Okay. I don’t really want to keep arguing about this. Your negativity seems entirely unwarranted, so I’m not really sure what you’re trying to achieve. Given the only thing I wanted to say is “this article is worth reading”, I don’t think there’s a productive line for this conversation to go down.

I think your summary is less useful than reading the whole article. Teaching well involves more than just stating a refined idea.

I also think the ideas in the article are worth the 25 minutes.

Another application of Parse, don’t validate. The vulnerability isn’t really about the single-line regex, it’s that the validation doesn’t match the use. If the regex extracted (read: parsed) the valid bit with a group, then passed that through, it would be fine.

This is not true. In fact, Guix doesn’t use systemd at all. When managing an operating system installation Guix uses its own init system called the Shepherd.

Elogind is a project extracted from systemd originally for use in Guix systems.

Here you go: https://adnauseam.io/

If you wanted to do it in one query I think you could do something like

UPDATE local_user AS u
  SET u.totp_2fa_url = null,
      u.totp_2fa_secret = null
 FROM person AS p
WHERE p.id = u.person_id
  AND p.local
  AND p.name = 'guineapig';

I assume the p.local is optional, too, because the id match against the local_user table will presumably limit it to only local users. 🤷