motrm · HackerTrans

vor 3 Monatendiscuss

There was a fairly active thread on the mailop mailing list about this, as you might expect given its userbase.

Annoyingly, mailop.org list archives are member-only (free to join however).

Mail Archive has the content, though I never much liked their UI. Link to the first message of the most interesting (IMO) thread, though there were others around the same time: https://www.mail-archive.com/[email protected]/msg26087.html

edited to add: this was a general MS issue and not necessarily senders having spam/dns/domain issues, which I suppose it why it annoyed mailops so greatly! and of course the long tail of the wider internet

motrm

vor 3 Monatendiscuss

I wonder if OP didn't realise there was this _Show Hidden Files_ option and their .git was indeed backed up.

That would be nice, they'd be able to get their history back!

motrm

vor 4 Monatendiscuss

Mildly pedantic, and of course ignores how wild this whole thing is, but I don't think this bit is correct:

  After waiting for a little while, the program terminated with the following output:
  
  astrid@chungus infra  gzip -vc result/nixos.img | ssh [email protected] -- bash -c 'gunzip -vc > /dev/sda'
  [email protected]'s password:
   77.8% -- replaced with stdout
  
  What happened here?

The 77.8% bit is gunzip -v reporting that it finished decompressing the data to stdout and that the compression ratio was 77.8%... so this invocation may well have succeeded. Assuming, as rwmj points out, nothing else stomped on any of the written blocks.

I do like this idea - with sufficient prep of the system before writing the image, namely stopping as many processes as possible especially those that might do some writing, it's a quick and dirty way to replace a stock OS with a ready-made image. Could perhaps be safer doing it twice, once into a minimal image that does very little beyond network bringup & runs ssh, followed by final OS replacement in a (more) controlled manner.

motrm

vor 4 Monatendiscuss

Very suspicious URL for this, with a prominent link to Trezor Suite at suite-trezorup[.]com - looks a lot like phishing. Be careful.

motrm

vor 5 Monatendiscuss

Reminds me a little of Fly's Tokenizer - https://github.com/superfly/tokenizer

It's a little HTTP proxy that your application can route requests through, and the proxy is what handles adding the API keys or whatnot to the request to the service, rather than your application, something like this for example:

Application -> tokenizer -> Stripe

The secrets for the third party service should in theory then be safe should there be some leak or compromise of the application since it doesn't know the actual secrets itself.

Cool idea!

motrm

vor 6 Monatendiscuss

Sounds like a dialup modem at about 3:30 :)

How sure are we the aliens aren't trying to dial in?

motrm

vor 10 Monatendiscuss

Jeff Geerling has been sleuthing into this lately too - my biggest takeaway is that it's only viewer counts that are suffering, he's not seen revenue drop which is key. Viewer counts are vanity, revenue is sanity :)

https://www.jeffgeerling.com/blog/2025/digging-deeper-youtub...

comments