miduil

Will be interesting to see how https://github.com/rust-vmm/rust-vmm is going to develop, sounds like something like that could have a lot of use-cases for privilege separation but also embedded testing frameworks.

Comment · 4 months ago

Kinda wild that in primary/early middle school basically Knoppix and Wienux live distributions set me up for what has later become a career working with Linux/DevOps/SRE. Can't thank everyone who made Linux so accessible to people at a young age enough.

Comment · 4 months ago

same just cancelled it and left Elon Musk as a reason

Comment · 4 months ago

I was just looking into the topic recently, there is a decent graphic explaining how fiber is already used for submarine communication for quite some time.

Page 13 shows the diagram of an undersea fiber network separating into durable heavy and lightweight wires.

    Sea surface
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        |
        | near-surface armored cable
        |
     [Depressor]
          \
           \  fiber cable
            \  0.010 inch diameter
             \ up to 40 km long
              \
            [Float pack]
                 \
                  \ 50 m secondary cable
                   \
                 [Vehicle]

https://sundowner.colorado.edu/seefeldt/ptc-2005_2016/2013_p...

Comment · 4 months ago

You can skip inotify tools altogether and do use systemd like this to trigger `rm -rf`:

    `~/.config/systemd/user/remove-thunderbird-dir.path`

   [Unit]
   Description=Watch for unwanted ~/thunderbird directory
   

   [Path]
   PathExists=%h/thunderbird
   Unit=remove-thunderbird-dir.service
   
   [Install]
   WantedBy=default.target

Comment · 5 months ago

It's poisoning the filesystem cache, if you don't have a setuid binary handy you just poison anything else that gets executed by the host.

Comment · 5 months ago

Yes, it demonstrates that it's possible to harden well - at least for some cases. It appears depending on the environment hardened kernel / runtime environments are pretty much possible to have safeguards working today already.

Comment · 5 months ago

This again does not work under Android, at least in termux compiled with clang/gcc.