emilburzo

The images everyone is waiting for are built by Docker though? So now if you're Docker you have to have a private CI/CD pipeline with all library projects?

It would be great, but it's also something to manage. Just keeping it working with all the changes that happen across all projects would be something.

That's... not what I said at all?

But let's go with that scenario, now you have all sorts of problems, from practical to security, like:

- accidentally/maliciously building the wrong thing? there's a patch, people agreed to it, but the wrong commit is built

- building for multiple architectures/versions?

- signing keys on someone's laptop?

- worse, image push/write keys on someone's laptop?

And so on.

I can empathize with them, this is actually quite difficult when you're an open source project.

You have your source code public, so you can't commit/push because then you've leaked info.

Your build pipeline is also likely public, so you can't just build from another source code... source.

You can create a private repo, but now you also need to build a private build system.

You don't get the same generous build resources for private repos, so you either:

a) simplify the build to just the essentials

b) pay

Unless you have significant funding, you'll probably go for a).

Now you have to maintain two systems, also with some differences between them.

Plus you need a way to get the build artifacts from the private system to the public one, typically at a fixed point in time.

Any failure/delay (e.g. less powerful build on private repo, errors because you exercise it rarely) causes people to get upset that you didn't respect the announced time.

Maybe you're also using things like image attestation, another can of worms.

> I regret getting a .io domain

Same. Mine's less important than email, more for personal projects with a nice URL, but I still feel the pain of switching.

> I'm looking to move from Namecheap to Porkbun

You can already do this today with your .io and pay ~$52 instead of ~$76. It's what I did a few days ago when I saw the crazy renewal price.

It was way easier to transfer the domain than I expected. And if you host DNS somewhere else, without downtime.

Because I've done it a million times and wanted to see what the "random number generator" is capable of? Because I have config backups/know how to unbrick?

You should try it, you might be surprised how thorough it is. It certainly checked more things pre/during/post-upgrade than I did to make sure everything goes smoothly. And definitely more than xattt, apparently ;)

I mean, these days you can just let Claude do it if you don't care for such minutiae... I was skeptical, but it got it done perfectly.

It also discovered my fast roaming settings were incompletely setup and that I was using a 5GHz channel that needed 60s to turn on due to regulations (DFS channels).

Or, buy a TP-Link router and flash it with OpenWrt. Best of both worlds.

If microphone quality matters a lot for your use-case, you might also want to checkout the Anker Soundcore Libery 5 Pro.

(I'm only sharing this because I know how difficult it is to find any information on earbuds with good microphones, Huawei Freebuds 4/5 were the best from my experiments until Anker released the ones above)

Interesting, so the spoofing is only active during attacks? That explains the short duration.

I am wondering what changed though, since this hasn't happened before in the previous 4 years. More spoofing installations maybe? Higher radio transmitter power?

I'm also very curious, do you have any technical mitigations for this to be able to use your GPS devices? Or is it now just a fact of life?

Sorry for what you are going through.

It doesn't have any credentials inside the VM though, not even for git, so it could commit but not push. And I manually review/commit/push outside of the VM since I don't want to just dump stuff without reading it first.

But good call-out if someone uses a different workflow.