dx034

34 ms·

421.
by dx034 5y ago
Only in one language or in all languages supported by Siri? Would be great when learning a new language :) But probably needed for Siri to process speech locally, as they'd likely want to filter out those words.
422.
by dx034 5y ago
No, the only protection against that is to block all outgoing connections that aren't on a white list. Most servers I have work this way. It's annoying at times but lowers the risk of some shady software/library talking home
423.
by dx034 5y ago
Maybe they need to store that much locally if they want to train models locally? In the end, I guess many folks on HN would give up a few GB of their disk space if it means all ml related stuff can run locally. And as far as I'm aware,
424.
by dx034 5y ago
Really sad, I used to love Google maps. It feels like it's becoming worse by the year (at least in Europe). It used to be extremely accurate in predicting traffic and knowing about road closures. Now I can often estimate traffic better
425.
by dx034 5y ago
You can get Mac minis at many cloud providers (expensive at AWS, cheap at Hetzner). They weren't designed as servers, but are good value for many server use cases.
426.
by dx034 5y ago
Or €70/$80 per month with Hetzner [1] [1] https://www.hetzner.com/dedicated-rootserver/matrix-apple?co...
427.
by dx034 5y ago
> Hetzner Falkenstein was toured recently by a YouTuber and I didn't spot any fire suppression systems in the video [1]. OVH SBG1 (which was partially destroyed by the fire that wiped out SBG2) used shipping containers which also di
428.
by dx034 5y ago
So the solution is just to use IPV6 only SSH? I'm serious, you could use an ip just for SSH, making it very hard for anyone even to get the server address. And it's not that hard to be able to access ipv6 addresses.
429.
by dx034 5y ago
I also prefer Outlook to all other email software I used (including GMail). At least to me it's always been fast, powerful, programmable, configurable, etc. Same goes for Excel, a great piece of software with more impact on the busines
430.
by dx034 5y ago
I hated Sharepoint while I had to use it, but learned to love after switching jobs where I now have to use alternatives. Sharepoint is extremely complex but also super powerful if you know how to use it. And it integrates really well into o
431.
by dx034 5y ago
Do companies still buy laptops with 4GB ram? I partly have to work on a horribly slow work laptop with a crappy CPU, but even that one has 16GB memory.
432.
by dx034 5y ago
Interesting, so all development is done on remotely on VDI or RDP instead of local machines?
433.
by dx034 5y ago
My ISP has at least 10 ranges (a result of the shortage and mergers) and there's little info about which ranges I could get IPs from.
434.
by dx034 5y ago
Is changing SSH port really necessary? If your SSH is vulnerable, attackers will find the Port for it.
435.
by dx034 5y ago
The advantage is that you only need to harden one instance. The others are safe as they're basically in an "internal" network (firewall blocks all other IPs). With that bastion host, you'd do anything to make it as secur
436.
by dx034 5y ago
Just be careful with a bastion host that you have a fallback. If anything happens to the bastion host and you don't have access to that IP, your VPS is basically lost. If you use a bastion host, I'd at least have two.
437.
by dx034 5y ago
Theoretically, a vulnerability in SSH could expose you, but I think those are quite rare. The bigger risk of keeping the server exposed is probably that some application opens another port. But that won't happen on Port 22, so that one
438.
by dx034 5y ago
> For the novice user, there might be a use-case where this is a good solution, to revert settings settings in case you somehow messed them up. Maybe that's the justification for the product manager or developer, I'm pretty sur
439.
by dx034 5y ago
And cloudflare tunnel which allows you to block even ports 80 and 443. The only attack vector is then through ssh but with passwords disabled I wouldn't worry too much about that.
440.
by dx034 5y ago
How's that? Setting up a revers nginx proxy with cache takes probably less than an hour even if you've never done it (speaking from experience). And otherwise, if the files don't change that much just ssh in, copy them on the
441.
by dx034 5y ago
I believe renting dedicated servers is often overlooked. You pay someone else to install hardware, ensure network connections and be on-site for hardware swaps etc but still have the maximum degree of flexibility. Even larger companies can
442.
by dx034 5y ago
Or Hetzner server auction to get a cheap 20/30€ machine with unlimited traffic at 1Gbps. Setup time is max 1h even if you do it manually, with cloudflare Tunnel it's also really easy to lock down everything with a firewall and hav
443.
by dx034 5y ago
I doubt you'll manage to get the exact 1Gbps per VPS out all month. On dedicated that's more likely. But luckily they have a very easy setting for billing alerts and maximum in the settings page.
444.
by dx034 5y ago
And then Cloudflare will not cache it at some locations for random reasons and the cloud bill is back. Anyone with technical knowledge should have no problem routing static files via machines at OVH/Hetzner and the like, no reason to e
445.
by dx034 5y ago
My issue with this is that the donation is basically to Microsoft for their dark patterns. There's no way this traffic cost much to Microsoft, so it all is added profit for their shareholders. Other providers would've provided the
446.
by dx034 5y ago
It's funny that even Hetzner can do that and AWS can't. Shows that there's no interest from AWS to prevent these things from happening.
447.
by dx034 5y ago
Hetzner's cloud offer is limited but they limit your possible spending by default and it's very easy to set up billing alerts. I guess they mostly do it to ensure they get the money at the end of the month, but it's equally u
448.
by dx034 5y ago
You can use Hetzner's cloud. You get metrics and still have a lot of free traffic with very low cost above that.
449.
by dx034 5y ago
Most cloud users will have a VM somewhere which you also have to manage.
450.
by dx034 5y ago
But he could've put static files on a Hetzner server and still have his backend in Azure. That would've solved these issues and probably saved even more money.

More ›