• 0 Posts
  • 19 Comments
Joined 14 days ago
cake
Cake day: August 28th, 2025

help-circle

  • yeah! there’s a punishing learning curve but it’s sooo frikkin powerful once you get it. for my NixOS config on WSL2, I have it cross-compile age-plugin-yubikey for Windows, then stuff the (absolute) path in a wrapper script to use agenix with passage as a git-credential-helper storage, all of which gets set up using home-manager as my default git config. and it all just gets automatically built and configured when I nixos-rebuild switch, so I can sync it to my other machines.

    unfortunately I have no idea how it works anymore lol. that’s the problem, it’s so resilient I forget how to change it! but I can’t imagine doing that in any other Linux distro.










  • specifically this is how QUANTUMINSERT worked (from the Snowden leaks.) also China used the same technique, injecting malicious JS through the GFW to get bystanders to DDoS github, in a much more obvious and indiscriminate way.

    nobody here is remotely likely to be targeted by NSA, of course, but you can actually do such attacks on a budget if you compromise any router in the chain. combined with a BGP hijack it’s not far out of reach for even a ransomware gang to pull something like that these days.