Elvith Ma'for

Former Reddfugee, found a new home on feddit.de. Server errors made me switch to discuss.tchncs.de. Now finally @ home on feddit.org.

Likes music, tech, programming, board games and video games. Oh… and coffee, lots of coffee!

I � Unicode!

  • 0 Posts
  • 96 Comments
Joined 11 months ago
cake
Cake day: June 21st, 2024

help-circle
  • As I said over and over again: my biggest pet peeve with Linux is that there are often several ways to accomplish something but many are somewhat distribution specific and not really standardized.

    Who doesn’t love to find a tool that has install instructions like:

    Start by installing all required packages with sudo apt get package1, package2,... then clone this repository and…

    Just to realize that a) you’re not running anything Debian based and b) you first step is now to find out how these packages are named in your package manager.

    Or tutorials that tell you to do X and you only find out, that they’re assuming (but not telling you) you’re using Debian and some old package versions that now have a completely new syntax in their configuration, so that either the tutorial doesn’t work or you maybe even f up something by changing values that you shouldn’t touch.

    Best is, of you find help in a distribution specific forum/wiki/… But not all problems can be found there










  • Elvith Ma'for@feddit.orgtoTechnology@lemmy.worldPyPi tariff
    link
    fedilink
    English
    arrow-up
    6
    ·
    19 days ago

    I should send a PR that applies the tariffs randomly and sometimes arbitrarily changes the numbers…

    I might even make it so, that it calculates an import deficit by looking at how often your libraries are imported in the codebase of the projects, that the maintainers of your dependencies have vs. the number of imports your code has from them.


  • Came to suggest this. I ran into the same problem when I tried to host Jellyfin at home. Also I was fed up with all those certificate warnings, depending on which device I used. Since I was already using pihole in my home network, I just went and looked at all the DNS plugins for certbot to learn which provider allows for easy DNS challenges. Then I researched a bit and stumbled upon a provider that was running a sale - so I got a domain for less than 5 bucks/year.

    I set the public A record to 127.0.0.1 and configured certbot to use their API. This domain is now used internally in my network exclusively and I just added some DNS entries for several subdomains in pihole, so that it works for every device at home (e.g. jellyfin.example.com / dockerhost.example.com / proxmox.example.com / …).

    When I’m away, I shouldn’t be able to resolve the domain, and even if DNS were hijacked, the TLS certificate will protect me from connecting to $randomServices. Also my router is less restricted, which means that I can just use it’s VPN server to connect directly to my home network, if I need to access my server or need to troubleshoot things when away.


  • I read this as they’re even generating the frames with AI:

    The tech demo is part of Microsoft’s Copilot for Gaming push, and features an AI-generated replica of Quake II that is playable in a browser. The Quake II level is very basic and includes blurry enemies and interactions, and Microsoft is limiting the amount of time you can even play this tech demo

    While Microsoft originally demonstrated its Muse AI model at 10fps and a 300 x 180 resolution, this latest demo runs at a playable frame rate and at a slightly higher resolution of 640 x 360. It’s still a very limited experience though, and more of hint at what might be possible in the future.



  • At least we’re constantly told to be ready to act to reroll secrets, etc and try to automate the change/deployment of changed passwords and such.

    Depending on the system you’re working with, this may still be a PITA, but at least we do have plans for even the “problematic” systems and we have probably done this a few times. Although maybe not at this scale, tbh.

    So, imagining I were tasked to do that for $hyperscaler in “my” systems… I feel some dread, as even if everything is automated ä, there’s always something that doesn’t go as planned - but at least I know what can be done in which way and which timeframe is realistic (and which parts will be the most sensitive). If you do not have plans, well… Good luck. You’ll need it.







  • If done correctly, those may only be open from the internet, but not from the local network. While SSH may only be available from your local network - or maybe only by the fixed IP of your PC. Other services may only be reachable, when coming from the correct VLAN (assuming you did segment your home network). Maybe your server can only access the internet, but not to the home network, so that an attacker has a harder time spreading into your home network (note: that’s only really meaningful, if it’s not a software firewall on that same server…)