt install -y curl unzip libsecret-1-0 jq
COPY entrypoint.sh .
ENTRYPOINT [ "/entrypoint.sh" ]

And produce a a multi-stage Dockerfile where the last stage is built from scratch, with the dependencies for the script in the ENTRYPOINT (or CMD) copied over, like this:


FROM --platform=linux/amd64 debian:latest as builder
ENV DEBIAN_FRONTEND=noninteractive

RUN apt update && apt install -y curl unzip libsecret-1-0 jq

FROM --platform=linux/amd64 scratch as app
SHELL ["/bin/bash"]

# the binaries executed in entrypoint.sh
COPY --from=builder /bin/bash /bin/bash
COPY --from=builder /usr/bin/curl /usr/bin/curl
COPY --from=builder /usr/bin/jq /usr/bin/jq
COPY --from=builder /usr/bin/sleep /usr/bin/sleep

# shared libraries of the binaries
COPY --from=builder /lib/x86_64-linux-gnu/libjq.so.1 /lib/x86_64-linux-gnu/libjq.so.1
COPY --from=builder /lib/x86_64-linux-gnu/libcurl.so.4 /lib/x86_64-linux-gnu/libcurl.so.4
COPY --from=builder /lib/x86_64-linux-gnu/libz.so.1 /lib/x86_64-linux-gnu/libz.so.1
# ...a bunch of other shared libs...

# entrypoint
COPY entrypoint.sh /entrypoint.sh

ENTRYPOINT [ "/entrypoint.sh" ]

I've had pretty decent success creating images like this manually (using ldd to find the dependencies) based on this blog. To my knowledge, there's nothing out there that automates producing an image built from scratch, specifically. If something like this doesn't exist, I'm willing to build it myself.

view more: next ›

trevor

joined 1 year ago