crimsonnoodle58

8 ms·

61.
by crimsonnoodle58 11mo ago
Mikrotik DoH user here. While I don't use Quad9, I do use 1.1.1.1. I hope they don't follow suit before Mikrotik get a chance to add HTTP/2 support (if ever).
62.
by crimsonnoodle58 11mo ago
> is simply ridiculous Way to exaggerate to make a point much? A mikrotik router can be purchased as low as $24.95 and it will not only provide you with an enterprise grade router, it will also provide you with the functionality I mentio
63.
by crimsonnoodle58 11mo ago
That's a lot of steps for something that would be a simple route rule or mangle + mark routing on mikrotik. The route rule would route out a VPN instead of the main route. If the domain name resolves to many IPs you can keep an address
64.
by crimsonnoodle58 11mo ago
Yes I experienced this with FastSpring. Had a store with them for 15+ years, then suddenly they froze it and demanded all of the above. Was quite disturbing to say the least.
65.
by crimsonnoodle58 11mo ago
Correct. We run it without it and just use the DNS filtering aspect.
66.
by crimsonnoodle58 11mo ago
Microsoft Edge for Linux + Teams installed as an app (PWA) works perfectly fine for all our devs, anything else like this is just an additional security risk.
67.
by crimsonnoodle58 11mo ago
To be fair on fossil fuels, they are simply stored energy from the sun. You can think of them like a dense battery, more dense than our current battery technology allows.
68.
by crimsonnoodle58 1y ago
An act of terrorism is never smart or heroic.
69.
by crimsonnoodle58 1y ago
You ensure DNS is disabled to stop DNS exfil. You can google it, but basically they exfil data by looking up encoded subdomains. Hardcoding an IP won't help if the network policy disallows all network access.
70.
by crimsonnoodle58 1y ago
If you're running on kubernetes, a simple network policy and blocking the container from using DNS will stop any compromised image from performing a data exfill. I do this for most containers. If the container must have web access in s
71.
by crimsonnoodle58 1y ago
$3B for a fork of an IDE which Microsoft keeps crippling by the day by making it's best extensions not work with forks (eg. C++, Python, C#, Remote SSH, etc)..
72.
by crimsonnoodle58 2y ago
+1 for Glitchtip. We also found the same problem as OP with self hosting sentry. Each release would unleash more containers and consume more memory until we couldn't run anything on the 32gb server except Sentry. We looked at both Glit
73.
by crimsonnoodle58 2y ago
The home page doesn't seem to load on my mobile? Just a blank page. Also an open source DocuSign alternative that we use is DocuSeal. Not affiliated, just a fan. https://www.docuseal.com/
74.
by crimsonnoodle58 2y ago
Yes if I don't ask them to do these two things I have issues; - Don't make my stigmatism stronger, keep it the same - Don't change my eye center/focal point, keep it the center of the lens
75.
by crimsonnoodle58 2y ago
We run our own registry for our containers, but we don't for images from docker.io, quay.io, mcr.microsoft.com, etc. Why would we need to? It obviously seems now we do.
76.
by crimsonnoodle58 2y ago
10 pulls an hour is wild. There's no way we can wait hours and hours for work clusters to rebuild. Even just daily updates to containers will be over 10. This forces pretty much everyone to move to a Pro subscription or to put a cache
77.
by crimsonnoodle58 2y ago
Yeah that was my first thought too, "Oh great, they'll just coat it with PFAS".
78.
by crimsonnoodle58 2y ago
Well in python I assume it would be equivalent of accessing: self.__dict__['property_name'] And if those PHP rules were in python you could just write: @property def property_name(self): return self.property_nam
79.
by crimsonnoodle58 2y ago
Postal Server is a full featured docker based one that supports inbound and outbound email and has an API. Can be used for dev or production. https://docs.postalserver.io/
80.
by crimsonnoodle58 2y ago
Another local-only alternative; Athom have a pre-flashed ESPHome Garage Door opener which has a reed switch for determining whether the door is closed. Works flawlessly for me, and less than half the price. https://www.athom.tech
81.
by crimsonnoodle58 2y ago
https://archive.md/1Hr5t
82.
by crimsonnoodle58 2y ago
Think of an LXC as a docker container but at the OS level. An LXC running docker with an app containerised inside will basically be the same as if the app is running a level higher in the LXC itself. Give it a try. Then open top/htop i
83.
by crimsonnoodle58 2y ago
Careful. I too thought about this, but docker containers have the following benefits over the LXC scripts: - Updates and automatic upgrades between major versions. - The developer who wrote the software created the container (most of the ti
84.
by crimsonnoodle58 2y ago
From the article: For now, you can still view Google’s cache by typing “cache:” before the URL, but that’s on its way out too.
85.
by crimsonnoodle58 2y ago
Yep. My WiFi has had _optout_nomap ever since it was introduced. People always ask me why and I've never seen another SSID with it included.
86.
by crimsonnoodle58 2y ago
At our org we run code-server in docker with no network access except pre-allowed DNS, and a white listed squid proxy, due to this. It works really well for us and prevents potentially bad extensions, python libraries, etc exfilling our cod
87.
by crimsonnoodle58 2y ago
I just told my young boys about this sad news. They've recently gotten very into visiting retro gaming stores and buying DS, Wii and other console games. The death of physical media means the death of video game stores (eg. EB games),
88.
by crimsonnoodle58 2y ago
Don't agree with this. All of googles apps come via debs (chrome, google earth, etc), as does microsofts (edge, vscode) and numerous other big name applications. They then use the deb to add their apt repository and from then on they a
89.
by crimsonnoodle58 3y ago
Agreed. I know my ISP in Australia tracks my internet usage, as required by the Government. I don't know if my VPN provider (Mullvad) truly doesn't track. But either way, I'm no worse off, most likely I'm better off.
90.
by crimsonnoodle58 4y ago
A blurhash is much easier to send along with the JSON data used to display the initial page. To see a blurred version of a progressive JPEG the browser must have first started to download that JPEG. When there are many JPEG's to downlo

More ›