• 1 Post
  • 192 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • Melmi@lemmy.blahaj.zonetoSelfhosted@lemmy.worldZeroTrust Your Home
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    2
    ·
    2 months ago

    When done correctly, the banner is actually a consent banner. It’s a legal thing, not necessarily trying to discourage criminals. It’s informing users that all use will be monitored and it implies their consent to the technology policies of the organization. It’s more for regular users than criminals.

    When it’s just “unauthorized access is prohibited”, though, especially on a single-user server? Not really any point. But since this article was based on compliance guidelines that aren’t all relevant to the homelab, I can see how it got warped into the empty “you no hack” banner.


  • That 10Gb link is almost certainly oversubscribed, though. You don’t actually have 10 Gb of dedicated constant bandwidth, you just have access to 10Gb of potential bandwidth. You’re unlikely to saturate that link very often, so you won’t notice, but it’s shared with other people.

    It’s different from Google or any other company paying for bandwidth that’s being actually used, not just a pre-allocated link like your home internet.


  • But how will you get a “universal” view of the fediverse? No single authoritative view exists.

    You yourself acknowledge that this is complicated, but I honestly don’t understand what appeal a hacked together fake centralized system would have for people if they don’t care about decentralization in the first place. Any such solution is almost inevitably gonna end up being janky and hacked together just to present a façade of worse Reddit.

    Lemmy’s strength is its decentralization and federation. It’s not a problem to be solved, it’s a feature that’s attractive in its own right. It doesn’t need mass appeal, it’s a niche project and probably always will be. I don’t think papering over the fundamental design of the software will make it meaningfully more attractive to the non-technically minded.



  • Yes, but only if your firewall is set to reject instead of drop. The documentation you linked mentions this; that’s why open ports are listed as open|filtered because any port that’s “open” might actually be being filtered (dropped).

    On a modern firewall, an nmap scan will show every port as open|filtered, regardless of whether it’s open or not.

    Edit: Here’s the relevant bit from the documentation:

    The most curious element of this table may be the open|filtered state. It is a symptom of the biggest challenges with UDP scanning: open ports rarely respond to empty probes. Those ports for which Nmap has a protocol-specific payload are more likely to get a response and be marked open, but for the rest, the target TCP/IP stack simply passes the empty packet up to a listening application, which usually discards it immediately as invalid. If ports in all other states would respond, then open ports could all be deduced by elimination. Unfortunately, firewalls and filtering devices are also known to drop packets without responding. So when Nmap receives no response after several attempts, it cannot determine whether the port is open or filtered. When Nmap was released, filtering devices were rare enough that Nmap could (and did) simply assume that the port was open. The Internet is better guarded now, so Nmap changed in 2004 (version 3.70) to report non-responsive UDP ports as open|filtered instead.




  • Google destroys their own search engine by encouraging terrible SEO nonsense and then offers the solution in the form of these AI overviews, cutting results out of the picture entirely.

    You search something on the Web nowadays half the results are written by AI anyway.

    I don’t really care about the “human element” or whatever, but AI is such a hype train right now. It’s still early days for the tech, it still hallucinates a lot, and I fundamentally can’t trust it—even if I trusted the people making it, which I don’t.


  • Melmi@lemmy.blahaj.zonetoSelfhosted@lemmy.worldReverse proxy
    link
    fedilink
    English
    arrow-up
    5
    ·
    6 months ago

    It definitely encrypts the traffic, the problem is that it encrypts the traffic in a recognizable way that DPI can recognize. It’s easy for someone snooping on your traffic to tell that you’re using Wireguard, but because it’s encrypted they can’t tell the content of the message.



  • I do think people get caught up in hating Epic, but the difference is that if any of those developers felt like releasing on another platform, they could. The “exclusivity”, such as it is, is just happenstance. Whereas Epic’s exclusives are largely actual contracts.

    99% of the games on that list are small-time indie games that only release on Steam because that’s where the market share is, and they probably only have the dev capacity to support a single platform. Steam also has a lot of API support for devs. Those games exist on Epic too, but when people complain about Epic they aren’t complaining about those games, they’re complaining about bigger games that are artificial exclusives, timed or otherwise.

    Steam offers the better customer experience, and Epic can’t compete with it, so instead they just buy exclusivity rights to games. It’s arguably anti-consumer, and definitely different from those games that just happen to only be available on one platform or another.



  • I just don’t understand why you want to copy-paste ChatGPT. Surely the parent commenter could access ChatGPT if they wanted, so you’re not bringing a new perspective. If “content” is all that matters, you could generate a thousand different ChatGPT responses and reply to their comment with each one, but that’s not acceptable. Why not?

    People come here for a conversation with other people, and copy-paste ChatGPT responses don’t actually contribute to that. If all they want is information/content, there are better places to find it. They could use ChatGPT, sure, but they could also use Wikipedia or even an economics textbook. It’s up to them. Even if they use ChatGPT, they’d probably prompt it a few times in a few different ways to get the best info for them.

    If you really want to use ChatGPT in your responses, why not add your own voice? When I suggested commentary I don’t mean that you should just prompt ChatGPT into pretending to be a human, I mean that you should add your own perspective. Editorialize. Pull out the good bits.






  • A tiefling divine soul sorcerer with the Criminal background. He was born to two pious tiefling clerics of Lathander who saw their fiendish blood as a curse, and prayed to cleanse their unborn child of devilish influence. When he was born a Divine Soul, his parents tried to raise him as their perfect priestess. He had to be a model tiefling, a representative of his entire race as well as Lathander himself. He chafed under the obligation and ran away from home, living on the streets and stealing to get by, all while trying to hide his divine soul powers out of a combination of rejecting them and just trying not to draw attention.

    Slinking around in the shadows eventually led to him wandering into the Mists of Ravenloft, and he found himself in Barovia. He found his way into a party and essentially just acted like the party rogue for a bit until combat came and he got backed into a corner and he suddenly started throwing around guiding bolts.

    I was really looking forward to doing a whole arc with him reclaiming his powers and figuring out what it meant to be himself, but OOC stuff led to me leaving that group before he had a chance to leave his edgy rogue phase :c