elesiuta

> I've always thought this should be a feature in an OS for advanced users. Combined with some OS level security optimizations it could be quite a powerful security feature for the paranoid an…

Another similar discussion last year where Miller was mentioned: New(ish) command line tools https://news.ycombinator.com/item?id=31009313 …

Thank you! That list is perfect since I don't use these tools often enough to remember them and some are hard to find again without knowing exactly what to search for. I also discovered pawk on i…

Exactly, ironically I was finally just starting to get comfortable enough with Stadia being around long enough to buy a few games on it, literally weeks before the shutdown was announced. Specifically…

This sounded like it'd be fun to implement so I took a quick stab at it, it supports unpacking tuples to any number of _ in any position, including with kwargs. class Placeholder: def _…

Thank you for the kind words and your offer! I did run into some new issues so I'll be taking you up on it shortly.

Thanks! I didn't know about wrapProgram, that sounds exactly like what I need.

It's picosnitch, if you know what I'm doing wrong/how to fix it that'd be great! It depends on bcc and psutil, and I am able to build and run it from a .nix file using python3.pkgs…

I have had a similar experience packaging a simple python program, coming from zero packaging experience. PKGBUILD was the first I did and by far the easiest, deb was about 3x more time and effort, an…

> It would be fun to work out mathematically how much they're limiting the password space with these rules. Alright, you nerd sniped me, but I'm lazy so I just simulated it, this cuts dow…

> Indeed. The proper thing (also read as: the friendliest way for distro packagers) is for software projects to generate and publish a tarball themselves as part of their tag+release process. And t…

I always anticipated something like this could happen and it bothered me enough to create my own workflow [1] to archive, hash, and attach it to each release automatically for my AUR package. I can se…

I've been using SikuliX [1] instead of AHK for a while now, only downside is that it uses jython so it's stuck on 2.7, but I don't use it for anything complicated enough that it really …

I made a somewhat related program called pyxargs[1] which may help with what you're looking for. The command for your example would be pyxargs --py "print('{}') if os.path.ismo…

I briefly experimented with using such an agent to communicate with a separate hardware firewall and found it was not worth the effort for myself and a better solution was just sandboxing anything I d…

The slowdowns are because it still has to hold every connection until it can check which program it is coming from and whether that program is trusted or not, even when the same program creates multip…

I use HomeBank [1] because I find the UI a lot simpler than GnuCash and importing mostly just works, with pretty good automatic category assignment that lets you use regular expressions. The only quir…

I made my own with search and autocomplete, it works for me and I have it on GitHub, but it's pretty specific to my workflow and there are so many different options in this thread (a lot of which…

Thanks! Also I used lost_cb [0] to detect if a packet or connection (with security_socket_connect) was missed between the BPF and Python parts, but is it possible for the BPF program to miss either en…

I've kinda been keeping an eye on firewalla [0] since it looks pretty simple and probably good enough for home use? If anyone has any experience with it, or has looked into how good/useful t…

> for a firewall, that’s potentially bad I wasn't talking about using it as a firewall, just a connection/bandwidth monitor that correlates traffic with a particular app.

> Linux is still dicey to correlate traffic with a particular app, especially if the connection is/was shortlived. This is has become a lot easier and more reliable to do now with BPF [0]. I a…

And it isn't too difficult for something to elevate itself to root anyways. It could just include a basic key-logger which would work on most systems and wait for your password. Unless you'r…

> In particular I'm not sure how to really tell ffmpeg to handle multiple audio/sub streams without programmatic interaction - you kinda need to know there are 2 audio streams and 4 sub s…

Thanks, and AFAIK this should be the most reliable tool of its type on Linux, and the only one that also hashes executables which makes it a lot harder to bypass. I mentioned some caveats under the li…

I submitted this a few months ago and has undergone some major changes since then, adding: - bandwidth monitoring - a dashboard for showing plots - support for storing logs off-system to mitig…

Something like fsverity could be a decent half solution. https://fedoraproject.org/wiki/Changes/FsVerityRPM Of course you won't have that layer of isolation if somethin…

There's a name for this type of thinking https://en.wikipedia.org/wiki/Appeal_to_nature which I find a little ironic since a natural nuclear fission reactor has actually bee…

Even if/when the world does get the hint, there will still be https://xkcd.com/1053/ (although most people probably won't find this as exciting)…