Remote

Felix Singer

@migy@chaos.social

mastodon 4.6.9

Professional meme poster. IT Security. Firmware. Software Developer. CCC. Open Source. Working on #coreboot and #NixOS.

Opinions are my own.

439 Followers

1038 Following

12 Posts

Joined March 29, 2018

Languages:

de, en

Felix Singer @migy@chaos.social

· 4mo ago

Replying to

@th@social.v.st Thank you! I'm actually looking for something. I might get back to you.

Felix Singer @migy@chaos.social

· 28mo ago

It was great to talk with a lot of people about #coreboot at #GPN22. See you next time!

chaos.social

Felix Singer @migy@chaos.social

· 22mo ago

Replying to

I've submitted a patch at #nixpkgs for locking down the service a bit more. Looking for some reviewers :) https://github.com/NixOS/nixpkgs/pull/361452 #nixos

GitHub

nixos/uptime-kuma: Add additional lockdown settings to systemd unit by felixsinger · Pull Request #361452 · NixOS/nixpkgs

Tested these settings on a test instance. Things done Built on platform(s) x86_64-linux aarch64-linux x86_64-darwin aarch64-darwin For non-Linux: Is sandboxing enabled in nix.conf? (See Ni...

Felix Singer @migy@chaos.social

· 26mo ago

I'm in #Portland until next Tuesday and attending #FOSSY. Anyone wants to meet? Also, any suggestions for how to spend time in Portland? Let me know :) #coreboot #opensource

chaos.social

Felix Singer @migy@chaos.social

· 22mo ago

Replying to

@adingbatponder@fosstodon.org It's limiting the capabilities of the service on the host system a bit more. So if an attacker gets access to the system through Uptime Kuma, then they have limited possibilities. It's also useful for limiting possible damage by the program if it has a regression.