Moonrise2473

joined 2 years ago
[–] Moonrise2473@feddit.it 2 points 2 months ago (3 children)

But your endpoints are already available to everyone with just a nslookup.

Maybe it's more the permanent history of that, so if you run something like "radarr.example.com" then you wouldn't have plausible deniability if you're sued and the CT logs are presented as proof of your wrongdoing

[–] Moonrise2473@feddit.it 20 points 2 months ago (3 children)

I watched that movie with the expectation of watching a comedy but I was left with the realization that it's 100% what would happen nowadays

[–] Moonrise2473@feddit.it 6 points 2 months ago (1 children)

Well I think the opposite.

Saving that one single person is great propaganda. Donald would definitely throw one million people under the bus in order to save that single individual

See the recent medicaid cut to make a few hundred billionaire friends happier/richer

[–] Moonrise2473@feddit.it 4 points 2 months ago

Did you read the link you posted? It says you must have Intel 8th gen or higher AND tpm 2.0

Not just tpm 2.0

[–] Moonrise2473@feddit.it 7 points 2 months ago

It's not possible to see the image, when I click on the fediverse button (link to https://lemmy.thewooskeys.com/post/575941) I get a xitter-style forced signup screen

[–] Moonrise2473@feddit.it 2 points 2 months ago

It is unrealistic that parts with that age are brand new, available in that quantity. It might happens that some distributor misplaces some box and a couple computers are old new stock after a decade, but hundreds?

Also: W11 pro OEM is 120 euro and office 365 perpetual doesn't even exist, and if they meant office 2024 home and business is 299 euro. 120+299 exceed the listing price

[–] Moonrise2473@feddit.it 4 points 2 months ago (2 children)

Ok read the documentation: https://learn.microsoft.com/en-us/windows-hardware/design/minimum/supported/windows-11-24h2-supported-intel-processors

Where does it say that you can use a 6th gen Intel CPU if you install a tpm chip?

The tpm is definitely not used as you can install it on a supported system, then go to the bios, disable secure boot and tpm and it still works (if the automatic "ransomware" bitlocker encryption didn't start)

[–] Moonrise2473@feddit.it 2 points 2 months ago (1 children)

Yes ok from an accounting point of view.

But from a functional point of view?

I see how my bank teller works: they connect to a terminal server

I see how my other bank works: a VM that runs AS/400 that is acting as a terminal to their mainframe

Why they're changing computers so often? The first one can use any PC released in the past 15 years and the second one can use any released in the past 30 years

[–] Moonrise2473@feddit.it 2 points 2 months ago

First row of the 400 euro one

[–] Moonrise2473@feddit.it 8 points 2 months ago (2 children)

My gripe with that is that the seller is scamming inexperienced people, they think that they are buying a brand new PC while instead it's not

(The fact that a 400 euro PC includes 600 euro of software licenses should ring a bell about the legitimacy to the buyer, though)

[–] Moonrise2473@feddit.it 7 points 2 months ago (6 children)

"NUOVO" in Capital letters means NEW

[–] Moonrise2473@feddit.it 10 points 2 months ago (15 children)

I call it ewaste because it is coming from that. Banks and corporations change computers every 3-5 years because accounting love to lease rather to buy

Those computers go to ewaste centers, then some not honest sellers take the components (that usually were left on 24/7 because in offices nobody bothers to turn off computers) and put them in brand new cases

That's why is a scam, selling old stuff that came from an ewaste center as brand new

 

I want to try bitmagnet on the dev server at work (yes, we have permission to use it for personal reasons as long it's legal) but for obvious reasons it must be tunneled through a VPN.

Bitmagnet it's a local search engine that discovers content via DHT. It just asks peers for content, then when you come back the following month it should have found many interesting stuff

Problem is that from a network point of view it looks I want to download every single torrent ever made so I wouldn't want to have my workplace ip address associated with that.

Because the network traffic is minimal and for this content I don't care if the provider does data mining, I would like to use a free VPN with gluetun.

But I can't find a free one that works. From the officially supported only windscribe and proton have a free offer, but windscribe free doesn't have OpenVPN or wireguard, while proton VPN free blocks me immediately as soon as the program talks with other peers, even if I don't actually download anything.

So back to the question, which free VPNs are working with gluetun, someone has experience with that?

 

AAAD it's a freemium sideloaded app that allows you to install unofficial apps for Android auto.

At startup it sends some device identifier to his server and checks if you have a license, otherwise goes in trial mode where you can try one app every month.

It doesn't ask any additional permission. No storage, no phone/IMEI and no location. If you uninstall it, somehow it knows you previously downloaded it.

Tried to reset the advertising id, no change

My questions:

  1. How the hell the app is able to fingerprint the user like that, persisting uninstalls?

  2. How to reset the counter?

 

I am running this docker image: https://github.com/nextcloud/docker with a cloudflare tunnel, meaning the webserver would see all the traffic coming from a single ip in 172.16.0.0/12 .

The documentation says:

The apache image will replace the remote addr (IP address visible to Nextcloud) with the IP address from X-Real-IP if the request is coming from a proxy in 10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16 by default

So I thought that this is a not a problem, as other docker images can also automagically figure out the real IP address from traffic coming from cloudflare tunnels.

In the beginning it worked fine, then it was SLOW. Like 2 full minutes to load new feeds on news, waiting ages to complete a sync, and so on. I rebooted the server on those instances, and then it worked fine for a day.

So because at the time i was running it on unraid, i blamed the lag on that OS + my weird array of HDDs with decades of usage on them. Migrated to debian on a nvme array and... same lag!

Wasted hours trying to use caddy+fpm instead of apache and it's the same, worked fine for a day, then it was slow again.

Then I wondered: what if the program is "smart" and throttles it by itself without any warning to the admin if it thinks that an ip address is sending too many requests?

Modified the docker compose like this:

  nextcloud:
    image: nextcloud

became

  nextcloud:
    build: .

and I created a Dockerfile with

FROM nextcloud
RUN apt update -y && apt upgrade -y
RUN apt install -y libbz2-dev
RUN docker-php-ext-install bz2
RUN a2enmod rewrite remoteip
COPY remoteip.conf /etc/apache2/conf-enabled/remoteip.conf

with this as the content of remoteip.conf

RemoteIPHeader CF-Connecting-IP
RemoteIPTrustedProxy 10.0.0.0/8
RemoteIPTrustedProxy 172.16.0.0/12
RemoteIPTrustedProxy 192.168.0.0/16
RemoteIPTrustedProxy 173.245.48.0/20
RemoteIPTrustedProxy 103.21.244.0/22
RemoteIPTrustedProxy 103.22.200.0/22
RemoteIPTrustedProxy 103.31.4.0/22
RemoteIPTrustedProxy 141.101.64.0/18
RemoteIPTrustedProxy 108.162.192.0/18
RemoteIPTrustedProxy 190.93.240.0/20
RemoteIPTrustedProxy 188.114.96.0/20
RemoteIPTrustedProxy 197.234.240.0/22
RemoteIPTrustedProxy 198.41.128.0/17
RemoteIPTrustedProxy 162.158.0.0/15
RemoteIPTrustedProxy 104.16.0.0/12
RemoteIPTrustedProxy 172.64.0.0/13
RemoteIPTrustedProxy 131.0.72.0/22
RemoteIPTrustedProxy 2400:cb00::/32
RemoteIPTrustedProxy 2606:4700::/32
RemoteIPTrustedProxy 2803:f800::/32
RemoteIPTrustedProxy 2405:b500::/32
RemoteIPTrustedProxy 2405:8100::/32
RemoteIPTrustedProxy 2a06:98c0::/29
RemoteIPTrustedProxy 2c0f:f248::/32

and now because nextcloud is seeing all the different ip addresses it doesn't throttle the connections anymore!

 

Another useful feature for power users that Google is killing.

They don't care about us that day they we have a problem and the solution is in a now defunct site. That doesn't generate revenue. "When People search on Google they need to find what they need on a click on the ads", the shareholders are saying

 

I left the headline like the original, but I see this as a massive win for Apple. The device is ridiculously expensive, isn't even on sale yet and already has 150 apps specifically designed for that.

If Google did this, it wouldn't even get 150 dedicated apps even years after launch (and the guaranteed demise of it) and even if it was something super cheap like being made of fucking cardboard.

This is something that as an Android user I envy a lot from the Apple ecosystem.

Apple: this is a new feature => devs implement them in their apps the very next day even if it launches officially in 6 months.

Google: this is a new feature => devs ignore it, apps start to support it after 5-6 Android versions

 

From the article:

When we went to our seats, the wait staff let us know that despite the fact that the previews were playing, we wouldn’t know until the movie actually started whether we could see the film or not. If it didn’t work, the screen would just turn black. Luckily, the film went through without a hitch.

 

Installed a new debian server, installed docker, but then now i have a problem with permissions on passed directories.

On the previous server, the uid/gids inside the docker container match the uid/gid on the real server.

Root is 0, www-data is 33, and so on.

On this new server, instead, files owned by root (0) in the container are translated to 1000 on the server, www-data (33) is 100032, and so on (+1000 appended to the uid)

Is this normal or did I misconfigure something? On the previous server I was running everything as root (the interactive user was root), and i would like to avoid that

 

I swear that with each update they're adding more and more artificial stupidity

 

This is genius.

Nobody wants to buy your crypto phone? Your warehouses are full and bills starts piling? Just create some monopoly money and give it to who buys that phone.

So now crypto is not only wasting the electricity for the most inefficient payment method ever created (for Bitcoin it takes a whole day to verify a number of transactions that Visa/Mastercard can do in less than a second) but also producing and shipping a phone all around the world, just for getting that monopoly money, then immediately trash the phone

 

I have several TB of borg backups. Uploaded them on backblaze b2. I could immediately see how much resources i was using, how many api calls, and so on. Very easy to see and predict the next bill. I can see exactly which bucket uses more resource, and which is growing over time.

Because I'm cheap, I want to upload those files on aws glacier, which theoretically costs a quarter of b2 for storage, but API calls are extremely expensive. So I want to know the details. I won't like to get a bill with $5 in storage and $500 in API calls.

Uploaded a backup, but nowhere in AWS I can see how much resources i am using, how much I'm going to pay, how many API calls, how much the user XYZ spent, and so on.

It looks like it's designed for an approach like "just use our product freely, don't worry about pricing, it's a problem for the financial department of your company".

In AWS console I found "s3 storage lens", but it says i need to delegate the access to someone else because reasons. Tried to create another user in my 1-user org, but after wasting 2 hours I wasn't able to find a way to add those permissions.

Tried to create a dashboard in "AWS cost explorer" but all the indicators are null or zero.

So, how can I see how many API calls and storage is used, to predict the final bill? Or the only way is to pray and wait the end of the month and hopefully there everything it's itemized in detail?

 

As always, the paying user has the worst experience. "Purchase" a show, can only watch on a certain console of a certain brand, no transfers, no backups, then it suddenly disappears from the library and nothing can be done.

If media companies insist on draconian DRM, then they should pay for full refunds to their loyal customers when one day they decide to delist that specific show.

 

I am actually shocked that 25% of those shitcoin "games" didn't fail

view more: ‹ prev next ›