Skip Navigation

Posts
2
Comments
126
Joined
3 yr. ago

  • In typical Ars fashion, the editorial team appears to be looking into what happened and are being fairly open about at things: https://arstechnica.com/civis/threads/journalistic-standards.1511650/

    I will be very disappointed if this was BenJ or Dan [edit: I had messed this up, it wasn’t Dan but Kyle Orland that coauthored it] Kyle using AI to write their article since both have had really good pieces in the past, but it doesn’t sound like this is some Ars wide shift at this point. Like all things, it makes sense that it will take time for them to investigate this, Aurich (the Ars community lead and graphic designer) was clear that with this happening on a Friday afternoon and a US holiday on Monday, it’s likely to be into next week before they have anything they can share.

  • I use them because I still have access through the last renewal I had, but won’t be renewing anything other than SimpleLogin once it runs out (and even that I may try and self host, not sure yet).

  • Eh, it can be a lot of work but doesn’t have to be. I’ve automated backups, and if you follow current best practice guidance from industry, you should use long pass phrases and not worry about regularly rotating them. For things like SSH keys, you can rotate them if you think you’ve had a breach but in normal usage there isn’t a huge benefit security-wise since they functionally can’t be guessed and would need to be stolen. If an adversary steals your SSH keys then you’re already pretty hosed as the next step is for them to establish another backdoor to access your server without needing your key.

  • Yes, hail is from thunderstorms and is generally larger, ice pellets are winter precipitation and almost always smaller. Hail usually lasts only a few minutes, ice pellets can last many hours.

  • Honestly it’s not a ton of time. A few minutes to run patches every few weeks, and the initial investment to plan, install, and configure your services (but then that’s the fun part no?). Self hosting IMO isn’t a great way to save time and money, or even to get out of the pocket of big tech. If those are your goals you’re better off looking at hosted solutions that are Open, and likely paying for it since running IT stacks isn’t free. Self hosting is a hobby, something you do to learn and because you enjoy it. It is hard sometimes, takes time, and comes with risks, but so do most other hobbies.

  • It doesn’t usually matter what the service is, the basic concepts are the same. If you want to access a service you host on your internal network from another external network you either need to use a VPN to securely connect into your network, or expose the service directly. If you are exposing it directly you should put it (or a proxy like NPM) in your DMZ. The specifics of how to do this though will vary from service to service and with your specific network config.

  • You can run a port scan against your public IP from another network to see what is open. But if you haven’t specifically set something up for external access through port forwarding you are probably fine.

  • Hail is formed through a completely different process and is a spring/summer precip type associated with thunderstorms. It forms as water gets lifted high into the atmosphere from updrafts in the thunderstorm then fall before getting lifted again. Hail often shows layers (like a jawbreaker) and can grow very large.

    In the US, sleet/graupel is essentially just a frozen raindrop and is a winter precip type. Wintry mix is what the US National Weather Service uses for any mix of rain, snow, sleet, graupel, and freezing rain. The WMO and Europe use Ice Pellets for frozen raindrops and Sleet for mixed rain and snow. So both are official terms depending on where you are.

  • Only expose services internally then use a secure VPN to access your services, this makes your network no more vulnerable in practice than not self hosting. If you need/want to expose something to the internet, make sure you setup your network right. Use a DMZ to separate that service and leverage something like CrowdSec along with good passwords, antivirus, and keep things patched.

  • I migrated away from proton for mail and calendar about 4 months ago. The services are fine, they do what they say, but the trade offs for “e2ee” email are large with a dubious benefit when it works and no benefit in 99% of cases because the vast majority of people don’t use Proton so your Mail is not encrypted anyways. I still use Pass, VPN, and SimpleLogin. They, IMO, are the best services Proton offers (though I may move passwords back to bitwarden, still deciding).

    Overall it’s worth considering what secure email means to you, what your individual threat landscape looks like, and then comparing what Proton offers to your needs. Personally I migrated to Fastmail and have been pleased so far. It won’t be right for everyone, and for some the security offered by Proton may be valuable, but know there are a ton of asterisks to that security.

  • I’ll post here what I’ve posted elsewhere with addition comments sprinkled in.

    This is what bothers me the most about folks, usually from an EU country, telling Americans we should just oust our shithead president through national strikes or violence and complain that we aren’t doing anything. The US is huge, what works in smaller European countries is vastly more difficult and expensive to organize and execute in the US. Those tactics do work here, but mostly at the local and state level which is akin to how they work in most EU countries when you adjust for population and size. At this level there is just not much an individual or relatively small group can do. Even if my entire city and the surrounding area rose up together (which it wouldn’t since it’s politically mixed) it would have little to no impact. A million or two people just isn’t that much in a nation as large and diverse as the US. The entirety of California or Texas couldn’t appreciably move the needle in all reality and they are massive, wealthy states.

    The US General Strike movement estimates that we would need just 3.5% of the US adult population to strike to see any results, that is over 10.5 million people, and they have less than half a million signed up. To put that in perspective, that’s more than the entire population of Greece, Austria, or Sweden needed to make an impact, and even well resourced and organized they are barely moving the needle due mostly to the sheer size of the country. None of those countries can get their entire population to agree on something though, so it’s not really surprising the US hasn’t been able to get that many people to agree either.

    In addition, the risks are enormous to everyday people when there isn’t an organization to back their movement. I still need to eat, put a roof over mine and my families head, and generally exist in this world. I applaud those that have the means, drive, or mindset to just take direct action but the vast majority do not. Going out half cocked, guns blazing though also doesn’t accomplish anything and just gives more media ammo to the current regime to oppress rights further. Until we can find our MLK to lead a movement against this oppression though, it’s unlikely that resistance will accomplish much visibly.

    I think it would be a fantastic idea for Europeans, and the rest of the world, to start actually considering what a violent, imperialist US means to their normal day-to-day and how they can best prepare to defend against it. I, and all those I choose to surround myself with, hate what our government is doing. We voted against it, give money and time to causes against it and to try to reduce harm where we can and help those impacted by it. Many of us would leave if we had the means to, but the reality is that leaving has its own risks, is surprisingly difficult and expensive, doesn’t guarantee where we end up will ultimately be better, and removes our ability to do anything here. Like most of life, reality is complex and messy, I just wish everyone could keep that in mind when condemning all Americans for the actions our government is taking.

    That all said, Americans are doing something, not enough, and not quickly, but protests are nearly constant in various parts of the country. Congress is rebuking nearly all of the big budget cuts Trump wanted, and more right leaning lawmakers are starting to stand up against the regime. Again, it’s not enough, but it isn’t silence like is often asserted here and elsewhere.

    In short, I am not my country, and while I fully accept that the world hates the US right now (and they should), personally hating every individual American and blaming us as specifically responsible is ignorant and inflammatory. It doesn’t help and just serves to depress and discourage action by those of us who do not support the actions of our government and are trying to help in the ways that we can.

  • This was posted here yesterday by the dev. Overall the reaction seems positive.

    A quick look through the repo it looks pretty legit, it’s a lot of effort to create something that works, with all the documentation (including a lot of planning docs) just to collect data on you. Traffic to various IPs, foreign or otherwise, wouldn’t really be odd for an app like this either. You could try and run it through something like virustotal though to look for malicious code (there are more than a few docker scanning tools on GitHub that use virustotal).

  • As an American I support this take 100%. One thing to note though is that soft drinks are expensive to transport so are almost always bottled/made locally. Coca-Cola alone has 5 manufacturing plants in Canada and over 50 local sales and distribution centers. All that to say that soft drinks specifically may do more harm locally than to Coca-Cola corporate (or PepsiCo, KeurigDrPepper, etc.). Most of those companies are also significantly more diversified than distilling or tobacco companies so can weather boycotts easier. I’d say focus your effort where it can have the most impact for sure so keep up it up on Bourbon and add tobacco, other agricultural items like Pecans (grown mostly in the southeast US, or Almonds (grown mostly in California, but it’s still leverage).

  • I use cloudflare mostly because I buy my domains through them as they offer at cost domain names for many TLDs. Internally I use PiHole and then just point what I need externally to cloudflare trough a reverse proxy and a DMZ box.

  • It’s for a dog, that likely puts far worse than a couple of black hairs in its mouth, I wouldn’t bother honestly.

  • It’s worth keeping in mind that Linux (and Unix-like) OSs are already the most common server and datacenter OSs by a country mile. At the risk of being the “um aktshually” person here I think you are trying to refer to specifically using Linux as a general desktop OS, specifically for consumers. This is a pretty huge distinction though because all those giant companies are already using Linux in their data centers. Many support desktop use of their applications on Linux, and it’d be pretty difficult to gain any real foothold by limiting use of say Adobe apps to only an Adobe distro. They could perhaps choose to only package for say RHEL to support enterprise users, but then that package will work on Fedora too, and CentOS, etc.

    At its core, desktop Linux is already so fractured through various distros that a single one really doesn’t stand a chance at gaining enough foothold to be the Linux desktop OS, especially with SteamOS and Bazzite taking a good chunk of new users away from Ubuntu as an entry point to Linux, and Mint gaining ground as a good windows replacement. Debian and derivatives are likely to be a very sizable chunk of desktop users (in no small part due to Raspbian), but compared to how monolithic Windows or macOS are I don’t think any single distro can meet the needs of enough users to ever really get the market capture needed to be properly enshittified. Sure some will happen (through things like Snap no doubt), but it’s too easy to fork and create a new distro without that for it to become a Windows level problem. Plus Linux can’t be charged for directly due to its license (other aspects on top of the open source pieces can be, which is what RHEL does, but even there IBM has run into a ton of developer pushback with the stupid moves they made with CentOS a couple years back). The lack of real ability to commoditize the entire OS makes me confident desktop Linux won’t ever have the same enshittification issues as say Windows does.

  • My work usually means I can’t listen to anything while I’m working (lots of meetings and video calls), but when I need to just head down get something done I listen to this lo fi beats playlist my wife made. It’s also great for reading while in a plane.

  • 100% this, my wife makes a menu for the week on Monday then creates a list from that in Apple Reminders that I use to shop from. She knows if it isn’t on the list it isn't going to be in the bag I bring home. Even hand writing a list is better than trying to memorize one, anything to take that mental load off in a place designed to make you over buy on stuff you don’t need will help.

  • Any chance you have the documentation for this somewhere I don't need to setup an account to access (like GitHub perhaps)? I can figure out a print if needed (though somewhere like printables allows you to monetize your print files if you want but is still more accessible/open than Bambus walled garden).

  • ADHD @lemmy.world

    Effects of missing Atomoxetine Doses?

  • ADHD @lemmy.world

    Testing Option in Pittsburgh Area