Don’t use passwords for public SSH in the first place. Disable password authentication and use pubkeys.

Registrars (or DNS providers if you don’t use the one that comes with your registrar) worth using have an API to manage DNS entries. That’s basically all there is to DynDNS.

It offers no practical benefit to small networks at the moment.

The internet is not a “small network”, and I assume your small network is connected to it. You need local IPv6 routing to have access to IPv6-only hosts which are becoming more and more because it’s reasonable in terms of price to get an IPv6 block unlike IPv4 blocks which are being auctioned for tens of thousands of dollars at this point (!!!).

Also restoring global addressing is a huge benefit. P2P communications in IPv4 has become an insane mess of workarounds due to lack of addresses and this becomes worse the more layers of NAT you stick behind each other to try to save your ass from the rising tide.

I’m really sick of hearing these idiotic excuses over and over, “it’s hard” this, “it’s unsafe” that, “it’s expensive”, “understanding the eldritch secrets of IPv6 has driven 5 of my colleagues into madness” skill issue. THERE ARE NO MORE IPV4 ADDRESSES. So unless your network is so fucked that you haven’t managed to fix it in 26 years, since IPv6 has been standardized, or it really is just an internal network with no outward facing services where it doesn’t matter when someone who just has IPv6 can’t access it because they wouldn’t be able to access it anyway, and you’re not some kind of ISP, you have no reason not to have support for it at this point and you absolutely never have a reason to tell people it’s not “useful” because that is straight up wrong in the general case even if it might be true for your situation.

Borg is great and I use it myself but afaik there is no Windows version and there is only remote support over SSH, not HTTPS.

I mean sure, but there’s also a screenshot in the article of him saying he’s against DMCA takedowns specifically

Current copyright law in general goes absurdly far beyond protecting the original creator

Overzealous DMCA is a plague on humanity

Rare Elon Musk W

I used this years ago when I was still on Twitter, it was a good app. It actually used windows properly instead of stuffing everything into a single window (for example making a new tweet opened a separate dialog) and everything. Rare to see nowadays

The main patch you’ll want is TFix/T2Fix, posted on TTLG Forums. I think it comes prepatched from GOG, on Steam you’ll have to patch it yourself.

@comicallycluttered@beehaw.org what do you mean by very clunky? I don’t think they are at all. Except maybe the default control scheme which is pretty bad today, but you can rebind everything (or use my bind file, works for both games)

Thief: The Dark Project and Thief 2: The Metal Age (PC, 1998/2000). (the second game is essentially just more of the first, but more refined)

Still the best stealth games to date if that’s your cup of tea, and holds up excellently.

fcgiwrap is what you want for CGI in nginx.

No, Altman is going to knock you unconscious obviously so stay away from him /s

• I used to do side loading on iOS for a modded YouTube app (uYou+) but now I just use YouTube in the browser with AdGuard and Vinegar extensions. There’s ways to sideload and auto refresh the certificate that don’t need you to connect the phone to a computer which apparently work pretty well (I used AltStore which was pretty annoying because it doesn’t do that).
• Usually I think you just have to enable NSFW on a computer/via the browser for it to work in the app. At least that how it is for Telegram iirc. Generally there shouldn’t be a problem accessing anything.
• No idea, the only thing I play on my phone is Shattered Pixel Dungeon and I bought that

Seems fine to me except for all the firewall and special routing stuff, I’m not familiar with that. Does the wg command show received or only sent data? For the record, this is my config:

# /etc/systemd/network/mullvad.netdev
[NetDev]
Description=Mullvad
Kind=wireguard
Name=mullvad

[WireGuard]
PrivateKeyFile=/var/keys/mullvad/pk

[WireGuardPeer]
AllowedIPs=::/0
AllowedIPs=0.0.0.0/0
Endpoint=146.70.126.194:51820
PublicKey=ApOUMLFcpTpj/sDAMub0SvASFdsSWtsy+vvw/nWvEmY=

# /etc/systemd/network/mullvad.network
[Match]
Name=mullvad

[Network]
Address=10.64.130.96/32
Address=fc00:bbbb:bbbb:bb01::1:825f/128

[Route]
Destination=::/0
Metric=16384

[Route]
Destination=0.0.0.0/0
Metric=16384

I use it for Mullvad and a couple internal things but yeah it works for me.

I’m talking about the text in the “The problem with async” section in the article you linked in the OP.

Can we stop referring to the “what color is your function” post for languages it doesn’t apply for? Contrary to Javascript (where it does apply), Rust with tokio has adapters for both async -> sync (Runtime::spawn_blocking) and sync -> async (Runtime::block_on). It probably isn’t a good idea to overuse spawn_blocking but calling an async function from a sync one is literally no problem.

I mean I give it a 100% chance if they are allowed to keep going like this considering the enormous energy and water consumption, essentially slave labor to classify data for training because it’s such a huge amount that it would never be financially viable to fairly pay people, and end result which is to fill the internet with garbage.

You really don’t need to be an insider to see that.

My backup service runs pg_dumpall, then borg create, then deletes the dump.

The Nextcloud Windows client does VFS and there’s an experimental Mac client that does VFS.

If you can connect it to the SBC, yeah. This one comes with a PCIe card and you connect it with SAS cables (it unfortunately only does SATA for the drives though). The disks show up as separate independent devices and you can just combine them with mdraid or whatever.

There’s also a USB C variant of it but that seemed more sketchy to me.

I bought a QNAP TL-D800S disk shelf (it does have 8 slots and not 5) and an old used Fujitsu Esprimo on eBay. That means I can replace the PC with something more powerful in the future if I need to without having to worry about the disks. Works great so far with the 5 disks I have in it and the two stack on top of each other perfectly.

Yeah, tunnelbroker.net is what I use. It works behind NAT too, and they even give you a /48! For free!

To be clear I wouldn’t mind paying for guaranteed speeds because the he.net tunnel can be a bit slow at times. My problem with this is that they don’t give you a /64 which basically makes it useless for anything but the “host a couple services” use case. Most people who would consider this, including me, probably don’t have IPv6 connectivity from their ISP at all and would like to get routable IPv6 address space for their home network.

$10 per month and all you get is 5 IPv6 addresses (I assume that’s what they mean by “5 Static Visible IPv6 Tunnels”)? What a shameless scam.

Edit: Though maybe you’re paying for the “Tier-1 (as in ISP?) Bandwidth”. But if they want me to take them seriously, they need to give me a /64 prefix instead of a measly 5 addresses.

IPv6. Just let the other network through the firewall, use direct connections, no overcomplicated tunnel setup needed.

The software Wikipedia runs on is called Mediawiki. And yes, you can self-host it.

You can check for being an open relay with tools like this one: https://mxtoolbox.com/diagnostic.aspx

Sounds like network namespaces.

I mean same, but I’d still like to have lossless audio regardless :P

Maybe you should make them a blood sacrifice more often?

The Music client for Mac is still an excellent music manager and player and beats Spotify by a mile despite how visibly much they’ve let it bitrot* since it was iTunes. It’s a shame neither the mobile app nor the web client has anywhere near the capabilities.

* for example, what the fuck is that stupid unresizable header that takes up half the window with mostly empty space and doesn’t scroll off the screen anymore if you set a playlist view to “as Songs”

It is to be noted that while iTunes is DRM-free at this point (which is very nice and surprised me when I found out) it is unfortunately still lossy compressed audio which the perfectionist in me really doesn’t like :P

Come on Apple, sell me your funny ALAC, you have it for Apple Music anyway

Join the Matrix support channel if have any problems getting started! The documentation can be very scattered and NixOS throws a lot of new concepts at you :P

I use distro packages. In the rare case something isn’t packaged yet, I package it myself. And for the isolation, systemd services can do most of the things docker can if you need (check systemd-analyze security).

For just hosting services that can be done instead with normal system services, docker makes your setup a lot more complex (especially on the networking side), for little if any gain. Unless I need to spin up something multiple times temporarily on demand or something has a hard dependency on it, I’m not going to bother with it anymore.

Right, exactly.

Fastmail looks like they have CalDAV and CardDAV support (https://www.fastmail.help/hc/en-us/articles/1500000278342-Server-names-and-ports). If you actually want to use their contacts and calendar, why do you want to host another yourself? Two-way sync sounds like a pain.

You just need to connect your devices to it. Unfortunately Google thinks PIM sync is not worthwhile to have on Android unless you use their service, so you’ll need some extra apps. I used DAVx5 (it’s free if you get it from F-Droid), Tasks.org and OneCalendar in the past for this.

tunnelbroker.net since I don’t have static IPv6 currently. Otherwise, that.

https://docs.joinpeertube.org/use/channel-sync

PeerTube can do this (yes, out of the box!).

yeah. usability > UX

Ahh, I see. Yeah that absolutely shouldn’t happen, at least not by default… Though I believe I’ve added an album that’s already in Apple Music once and it also kept the local files. Maybe in those cases it deleted the local files as the disk was getting full to clear up space, or something? Definitely inexcusable though :V