Biggest worry is someone finding an uncaught RCE.

Of course plugins also have surface area.

We know they can anon pull video. You can sandbox it to limit exposure.

But if they modify the web client with an RCE, then you hit your own server as a trusted site and that delivers a payload…

Mixed results.

He’s less annoying than he was covering gaming, he has some occasional hot takes, but I think overall he’s a positive influence.

Youtube does a lot of A/B testing. Last time I ran it, I could use it on one device/account but not on another.

instead of fighting with it, I installed newpipe, pipepipe, grayjay and brave mobile. They all autoupdate. One of the 4 will always show youtube without ads. The first three don’t randomly show me anything I don’t ask for.

Nothing to install? Not with that attitude!

Start a 10" rack.

A many-month-long refactor on code you’ve already written is less than fun. While I don’t love seeing a project I’m using being 80% replaced by Claude code, I’ve had Claude code look at some of my old projects and find underlying issues I was able to verify, and then suggested a more best-practice approach that I wasn’t even aware of. The real question is, was the claude output better than the original code? If it is and it has unit tests and many eyes on it, it’s quite possible that it’s better off now.

I’ll sit on my current versions for a few months and let everyone else test it out :)

Dev: My app’s getting a 400 hitting the server. Your firewall changes broke it.

Me: You’re getting to the server, it’s giving you back a malformed request error. Most likely it’s a problem in your client.

Dev: it worked fine until you made that change in QA.

Me: Your server is in production.

After that, I just get too busy to look at it for a while… They figure it out eventually.

Everything you expose is fine until somebody finds a zero day.

Everything these days is being built from a ton of publically maintained packages. All it takes is for one of those packages to fall into the wrong hands and get updated which happens all the time.

If you’re going to expose web yourself, use anubus and fail2ban

Put everything that doesn’t absolutely need to be public open behind a VPN.

Keep all of your software updated, constant vigilance.