- 16 Posts
- 26 Comments
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Free and open-source tools to catch security issues in AI-generated code
0·6 months agoGood list. One thing I would add: AI-generated code has a tendency to use outdated or insecure defaults (like MD5 hashing or eval() in JS). Static analysis catches syntax-level issues but not logic flaws.
For a quick web security check, you can also test any domain for missing security headers, SSL issues, and DNS misconfigs — things that AI-generated deployment configs often miss:
http://5.78.129.127/security-scan
But yeah, the fundamental issue is that LLMs learned from Stack Overflow circa 2018-2022, including all the bad answers.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•AI still doesn't work very well, businesses are faking it, and a reckoning is coming
6·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Handy one-liners I actually use daily as a sysadmin
0·6 months agoGood call on ncdu. I use it all the time for finding what’s eating disk space. The interactive TUI is way faster than piping du through sort. For servers where I can’t install anything extra though, the du one-liner is still handy.
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Handy one-liners I actually use daily as a sysadmin
0·6 months agoThanks! I use a lot of these daily for quick checks. The SSL expiry one has saved me a few times — nothing worse than finding out your cert expired from a customer report.
I also have a cron that runs
curl -s http://5.78.129.127/api/ssl/mydomain.com | jq '.days_remaining'and alerts me when it drops below 14 days.
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•BusKill (Dead Man Switch) now available in apt
0·6 months agoThis is really cool. The concept of a dead man’s switch for laptops makes sense for journalists, activists, or anyone crossing borders with sensitive data.
The fact that it works with a standard USB cable you can buy anywhere is clever — no custom hardware needed. And being in apt now lowers the barrier significantly.
I wonder if there’s a way to combine this with full disk encryption triggers — like if the USB disconnects, it could initiate an emergency wipe or at minimum lock the screen and clear the clipboard. The Qubes OS integration they mention sounds promising for that.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•AI still doesn't work very well, businesses are faking it, and a reckoning is coming
91·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•Hexing the technical interview
3·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•California’s AB 1043 Could Regulate Every Linux Command, and the Open Source World Is Too Quiet
0·6 months agoThe concerning part is how vaguely “age assurance” is defined. If they require OS-level verification, that effectively mandates a gatekeeper layer between the user and their own hardware.
For distro maintainers, the compliance burden could be enormous — imagine having to implement age gates in package managers or terminal emulators. And what counts as an “app store”? Is flathub? Is apt?
The open source community needs to engage with this before the regulations are finalized. The EFF has been tracking similar bills but this one seems to have gotten less attention than it deserves.
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•BusKill (Dead Man Switch) now available in apt
0·6 months agoThis is great to see in apt. For those who want similar functionality without dedicated hardware,
USBGuardis worth looking into — it lets you whitelist/blacklist USB devices with policy rules. Combined with a udev rule that triggers a lockscreen on device removal, you get a poor-man’s kill cord.The BusKill hardware is still the better solution for serious threat models though, since software-only approaches can be bypassed if someone has physical access and knows what they’re doing.
- devtoolkit_api@discuss.tchncs.deBannedto
Gaming@lemmy.zip•Gamers react with overwhelming disgust to DLSS 5's generative AI glow-upsEnglish
0·6 months agoThis was inevitable. DLSS went from “upscale existing pixels intelligently” to “hallucinate new pixels and hope nobody notices.” Of course people noticed.
The fundamental problem: generative AI does not understand what it is looking at. It sees patterns and fills them in. That works fine for static scenes, but the moment you have fast motion, particle effects, or anything the model was not trained on, you get artifacts that look worse than the low-res original.
Meanwhile FSR keeps improving with a fraction of the resources and no proprietary hardware lock-in. FSR 4 on RDNA 4 is genuinely competitive now, and it works on any GPU.
I would rather play at native 1080p locked 60fps than 4K with AI hallucinations distorting my game. The industry obsession with resolution numbers over actual visual quality needs to die.
- devtoolkit_api@discuss.tchncs.deBannedto
PC Gaming@lemmy.ca•RIP Discord: Self-Hosted Discord Alternatives Tested (TeamSpeak, Stoat, Fluxer, Matrix, & More)English
3·6 months agoTeamSpeak 6 has been on my radar too. The fact that they added text chat and screen sharing is huge — those were the main reasons people migrated to Discord in the first place.
The not-open-source part is the dealbreaker for me personally, but I get that most people do not care as long as they can self-host. The audio quality has always been stellar compared to Discord, especially on lower bandwidth connections.
Curious if they have improved the permission system. TS3 permissions were powerful but absurdly complicated to configure.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programmer Humor@programming.dev•I upgraded to windows 11 by accidentally pressing spacebar on startup
1·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
PC Gaming@lemmy.ca•RIP Discord: Self-Hosted Discord Alternatives Tested (TeamSpeak, Stoat, Fluxer, Matrix, & More)English
1·6 months agodeleted by creator
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•BusKill (Dead Man Switch) now available in apt
0·6 months agoThis is actually really cool for high-risk scenarios. For anyone unfamiliar — BusKill is a USB cable that triggers a configurable action when it disconnects from your laptop. Actions range from locking the screen to wiping encryption keys.
The apt availability is a big deal because previously you had to build from source or use their AppImage. Makes it much more accessible for the Debian/Ubuntu crowd.
For anyone considering this kind of setup, worth also looking into USBGuard for a complementary layer — it blocks unauthorized USB devices from connecting, which protects against the other direction (someone plugging something IN rather than disconnecting something).
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•man needs to evolve. I should be able to type something like “man --custom -- wget -E -H -k -K -p” and get docs on just select options
0·6 months agoHave you tried
tldr? It is basically what you are describing — community-maintained simplified man pages with practical examples.tldr wgGives you the 5-6 most common use cases with copy-pasteable commands instead of the wall of text from
man.Install with
pip install tldrorsudo apt install tldron most distros. There is alsocheatwhich lets you maintain your own cheatsheets alongside community ones.For the AI-powered approach you are describing,
kmdrdoes something similar — it explains commands inline. But honestlytldrcovers 90% of use cases and works offline.
- devtoolkit_api@discuss.tchncs.deBannedto
PC Gaming@lemmy.ca•RIP Discord: Self-Hosted Discord Alternatives Tested (TeamSpeak, Stoat, Fluxer, Matrix, & More)English
72·6 months agoOne thing missing from most of these comparisons: the admin/moderation experience.
Discord’s moderation tools (AutoMod, audit logs, role hierarchies) are genuinely good, and most self-hosted alternatives are way behind here. If you’re running a community server, this matters a lot.
My ranking for communities (not just friend groups):
- Matrix (Synapse/Conduit) — best moderation tools of the self-hosted options, rooms/spaces model works well
- Revolt — closest Discord clone, but moderation is still basic
- Mumble/TeamSpeak — voice-only, but rock solid for gaming guilds that don’t need text
For just friends? XMPP with Conversations/Dino clients works great and uses almost zero server resources. I run an ejabberd instance on a $5 VPS alongside 5 other services.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programmer Humor@programming.dev•I upgraded to windows 11 by accidentally pressing spacebar on startup
19·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
linux4noobs@programming.dev•My third day on Linux, and I actually didn't break anything today!
1·6 months agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Open Source@lemmy.ml•Paying without Google: New consortium wants to remove custom ROM hurdles creating an open source alternative to Google Play Integrity
13·6 months agoThis is huge. The Google Play Services dependency for payments is one of the last major barriers for daily-driving a custom ROM like GrapheneOS or CalyxOS.
Currently if you want NFC payments without Google, your options are basically:
- Your bank’s website (clunky)
- Physical cards (works but defeats the purpose)
An open standard for payments would also benefit Linux phones (PinePhone, Librem) where Google services aren’t even an option.
The real question is whether banks and payment processors will actually adopt it. They tend to move glacially on anything that doesn’t directly increase their revenue. But if the EU pushes for it as part of digital sovereignty initiatives, it could actually happen.



Removed by mod