epiecs

A free option worth checking out: https://github.com/0xCUB3/wBlock . I have been using it on my mac and my mobile devices and it syncs up nicely and seems to perform well :)

A backend for an open source bbq thermometer firmware that a mate and I wrote last year for a product that was discontinued (https://github.com/epiecs/free-grilly).

The github repo for the backend is still private atm but we are planning to release soon once we have a gui ready for that new backend. The plan after that is to learn pcb design and electronics and maybe design our own bbq thermometer :)

I had the same issue. The fix for this is to order directly from Apple and then to choose the “English (US)” keyboard layout. That way you get the ANSI layout :)

The problem is that right now I have to choose the lesser of 2 evils. I hate what W11 has become. I only use it for games at the moment and the only reason is that some games Apex/BF6 do not run under proton because of their anticheat.

And I also hate what modern Macos is heading towards. I'm still ignoring/canceling the update on both my devices for the new "glass" interface.

And a thinkpad running Linux is just not doing it for me. I want my power efficient mac hardware.

Truth be told I just want to have my mbp running Linux. But right now it's not yet where it needs to be and I am most certainly not smart enough to help build it :(

But you turn the steering wheel the other way. Normal motorcyle left goes right. Sidecar right goes right ^^

Indeed. I never really used AI until recently but now I use it sometimes as a smarter search engine that can give me abstracts.

Eg. it's easy to ask copilot: can you give me a list of free, open source mqtt brokers and give me some statistics in the form of a table

And copilot (or any other ai) does this quite nicely. This is not something that you can ask a traditional search engine.

Offcourse you do need to know enough of the underlying material and double check what output you get for when the AI is hallucinating.

If your electrical installation allows it: You can connect your ev plug before the battery so that it does not drain the battery. You can do this by placing the fuse/connection before the measurement clamps for the battery. Somewhere in between your mains connection and your battery/solar system.

This way the battery does not see the load and does not provide power to your EV.

That way you can still use excess solar (before you inject it into the mains) to charge your car + you do not pull power from your battery :)

It's the same when you drive a motorcycle with a sidecar. The way you drive it is just completely the opposite of driving a normal motorcycle.

FYI: I have both and the first time I drove my sidecar I ended up in a hedge :D

A good overview of the physics and how to ride these is the yellow book from Ural: http://welcome-ural.ru/documents/HowToRideUral.pdf

Can you recommend a blocker? I have one (adblock pro), but I cant seem to find where to update the lists and sometimes YT does weird things :)

I can recommend Zotero. You also don’t have to pay for storage if you have a server/device that is webdav capable. I connected it to my Synology nas and the setup was trivial.

https://www.budgetbytes.com/ . All the recipes are easy enough and most of them do not require any special spices etc.

They also offer mealplans for an entire week but iirc that is a paying service (pay once).

Good question actually! There are multiple layers that add to the security:

- Your login session as a user is normally valid for a day (~10 hours). But a pimmed session that gives you global admin permissions can be for example capped to max 1 hour.

- A normal login as a user can just require login + mfa. But if you want to PIM to certain admin roles you for example are required to use your yubikey as well. Yes it's an extra step but if your account is hacked they only have access to you as a user and not you as an admin unless they also capture your security key.

Also it creates some additional awareness for admins that they are now handling the keys of the kingdom and that the role that they just activated can do a lot of harm. In some organizations users get an admin account without fully understanding the consequences.

- It is way easier to audit. In normal circumstances a user's admin permissions are "always on". Once you start using pim you can also audit when and where additional permissions where requested. This is especially handy when you are monitoring everything and you get an alert saying "Hey sfn42 just requested global admin from a location that they normally do not request this. Can you look into this to make sure that it is legit?" With always on permissions this becomes way harder.

- Easier to manage via groups. You can have groups tied to eligible permissions and subsets of permissions. This is really handy once you start having external consultants who can request permissions via IGA (Identity Governance) policies.

Basically consultants can go to a url (https://myaccess.microsoft.com/) and request an "access package" that might contain 1 or more roles.

For example somebody who has to audit certain items in our organization can request a package that contains the needed admin roles and get automatically added to the correct groups. Once they request that package we can have automated processes (with multiple stages if needed) that first contact the teamlead of that person, and later on maybe another group of person(s) to approve that access.

These groups have access reviews done by the security team / app owner (weekly/monthly depending..) to make sure that all accesses are still needed. It is also really easy to let these permissions expire. So our auditor will have a valid account for the entire year but will have to re-request their permissions every 3 months (or whatever we choose).

This is also _really_ easy to audit :)

- When someone in our security team requests a role the rest of the team automatically receives an email so we know what is going on with our collegues :)

You use PIM: https://learn.microsoft.com/en-us/entra/id-governance/privil...

Basically you are eligible for your admin roles but you have to activate them first. Usually there are additional checks + notifications to other admins. These permissions are also only available for a set amount of time and then you will need to re request them :)

Same here. We had a very fragmented landscape (multiple idp tools, some tools using internal users,...). We consolidated everything to entra (450 apps and counting) and everybody couldn't be happier. Full sso on everything + scim where available.

We do offcourse have conditional access + PIM for admins but that is to be expected.

You just need a good strategy on how you are going to tackle IAM and then just stick to it.

You can also just setup a pihole adblocker on a vm. It has a local dns feature as well (that is nothing more that a textfile containing all your local records). Super easy to setup and maintain :)

They can just pay for home assistant cloud?

I was just going to comment this. The device is network connected anyhow. So just open up the local api.

Learned Python a few years back; after being a long time php dev. The named parameters and the *parameter expansion felt so nice in Python and it irked me that we didn't have that in php. Feels good that it is finally coming ^^

My birthday is in a few hours. And I just feel the same, I just get melancholic.

I just don’t like celebrating my birthday but as my wife told me; a birthday is not just about me. It’s about our kid and other people wanting to celebrate. So do it for them.

Now we have the arrangement that I get the first few hours of the day to enjoy a cigar and wine and mope a bit.

Afterwards just positive attitude :)

2 adults, 1 kid, belgium. One adult is always WFH (we alternate). Average of 13KWh per day. There is a server rack running in the basement though 24/7 but its optimized (nucs and rpis and no costly energy burning servers) and this rack alone accounts for 3-4 KWh per day (out of the 13)

We heat and cook using natural gas.

The biggest consumer are the same here. Dishwasher and laundry.

I saw the author looking for the hdmi pinout. For anyone who wants a quick reference you can check this website: https://pinouts.org/

It does. It even has webdav sync for the past few months. Just subscribe to their testflight app and you can test the beta right now :)

If you have a synology nas you can also easily install the webdav server and use that :)

I use the CRG9. Combine it with the ms powertoys and you’ll be a happy camper. I divide mine in 3 where i have vscode in the middle and 1 column left and right.

I do reccomend getting the one with the 5120x1440 resolution. I still have the old 3840x1080 one and I miss having more pixels sometimes.

One downside tha you have to take into account is that you can never share your whole acreen when using teams when the other persons don’t have an ultrawide. It will look super small on their screens.

I have everything in zotero synched via webdav to my synology nas. All my bookmarks and docs. Zotero also keeps an offline copy + its as easy as clicking the button in whatever browser you are using.

You can also share this easily with other users

Not intended as a plug but you can even use php for network automation. I cobbled this together:

https://github.com/epiecs/phpmiko for connecting to devices and https://github.com/epiecs/mikodo for inventories and concurrency

The multi core coroutines comment is true but there are ways (to hack) around that.

The way I solved concurrency is just by forking and using sockets: https://github.com/epiecs/mikodo/blob/6bdcebe9fa7f44ffdedd82...

I use it at work atm does what it's supposed to. I also use Python as well but I wanted to know if it could be done in php :D

Same here. The combo that seems to work for me is onenote combined with zotero.

- Onenote for ideas and scribbles - zotero for bookmarks and documents. Supports tags - physical notebook for note taking during meetings

btw you can easily connect zotero to your own nas via webdav and you have unlimited storage. Works fine for me. The only drawback of zotero is that you dont have a native mobile client.

I would love to see that video. I have been thinking about this a lot since I don't easily learn new languages. If you do find it please paste it here or pm me :)

Because the pi-hole is a dns server. So it doesn't need to filter all traffic. It just replies to dns requests. And you need a LOT of traffic to completely saturate a 100Mbit link with dns requests :)

I also looked at swagger but found it needlessly complex for my needs. I opted for blueprint api coupled with aglio to generate html docs and also provided a nicely prepped postman collection including testing :)