• 28 Posts
  • 566 Comments
Joined 2 years ago
cake
Cake day: August 10th, 2023

help-circle





  • Yes, it’s worth using. It’s fairly easy to install, as it’s almost always packaged, and that makes it easy to use.

    But it’s not really enough. For example, tools like Lynis usually miss containers.

    A modern version of this stuff, I would probably recommend scanning all running containers with something like trivy, and then deploying wazuh on the machines. Wazuh can scan the system for misconfigurations in a similar manner to Lynis, but it is also capable of acting as a central logging server and a few other things.



  • I took a look through the twitter, which someone mentioned in another thread.

    Given the 4chan like aestetic of your twitter post, I decided to take a look through the boards and it only took me less than a minute to find the n word being used.

    Oh, and all the accounts are truly anonymous, rather than pseudoanonymous, which must make moderation a nightmare. Moderation being technically possible doesn’t make it easy or practical to do.

    I don’t want an unmoderated experience by default, either.

    No, I’m good. I think I’ll stay far away from plebbit.





  • There’s only one project that provides truly static/relocatable python that work on both glibc/musl: https://github.com/leleliu008/python-distribution

    There is the python provided by APE/cosmo. They also have two other distributions containing various goodies, pypack1, and pypack2. https://cosmo.zip/pub/cosmos/bin/

    But this came at the cost of discontinuing support for Android & Windows

    I don’t care about android support, but for the competition, and I don’t really know about Windows support. Right now, RDP is used to authenticate and managed the machines, but maybe a portable VNC we can quickly spin up, so more than one person can be on the same machine, would be useful.

    My original thought was to replace in place, insecure services with secure one’s via something like docker containers or nix. But I think many of the machines have too little ram bundled libraries for the services to be viable. I actually tested replacing apache, but it simply wouldn’t launch (I think the machine only had 2 GB of ram?).














  • Unlike a remote desktop, Puter is entirely in Javascript, where all the code runs on the user’s local device, in their web browser. This makes it vastly more resource efficient than a full virtual machine (or container if you are using something like kasmweb), and thereby cheaper to set up.

    It doesn’t work for everything, but for the apps that do run a browser, like VSCode, it offers a much cheaper way to run those in a whole “environment” (rather than deploying them seperately). It’s overall way less costly to VSCode remote into one server with 4 GB of ram, then it is to deploy a 4 GB ram instance just so there is enough ram for a GUI.

    But wait! Why would a corporate product come with a variety of games for people to play? 🤔

    That’s because although this is a legitimate product, and a legitimate business, the true, actual usecase of Puter (and similar web desktop environments) is for students who want to play arcade games during class. Because of how efficient and easy they are to host, they can be hosted for free on a variety of platforms, allowing students at middle and high schools (12+ years old, but before college), to get around content blocking restrictions by rapidly migrating it from one hoster, ip address, or domain name to another if it gets blocked. This lets them access arcade games during class so they don’t get bored.

    Comparatively, the free VPS tiers often do not have enough resources for a desktop (plus gaming through remote desktop kinda sucks), and students aren’t going to be eager to pay for stuff (have you seen AWS ec2 prices?!?).

    Puter does not seem to have this (at least, not explicitly), but a very similar project, AnuraOS comes with a “web based proxy”, that allows users to get around content filtering systems and view other sites that would normally be blocked.