Spyke

Replies

Comment on

Let's Encrypt Announces New-Certificate-Every-6-Days Offering

I understand their reasoning behind this, but I am not sure, this is such a good idea. Imagine Letsencrypt having technical issues or getting DDoS'd. If the certificates are valid for 90 days and are typically renewed well in advance, no real problem arises, but with only 6 days in total, you really can't renew them all that much in advance, so this risk of lots of sites having expired certificates in such a situation appears quite large to me.

gaming

Comment on

Reminder that you do not own digital games

Reminder that you do not own digital games

That is not universally true. On GOG for example you can download all your games, so things like this could not happen there. Sure, you still technically purchase a license and do not actually buy the games, but for all intents and purposes this is still the closest you get to actually owning the games.

Comment on

Unhappy with the recently lost file upload feature in the Nextcloud app for Android? So are we. Let us explain. - Nextcloud

Reply in thread

The worst part is that Nextcloud isn’t even really in competition with Google. Setting up a Nextcloud server isn’t hard, but it’s not a trivial task. Sharing it outside your local network also requires a bit of skill, especially if done securely. That is to say, Nextcloud users probably tend to be more tech-savvy.

That's only true for those who self-host this. There are lots of companies offering Nextcloud hosting. That's probably why Google doesn't like Nextcloud. I'm not saying Google is right. Actually what Google is doing here is quite pathetic.

gaming

Comment on

Reminder that you do not own digital games

Reply in thread

They don’t have DRM. That’s not the same as owning the game.

That's why I mentioned that you purchase a license. That has also always been true even if you "bought" a game as a physical copy in a store. A DRM-free game is still the closest thing you get to owning a game.

If you don’t back up the games or installers yourself, and GOG goes under, you lose access to your library the same as Epic or Steam going away.

I have heard this argument before, but I really don't get it. Of course you could lose your files if you don't download them. I'd say that's so obvious it isn't even worth mentioning. If you lose or destroy your physical copy of a game you also lose access to it. Pretty obvious.

Comment on

Pixel 6, 7 series get an extra two years of software upgrades

Reply in thread

Fairphone is actually worse than Google when it comes to updates. Even their flagship phone is still on Android 13. Even the Pixel 6 runs Android 15 at this point and with this news it is guaranteed to get at least Android 17. Google has always been offering 5 years of support for the Pixel 6 and 7 series. What they didn't promise until this announcement was additional feature/OS upgrades, but when it comes to that they were already ahead of Fairphone.

When it comes to alternative OSes, Google actually makes it very easy to install them. That's one reason why GrapheneOS and the likes chose Pixel phones as their primarily supported phones.

Comment on

A Short IPv6 Guide for Home IPv4 Admins

The guide mentions:

Your ISP will give you the first 64 bits, and your host machine will have the last 64 bits.

This isn't correct. While some ISPs do give you the first 64 bit (a /64 prefix), this isn't recommended and not terribly common either. An ISP should give its users prefixes with less than 64 bit. Typically a residential user will get a /56 and commercial users usually get a /48. With such a prefix the user can then generate multiple /64 networks which can be used on the local network as desired.

Comment on

Looking for UPS suggestion

At least 900VA capacity

Just being pedantic here, but VA is a power rating, not a capacity rating. A UPS has both a power rating that tells you how much power it can deliver at any given moment and a capacity that tells you for how long it can do so.

Comment on

Concerns Raised Over Bitwarden Moving Further Away From Open-Source

Reply in thread

BitWarden already has lots of clients.

Does it? I'd be very much interested to know. I've been looking for other clients before, because I didn't like the sluggishness of the Electron client, but couldn't find any usable clients at all. There are some projects on Github, none of which seemed to be in a usable state. Perhaps I have been missing something.

This is being blown a bit out of proportion though. All they are saying is the official SDK may have some non-free components going forward. So what? It’s a private company, they can do what they want. Or the community can just fork it and move forward with a free one if they want, but it’s just not going to be in the official BitWarden clients. Hardly news or a big deal.

Nobody said that they can't do that (although people rightfully questioned that their changes are indeed comatible with the GPLv3). I very much disagree that this isn't a big deal, though.

Comment on

Security blindspots for selfhosted website

Unless you require the dynamic features of Wordpress, you could have a look at some of the static site generators out there (such as Hugo). Having a static site would reduce the attack surface considerably. Also due to the shenanigans happening with Wordpress at the moment, I would be weary of using it.

About SSL, what others have already mentioned, SSL certs are available for free these days, thanks to letsencrypt.