Eh, it can be a lot of work but doesn’t have to be. I’ve automated backups, and if you follow current best practice guidance from industry, you should use long pass phrases and not worry about regularly rotating them. For things like SSH keys, you can rotate them if you think you’ve had a breach but in normal usage there isn’t a huge benefit security-wise since they functionally can’t be guessed and would need to be stolen. If an adversary steals your SSH keys then you’re already pretty hosed as the next step is for them to establish another backdoor to access your server without needing your key.

Yes, hail is from thunderstorms and is generally larger, ice pellets are winter precipitation and almost always smaller. Hail usually lasts only a few minutes, ice pellets can last many hours.

Honestly it’s not a ton of time. A few minutes to run patches every few weeks, and the initial investment to plan, install, and configure your services (but then that’s the fun part no?). Self hosting IMO isn’t a great way to save time and money, or even to get out of the pocket of big tech. If those are your goals you’re better off looking at hosted solutions that are Open, and likely paying for it since running IT stacks isn’t free. Self hosting is a hobby, something you do to learn and because you enjoy it. It is hard sometimes, takes time, and comes with risks, but so do most other hobbies.

It doesn’t usually matter what the service is, the basic concepts are the same. If you want to access a service you host on your internal network from another external network you either need to use a VPN to securely connect into your network, or expose the service directly. If you are exposing it directly you should put it (or a proxy like NPM) in your DMZ. The specifics of how to do this though will vary from service to service and with your specific network config.

You can run a port scan against your public IP from another network to see what is open. But if you haven’t specifically set something up for external access through port forwarding you are probably fine.

Hail is formed through a completely different process and is a spring/summer precip type associated with thunderstorms. It forms as water gets lifted high into the atmosphere from updrafts in the thunderstorm then fall before getting lifted again. Hail often shows layers (like a jawbreaker) and can grow very large.

In the US, sleet/graupel is essentially just a frozen raindrop and is a winter precip type. Wintry mix is what the US National Weather Service uses for any mix of rain, snow, sleet, graupel, and freezing rain. The WMO and Europe use Ice Pellets for frozen raindrops and Sleet for mixed rain and snow. So both are official terms depending on where you are.

Only expose services internally then use a secure VPN to access your services, this makes your network no more vulnerable in practice than not self hosting. If you need/want to expose something to the internet, make sure you setup your network right. Use a DMZ to separate that service and leverage something like CrowdSec along with good passwords, antivirus, and keep things patched.

I’ll post here what I’ve posted elsewhere with addition comments sprinkled in.

This is what bothers me the most about folks, usually from an EU country, telling Americans we should just oust our shithead president through national strikes or violence and complain that we aren’t doing anything. The US is huge, what works in smaller European countries is vastly more difficult and expensive to organize and execute in the US. Those tactics do work here, but mostly at the local and state level which is akin to how they work in most EU countries when you adjust for population and size. At this level there is just not much an individual or relatively small group can do. Even if my entire city and the surrounding area rose up together (which it wouldn’t since it’s politically mixed) it would have little to no impact. A million or two people just isn’t that much in a nation as large and diverse as the US. The entirety of California or Texas couldn’t appreciably move the needle in all reality and they are massive, wealthy states.

The US General Strike movement estimates that we would need just 3.5% of the US adult population to strike to see any results, that is over 10.5 million people, and they have less than half a million signed up. To put that in perspective, that’s more than the entire population of Greece, Austria, or Sweden needed to make an impact, and even well resourced and organized they are barely moving the needle due mostly to the sheer size of the country. None of those countries can get their entire population to agree on something though, so it’s not really surprising the US hasn’t been able to get that many people to agree either.

In addition, the risks are enormous to everyday people when there isn’t an organization to back their movement. I still need to eat, put a roof over mine and my families head, and generally exist in this world. I applaud those that have the means, drive, or mindset to just take direct action but the vast majority do not. Going out half cocked, guns blazing though also doesn’t accomplish anything and just gives more media ammo to the current regime to oppress rights further. Until we can find our MLK to lead a movement against this oppression though, it’s unlikely that resistance will accomplish much visibly.

I think it would be a fantastic idea for Europeans, and the rest of the world, to start actually considering what a violent, imperialist US means to their normal day-to-day and how they can best prepare to defend against it. I, and all those I choose to surround myself with, hate what our government is doing. We voted against it, give money and time to causes against it and to try to reduce harm where we can and help those impacted by it. Many of us would leave if we had the means to, but the reality is that leaving has its own risks, is surprisingly difficult and expensive, doesn’t guarantee where we end up will ultimately be better, and removes our ability to do anything here. Like most of life, reality is complex and messy, I just wish everyone could keep that in mind when condemning all Americans for the actions our government is taking.

That all said, Americans are doing something, not enough, and not quickly, but protests are nearly constant in various parts of the country. Congress is rebuking nearly all of the big budget cuts Trump wanted, and more right leaning lawmakers are starting to stand up against the regime. Again, it’s not enough, but it isn’t silence like is often asserted here and elsewhere.

In short, I am not my country, and while I fully accept that the world hates the US right now (and they should), personally hating every individual American and blaming us as specifically responsible is ignorant and inflammatory. It doesn’t help and just serves to depress and discourage action by those of us who do not support the actions of our government and are trying to help in the ways that we can.

This was posted here yesterday by the dev. Overall the reaction seems positive.

A quick look through the repo it looks pretty legit, it’s a lot of effort to create something that works, with all the documentation (including a lot of planning docs) just to collect data on you. Traffic to various IPs, foreign or otherwise, wouldn’t really be odd for an app like this either. You could try and run it through something like virustotal though to look for malicious code (there are more than a few docker scanning tools on GitHub that use virustotal).

I use cloudflare mostly because I buy my domains through them as they offer at cost domain names for many TLDs. Internally I use PiHole and then just point what I need externally to cloudflare trough a reverse proxy and a DMZ box.

It’s for a dog, that likely puts far worse than a couple of black hairs in its mouth, I wouldn’t bother honestly.

It’s worth keeping in mind that Linux (and Unix-like) OSs are already the most common server and datacenter OSs by a country mile. At the risk of being the “um aktshually” person here I think you are trying to refer to specifically using Linux as a general desktop OS, specifically for consumers. This is a pretty huge distinction though because all those giant companies are already using Linux in their data centers. Many support desktop use of their applications on Linux, and it’d be pretty difficult to gain any real foothold by limiting use of say Adobe apps to only an Adobe distro. They could perhaps choose to only package for say RHEL to support enterprise users, but then that package will work on Fedora too, and CentOS, etc.

At its core, desktop Linux is already so fractured through various distros that a single one really doesn’t stand a chance at gaining enough foothold to be the Linux desktop OS, especially with SteamOS and Bazzite taking a good chunk of new users away from Ubuntu as an entry point to Linux, and Mint gaining ground as a good windows replacement. Debian and derivatives are likely to be a very sizable chunk of desktop users (in no small part due to Raspbian), but compared to how monolithic Windows or macOS are I don’t think any single distro can meet the needs of enough users to ever really get the market capture needed to be properly enshittified. Sure some will happen (through things like Snap no doubt), but it’s too easy to fork and create a new distro without that for it to become a Windows level problem. Plus Linux can’t be charged for directly due to its license (other aspects on top of the open source pieces can be, which is what RHEL does, but even there IBM has run into a ton of developer pushback with the stupid moves they made with CentOS a couple years back). The lack of real ability to commoditize the entire OS makes me confident desktop Linux won’t ever have the same enshittification issues as say Windows does.

I just started using David’s toothpaste as I got a really bizarre and difficult to diagnose gum reaction that may be due to SLS or flavoring sensitivity. I really like it as it has a subtle flavor, comes in recyclable metal tubes, and is made in the US (California I believe). It’s fluoride free but uses nano hydroxyapatite which is shown in some studies to be more effective at enamel repair than fluoride compounds. I still use a fluorinated mouthwash and our water is fluorinated (I’m clearly not an anti fluoride person at all). The toothpaste itself works well, my teeth feel clean after brushing. My only real complaints are that it’s a little pricy (though now that I have a flavor I like I can order in bulk and save on shipping) and that I have to use more than my SLS containing toothpaste to have enough to really brush fully (but that’s true of any SLS free choice).

Even if they were, this isn’t what any of these people are trained for. Federal agents are not local police. They don’t go out on patrol or randomly deal with stressful situations. TV makes it seem like federal agents are out chasing bad guys every day but they spend a huge amount of time following leads, interviewing people, and digging up information from various sources (of which i make no comments on the legality of). None of these people are trained to be beat cops on the front lines every day this way.

I also ordered a 17 Pro right when orders opened a long with a 17 for my wife. Both were supposed to come today. UPS showed up and dropped just one box, it was my wife’s phone. Tracking now says it will be delivered on Monday. The tracking says it was on the truck so I’m guessing it got mis-scanned at some point and ended up on the wrong truck. More than a little peeved that they won’t deliver it tomorrow though and I need to wait for the next week day (I also go into the office on Mondays and my wife will be at a work event so it’s going to just sit on our porch all day until I get home).

The technical term used in industry is confabulation. I really think if we used that instead of anthropomorphic words like hallucination it would make it easier to have real conversations about the limits of LLMs today. But then OpenAI couldn’t have infinite valuation so instead we hand wave it away with inaccurate language.

It wasn’t standard previously, and if you have TV service I think it’s still inconsistent but the past ~5 years it seems to be more common that they are setup that way from the start. If you have internet only service, and a newer ONT (like less than 10 years old) it is the standard configuration and is how the self install guide tell you to hook up the “quantum gateway” router from Verizon.

You can always call and ask to have your ONT converted to Ethernet output if it isn’t already and as long as it supports it I haven’t heard reports of much trouble there. The very early ONTs though don’t support it though IIRC but those should be being replaced at this point anyways.

I mean you can, an ONT is not a router, it’s essentially a media converter. I use my own router (and have for many years) and had no issues. The FiOS tech even ran a long Ethernet run in my basement to connect the ONT and my router in my rack when they installed service.

It depends, and without knowing your ISP I’m not sure there is a way to tell you for sure. I know for example Comcast gigabit Pro has been known to directly connect to an ISP SPF module in your firewall/router, but Verizon FiOS (and most FTTP that I know of) provide an ONT that converts the fiber to Ethernet which you would then connect directly to your hardware.

I would verify if the ISP router you refer to is not really an ONT in which case you are directly connected to the ISP functionally and there isn’t really an advantage to getting an SPF and getting the fiber directly connected if you even can.

I think that’d be fine generally. I’m on Lemmy enough it’s likely to be in the background most of the time and I don’t really get a ton of notifications anyway. If it makes it more maintainable I think it’s a solid compromise