iiinova — where your digital self keeps evolving

as someone neutral-ish on ai: AI translation is good and a positive for the world. didn't even know people were against it until this.

140 4

make it a competition for who can mine the most blocks in that area then everyone will be trying to help u mine for free

what does that entail :3 just mining a big area?

100 1

It sort of does, at least the code is in nixpkgs but you just have to build from source and potentially deal with build failures as 32 bit is a bit neglected.

000 0

that's so cool! I've been a bit inactive on atcraft due to being away from home, will be back tomorrow :3

cow @cow.computer · 24/10/2026

nobody knows what an IDE is anymore it feels like its a personal opinion on what makes something "IDE" or "text editor".

1100 10

cow @cow.computer · 24/10/2026

for something important like that if I want it before its in channels I'd override it with an overlay then nix will compile it from source. ``` nixpkgs.overlays = [(final: prev: { nodejs_24 = prev.nodejs_24.overrideAttrs { src = fetch...; }; }]; ``` (overlay code from memory it might be wrong)

cow @cow.computer · 24/10/2026

Progress update, script is still running!

Screenshot of the output of the pronoun counter script.

000 0

cow @cow.computer · 23/10/2026

hey @xan.lol something isn't working

cow @cow.computer · 23/10/2026

Got your email, give me an hour or so and I'll get it started :3

120 2

cow @cow.computer · 23/10/2026

Only 2TB? If you're serious about this and provide the script i can do it for you (i have 27TB free and decent internet)

140 4

I meant my server doesn't do *any* file uploads and the only interactive part is setting a theme with a post request that saves a cookie but idk maybe the post request for "light" or "dark" could be exploited. idk anymore this stuff's crazy.

I don't think im vulnerable then as my php server doesn't do any uploads but im gonna be safe and shut it down, its all old stuff anyways that i doubt anyone still looks at.

120 2

I couldn't get it to trigger on my php website but it could either be user error or just the website being so simple theres nothing to exploit (a single 150 line php script, everything else is static). not taking chances though and took my php server offline temporarily.

someone sent this on discord and its supposedly the exploit with a poc: jackalsyn.com/posts/php-up...

120 2

I'd say so just because its probably easier to scan for as u just scan every wordpress and a wordpress would be exposed to the internet as thats kinda the whole point. I don't *think* my php website i wrote is vulnerable but i turned off the web server just incase.

000 0

I'd say they don't want to deal with it in terms of initial deployment (network configuration, passwords, ssh) and customer support. Most vps providers just offer like mainstream linux, freebsd, windows server. Also with nix, nixos-anywhere is super easy to use so it's really an issue.

I wouldn't change your choice of secret management tool over it, just be a little careful.

the footguns im talking about aren't something i saw too much online, more something I ran into and leaked my oauth2 private keys. github.com/getsops/sops... this is the issue i fell for but pretty much, sops can leave stuff unencrypted if you use it wrong, age can't.

if you're worried about that I'd suggest maybe putting your sops-nix files in a different git repo that you keep private. Also be really careful with the .sops.yaml there are a few footguns that can leave ur stuff unencrypted. agenix cannot leave stuff unencrypted but has less features like template

130 3

Serving Tarball Flakes - Nix 2.34.9 Reference Manual

channels.nixos.org/nixos-unstab... channel tarballs like this exist and support version pinning through "Lockable HTTP Tarball Protocol". nix.dev/manual/nix/2...

nix.dev

000 0

Quality probably depends on your link bandwidth but in my experience many years ago using moonlight (before my lan was 100G and i was on 1G lol) It was definitely somewhat worse than actual displayport

This is a joke don't take it too seriously, though remember to be kind to others, even when debating ai-related issues online.

000 0

I looked online and you can get like displayport extender boxes that can run over generic fiber but they are usually rather expensive and/or don't support high refresh rates like 320hz which is what I run currently.

No, I have not tried MFF thin clients. With optical TB4 I also don't like how they seem to be mostly full cables and not optics for something generic like OS2 LC duplex. I already have lots of singlemode fiber in my home. With ethernet I can just replace my SFF module and not have to run new fiber.

I don't know if even ethernet would provide a good enough latency for gaming even though I probably have the bandwidth (could aggregate two 100GbE ports).

000 0

cow @cow.computer · 17/10/2026

I think about stuff like this a lot (especially during summer for thermal reasons) and it's still tempting but I worry too much about latency and stuff. I'd probably have to find some way to run 6 DisplayPort monitors + USB + sound directly over fiber with specialized hardware.

240 4

Took you this long to figure that out?

100 1

GitHub - emilazy/boot-security-tools: A collection of software designed to help support boot security

There is some work being done already for this focusing on NixOS like github.com/emilazy/boot... I haven't researched the patch mentioned but I doubt you will need it as the point is to not allow user kernels.

github.com

A collection of software designed to help support boot security - emilazy/boot-security-tools

the general answer seems to be not now but likely in the future as the things that are missing were already goals for reasons unrelated to this. Secure Boot with signed kernels and modules in hydra was already a desired thing. Everything else listed as required is just kernel parameters and such.

Yeah, I've said this forever: There is no good solution to video game cheating. Server side can only do so much, client side can only do so much without hardware control and is possibly bad for privacy, dedicated hardware can have computer vision-based cheats which exist and are only improving.

I'm starting to see the intent of this more as a "will get rid of 95% of cheaters" rather than a technically sound solution to where I think it holds up better. Anything requiring purchasing hardware (even if cheap) is going to get many potential cheaters to give up even though many will buy it too.

Also, cheaters are willing to spend multiple hundreds of dollars for both DMA cards and private cheating clients so I could actually see this attack vector being used frequently. Someone's gonna make a cheat using a method like this and sell pre-built USB TPMs with some easy to use tooling.