needanke
@needanke@feddit.org
- Comment on The docker group is root access. An agent used it to write to /etc 4 days ago:
Super fair, ich habe erst die letzten Jahre angefangen mich mehr mit Containern auseinander zu setzen und da war diese Gefahr in vielen Tutorials recht präsent. ist wahrscheinlich ein shift der da in der Wahrnehung zwischenzeitlich passiert ist.
- Comment on The docker group is root access. An agent used it to write to /etc 5 days ago:
I feel like I read the exact same story (Person discovers docker group is effectively root because llm agent used it to circumvent not having sudo) a few minths ago.
Also, this is literally documented:
Running containers (and applications) with Docker implies running the Docker daemon. This daemon requires root privileges unless you opt-in to Rootless mode, and you should therefore be aware of some important details.
First of all, only trusted users should be allowed to control your Docker daemon. This is a direct consequence of some powerful Docker features. Specifically, Docker allows you to share a directory between the Docker host and a guest container; and it allows you to do so without limiting the access rights of the container. This means that you can start a container where the /host directory is the / directory on your host; and the container can alter your host filesystem without any restriction. This is similar to how virtualization systems allow filesystem resource sharing. Nothing prevents you from sharing your root filesystem (or even your root block device) with a virtual machine.
- Comment on British fintech Revolut slashes "AI" coding costs 10x by cutting out Claude and going self-hosted 6 days ago:
You wouldn’t download a plagarism machine!
- Comment on Update all your stuff, NOW - again. 6 days ago:
The way I read it, it is fine if you do not allow password authentication in general?
- Comment on Looking for a tool for browsing contents of unmounted cold storage 1 week ago:
Just out of curiosit, what do you gain from unmounting the fs? Depending on your reasoning, it might he an option to use a zfs filesystem, set it up so automatic jobs rarely run and then set a somewhat agressive disk spin down policy. That way fs info would be handled by the arc, not the disks and they would only spin up when an actual file is accessed.
At least I assume it would work this way. Look-Ahead reads or your explorer generating previews, etc. might well make thta option fail.
- Comment on Looking for a tool for browsing contents of unmounted cold storage 1 week ago:
I had an issue setting up immich for my parents, whre the fs would stall too long for it to successfully get files. Missing media was just getting displayed as a grey box with a “missing media” text on them.
- Comment on [deleted] 2 weeks ago:
Just mentioning the words “fertility monitor” in the post (or these comments) would probably have helped. I (and I assume those who downvoted) have never heared of the brand names in the article and do not even know what broad category of devices you were talking about.
- Comment on LiveOverflow - php situation 24h later (YouTube) 2 weeks ago:
For professionals, buisnesses sure. But for selfhosting? If I wake up one morning and my stuff is not working anymore, I can just roll back to the last good backup and then apply patches manually to see where it goes wrong. Way better to have some downtime when I don’t notice (i.e. don’t need the service) than having open vulnerabilities.
- Comment on LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early. 1 month ago:
Good news, its the first one!
- Comment on Steam Replay is out, share your deck stats 10 months ago:
The math isn’t mathing here. (Also I’m not that big of a gamer, clearly.)
Screenshot from the review showing Slay the Spire is 77% of the playtime in total.
- Comment on Steam Replay is out, share your deck stats 10 months ago:
Is expedtion 33 playable on deck for you?
- Comment on Steam Deck Beta Client Update: July 21st 1 year ago:
I too love my
Fixed spacing of friend icons in “Played Previously” and “On Their Wishlist” sections in app details.
Honestly, no blame on valve I prefer slow and steady over unstutsainable and flashy. But why does this need a post on this community?
- Comment on Using the Steam Deck docked has been a dreadful experience for me. Is it just me going wrong? 1 year ago:
I don’t often dock my steam deck (have no controller so I’ll only use it as a media console) but when I do the only issue I’ve had was some applications starting in the wrong resolution when in gaming mode.
Otherwise I can’t say I could see the issues you’re having; I have no issues with sound over HDMI, my mouse and other Bluetooth devices stay connected in desktop and gaming mode.
Have you tried connecting another device (ideally also Linux) through the same dongle to check wether it outputs the sound through the Tv?
- Comment on The Plucky Squire recently came out, and used the Steam Deck to represent PC 2 years ago:
Wait, its installed by default? I assumed I had to install it, which would not be possible, because its immutable and there is no rsync flatpak (I think).
- Comment on The Plucky Squire recently came out, and used the Steam Deck to represent PC 2 years ago:
and you can do everything on the steam deck that you can on any other pc
Ok, how do I use rsync on the deck then? (/s, but I’d still love to know)
