• 12 Posts
  • 1.14K Comments
Joined 2 years ago
cake
Cake day: June 7th, 2023

help-circle
  • do any of you hate how self-hosting services like photo- or document-management systems, or even a simple rss tool, forces you to sort your stuff out, and put your decades old files in order?!

    What is this “sort” thing you speak of? I don’t sort anything, I have NextCloud syncing my entire photos, videos and documents folders and they are just as messy as ever. Granted, I do go through my photos and videos once a year and dump them in a folder named for the year they were taken. Occasionally, I’ll go hog wild and try to sort some of a year’s photos/videos into folders named after events. Though, that hasn’t happened in a number of years. I setup NextCloud so I could have everything synced to my own server and just forget, not have to deal with labeling my data.

    As for bookmarks. I already keep those in folders; but, I don’t sync those. I use my desktop far more than I use my phone for web browsing. And the types of things I use my phone for (mostly recipes), I just keep bookmarked there.


  • The first issue with running a coin miner is using company resources for your own profit. Your own system, using your own electricity, go for it. Running it on a company owned laptop, while at a company building, burning electricity the company is paying for. Ya, that starts to get uncomfortably close to fraud or theft. There is also that whole, “running unauthorized software on a company system, doing who knows what else in the background.” There is a very real possibility that the coin miner has unknown vulnerabilities which could allow remote code execution; or, just outright be malicious and contain a remote access trojan. Maybe he was smart enough to audit all the code it was using and be very sure that’s not the case. More likely, he just grabbed a random implementation of XMRIG, put his wallet in the config file and ran it. Either way, he also made a point of refusing to remove it, so we escalated up to management. With the recent ransomware outbreak having been in the multi-million dollar (possibly low tens of millions) damage range, refusing to remove unauthorized software went over about as well as a lead balloon. There may have been other factors at play; but, the unauthorized software and being a dick about removing it was what got him out the door.


  • If you spin it up, fucking own it. When you’re done with it, shut it down. I have long lost count of the number of times I’ve reached out to a team to ask about the coin miner they are running on some random EC2 instance only to find out that some jackass spun it up for a test, gave it a public IP, set the VPC to allow any inbound traffic, installed all kinds of random crap and then never updated it. Nor did it get shutdown when the test ended. So, a year and a half later, when the software was woefully out of date, someone hacked it and spun up a coin miner. Oh, and the jackass who set it up didn’t bother to enable logging or security monitoring. But, they sure as hell needed the ability to spin stuff up on their own. Because working with IT to get it done right would be too hard for their fragile little ego.


  • You joke, but I’ve actually been responsible for a coder getting shown the door for running a coin miner on his work laptop.

    In his defense, cyber security at that company was crap for a long time. After a ransomware outbreak, they started paying attention and brought some folks like myself in to start digging out. This guy missed the easy out of, “hey that’s not mine!” The logs we had were spotty enough that we would have just nuked the laptop and moved on. But no, he had to fight us and insist that he should be allowed to run a coin miner on his work laptop. Management was not amused.



  • Ya, sadly there is still a lot of useful content in the technical subreddits. So I find myself ending up there via search engines on a fairly regular basis. But, I specifically use the Redirector plugin for Firefox to auto-magically force the use of old Reddit. If I hit the site on my work computer, I’m quickly reminded about why I quit the site.











  • I don’t remember it that way. To me, it was a minefield of viruses, popup ads, chain mail, and unexpected extreme NFSW content.

    What, you don’t want to punch the monkey and also have 50,000 pop-up and pop-under windows spawn because you picked the wrong link?
    Also, accidentally discovering that python[.]com was NOT where one went to download the scripting language back around 2006, while trying to help a student get her laptop setup. It’s still not, but that’s not how I wanted to learn that fact.




  • After my time in Finance (which, curiously, also involved a Crash in the Industry I was working in)

    A-ha! We’ve found the cause of the market crashes.

    Joking aside, I was around for the dotcom bubble burst and the 2008 crash. Both were caused by wild speculation and we seemed to have learned nothing from them. I have little doubt we’re headed for another recession and it will again, be driven by speculation. We also have a problem with private equity (I call them “vulture equity”) which likes to capitalize on businesses which are struggling . They swoop in, buy up the company in a leveraged buyout, and then start extracting as much value from the company as possible. Usually this is in the real estate that the company owns. Once all of the value is extracted, the company is spun back off, saddled with the debt used to buy the company in the first place, and then it flounders until it ultimately collapses. This was the fate of companies like Sears or Red Lobster. Once a vulture equity company engages in a leveraged buyout of a company, that company is doomed.


  • I very briefly considered it but don’t trust my awareness to get out in time, plus participating in the scam would eat me up.

    Ya, one of the best pieces of advice I got was, “never gamble money you can’t afford to lose”. This is what keeps me out of trying to chase that tiger. Sure, it could be possible to make some money by jumping on one of these scams early and trying to ride sell the bump. But, it’s also likely that be the sucker losing out in the end. I’d rather not waste my money that way.