Yeo Kheng Meng

The advice in this checklist is horrendously bad and nobody should follow it. Details: > Restrict /usr partition mount options. Example: UUID=<...> /usr ext4 defaults,nodev,ro 0 2 Mounting /usr read-only will break system updates, and it's worthless from a security perspective, since nothing in /usr is writable by anyone but root, and root is capable of remounting it read-write. Ditto for the same advice about /boot. Also, nodev is only useful on things unprivileged users can mount, like external media, since on internal partitions like /usr, once again, only root can do mknod, and root can remove the nodev mount option too. > Restrict /proc partition mount options. Example: proc /proc proc defaults,hidepid=2 0 0 Setting hidepid=2 is a really, really breaking change. I'd never even consider doing that on a production system without extensively testing every piece of it with that on first. And since it's only security-through-obscurity and not real security, it's approximately never worth doing so. > Polyinstantiated directories A really common use case of /tmp and /var/tmp is to transfer files between local user accounts, when your home directory is something like a Kerberized NFS mount where you can't give each other direct access. Polyinstantiating those directories breaks that. > Protect Single User Mode with root password. Example: # Edit /etc/sysconfig/init. SINGLE=/sbin/sulogin This is actively harmful for security, because now you need to give the root…

Every car can brake, turn and accelerate much harder than any of us will even think to do especially turning and braking. But you pinpointed why we must not attempt to reach for the limit, not for us but for the others. And anyway a normal car won't lay long if driven like a racing car. Every single component is not designed for that. The usual computer analogy /s You don't run a LLM on a Core Duo 2, but of course https://yeokhengmeng.com/2025/04/llama2-llm-on-dos/

The QR code bit interested me, but the issue he describes has been fixed, you can test it by scanning the QR code on this image: https://yeokhengmeng.com/2021/09/review-usage-and-repair-of-the-framew… The encoded information goes to a URL shorterner https://fr.mw/[removed_extra_characters] that redirects to a human-readable URL (e.g. guides.frame.work/Guide/Framework+Laptop+DIY+Edition+Quick+Start+Guide/57 ). fr.mw seems to be owned by Framework so the chance of them independently disappearing should be low. And making it a redirect means if they ever do a restructuring of their website, they can just update where the redirect target of the fr.mw link.

Another one: https://yeokhengmeng.com/2015/09/pcb-businessname-card/

You are correct. My 390E has 384MB of RAM but only 256MB is accessible by Win 3.1. An earlier blog post shows this http://yeokhengmeng.com/2016/09/windows-for-workgroups-3-11-on-vintage…