• I found a clean, simple, reliable way to add a public IP address to an LXC container - and inadvertently poked a hole in my firewall.  Fortunately since this was in a test environment the hole led to a container running nothing but SSH and demanding a recognised private key from a list of exactly none, so no harm done.
  
  I updated the documentation for this method.
  
  Moral of this story is that having two nested firewalls like we do at my day job is not overkill.
  
  TL;DR: Static routes take effect before firewall rules.  You need to firewall your containers to be safe from future screwups.
  
  
  
• David Icke got banned from YouTube for spreading 5G conspiracy theories.  (Newsweek)
  
  Icke is a professional lunatic and his ideas are total garbage.  YouTube is completely within its rights to ban him.  And I am entirely on Icke's side here.
  
  
  
• The servers for LineageOS, which is the latest in a long line of pure open-source Android builds, got hacked, shut down, restored from backup, patched, hatched, scrutinised with an extreme scrute, and brought back online.  (Bleeping Computer)
  
  Apparently a Salt server was exposed to the internet.  I'd say "why the hell was a Salt server exposed to the internet" but I just poked a hole in the firewall on my own server and didn't realise it for two hours so I'll give them a pass on that just this once.
  
  
  
• Melinda Gates is an idiot.  (Politico)
  
  
  
• Redis 6.0 is out.  (antirez)
  
  This brings client side caching and, well, a bunch of smaller stuff.  Client side caching means that cached data can be held in your own process space and Redis will push cache invalidation notices to you.  For large systems that could have huge scaling benefits.
  
  
  
• The best way to get the right answer on the Internet is not to ask a question; it's to post the wrong answer.
  
  The article is about a perceived case where Go was significantly faster than Rust, but turned out to be that the two programs being compared were not equivalent.
  
  
  
• Intel's Alder Lake will come in Socket LGA 1700 unless it doesn't.  (WCCFTech)
  
  Which the hell one is Alder Lake?  Oh, it's the 8+8 core design, with 8 real cores and 8 crappy Atom cores.  Which might work well for a laptop except that it has a 125W TDP so scratch that idea.
  
  
  

Anime Music Video of the Day