@kid TL;DR: If you have a secret variable in your CI/CD pipeline and it's written to a file that subsequently gets artifacted, anyone who can access that artifact can also read your secret variable.
Feels like a "no shit" moment but I guess I can see how someone could make this mistake in a more complicated setup than the example in the blog.
@solitaire @erev Jesus, I had completely forgotten "tits or gtfo." Every now and then I get hit with a reminder of how much more pervasive that kind of thing was as little as 10-20 years ago and it throws me for a loop.
@shadow @V0ldek > What I’d really like to find is something like a pihole for search, where you have your blocklist, cache of things you’ve searched already (your own mini search engine?), and then a fallback engine (DDG, bing, Google, whatever) for things it doesn’t already know.
I think SearXNG sort of fulfills this, from what I've heard? It's more or less a self-hosted search engine that can combine indexes from various other engines, and I presume that means you can set your own rules and filters and such. There are public instances as well.
@agressivelyPassive @technom That's a self-fulfilling prophecy, IMO. Well-structured commit histories with clear descriptions can be a godsend for spelunking through old code and trying to work out why a change was made. That is the actual point, after all - the Linux kernel project, which is what git was originally built to manage, is fastidious about this. Most projects don't need that level of hygiene, but they can still benefit from taking lessons from it.
To that end, sure, git can be arcane at the best of times and a lot of the tools aren't strictly necessary, but they're very useful for managing that history.
@crashdoom I'm generally very wary about any sort of automated system that can ban or limit accounts without human input. Perhaps an alternative system to give moderators time to respond would be something that limits accounts that are reported by multiple local users in a short time period? That does have the potential for abuse as well and I think we should carefully consider the avenues for it, but at our community's scale it seems feasible to me.
@crashdoom Thanks for the prompt response here, as always. Got followed by an account with blatant Nazi symbolism in their profile last night and uh... yeah, pass.
@improbablynotarobot I do! My main keyboard is an Ergodox, and I make heavy use of the extra thumb keys. Having enter/del/backspace on my thumbs alone is really nice, and I also keep a layer toggle next to them. Commonly used keys, like my navigation cluster and a numpad stay close to the home row on two different layers.
The one thing I don't make much use of is symbols on layers, which takes a bit more getting used to than I've put time in for. Instead I just use the dedicated number row.
@improbablynotarobot I own several split keyboards at this point and very much prefer them. I have RSI and it's much more comfortable to type and helps keep my wrists at a comfortable angle.
As for tenting I haven't experimented with it much, but I know that a lot of people swear by it.
@WoahWoah Not to be the obnoxious didact in the room but I do feel compelled to point out that vegetables/herbs soaked in oil at room temp are generally not a good idea unless you like botulism poisoning: https://extension.oregonstate.edu/food/preservation/herbs-vegetables-oil-sp-50-701
Just for anyone who's not aware! Honestly, immediately shitting yourself was not even close to the worst possible outcome lol.