• 4 Posts
  • 119 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle



  • To be fair, if something is open by default or very easy to enable without informing about the risks, tons of people will have it exposed without thinking.

    It isn’t that “tons of people do it so it is normal and perfectly fine” but more “people don’t realize.” It also uses some nontrivial amount of resources to process and block those attempts, even if they never have a chance of getting in.

    There is yet a reason I can find to have it forwarded for home use. Need to ssh into a machine to fix it? VPN.

    There are plenty of secure web-based tools to manage your server without a VPN also.



  • And in all tiers: make an additional profit by selling your information without your consent (it has been decided in many courts that burying subtext deeply in forced terms of service isn’t consent)

    We are already paying them by letting them harvest our data, ads or not.

    Then they double or triple dip with the scenarios you describe. I am still paying them by being on their site with an ad blocker as they harvest my data and sell it to the highest bidder. Not to mention quadruple dipping with using our info and content without consent to train AI to sell.

    They use the argument “your data/art/photos/videos are freely posted on the internet, so we can use them how we please”. If they publish content openly on the internet, then we are free to do with it as we please.

    They can’t use the argument but say “no no no, it doesn’t apply to things WE put out”

    They are either pirating our content and data constantly or ad-blocking is not pirating.



  • There is one neat trick: don’t expose SSH.

    There is still not a reason anyone has been able to give for 99% of self-hosters to expose SSH.

    If you need to access your machine via ssh while on the go. Wireguard to your local network, use SSH. Done. Unless you are running an always-up public facing site, the amount of times you have to access your machine that can’t wait until after work is very low anyway.

    Bots will scan all ports. That is just how it works. Less than 22, but you will still get spammed. Why force your computer to go through the fail2ban loop and take up resources when it is simply not needed at all and you can block it on another machine?


  • L O L “doing something different”

    Epic tried to pull an Amazon.

    Get VC money and chinese money and subsidize and undercut competition using anticompetitive practices to gain market share before the rug pull where they jack up their margins to the industry standard. (Everyone uses 30%, even brick and mortars except humble which is 25)

    The difference is Amazon actually made a good software experience in the beginning few years and Epic spent literal years with very few feature updates and whining and burning money suing about “unfair market practices” when they were the only ones actually engaging in anti-consumer practices like paying off developers to be Epic-exclusive and buying developers and removing their games from steam. The other “different” thing that they did I guess is their CEO is an outspoken objective asshole.

    They never got to the rug pull part because their actual software sucked balls and they refused to improve it so much so that someone else actually made a better launcher than them for their own products…


  • Epic tried to pull an Amazon.

    Get VC money and subsidize and undercut competition using anticompetitive practices to gain market share before the rug pull where they jack up their margins to the industry standard.

    The difference is Amazon actually made a good software experience in the beginning few years and Epic spent literal years with very few feature updates and whining about “unfair market practices” when they were the only ones actually engaging in anti-consumer passes like paying off developers to be Epic-exclusive and buying developers and removing their games from steam.


  • The problem I have with bug reports for things like docker containers (I will just use that example for now) is again documentation… I get that most people make really bad “it broke, fix it now” kind of reports with no detail, but unless you actually dig into and know the code, there is often almost no debugging documentation (github issue templates help with that when the devs make one)

    Where are the logs? If you refuse to use the docker standard of pushing logs through the log api, don’t respect the LOG_LEVEL environment variable, errors are non-descriptive, and don’t provide documentation to where your logs are stored, how the hell can you expect users to provide relevant logs??

    I have run into dozens of pretty big projects that fail with 0 log output and there is 0 log documentation and then the dev auto closes the issue because “not enough logs to help.” The only way to find the logs is to find an old issue where the dev has laid out where the relevant logs are, like WTF? No I am not going to spend an hour looking in every single part of the undocumented directory structure to see if there happen to be logs in there. Use the standard, document your log locations and what they log (no 3ch9qjV7.log is not descriptive enough), or don’t complain about not being able to help without logs.


  • If you want to build it yourself, you have to decide on size.

    Are you trying to keep it as small as possible?

    Do you want a dedicated GPU for multiple jellyfin streams? (Definitely get the Intel A380, cheap and an encoding beast)

    If you don’t want to start a rack and don’t want to go with a prebuilt NUC, there are 2 PC cases I would recommend.

    Node 304 and Node 804.

    Node 304 is mini-ITX (1 PCIe slot, 1 M.2 slot for boot OS, 4 HDDs, SFX-L PSU, and great cooling)

    Node 804 is micro-ATX (2 PCIe slots, 2 M.2 slots, 8-10 HDDs, ATX PSU, and 2 chambers for the HDDs to stay cool)

    Why do you want a N100? Is electricity very expensive where you are that idle power is a big factor? Because desktop CPUs are more powerful and the CPUs can idle down to 10W or so without a GPU and they can have way more RAM.

    Tldr; go with prebuilt NUC or go with a desktop CPU for a custom build.






  • I have an ITX Ryzen 2700X with an arc A380. 3 HDDs and 1 SSD boot drive.

    Before some kernel improvements for the A380, my idle wattage was 60W. Without the A380 it was around 35W idle. I am hoping that it is around 45W now because of fixing the high idle wattage of the GPU but I have to measure again.

    Performance is great though. Perfect Jellyfin streaming, home automation, document and media management, file sync, recipe management, etc…

    People tend to over-spec their servers, in my opinion. Unless you are dealing with more than a few dozen clients or so on one server (or having a many-user dedicated streaming server), you really don’t need much.



  • The thing is, you can ONLY have a conversation with extremely like minded people. If you are not tip-of-the-left authoritarian, you are called a filthy lib and shunned.

    Sadly it just suffers the same syndrome as that conservative sub on reddit: “Anyone who doesn’t agree with me on every important and semi important point is literally the same as my worst enemy and I will fill their inbox with insults”

    I disagreed with the way they often brigade posts and they said I was “indiscernible from the racist, fascist party” from my country. Like they went through the effort of looking up where I was from and the political parties there to find the most right wing one to name call and insult me with lol. That says a lot about the community culture, in my opinion.

    It also has heavy Russian apologist content. Like, I even understand that MLs love China and excuse everything they do, but Russia is literally an right wing oligarchy with no health care and crippled social benefits that is led by an extreme right wing authoritarian fascist. I get that they are China’s ally by the enemy-of-my-enemy principle, but that doesn’t mean they are automatically good.