Just a lvl 27 guy from 🇫🇮 Finland. Full-stack web developer and Scrum Master by trade, but more into server-side programming, networking, and sysadmin stuff.
During the summer, I love trekking, camping, and going on long hiking adventures. Also somewhat of an avgeek and a huge Lego fanatic.
Might be an unpopular opinion but after around two hours of gameplay I’m perfectly happy with the performance on my 3060Ti. On medium-high settings it can easily maintain 60fps on 1440p. That is with DLSS of course and ray tracing turned down to minimum.
My use case is a bit different than yours but still worth mentioning, I think; I have Sharry running in Docker and it makes sharing and receiving files super easy. All downloads and uploads are resumable so they work well even in unstable networks.
I had some old hardware lying around and decided to try building LFS (Linux from scratch) on it. For those unfamiliar, LFS is a “distro” where you compile every single package from source manually, with no package manager or anything. With my limited Linux experience it was really like diving directly into the deep end but the process was surprisingly easy and I learned so much by doing it.
Once the base system was complete, I installed the bare minimum needed to get X, Xfce, and some basic applications running. I’m honestly amazed how little system resources are required to have a fully functional graphical environment for basic web browsing and whatnot. The system boots almost instantly on a decade old hardware and after boot sits at way below 500mb ram usage.
They can include runnable JavaScript too, which can cause vulnerabilities in certain contexts. One example from work some years back: We had a web app where users could upload files, and certain users could view files uploaded by others. They had the option to download the file or, if it was a file type that the browser could display (like an image or a PDF), the site would display it directly on the page.
To prevent any XSS (scripts from user-provided files), we served all files with the CSP sandbox header, which prevents any scripts from running. However, at the time, that header broke some features of the video player on certain browsers (I think in Safari, at least), so we had to serve some file types without the header. Mistakenly, we also included image files in the exclusion, as everyone through image files couldn’t contain scripts. But the MIME type for SVG files is
image/svg+xml… It was very embarrassing to have such a simple XSS vuln flagged in a security audit.