Spyke

Replies

Comment on

"Let there be light"

Reply in thread

Just wanna note that the domain owner is the one who elected to use that level of security check, though TBF CF doesn't make it very granular (and why enterprises tend to use their own WAFs)

https://duckduckgo.com/?q=cloudflare+security+levels&ia=images&iax=images&iai=https%3A%2F%2Fmediafortress.com.au%2Fwp-content%2Fuploads%2F2022%2F08%2FCloudflare-security-level.gif

Edit: for the record I don't at all judge. Web has rampant bit activity these days and it's a lot even for a large team.

Slash there are other settings in CF that could affect the behavior so it could be something else. Sae a comment that it was login-aware which makes me think it's more than just the security levels

Comment on

Louis Rossmann taunts Bambu Lab by hosting banned 3D Printer firmware fork, dares $1 billion company to sue him — more creators pledge support and boycotts, Snapmaker donates equipment to embattled de

Reply in thread

the old crowd is still going strong and have been proven largely correct because what they/we were really against was going from a "you own this software" model to a "perpetual licensing" model with price hikes, lock-in, and everything becoming a service.

it's not completely enshittified, there are lots of great cloud-based services. some long-term, some at various stages of the enshittification curve.

same with AI. it doesn't all suck, and it won't all suck. but a lot/most of it does and will absolutely suck and it will enshittify many things.

Comment on

"dish is much more idiosyncratic then cliTTY"

Reply in thread

So remember that it's one core (physical) acting as if it was 2 (virtual). Each of these vCores could be assigned to separate workloads on a server. But because it's ultimately one core, threadA could possibly access data in threadB. If A was a different entity than B, then entity A could access entity B's data.

It's more that CPU architecture is insecure in general.

But so is literally everything when you go down the deep dark rabbit hole of all the tech we use. Meltdown, Spectre, rowhammer, VMScape. The one where they can figure out your password from the sound of your keyboard while you're on a zoom call.

Comment on

Built my own base station with blackjack, hookers, and the completely wrong hardware lmao

ELIsysadmin?

You mention a node sparse neighborhood. Nodes of what platform?

Im gathering that there is a mesh network being slowly built? I have so many questions and concerns. What are we sharing and isn it bridged to the web and how are we isolating and securing.

A link further down the rabbit hole would be fine.

EDIT I'm an idiot and realized from the community name this is meshtastic. Rabbit hole here I come.

Comment on

Easy way to remember the OSI model

Accurate

Application: full of itself; just look at it; leaking out of its constraints.
Presentation: not happy; has to talk to the app.
Session: chillin; don't start nothin, won't be nothin.
Transport: ready for whatever comes its way.
Network: acting up as usual.
Data Link: Hidden but watching, well-behaved, compliant.
Physical: draping out of the rack

Comment on

Backblaze silently redefines 'unlimited' backups and users discover it's not backing up DB and OD — as firm leans heavier into AI storage services, changes could signal shift away from home backups

Reply in thread

Just price out S3 compatible storage and use backup software that can encrypt. Then it doesn't matter who holds it.

Wasabi is reputable and has fair pricing. iDrive is well priced.

I'm still sending to B2 until the price actually changes for me.

I personally use Duplicati (and yes I've tested restores).

Comment on

Google Chrome silently installs a 4 GB AI model on your device without consent. At a billion-device scale the climate costs are insane.

Reply in thread

keys tend to be organized (that's a horrible word for whatt he registry is lol) in a handful of locations depending on context. so those chrome keys are next to the other chrome keys. in enterprise we mod that area pretty often.

the 2 was to discover a new key are:

  1. reg watcher that takes a baseline, then you install soemething, and you see the diff.
  2. in the case of no new key has been added (like for this new setting), most softwares have support articles aimed at Enterprise Admins who need to control deployments granularly. So the regkeys tend to be available.

Sometimes some dev figures it out, sometimes word spreads from the devs themselves on Discord/etc. Sometimes if you contact Support they have that workaround (after escalating to engineer). Not that you can easily get to Google Engineers, but you have a much better track with say a paid Workspace account.

It's a FT job though to maintain a set of controlled software in an enterprise environment. Constant fiddling/tweaking. SOmetimes it's a RegKey, sometimes a GPO setting, sometimes you're modding a config file in AppData, or adding some lines to a Logon Script. And a lot of the info spreads by word of mouth still and to really answer your question - sometimes, no one knows where the hell it came from but after days of searching, you're happy some random forum post finally worked and you hope to never have to touch it again. Then you close your ticket and move on to the next one.

I don't miss it lol

Comment on

Roku OS’s home screen now features a large, permanent ad

Reply in thread

TCL TVs (whose OS is just Roku, and I imagine Roku is the same situation) blink the front LED as an Error when there's no network connection or it can't hit whatever servers it has configured for FW update check. It can get stuck on partial firmware updates when it can't cokplete every check it wants to make. The LED has a diffuser on it so it's a significant negative impact.

I can't even tape that LED because that's also where the IR sensor is. My next step is to disassemble the thing and snip snip.

I don't use any smart features, just HDMI input like you. Finding a Dumb TV has been a challenge.

Comment on

What open-source Android apps should people know about?

Reply in thread

Work profile is basically a second set of apps with a little briefcase badge that coexist next to your other apps. You/work chooses which apps are installed. They can't access the data in your actual profile and vice versa. You don't log out and in, it's just 2 containers spaces.

Private space is basically another such container, meant to be a 2nd personal one, but the apps aren't seen next to the others ... Theyre inert and hidden until you unlock the private space (pin/print/etc)

I think Android 15 is needed or thereabouts.

IDK about this 3rd party one being mentioned by adding it to my todo list

Comment on

Migrating from DigitalOcean to Hetzner: From $1,432 to $233/month With Zero Downtime

Reply in thread

you can just set up containers on your bare metal server. in fact if you're going to install insecure services you definitely want to containerize them, though tbh you need to run really far away from whatever it is you're doing that requires sql5, or at least don't let it be reachable on the internet, that should be network-isolated, which really limits its utility.