0xCMP

26 ms·

211.
by 0xCMP 5y ago
idk, I might consider my self slightly biased because I like the fly.io team, but fly.io has a really simple story for deploying docker images. It'll build them for you, host them, give you secure ssh access, handle connecting to other
212.
by 0xCMP 5y ago
they also typically obscure when it was read. Google at least pulls the image right away iiuc. If not then it really should. most they should know is it was delivered. which is significantly better than nothing.
213.
by 0xCMP 5y ago
I've read and sent that PDF so many times. A fun snippet that jumped out at me this time: > With public key cryptography, there’s a horrible, fundamental challenge of finding somebody, anybody, to establish and maintain the infrastr
214.
by 0xCMP 5y ago
As turns out a lead developer can't unilaterally change the CTO. Not sure how it works for you. I can control tech, direction, etc. or move on to another job. I chose to work with the CTO/Team to figure out a solution everyone cou
215.
by 0xCMP 5y ago
In my experience Pet servers are a good starting point (you really should _graduate_ from Pet servers into all the various immutable/cattle stuff), but it can quickly require discipline from the Admins. They can't be doing one-off
216.
by 0xCMP 5y ago
NAT busting is a plus. Avoid needing DDNS and opening a port. Also easier setup for accessing other stuff on the network via that computer vs up/down rules with a standard wg config. For a small setup thats the big thing, but for anyth
217.
by 0xCMP 5y ago
My personal favorite is Cal Newport's idea of keeping a list of things you need todo and time blocking them into whatever schedule you have. e.g. keep a "todo" list of some kind (or write down everything you remember) and blo
218.
by 0xCMP 5y ago
Agreed. You're already setting up SSH and deleting it soon so why bother setting up the IPs, adding your public key, getting the server's public key, configuring iptables, and configuring wireguard locally when you could just SSH?
219.
by 0xCMP 5y ago
happy they're adding this. one more important feature to replace whatsapp and instagram for normal people. stories is a great feature by letting you post however much you want and letting the viewer choose to view/skip/ignore
220.
by 0xCMP 5y ago
I would look at how they basically maintain minimal tables of payments which can be used to pay for service. Taler is more complex to handle being a 3rd party doing this, but Mullvad seems to do a similar idea of separating payment from the
221.
by 0xCMP 5y ago
To put a bunch of students in a crowded auditorium and fears of a spreading virus as the student described... seems unnecessarily dangerous. Just purely from a crowd control perspective. To allow students to spread the virus and infect staf
222.
by 0xCMP 5y ago
From the description it seems like a good problem to solve is "how do we get students the support they needed in 2020 while not creating a dangerous situation?" they should treat homerooms as the place students stay all day to att
223.
by 0xCMP 5y ago
iiuc this is a very similar design to how Mullvad accepts payments[0] except that they have a token used to pay multiple merchants. [0]: https://mullvad.net/en/help/no-logging-data-policy/#numbered edit: add
224.
by 0xCMP 5y ago
while all true; its also true no one wants to run their own servers. the problems are practical. power and heat. noise. theft or disaster => backups; 3-2-1. updates, botnets, firewalls, static/external ips. ssh, vpn, or port forward
225.
by 0xCMP 5y ago
When I visited I described this as "one foot in the future and one foot firmly in the past" Some things are futuristic and obvious improvements (e.g. Suica and ApplePay NFC support in 2016/2017) and others are stubbornly in t
226.
by 0xCMP 5y ago
iirc; Quantum computers do not make symmetric encryption weaker. They make asymmetric encryption relying on factoring primes weaker.
227.
by 0xCMP 5y ago
Another example is Notes which can be linked directly without an icloud link but they do their best to hide that feature making impossible to link notes between each other.
228.
by 0xCMP 5y ago
Interesting! Yea I've recently been very interested by the idea of "programming" in a database vs files. I've only gotten more interested as I've seen bits of the idea shown like with Unison or a demo of running cla
229.
by 0xCMP 5y ago
You're actually sort-of describing the original idea for Vox. They wanted to basically have like a website of things happening with explainers for everything they could easily link-to and keep updated so they could write a story expl
230.
by 0xCMP 5y ago
like $1-2/mn. For a very long time it was like $1-2/year. for roughly 188gb. has hourly incremental backups of certain files like all my source files (includes things like node modules and etc) i do a full-full-everyfile backup on
231.
by 0xCMP 5y ago
I do the same, but with B2 which is nice cause it can be very cheap.
232.
by 0xCMP 5y ago
Using cli to describe instances isn't working. Instances themselves seem fine so far.
233.
by 0xCMP 5y ago
the author recognizes and appreciates the successes we've had, but his point is that while things aren't as good as they could be using crypto instead of organizing and doing "the work" is not going to solve things. if n
234.
by 0xCMP 5y ago
it definitely helps a lot. i have horrible pain using a laptop for long periods, but when i was more active it really helped with the pain and soreness.
235.
by 0xCMP 5y ago
the blobs certainly aren't. but thats just certain drivers. everything else is.
236.
by 0xCMP 5y ago
Well with ssh usually you need to configure which keys are allowed per user so maybe `~/.tailpam_authorized` with either user, group, or ip (similar to tailscale config) could control access per user. Alternatively, now that it's
237.
by 0xCMP 5y ago
In SSH you can limit the login to a specific user or user with less permissions than root. Is that something your PAM module(s) would need to handle? e.g. Now that you're authenticated via the IP, how do we authorize the login?
238.
by 0xCMP 5y ago
Not misguided. The IP is from a wireguard network setup by tailscale which only allows packets signed by the private key of the device assigned that IP. It's as secure as an SSH key pair would be. The only question left for me really
239.
by 0xCMP 5y ago
Why can't the time someone wakes up or works change with the season, but using the same timezone? What is the point to call it 7a when it's actually 6a?
240.
by 0xCMP 5y ago
With a cloud server it's obviously less of an issue, but even with a desktop for Nix its less of an issue than any other distro. Each time you update your configuration it's essentially reinstalling. When you boot you have the opt

More ›