Spyke

Replies

Comment on

Horror story

Reply in thread

I don't think I've ever had to sign into Teams (PR Outlook, for that matter) in my desktop. Mobile, I have to after changing my password. I assumed all the MS apps signed me in with my domain login on my laptop. On weird issue I have is things like SharePoint and Dynamics 365 asking me to sign in again after its already brought up the site, and clicking the button to do it just brings a blank pop-up that immediately disappears and I'm logged "for real" I guess.

movies

Comment on

What comedy movies aged like fine wine?

Reply in thread

While you’re correct that the movie highlights a leader searching for a solution to a problem, you overlook the unspoken criticism of society within the movie: the plainly evident results of generations of stupid Americans who were too complacent, and actively hostile, to reckoning with the long-term consequences of their actions.

Comment on

China now has the fastest supercomputer in the world, snatching the top spot from the US for the first time since 2017

As someone who works in this area, I have some points:

  1. More often than not, things like this are dictated by need and budget more than vanity. Sure, if it looks like a cluster might be close, a customer might press a vendor for a few more compute nodes to push them over the edge, but even that’s fairly rare. For the customer, being in the list at all is decent marketing fodder. For the vendor, having the top spot is cool, but having more systems on the list than your competitors could be argued as at least equally as cool.
  2. This list covers systems that are publicly known about. It’s long been known that institutions like the US NSA have some impressive computing power whose specs are classified. They aren’t alone. Plenty of similar installations around the world, and not just in government. Financial companies, for example, can be quite secretive about their resources.

Comment on

Safely exposing services to the Internet

Reply in thread

If you’re not going the VPS route it’s even easier. Pangolin handles the wireguard tunnel for you with a docket container running newt. Very straightforward.

My goals have been:

  1. Avoid opening ports on my home network.
  2. Don’t require people using my services to join my Tailnet (or some other VPN).
  3. Require 2FA/passkeys (via Authentik for the moment) on anything that’s publicly accessible.

There’s plenty of YT stuff out there for Pangolin, but I haven’t seen a lot for their cloud service. Personally, I prefer it to self-hosting it. Similar to tailscale, the free tier meets my needs, and their security team is (hopefully) more competent and better staffed than… me.

Of course, you get what you pay for, but I see this as a similar position as Tailscale & Cloudflare. With my free account, I’m piggy-backing off the security infrastructure of their enterprise offerings. Obviously I don’t get all the fine-grained controls of those tiers, but like the other two companies, they have a reputation to uphold, and from that perspective a breech is a breech. Even if it only affects free tier users, it makes them look bad.