• 1 Post
  • 360 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • Have you had anyone with experience with security look at this thing? There’s a lot of really questionable practices in your schedule shell scripts. I especially find how you’re handling VPN secrets kinda worrying. And the backup_challenge_clients.sh script isn’t robust at all. Your nginx config has a few bad choices like lack of try_files, the regex \.php$. It’s definitely not hardened so I hope people don’t put this Internet facing.

    I’ve spent like 5min in the GitHub to get a feel for the project maturity. Personally, I don’t think this is suitable for actual use yet.

    If you’ve not done any security assessments on your project yet, you might not want to (a) call it “Safe”box and (b) might not want to start charging money for it until you do.

    I worry you’re setting yourself up for a hard-to-shake-off embarrassment should a nasty vuln be found. Maybe a name like “selfbox” etc that drops the connotation of security would be safer.

    Edit: Kudos on the project website though! Looks fricking gorgeous.











  • There’s little reason to force them out given games run temporarily. We’re more likely to see security products move out of the kernel first since they run full time and from boot (meaning there’s stronger implications if they fail in kernel space e.g. Crowdstrike). And even then, they’re not forcing them out, just offering APIs in user space to negate the need to be running in the kernel for those use cases.

    I’d love to see games denied the ability to run drivers in kernel space on Windows but I don’t think we’ll see that any time soon.








  • Who can murder someone with a PC this excellent?

    Professor Belvedere “Fartsparkles” Tinkletuft was once a respected lecturer at the Neverwinter Arcane Academy. His groundbreaking research into “transmogrified odoriferous manifestations” (or, as the students called it, fart magic) was dismissed as childish and “in poor taste.”

    In protest, the Professor vowed to prove that flatulence is the ultimate illusion. Through alchemical experimentation, he discovered how to weaponize his digestive essence into arcane displays — clouds of glittering gas, illusionary stink beasts, and even gaseous duplicates of himself.

    Now he roams the realms, performing “scientific demonstrations” and occasionally saving the world — usually by accident.