irusensei

This goes to every LinkedIn brain idiot spouting recycled nonsense about the new Industrial Revolution and that white collar jobs are going away. These blabbering idiots never read a story book to understand the time period, that people displaced by industrialization were uneducated illiterate farm workers in a period in time before democracy.

Jump today most countries stable enough to build infrastructure are democracies and the white collar people you are demonizing do vote and that immense investment in infrastructure is not really easy to relocate.

They don't exist because the organizations who lobbied governments were YOTI, Persona, K-ID and others who have a vested interest in collecting data and rent seek by latching through regulations like diseased ticks.

The government issues an eID to your wallet

So people in dubious legal circumstances are locked out the internet?

I doubt it will ever be because Apple doesn’t understand the non casual gaming market.

Can’t wrap my head around how their firewall rules work. Default rule and there is no way to change it.

And lately the interface has been so convoluted and nonsensical. DNS records sure now “policies”, you can only assign very essential rules like setting routing rules to known objects based on MAC address - the ui doesn’t allow you to pick an IP address.

I wanted to create a special routing rules to allow a container using macvlans to always leave through ISP2. Since this is a macvlan the interface MAC address was different every time the system started. Mind you “ip x.x.x.x goes through link 2” is one of those basic things firewalls and routers do since forever but if the object doesn’t exist on their automated inventory then forget it.

I guess routers and access points are easy to replace with a normal OS but I’m yet to see a managed l2 or l3 switch that runs user provider OS. I’d ditch anything in an eye blink if there was some kind of fully open source network stack that can be controlled through infrastructure code. Affordable that is, not including that Nvidia thingie.

Is the firmware open though?

Still sucks that you need to verify if your kernel update is compatible with the external module.

Seems MacOS Snow Leopard is for the Apple people what Windows 7 is for Windows people.

"I'm sorry but I can't fulfill requests that might potentially harm young sebastian."

Small fans need to spin faster so these can be very high pitch even if you stuff some Noctua 40mm fans into it.

As much as I would love to see Anthropic going down in flames I think that developer doesn’t deserve to be targeted by such a low effort social media farming post.

I am nothing but grateful for Samba and Rsync.

Please don't run Chinese models for KYC operations.

Most companies providing corporate security consulting I had to deal in the past are operating on a checklist.

I really wanted NFSv4 ACLs but Linux doesn't like it while FreeBSD doesn't make use of my hardware (intel p/e cores) in the most efficient way.

To be fair setting up a KDC and then distributing krb5.conf and idmap.conf files is not such a hard task.

Then it's not unencrypted anymore because sec=krb5p handles signing and encryption. I have better throughput using sec=krb5p than with samba signing and encryption. I don't know if it's because Samba uses GNUTLS but the transfer speeds are always awful.

My beefs with NFS is MacOS being extremely quirk with settings. That and the extremely misleading error messages.

Dev1: Here's a great idea! Let's run an insecure network server in Kernel space!

Dev2: OMG! You're so smart! Let's also exclude any encryption!!!

If it wasn't such a cool idea they wouldn't be doing it again, this time with direct access to memory: https://docs.kernel.org/filesystems/smb/ksmbd.html

I don’t know if this is actually a problem or how big of an advantage it would be to use NFSv4.

Of the top of my head only one port is needed for V4.

I've hit command+f and then looked for this.

The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.

Thats not really true. Comes with spamd, pf, httpd, OpenSMTPD and others. Its actually one of the open source unix-like systems that packs more functionality out of the box.

Great firewall and VPN server. You can setup wireguard with just ifconfig.

Interesting. I had a 705 G4 (or 74 g5? Idk the one with the Ryzen 2400Ge) and the firmware supported putting the machine secure boot system on setup mode.

Secure boot and TPM are good technologies. You can roll your own keys and Microsoft won't have anything on it.

Do people still think you need to have your boot program signed by Microsoft in order to use it?

I also wonder if this sentiment is what stalled development in other more traditional projects like BSD derivatives. I'd love to have FreeBSD with secure boot and loading ZFS keys from the TPM.

"In the EU, there is a a political discussion about outlawing privacy."

"In the US, the government is using illegal methods to violate rights granted by the constitution."

Agreed one is obviously better than the other. The EU treats privacy as a privilege granted by the government while the US treats it as a fundamental right.

I'm not a fan of the US gov but I also don't agree with the candy colored view of the EU as an institution that does no wrong and when it does its a "well intended but misguided".

Pretty sure candy colored EU paradise even today is discussing on breaking encryption and privacy for its citizens.

I'm posting from the EU.

Enumerate by creation time in descending order the unwatched videos posted from the accounts the user follows.

Like social media 1.0.

I mean, their foundational philosophy is Ayn Rand, a fiction writer? The whole right-libertarian ideology is a joke compared to the intellectual rigor of anarchist theorists like Kropotkin, Bakunin, Malatesta, etc.

Ayn Rand is not consensus within libertarian circles.

From the top if my head on the libertarian camp I think of Rothbard, Hayek, Mises, Menger, Von Bawerk who debunked Marx economic policies. Also arguably Kant and Adam Smith and many others who influenced it.

My guess is that since you know Bakunin and these others there might be a chance you are deep into the other extreme. I think it's okay to disagree but your comparison shows you probably need to do better research before putting things together to avoid the "our blessed homeland, their barbarous wastes" situation.

From the fine article:

What makes this particular hallucinatory mushroom so unusual is that it causes the same kind of hallucinations in different people, across cultures.

I use kubernetes extensively at work. I don't manage the kubernetes cluster anymore since now we have a team that runs centralized services and you can request a namespace with a quota. But back when my team had a dedicated Azure Kubernetes cluster it was not that bad as people says it is and the biggest hassle was the extremely short lived support for each version.

Then I started to realize most people who complain are rolling their own which is also not bad since there are products like k3s that are very simple to use.

It seems things start to fall apart when they try to stuff it with all kinds of crazy idiotic controllers and the favorite of the month CNI and CSI. I always shake my head when I see people creating sand castles by setting up stuff like Ceph from within the cluster.

If you want to play with it keep things simple and have all the persistent data outside of the cluster. Use good old NFS instead of the latest longceph horngluster version. Keep databases and the container registry out. Treat it like a compute pool not a virtual datacenter. Stop recursing chickens inside eggs.

I think 1450 EUR for a 16GB RK3588 is hard to justify. Is the Rockchip open to begin with?

I'd go for a framework using the Roma or CIX boards if I wanted to go for an "open hardware but not really" goal.

I use disposable digital debit cards for my subscriptions. These can be issued by fintech companies like Wise. If something like this happens to me I'll just delete the card.

That would make extremely inconvenient if MS ever need to revoke a certificate.