I just tore myself away from playing with Grok Bot long enough to read the post @nixfred wrote about the interview he did with me last week. It's at omarchy.builders/builders/ka… and I couldn't be more happy about it! Thanks, Fred.
Good article, not downplaying the seriousness, but explaining why it's not (yet) the end of the world as we know it. My security bot is watching this!
Replying to @IntCyberDigest
Tailscale replied on Reddit:
Hi folks, Mike Shaver here, VP of Engineering at Tailscale.
We've seen the concerns about Tailscale SSH and wanted to share what we know so far.
If you want to jump to the most important part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
We've now received the researcher's report and are reviewing it. Our engineering and security teams had already been investigating independently, with help from external security specialists. That work has identified issues we're working to fix. We're still validating the full scope, including which configurations are affected.
A bit of technical context:
Tailscale SSH uses your tailnet's access policies to control who can connect to which machines. Most of the issues we've identified so far concern what happens after someone has been authorized to connect, particularly how Unix privileges and SSH forwarding are handled. In some cases, a session may be able to do more than the configured local user should be allowed to do.
While it’s a serious concern, it isn't the same as an unauthenticated attacker being able to connect to arbitrary machines, but the potential impact depends on how SSH access is configured. We're still investigating, so we don't want to make blanket claims about what's affected or not.
Again, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
In the meantime, there are a few precautions you can take:
•Review your SSH access policies. Make sure only the people and devices that need access have it.
•Review SSH forwarding permissions and remove access you don't need.
•Consider enabling SSH check mode for an additional authentication step. This won't fix privilege escalation issues, but it does add another barrier to gaining access.
•Enable automatic updates where supported so you can pick up fixes when they're released.
For particularly sensitive systems, consider temporarily tightening your Tailscale SSH access policies while we investigate, so that only the specific users and devices that need access can connect.
We're working on fixes and testing them carefully. We'll publish a security advisory explaining the confirmed findings, affected configurations, recommended actions and available patches. We'll also follow up with a more detailed technical write-up.
If we find anything that changes our assessment or requires immediate customer action, we'll communicate that.
We know it's been a rough week for security teams, and we understand why people are concerned. We'd rather give you the technical context we have than speculate about things we haven't confirmed yet.
We'll share more as we verify the details. If you have any questions about how this relates to your particular environment, please get in touch with our team tailscale.com/contact/suppor…
Another Grok Bot created (rewritten & customized) app is now on my GitHub: github.com/BlancoKat/wikiwri… is that non-php version of MediaWiki I've mentioned. It still uses wikitext markdown like MediaWiki, but isn't as insecure.
My KitchenStudio bot is putting my recipes in a wiki on my private server now, along with more info, like who's my favorite online cook, stories about recipes from family, etc. Thanks again for this super prompt/skill/whatever it is!
Replying to @omarchyftrou
Having all your recipes organized in one place instead of scattered across photos and screenshots is the best feeling. It makes actually cooking from them so much easier
This is on my podcast list now.
I created a daily, automated podcast featuring the latest news and use cases for Grok @bot called "Bot Takes". You can listen here and add it to your favorite podcast player gambrill.com/bottakes
I don't know how I ever got along before Grok @Bot. Just now it helped me find some $10 generic cables the UPS maker wanted over $40 a piece for. Since I need two, that's a lot for stupid cables!
Oh, and the manufacturer's software to use those cables is only for Windoze, so Grok @bot is going to make it work for my Linux systems.
My first Omarchy contribution (other than the Omarchy-ftrou newsletter): github.com/BlancoKat/omarchy…
When I tried to update GrokBot in Omarchy, it couldn't read the update file because it was .rpm, so I asked GrokBot for help. This was the result. Now there's a menu item in the Update section my Omarchy Menu.
@dhh @OmarchyUpdates @SundayBuildClub @bot
Yes, and a good way for non-tech people to get their feet wet is to subscribe to Omarchy-For The Rest of Us newsletter omarchy-ftrou.com
Ain't it the truth!
Insurance Agent: “Your auto insurance renewal premium is increasing by $145 a month.”
You: “My driving record is completely clean. No accidents, no tickets, no claims in six years. Why is it going up?”
Insurance Agent: “Regional risk adjustments and market-wide inflationary corrections.”
You: “So my personal risk profile didn’t change, but my bill went up 35% anyway?”
Insurance Agent: “Correct. Everyone’s rates are rising to offset macroeconomic portfolio losses.”
You: “I haven't filed a claim since 2020. Why am I paying for someone else’s accidents?”
Insurance Agent: “That’s how risk pooling works. Policyholders absorb the systemic variance.”
You: “And what happened to the record $4.2 billion in net profit your parent company reported last quarter?”
Insurance Agent: “That capital is allocated for shareholder dividends and corporate reserves.”
You: “So profits are privatized, but routine commuter risk is socialized onto safe drivers?”
Insurance Agent: “Your payment is due on the 1st. Would you like to set up autopay?”
You aren't buying insurance.
You are paying a mandatory monthly protection tax to publicly traded conglomerates that raise your rates while sitting on billions in record profits.
Katherine Prawl retweeted
Don't forget: `omarchy update` does not update plugins.
So in addition run `omarchy plugin update --yes`
That fixed an issue in OmaMail that appeared with 4.0.5.
Katherine Prawl retweeted
Replying to @0xBOYD @SundayBuildClub
Audio only, we pick a topic and @NixFred and I talk a bit about it and then half way through open the floor up for speakers in the group. Always great discussion. Casual and relaxed. No stupid questions. Come hang with us G. 🤙
Katherine Prawl retweeted
goodbye windows!
today i migrated to @omarchy by @dhh
i downloaded omarchy because:
- i like the integration of agents into the os
- i'm a supporter of oss
- i'm tired of bloat in windows
- i dislike both microsoft and apple
- frankly, i want to use software made by people who don't hate me.
some initial thoughts:
these are from the perspective of someone who's used distros like ubuntu and fedora in the past but hasn't been a linux user in years due to work.
omarchy downloaded in under 2 minutes, which impressed me.
upon trying to install, i got a black screen, i had to resolve this by pressing the 'e' key, appending nomodeset and pressing ctrl+x.
after setup, in the top right there was a 'process crashed: 1password' popup which told me to click it to diagnose with ai, but nothing happened for a while when i clicked it (it did eventually work when i came back to it later).
i love the opinionation and that most of the software i use is there out of the box or conveniently installable via the omarchy menu, however, i was disappointed not to see mullvad in the list.
it has really great ui/ux which feels intuitive, obviously a lot of thought has gone into it and it's delightful to use.
the deep integration of agents into the os with skills for debugging is innovative and effective. for me, the esoteric errors in linux were frustrating in the past.
i use three monitors, and it was unclear how to rearrange them. i got around this by using the displays arranger plugin.
i'm really enjoying hyprland so far!
there were small pop-up windows on each of my screens (which are from the screensaver) featuring green japanese text on a black background like in the matrix. i believe this was a bug as they were displaying in smaller windows instead of as the fullscreen screensaver.
the themes are great, the default background images are less so, i dislike the generic digital painting style.
it comes with great functionality for area-based screenshots which are important for the work i do, i know there's issues for this on some other distros.
i dislike that the sleep timer is so short at 5 minutes by default.
i was concerned that my keyboard lighting wouldn't work, but it did out of the box. there's also an rgb plugin called omargb which is fantastic. it's so much better than asus' software, however, unfortunately there's no linux support for my prime b850-plus but this isn't an omarchy-specific problem.
there was no audio or scrolling issues which i had in the past with ubuntu - refreshing!
having grok's speech mode on to query as i went was helpful, although most of the shortcut recommendations it gave me didn't work/were outdated, i'm hoping shortcuts don't change too much if i'm going to put effort into learning them.
overall, i'm glad i've switched and i'm looking forward to seeing the project develop, i even bought a t-shirt.
onwards to learning the shortcuts!
Katherine Prawl retweeted
Optimus will be the biggest and most impactful product ever
Replying to @Teslaconomics
Optimus and Cybercab will be the vast majority of Tesla’s value.
The only things that will scale to incredible size (K2 and beyond) economically are super intelligence, robots, solar power and mass to space.
And, of course, if you have the first two, the rest will follow.
But Roadster is super cool, so we’re doing it anyway.
Katherine Prawl retweeted
Calling all nerds! This will be the last suit you ever wear!
Make sure to tune in today for another installment of Sunday Builders Club! Tell your friends, tell your mom, bring your neighbor. @NixFred and I are ready.
xitter.cf/i/spaces/1vKpPNmLLekKE

















