nativeit

Every socialist I’ve ever met has conceded that capitalism is a great mechanism for wealth generation. Just not for much else humans might value in their societies.

That’s a good reminder: With scarce few exceptions, your job doesn’t actually care about you, companies and platforms aren’t your friends, and life is too short to waste it on assholes and sociopaths.

That depends if they routinely and cheerfully behave in objectively insane ways.

If there’s no way to be sure, then why blame Chinese operators? Because American companies have given you so many reasons to believe they’re acting in good faith?

I don’t particularly trust anyone at this point, and I assume AI traffic on my web servers are all malicious actors, and never bothered to consider what country the malicious bots came from. Mostly because I couldn’t possibly care less, but it kept happening even with geofencing and rate limits, so some American companies who own domestic IP blocks are facilitating them.

Because OpenAI and Anthropic are so virtuous and trustworthy?

I found this while looking for a good option for centralizing management and monitoring of access controls for my small hosting services now that my "staff" is expanding with things like Hermes agents. I found Teleport to be a little too enterprise-y, and didn't want to mess with any custom CA servers or DNS tricks.

This appears to be getting regular updates, the project is hosted on OVH's GitHub. Anyone have any experience with The Bastion, or have any alternatives to recommend? I'd imagine a fair many of you are vibe-coding similar utilities at this point, but I thought this struck a nice balance between shooting from the hip, and full-on enterprise access control platforms.

I'd also appreciate any advice on keeping the machines contained in their own sandbox. My work requires using agents with access to development infrastructure, and I currently keep everything behind a ZeroTier VPN with no public access allowed in/out by default (individual MCP's can request approval for one-off web searches and things like CURL requests to public URLs). I've tried to be very careful about keeping secrets off the agent's machines, and only providing them with narrowly-scoped SSH keys to other dev machines on the same subnet.

But I understand there are mechanisms for agents to escape this kind of setup, and while I'm not an AI doomer, I want to be responsible with what seems to be an increasingly powerful and potent tool. To be clear, I'm also not an AI booster. The entire industry, the people leading the largest companies, the incestuous financing, the politicking, and the shaky development of hesitant regulatory frameworks all make me deeply ambivalent. I'm just a guy trying his best to ply his trade as a freelance I.T. consultant in an increasingly uncertain environment. Hope this finds everyone well. Thanks in advance if anyone reads this and/or responds.

“…now let’s sprinkle some crack on this [homeowner], and get out of here.”

Well done.

New Zealand, off the top of my head. If you can’t find examples, you aren’t looking.

People were executed and/or sent to labor camps for their negligence in Chernobyl.

Seems like we routinely prosecute such crimes. If a Philly grand jury doesn’t hear any hearing felony indictments from this, then we’re ceding [even more] authority to the industry.