[–] 24 points 1 day ago

that’s not necessarily a the worst option for yall though… diesel transports your food. i think food being more expensive is probably worse than personal transport being more expensive… cutting back on transportation is often easier than cutting back on food: especially for the most vulnerable

  • source
  • parent
  • context
  • [–] 5 points 3 days ago (1 child)

    i’d be careful to infer a win from anything specific… republicans definitely lost, but imo if the democrats literally said nothing at all republicans would have lost. we can say for sure that republicans are hated right now; but im not sure democrats have americans enthused or just relieved (from my external perspective)

  • source
  • parent
  • context
  • [–] 2 points 1 week ago (3 children)

    you should also always specify YYYY-MM-DD because often M and D ignores leading zeros, YY means the 2 digit suffix, and Y… well, i don’t even know what that is but i’m sure it’s something less specific than YYYY

    if we’re going to be picky about being clear about things, let’s be truly clear about things

  • source
  • parent
  • context
  • [–] 1 point 1 week ago*

    it’s tricky because browsers check certificates in 1 way, operating system tools check in another way, and programming languages often check in another way again… and if you run docker containers, they’ll need updates - not just your host OS

    browsers should be fine automatically (they check for certificate revocation before even software updates), and system updates on linux at least should cover some things like node, but then you have eg python which ships CA bundles with libraries so will require package updates there or rust which (apparently) often compiles its trust store into its binaries so would require a recompile

    this site will easily check browsers, and further down there are curl commands (curl will test your OS trust store), and you could load the same URL in various languages to test them, but again that’s a lot of work to go to when you also have to do that across all docker containers and virtual environments, etc and still tells you nothing about rust binaries

    https://emudhra.we-have-a-problem.com/

    same advice as ever: stay up to date, do the best that you can… upstream projects will get CVE reports for vulnerable libs, and it should be a very easy to backport a fix so security patches should be quick and easy, even on old versions of software

    *edit: that site also lists minimum versions of a lot of things like OS packages, language packages, etc

  • source
  • parent
  • context
  • view more: next ›