Yeah it’s like now that they are finally trying, you can see bad it’s become by how little it moves the needle.

After windows broke my laptop one day before a show, it’s gonna be a really tough sell and they gotta first make it not actively suck, before they can actually make it good and start to convince me.

I mean it kinda looks like that’s by design currently. It’s an indexer for your corners of the web, not a search aggregator to find new ones.

I don’t exactly remember but I think it’s because last time they did it, and scientific consensus is that made the recession last way longer.

Wish I had a source for that…

Lol they should stop talking and start showing us.

But the popup was only half the problem . This doesn’t change the fact that they did install way more than the driver on that PC. And in fact, no normal display needs a driver at all.

Disabling the popup is fixing the symptom, not the problem. Not a bad PR move, but not real change either.

That makes me feel bad for the remaining team members of those vital teams.

I’m increasingly getting the feeling they really fucked themselves with the layoffs and genuinely lost some invaluable core team members across the board, and now they are technically incapable of improving certain aspects anymore.

Yeah he’s smart and he has the boring take which is probably the wisest take. It’s just a tool and the people who vibe code just use it negligently.

Yeah you got me

I used to like treyarch btw

Ngl in the last 15 years I have unfortunately been using windows the troubleshooting function never worked, not even once. And it’s not like I didn’t have issues, there were plenty; plenty stupid ones as well.

After installing tailscale with my Headscale server, I just left it as is. Maybe people in the comments can chime in but if you expose only your VPN server or broker (Headscale), you kinda narrowed down your attack vectors and a VPN itself is really solid. From my basic knowledge, it’s the server and client which are the bottleneck at that point, but there’s only so much you can do and if you continuously update both and maybe stay on stable / ltsc branches, you kinda did everything.

I guess there’s something to say about the encryption algorithms used. What I remember from back in the day is everything elliptic curves that’s common is quite good so if you see “ECDSA” / “ECDH” you should be fine. RSA unfortunately is not that great anymore.

I forgot to mention that one because I kinda thought it belongs with radmin and hamachi, but it’s my choice as well currently.

I am using it with my own Headscale though, so add a domain to that as well.

And I finally need to switch my vaultwarden to work over tailscale & LAN finally, it’s a huge security risk to expose that one.

I added a reference to your comment

yeah I forgot that one. I had to rush the comment a bit.

That’s the whole point of a domain. Your IP changes every now and again you need people to know where to reach you. You give them a domain, and you configure the name records so that the domain always points to the right IP address.

Your options:

• dynamic IP - you keep your setup as is and just periodically tell them the new IP you’re on. Annoying and exposed
• static IP - you buy a static IP (from your ISP) and share it with your friends once. A little bit less annoying and still exposed
• you use a VPN like hamachi or radmin - your friends install the software, they look for you IP in there, you’re done - very secure but also very annoying
• you buy a domain - you have to configure an IP updater like ddclient or similar, then you jellyfin should be reachable - least annoying for your friends but also slightly less secure

Domain is the cleanest option.

I am telling you how annoying it is because that’s how likely your friends are to adopt it and how secure it is because depending on your country you are doing something illegal and you really don’t want anyone to find out and you gotta keep it updated more often if you don’t want people to exploit it. There’s an endless supply of very smart people out there who use known bugs to target public services.

Edit: I forgot DDNS, see below comments.

Duplicati is at it’s base just a fancy ui for backups as opposed to custom bash scripts.

It does support s3 storage, SFTP, ftp, and a bunch of other stuff so this might actually be on point for your off-site backup design.

Of course off-site backups are superior. If my home burns down I’m fked. I do use different hdds though, so at least there’s some security isolation in that. Also if one of them breaks, the other one doesn’t necessarily.

I have different vms which all write to an smb mount.

Then I have another VM that runs duplicati and mounts that smb share, but also another one just for the backups. And only this duplicati container has access to the backup share, which isolates my backups for security reasons. The only thing still involved and able to read and manipulate my data is the router which can see all the traffic.

Now idk if this is the best setup, but it feels secure to me and it works for me. Maybe more experienced people can chime in to agree or disagree.

Ain’t no one gonna buy a Mac if they jack up the prices any more, it’s already a luxury product so people will just pivot.

Yeah they did so much for the open source community already, no one should expect them to operate at a loss.

Peak Lemmy behaviour I love it