The good news is that in order to exploit the new vulnerability, the attacker first has to obtain kernel level access to the system somehow - by exploiting some other vulnerabilities perhaps.
The bad news is once Sinkclose attack is performed, it can be hard to detect and mitigate: it can even survive an OS reinstall.
Release blog post by the infamous “please remove my packages from NixOS” developer: https://community.home-assistant.io/t/consider-to-avoid-adding-library-dependencies-from-frenck/315185/20
Cloudflare tunnel is an option, you can even scrap your own nginx
I’m a nix noob but I think this is a release of the nix package manager and therefore it’s unrelated to the version of the nix channel with nix packages.
Are you confusing security and privacy?
You can try OpenCore Legacy Patcher: https://dortania.github.io/OpenCore-Legacy-Patcher/MODELS.html
What are some alternatives where I can get targeted ads?
Still waiting on the list of those swinging/swiping changes that the other DEs are making
I’ll bite: big swiping changes like what?
Unless you’ve used something secure for formatting or wrote data to the SD after, consider attempting data recovery.
That’s not my experience - have been using arch for around four years and it broke only once by not letting me log into the system after I failed to update pam configs after the system upgrade.
I often stumble on this example of nix usage - a one-off shell with a a specific package. This is such a niche and seemingly unimportant use case, that it’s really strange to have it mentioned so often.
Like literally what’s the point of having a shell with ffmpeg? Why not simply install it? Even if you need something just once, just install it and then uninstall it, takes like 10 seconds.
The other use case that is often brought up is for managing dev environments, but for a lot of popular languages (Python, Node, Java, Rust, etc. ) there are proven environment management options already (pyenv and poetry, nvm, jenv, rustup). Not to mention Docker. In the corporate setting I haven’t seen nix replacing any of these.
From my limited experience using home manager under Linux and macOS:
All in all nix seems like a pretty concept but not too practical at the moment.
There’s no ZFS support in OpenBSD is there?
Speaking of Cloudflare, if you’re okay with not self hosting, then there’s Cloudflare Pages which is good for hosting static websites.
I think the minimap gets colored in red in such areas but I agree a better indicator or a hint could be nice.
In case of moonrise towers, if you just cross the bridge back to town you can long rest there and come back.
This seems to be implemented in the Steam Deck client update from November 16th
Haven’t tried it myself though.
Heroic is a pretty good launcher for GOG
I keep seeing this comment and I think people are confused about private companies.
Private company is one that’s not publicly listed (traded on an exchange). Private companies still have shareholders, they may still have board of directors with shareholders representatives sitting in them. And these shareholders can still demand returns on their investment. There’s a whole industry around this called private equity.
Now it doesn’t look like Gabe Newell ever took Private Equity funding and according to the internet he owns 50% of the Valve shares but that still means that a large pile of shares is owned by other people who get some say in the company’s direction.
So saying that Valve makes this or that decision because they are private is wrong. Most companies are private and you don’t see them being all charitable and investing in open source.
You could argue that Valve is allowed to make certain decisions more freely because he’s a co-founder who still owns the majority stake though. And the company being private means that unless he sells his shares he gets to retain that control.
From https://www.cloudflare.com/products/tunnel/