• 1 Post
  • 19 Comments
Joined 3 years ago
cake
Cake day: January 2nd, 2024

help-circle



  • One database service but separate databases running inside of the service. Each database has 3 accounts: table_owner (no remote access), proc_owner (only table specific permissions and the owner of all stored procedures; no remote access) and application_account (no table access and only execute permissions on the proc_owner’s stored procedures).

    Which means that even if the application is compromised, it can not compromise the database. It can only use approved stored procedures that check their inputs and abort on the smallest deviation from expected inputs.












  • Depends on what sorts of things you are organizing.

    Book clubs => fine

    Firebombing attacks => hell no

    Engineering discussions => depends on what is being engineered.

    And a GNU system offline and encrypted is pretty secure. Even the NSA uses that. Just make sure that you have SeLinux setup to harden security and an encrypted boot partition





  • the 3 sisters: corn runner beans (perhaps American groundnut) pumpkin (perhaps amaranth and sunflowers)

    modified 3 sisters (requires less water): sorghum cowpeas sweet potatoes tomatoes bell peppers chia

    similar to last but different species: millet peanuts chick peas lentils mung beans sesame

    the rice patch (plenty of irrigation): rice corn sweet peas (any water tolerant legume)

    the potato patch: potatoes bush beans quinoa

    wheat patch: wheat bush beans (could be also sunflowers and quinoa)

    vegetable patch: Lettuse celery brassicas onions garlic turnips

    three brothers: (the perennial version of the three sisters) Apios americana (American groundnut) (Amphicarpaea bracteata (hog-peanut) works better) Helianthus tuberosus (sunchoke) Wild Strawberries