• 0 Posts
  • 66 Comments
Joined 2 years ago
cake
Cake day: July 9th, 2023

help-circle
  • My company only allows downloads from official sources, verified publishers, signed where we can. This is enforced by only allowing the repo server to download stuff and only from places we’ve configured. In general those go through a process to reduce the chances of problems and mitigate them quickly.

    We also feed everything through a scanner to flag known vulnerabilities, unacceptable licenses

    If it’s fully packaged installable software, we have security guys that take a look at I have no idea what they do and whether it’s an audit

    I’m actually going round in circles with this one developer. He needs an open source package and we already cache it on the repo server in several form factors, from reputable sources …… but he wants to run a random GitHub component which downloads an unsigned tar file from an untrusted source








  • I imagine there’s a significant chunk of users who don’t know or care how to properly open their server up to the world and are relying on the Plex proxies

    That seems like the obvious place to put a subscription that won’t get people upset. Or maybe it’s in the presentation.

    When HomeAssistant started a subscription, they renewed their commitment to opensource, added new remote features with obvious costs under subscription while still letting you do it yourself, plus made it clear this funded continued opensource development. I happily pay this and haven’t been disappointed. Did Plex fumble a similar opportunity?











  • AA5B@lemmy.worldtolinuxmemes@lemmy.worldOrwelluan
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    6 months ago

    Don’t minimize those strengths. Init.d scripts are something you can figure out just knowing a bit of shell script, or historical knowledge from before there was an internet. For something I rarely use, why do I need to learn something more complex to do the same thing - I either haven’t been sold on all the new functionality they piled in or do not need it. After all these years crowing about the Unix/linux way being many independent flexible tools that can work together, why do we now have this all-in-one monstrosity that might as well have come directly from Microsoft?


  • The best cut changes seasonally

    • cut medium in the spring to better control it in fast growth
    • cut long in the summer to hold more moisture and choke out weeds, to better handle dry season
    • cut short in fall, to help it green up faster in the Spring, reduce thatch, and make it easier to keep clean of debris over winter

    Once grass is hibernating, it’s not like cutting it short inhibits anything: that part of the grass isn’t coming back to life