• 2 Posts
  • 107 Comments
Joined 3 years ago
cake
Cake day: July 5th, 2023

help-circle


  • It seems weird, but it’s just small scale Donkey Kong

    We had Donkey Kong 64, then Donkey Kong Country Returns, now Super Mario Kart (which DK Jr was in).

    I wouldn’t be against them making their version of games in rapid succession like Donkey Kong Country 1 (1994), 2 (1995) & 3 (1996), or also making Banjo Kazooie (1998), Donkey Kong 64 (1999), Banjo Tooie (2000). But it’s clear they just can’t make as many games that fast, so we get just one every few years.




  • You’re absolutely right about Paris. I’ve traveled to a number of big cities but Paris was the first city that I felt I was in actual danger. The first time was traveling around Montmartre, there were a number of aggressive scammers who grabbed my arm and tried to “give” me a bracelet. The second was traveling near a circus or park and I clearly wander too far off that I felt the need to run back to the train station.

    Sure it was 10+ plus years ago, so maybe it’s better now, amd there was much more of the city that I felt fine traveling around. In fact most of the city was fine. But on those two occasions, I’ve never felt less safe, and that includes traveling to LA where I saw a man kicked out of a bar… and then kicked in the middle of the road while a large crowd just watched.

    Fuck Paris.




  • So as another comment pointed out you don’t need to give your user account access to docker in this way, it’s an optional step, but one that I suspect many people do (since it’s part of the official docs).

    What the LLM has done is silly, but completely possible. It climbed through the window that you left open.

    But let’s jump to a different scenario, the ping command (on Linux). That’s a perfectly harmless command, right? You just want to say hello to another computer and see if they say hello back.

    Except that historically the ping command was something called “setuid” which means when it ran it ran as root. It ran as root because in order for ping to work it has to create a special type of network packet that only root can create. But if you’re root you can run anything! So in theory ping opens a huge attack surface. If you have to worry about ping then is everything too complex to be manageable?

    Luckily, as I said, this is a historical problem. The permissions ping needs have been moved to a specific capability and the command changed to utilize it and now ping can just run as a regular user without root privileges. But you can’t just make that change overnight. It takes a lot of time and effort.

    So could the same be done for docker? Maybe. A rootless version of docker already exists. If you actually wanted to do what the LLM suggested, that wouldn’t work with a rootless docker, at least not without a bunch more configuration (and even then maybe).

    So is security hard? Yes. Is it impossible? No.



  • Sure. So we don’t know the original question but we can see that changes were made to SDDM, which is basically your login screen. So the original request was probably something like “Can you change my login screen to do something cool?”

    Now, the configuration for the login screen is located in /etc and requires administrative privileges to change.

    The query was run by the user account and not an admin account. Typically to run something as admin you use the command sudo which will interactively ask for a password and then, if allowed, you can run the command as an admin.

    However the tool docker, in order to function properly, has the ability to run commands as administrator and won’t prompt for a password.

    So basically what happened here is instead of asking for a key to unlock the front door to your house, it installed a new door on the second floor, went through that door, rearranged your refrigerator, went back out the door it created, and then patched up the hole perfectly.




  • I think it’s fair to discuss and criticize films, even if they are “just for kids”. Plenty of children’s films have a deeper story or teach a lesson. Look at Illumination’s first film, Despicable Me. The film is full of heart, but it’s also got comedy.

    It’s also fine to enjoy something and criticize it. I enjoyed many different scenes from the Super Mario Galaxy movie and I think any Mario fan will enjoy watching it. But is the movie ultimately forgettable? Also yes.


  • I did a rewatch last year and I think the best option is to just watch it all.

    Season 1-4 are top tier. Season 5 is where the cracks start (Dorne adventures), but season 5 also has the benefit of being an ending of sorts (Jon dying). So stopping at 5 is an option.

    Season 6 has a lot of great moments, Hold the Door Hodor, the destruction of the great Sept, the Battle of the Bastards and the Tower of Joy. So there is a lot to enjoy.

    Season 7 is Dany finally arriving in Westeros and setting up everything in preparation for season 8. So if you’re watching this season, then you should also watch 8. If you want to imagine your own ending, then maybe stop before this season.

    I think seasons 7 & 8 gives us a solid ending for Theon and Jorah. We get the knighting of Brienne. There are other storylines that have their moments, but some of it is unfortunate since we know it doesn’t go anywhere.





  • Yes. I started using it years ago and have been unable to exit ever since.

    But honestly related to your question, I started learning to use vim exactly because when I started to learn and use Linux I was often stuck in situations where that was the only thing available.


  • I don’t use DoorDash but occasionally order from Taco Bell. Every time I order I watch the car arrive at Taco Bell and wait about 20 minutes before actually picking up my order and then delivering it.

    Additionally I know UberEats used to (and maybe still does) offer cheaper delivery if you pick a restaurant another driver was already heading to. (I haven’t used UberEats in years because I found them less reliable.)

    Ironically if a restaurant did all the deliveries themselves they would have all the information about how best to optimize delivery. Maybe all the delivery companies can find a way to share this information to minimize travel and maximize speed of delivery.