Nah the hash function gives up after 256 bytes and outputs *, matching the ‘hash’.

Edit: it’s unix tradition to put * as the hash for system accounts that should never be able to be logged in, this bug now means you can login (with the right config), using any password longer than 256 characters.

Fluxer are also moving away from LiveKit, so hopefully that means it’ll require less ports soon.

Some servers do publically list their PHP version, and as an example there are currently ~23,000 that list PHP 8.5.11: https://www.shodan.io/search?query=PHP%2F8.5.11

Sure these could be a manually patched version of 8.5.11, but I find that pretty unlikely.

They were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.

If you don’t mind using alternative DNS servers, meaning this won’t be accessible to the average person, you could try OpenNIC.

Unless there are vents underneath, you might also want to flip that power supply around, so the fan’s on top.

GPS doesn’t handle leap seconds. Currently devices have to subtract ~18 seconds to convert from GPS time to UTC, this just means that offset will never need to be updated for a few thousand years. Other GNSS constellations may be different, but I assume they’d also be unaffected.

So it seems I was wrong about Cloudflare having seperate prefixes for WAF and workers. And these are all WAF/workers IPs (but not warp). My guess is that someone’s made themselves a http proxy worker, and are using that to proxy their bot’s requests.

What’s the IPv4? I believe Cloudflare has different prefixes for WAF, warp, and workers.

2a06:98c0:3600::103 is definitely a Cloudflare WAF IP, so my guess is someone using either warp or workers is sending requests and added that IP to X-Forwarded-For as a red herring.

This probably isn’t too useful for you as they only have 24v and 54v models, but Ubiquiti used to make EdgePower UPSes. They have a http management interface that lets you monitor the power usage or power cycle the router if a ping stops responding, and etc. I installed one recently for a POE switch of mine.

Regarding Google Coral, from the docs: https://docs.frigate.video/frigate/hardware

The Coral is no longer recommended for new Frigate installations, except in deployments with particularly low power requirements or hardware incapable of utilizing alternative AI accelerators for object detection. Instead, we suggest using one of the numerous other supported object detectors. Frigate will continue to provide support for the Coral TPU for as long as practicably possible given its still one of the most power-efficient devices for executing object detection models.

Personally, I’d recommend OpenVINO. It works on iGPUs, and if that’s not possible it’s quite performant on CPUs. I currently run a Google Coral and the Linux driver is no longer officially maintained meaning it breaks every now and then after a kernel update, next time it breaks I’m going with OpenVINO.

Also, I’d install Docker in an LXC for Frigate, it makes passing the iGPU through to it a lot easier.

the smallest model made by Deepseek is about a 300B param model.

This is not correct. DeepSeek has plenty of smaller models. I just had a scroll through their huggingface, and picked out a few: DeepSeek-V2-Lite (16B), deepseek-moe-16b-chat, deepseek-llm-7b-chat, but there’s quite a few more too.

Though DeepSeek R1 is their flagship model, which is the one people usually think of, and that’s a 684B param model.

Can confirm it does:

OrgAbuseHandle: ABUSE9107-ARIN
OrgAbuseName:   ABUSE
OrgAbusePhone:  +1-313-516-8908
OrgAbuseEmail:  abuse@hostodo.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9107-ARIN

I believe OP would require an authoritative DNS server, which AFAIK Quad9 is not. desec.io would be my recommendation though.

I can dig it…but surely the simple option is to have the PC wake up on power restoration, right?

After the PC shuts down, the UPS runtime will increase by a lot. So the power might come back before the UPS turns off, so as far as the PC can see, the power was never lost.

Edit: Also I assumed you meant restore on after AC loss, and not the last state.

Not to wreck your joke, but certificates have a starting date on them too, so the epoch also won’t work.

I think you’ll like hollywood!

Yes, but an SSD you already own is cheaper than buying a new one. So it’s interesting to see how much improvement an NVMe SSD would make if someone were to upgrade from a SATA one.

Also, a backdoor in this particular program can steal your PGP keys.

Now you can make that decision. Evolution is also available from the Debian and Arch (and others) repos without sandboxing, if you’d prefer it to have access your whole system.

You can also remove those permissions with the Flatpak cli, or Flatseal.

It’s in no way like Android where “OpenKeychain” were forced to define a protocol and now reading a key prompts the user.

I don’t see why this couldn’t be done with Secret Service, just no one does so no one expects it. You should email one of the mailing lists for GnuPG if this bothers you though.

Oh, and one of the few dozen local privilege escalations found by AI in the mountains of trash of our great kernel completely negate all of this.

Well yeah, sandboxing/containers/namespaces were never guaranteed to be fully isolated, there’s a reason all the cloud companies settled on VMs over containers. It’s just one line of defence that you otherwise wouldn’t have.

Well, both the Flathub website and KDE Discover list this, so this seems like a GNOME issue and not a Flatpak issue.

Flathub:

KDE Discover: