J_tt

Astro: https://astro.build/

I’ve just moved from Kodi on a Linux box to Jellyfin and Infuse on an Apple TV, so far fantastic experience

Adding onto this, there’s also an experimental feature to move a bookmark as you create new revisions (similar to how a git branch behaves)

Unfortunately, it can be a vector[0], especially on less security focused software that has less sandboxing.

0: https://www.cvedetails.com/vulnerability-list/vendor_id-7294...

The way I read the screenshots of the emails from the articles seemed to suggest that something the authors company was doing was causing issues with IP reputation on CloudFlares range.

Them very aggressively highlighting the BYO IP feature and then even suggesting third parties to rent IPs from strikes me as a significant detour from their normal “script” (having dealt with their AU sales team before).

This feels like a reaction to Edge beginning to eat the enterprise market.

The problem is convincing anyone to buy on to gamble if this product will exist by the end of the contract.

I haven’t looked closer, but it’ll be very funny if this is fully GPO driven when Microsoft is already pushing for cloud configuration via Intune instead.

Still waiting for cloudflare to reach the “The Box”[1] phase.

[1] https://silicon-valley.fandom.com/wiki/The_box

Web services that need to be setup from a web frontend with no required token or credentials always make me nervous for this reason.

All it takes is someone noticing the port and beating you to the punch, and then it’s their server.

Enforce it at the cyber insurance provider level, if you pay out a ransom for a client you risk losing your insurance license.

CORS headers from eBay will prevent that unfortunately

Very reasonable!

My go-to for anything more complicated is definitely NGINX, but for ease of use in a very straightforward docker containers running HTTP services, it’s hard to beat the ease of use of the modified version of Caddy I linked

My go to is always this instead:

https://github.com/lucaslorentz/caddy-docker-proxy

Single label to a docker container and with correct DNS you’ll have an automatically managed certificate right away.

Relevant [xkcd](https://xkcd.com/2501/)

The IC card system is fantastic, and you can provision one on your phone without needing a physical card.

On iOS the integration with Apple wallet means you can top it up and provision it without even needing to install the app.

Supporting custom date time formats in struct tags is a huge quality of life improvement, a lot of unnecessary boilerplate saved there

It sounds like you’re looking for https://buttplug.ion

Something a lot of other comments seem to be skipping out on is storage, proxmox provides an easy hyperconverged option with its support for CEPH, which provides a much more battle tested option when compared to k8s solutions like longhorn.

in-addr.arpa domains don’t resolve to an IP address, an IP address resolves to them, you can test this with DIG or any dns look up tool

It’d be great if they could trigger 3D-Secure without a purchase, but that would probably be a whole mess to work out.

Edit: looks like it might be in the spec from some very brief research, or at least “coming soon”: https://3dsecure2.com/non-payment-authentication/

It’d be nice to see continued adoption if only to make things searchable when prerendered. Locking data behind an API with a requisite auth token means discoverability goes away.

But sadly I think that era has come to an end, with every content company scrambling to lock data away to levy a fee for LLM training.

This is very rough implementation, and vulnerable to getting caught in a loop on malicious DNS packets. But, I thought it was an interesting enough demo of bitstrings in Elixir to share here.

I may come back to it and add some better error handling, docs etc

What’s fantastic is you can reference an unpacked variable immediately within the bitstring.

This is super handy if you have variable length sections with a header, such as a DNS packet, saving having to do it in two operations.

Have you considered installing a GitLab runner on your deploy machine to run jobs specifically tagged to deploy that app?

It’s a super easy setup and saves managing SSH keys in env variables etc while still being really quick!

I don’t think that is the authors SSN, since the first number closely matches a song title and the second is “69 420 007”, which is definitely a joke.

Mastodon searching is a lot more focused on hashtags rather than the contents of peoples posts. Consider it more "opt-in" discovery.

The existing user base is strongly in favour of a more organic social graph from exploring tags for shared interests.

Browsing tags is a very normal thing to do on the platform.

We’re actually finding good success with GraphQL codegen, specifically for a Go backend and Apollo + TypeScript frontend.

Out of all the options for generating typesafe interfaces this seems the most flexible and generates usable code.

I just lost 4 engineers (including myself) a whole afternoon of work to this :(

"Pynt" feels like a missed opportunity for a lovely pun

Each user can adjust the settings for how incoming images are filtered, one of the options disables it for friends.

Direct link to issue, but doesn't show affected services:

https://status.xero.com/incidents/h2cmcdfcpxgl