plateee

Sorry, the best they can do is a stern letter.

As if they’d use a glove.

If autonomous driving was actually safe, I would understand. But at this rate you’re probably more likely to kill someone with auto driving on than just by being old.

But I’ve always wondered, if someone is injured/killed by a “self-driving” car, does the owner/driver get in trouble? The car manufacturer?

Would you make someone you love a home server?

No. Especially no for a non-technical, remote person.

Troubleshooting my lab in the basement is hard enough without having to try some weird screen share app, or telling the person, “press the blinky light button. NO NOT THAT ONE”.

If you want to share the joys of a home lab, do what I did for my technologically impaired in laws - get a wireguard VPN client on a laptop and walk them through (several times) the process of connecting to the VPN, browsing to your services, logging into the services, doing the thing, then disconnecting from the VPN.

• Show them the process while they take notes on the process.
• Let them follow their own notes with minimal help (except to correct the notes) while they do the process end to end.
• Repeat that last step a few times with zero feedback so they build confidence in the process.
• The next day, have them do it again based exclusively on their notes and memory.
• If you’re still in town, wait a full day and repeat the last step a few days later.

My in-laws are now experts at VPN’ing in and interacting with my services.

At work, I used ssh-signed certificates for Linux server access - those certs are only valid for about 15 minutes.

The whole idea of shorter lifetime certificates is to address if a certificate is compromised. (Especially for client certificates which, iirc, Let’s Encrypt no longer offers).

For a home lab? With no externally accessible services? Short-lived certs aren’t really a big deal. Nobody is going to be hacking your homelab, stealing your private keys, poisoning your internal DNS, and pointing you to a different, malicious service.

I’m not smart, but the first thing would be to pull whatever lever in the war powers act reigns in the president and stop the fucking Iran war.

Next impeach motherfuckers.

Depending on how much of a majority, look at passing laws that are veto-proof and actually do things like cap student loan payments, add back the SNAP funding, and maybe actually force the EPA/FDA/FCC/other captured agencies to not tear down their own organizations.

But I’m sure the best we’ll get is a strongly worded letter from Schumer.

The only reason why I hesitate to recommend Ubiquiti cameras is even their cheapest offerings are kind of expensive.

And although you can run isolated from the Internet, managing updates is a bit painful. (Ask me how I know)

They gave POE cameras that will just work with an Ethernet cable (although they gave weird POE requirements). Their USB powered ones are wifi connected.

Source: I’ve had them for years and am happy with the setup.

Money doesn’t corrupt, it just exposes.

Hey fellow lemmings! No the totally cool and with it Pete Hegseth isn’t doing that at all, daddy-o!

By the way, anyone sign up for joining the Navy lately? If not, boy howdy, it’s like the coolest!

/s

Did I say comfortable?

I said keep my family house and fed. I’m already dodging parasite lettuce and massive food recalls, paying a sizable amount of my paychecks to rent and gas.

None of this shit is currently comfortable.

And you (or the original person I replied to) are saying, yeah, fuck your kids and your spouse and dog. Go throw yourself on the fire of REVOLUTION.

(Also, we had to cancel Netflix and most eveything else to actually afford to live, so that’s fun.)

We’re not different, but I don’t see myself or other Americans telling the nebulous “you” to go throw yourself off the precipice for god and country.

I mentioned Europe because places like France have their protest game on point. (grills mounted on tram tracks for making burgers while protesting? Genius.)

And yes, our labor rights (not much anymore as they are) were paid in blood. I remember learning about the Triangle Waistcoat Factory as a kiddo.

But I take issue with saying “slight discomfort” when referring to keeping my family housed and fed. Most Americans are living not just paycheck to paycheck but have zero significant savings to weather a medical emergency (or an open ended strike).

And the only alternative party to the current administration isn’t offering options like, “if you all just wait it out for a few months, we can take back the House/Senate/Presidency, pass UBI, help you get your money and financial stability back… Oh and pad SCOTUS so some fucker in a red state doesn’t sue to undo all this relief”.

You have to understand. This shit is bleak. We are clawing on to the only thing we have because there is nobody coming to save us, and we cannot save ourselves.

Listen pal, nearly every American is a slave to their day job(s) - especially given the massive uptick in living expenses over the last year/months.

If I “strike” and refuse to show up for my second shift at Winn-Dixie, all that will happen is I lose my sub-30 hour a week job, and someone else gets their prayers answered for more shifts (offsetting their cost of living a sliver) while I get to have Mr Ulcer come back over concerns about how I’ll feed my family.

I’m not saying a nation wide stoppage wouldn’t have an impact - but this nation is geographically massive compared to your average European country. There is no social safety net outside of if someone is lucky enough to be in a defanged union.

Calling for general strikes in this way feels like an oil exec saying I should use paper straws/recycle to save the environment while they are boiling the ocean.

You could either set up DNS overrides on your inwards facing DNS server, leaving external resolution to something like cloudflare (with DDNS), or you have a second internal domain for internal resolution.

I chose the latter for my homelab - it’s service.lan.fqdn inside and service.fqdn on the outside. Since I use a wildcard cert, it’s still protected with TLS if I access it internally or externally.

Edit: this also solves hair pinning as your internal resolution will go to your LAN network, not your public IP

Freenet…

For me, I have multiple OIDC compatible systems (Proxmox, Netbox, Synology, Zabbix, Vault, etc).

So keycloak offers a SSO option to make my life easier with a single account to worry about instead of individual ones.

Plus MFA because it’s cool?

This one is bad - unauthenticated user account take over.

If you’re like me and only using it internally on a homelab, the risks are lessened, but if you expose keycloak to by the Internet - boy howdy

It’s also walking distance from the old court house where the Dredd Scott decision was made!

No income tax “works” in Florida because of the massive tourism with Orlando, snowbirds, and the Keys. Take your kids to Disney! Go have spring break in Miami!

Who in the everliving mind would want to willingly come to Missouri?