Great to hear. Read Cuckoo's Egg in the 90s, was the first time I heard of the NSA (I'm neither resident nor citizen of the US, so I don't know how famous they were at the time).
Are you considering annotating the Cuckoo's Egg? For example with official documents from FOIA requests?
And how many of those actions do uncached downloads instead of building self-contained offline images... Speaking of which, I wonder if GitHub has implemented any HTTP interception for common mirror sites, like used by apt, etc.
Many downloads now go over https. Intercepting them would require having certificate for those domains. IIRC on the clouds the standard images do have a sources list that points to mirrors on the cloud’s network. I would only presume Github Actions runners have the same.
Not sure if something similar exists for NPM which is big for all things JS.
Other CI/CD platforms usually push you towards using self-hosted mirrors for downloading large chunks of data (often aggressively so) but github is pretty hands off when it comes to actions. It is interesting to consider whether managing that traffic might be overwhelming them and if this can be traced back to a lack of forethought when it came to building out those tools.
If you see the state of what is called "production quality" software these days, alpha/beta quality has lost most of its meaning. You now just wait for "next prod"
I have no problem using Debian (I’m actually a Linux sysadmin by profession) so I have no problems later switching distros. But as of today, I’m happy with Ubuntu on my road laptop and I would no doubt be happy switching the home PC, too. (Actually the road lap is Lubuntu and it currently has zero visible AI influence.)
reply