Shawn Webb (He/Him/Idiot) @lattera@bsd.network

This is Shawn Webb from The HardenedBSD Project. I use the bsd.network Mastodon
instance. This message is cryptographically signed with GPG by me.

My GPG public key can be found here: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc
-----BEGIN PGP MESSAGE-----
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=E4qi
-----END PGP MESSAGE-----

So the OCP SAFE program will require use of AI/LLM tools when performing Scope 1 security reviews.

I wonder how this is going to go, especially since some vendors use incredibly locked-down environments without Internet egress (effectively, air-gapped, but only in one direction) for their code review environments.

For example, with one customer, I have to VPN into their internal network on a laptop they own. Then, I RDP into a VM in their infrastructure. That VM has only a few tools installed, like git bash, VSCode, and a few other tools. That's it. No ability to install anything else or even use a web browser.

I just woke up and already feel like it should be nap time.

Deploying a #HardenedBSD VM with UFS as the filesystem for the first time in a decade, perhaps longer.

Handy dandy link: https://app.radicle.at/nodes/seed.radicle.at/rad:z4D658C6AYjeZAMdcfjQBVoAZQRS8

#Radicle #Leaks #ICE #Icepick

Once the #HardenedBSD 15-STABLE package repo is finished building in a week or two, I plan to perform some maintenance on the server.

I plan to pull RAM sticks out of other servers to replace the dying sticks. I will also replace some fans that have gotten extremely loud, indicating potential for future fan failure.

Plopping various leaks on #Radicle : rad:z4D658C6AYjeZAMdcfjQBVoAZQRS8

#ICE

Has anyone successfully flashed a #Heltec #MeshPocket from a #GrapheneOS phone over BLE?

I really like that the #NapePro supports using a wireless dongle. One less cable with a permanent place on my desk.

So despite my previous negative experience with #Keychron customer support, I decided to give their Nape Pro a try. This is my first time giving a trackball mouse a real try.

The main selling point for me was persistent configuration and its very small size. I have a somewhat large L-shaped sit/stand desk. I have so much equipment on my desk that it's difficult to find space for a mouse and a wrist and enough space to move the mouse.

If this testing goes well, I might slowly replace over time the rest of my mice.

The only downside to its small size is there isn't much support for my hand and wrist. I like having it to the right of my keyboard like a normal mouse, but butted up against the keyboard. The primary marketing material has it below the spacebar.

I'm probably gonna need to find an ergonomic hand/wrist rest that pairs well with the Nape Pro.

#NapePro

I've long since forgotten why in #FreeBSD userland, the concept is called jails, but the kernel struct is named struct prison.

If anyone knows, it would be fun to reminisce. :-)

Today is brought to you by #Heilung : https://www.youtube.com/watch?v=64CACoHNBEI

#Music

Every time I walk my dogs and I pass by someone with their dogs off leash (in a legally on-leash area), I now tell my dogs "we love leashes. leashes keep us safe. we love leashes. leashes keep us safe."

I'm hoping (probably in vain) this will help inspire people to do the right thing.

#HardenedBSD 16-CURRENT package repo updated.

Today is brought to you by #TheEndOfTheOcean : https://www.youtube.com/watch?v=jnHbaQNlgzg

#Music #PostRock

TesLaX: Tesla + SpaceX

Now with more indigestion!