• 0 Posts
  • 58 Comments
Joined 3 years ago
cake
Cake day: July 5th, 2023

help-circle
  • You mentioned immich somewhere, I think that’s a good one to set up. Don’t throw your entire life’s photo album at it at first, but it’s really good to test a variety of functions and transfer speeds.

    Oh yeah… And TAKE NOTES about your setup. Like, for each container, make notes of how you set it up and why. Trust me this is REALLY important for maintaining your stuff. If you go down a rabbit hole for two days and find a couple forum threads that lead you to how you need to modify the configs for your use case, a year from now you will have forgotten everything.

    Document, document, document.


  • If tailscale is your preferred method to access your network from outside your home it’s one of the most important parts of your setup, in terms of both security and functionality.

    Luckily, overlay VPNs like tailscale are pretty easy to set up without glaring security problems, but you definitely want to triple-check you aren’t messing things up. The thing is, you don’t know what you don’t know, so you might not realize if you make a mistake. But like I said, it’s pretty hard with those types of setups.

    To actually answer your question though, I recommend you get one or two containers working locally and then figure out how to access them from your tailnet before you dive in and set up your entire stack. Docker adds another layer of complexity when it comes to accessing things so I recommend you get it right and then deploy and test each container individually.

    Don’t set up 10 containers and then try to see if they all work, go steadily and deliberately, checking to make sure each works, and then snapshot your functional setup before you start using it heavily.

    Don’t forget to plan for backups and updates.


  • It’s not a scheme, it’s the government using tax breaks to encourage the positive behavior of saving your money for when you’re old. That’s literally what it is.

    Tax credits for buying EVs is another example of the government using tax breaks to encourage people to do something that’s beneficial.

    Lots of people just don’t save money. 401Ks make it easy and you get good returns, and penalties for withdrawing before you’re old. So you put money in because usually you’ll have a lot more later, and then you keep it until you’re old so you don’t get penalties and lose a bunch of money.

    I swear this site is full of the dumbest people on the Internet.



  • I’ve never encountered what you’re describing. There’s always other ways to authenticate than through a mobile app, at least from my experience, and I think I’ve used about a dozen different banks/credit unions over the past 15 or so years. Last credit union I cut ties with had ZERO MFA for their web portal, except on account creation. Like, no SMS, no email, nothing - just user+pass, and making sure you have the right background picture of the login screen you picked on account generation (like, a duck or a football or whatever). Completely ridiculous in 2025 (when I cancelled my account).

    Regarding the OP, I think any new competition in this space right now is good, even if it ends up just being a triopoly vs a duopoly (fat chance with this thing but we can hope).

    Ideally though we need an open protocol/standard that can be implemented through any manner of device software.



  • Until ads are responsible and don’t carry risks of injecting malware and trackers, I will block them without prejudice.

    Even back in the day they would try to hijack your browser, redirect you to some random page, destroy ability of your back button to take you out, and throw up a ton of popups.

    I don’t think blocking them is an asshole move until ads are served responsibly, without threatening my security or privacy. When, and if, that day ever arrives I will stop blocking them because I understand that most sites subsist solely off ad revenue, at least in this current Internet model we live with.


  • You don’t NEED tap to pay. I literally never use it, ever, unless I have a card with a bad chip (happened once).

    Forgetting your wallet like a dummy doesn’t mean you NEED tap to pay, it means you need to remember to bring your wallet.

    Also, there is nothing you NEED the Costco app for, an org like that can’t lock things behind an app to function because their customer base is too broad, they will inevitably have old people with T9 Nokia bricks still. It might have been the most convenient way to achieve it, but it’s not a requirement - even if that particular sales associate didn’t know how and would have to phone a friend.

    All that to say I’m not trying to convince you to use gOS; I fully recognize that security is on one end of the spectrum from convenience, and we all choose where we want to be on that spectrum. But I felt the need to counter your claims… Nobody NEEDS tap to pay smh. If you care about privacy at all you wouldn’t be linking cards to apple or Google, adding yet another layer of giant data collection to some of your most intimate data.




  • They’re not the same.

    Hiding an unlocked treasure chest in the forest is obscurity. Sure, you might be the only one who knows it’s there at first but eventually someone might come across it.

    Having a vault at a bank branch is security - everyone knows there’s a vault there, but you’ll be damned if you’re going to get into it when you’re not authorized.

    Good passwords, when implemented correctly, use hashing (one way encryption) to provide security. It’s not obscured, people know you need a password to access the thing (in our example)






  • Someone already told you this, but I want to elaborate

    Dwarf Fortress was essentially what Rimworld was cloned from. I’ve been downvoted into oblivion by rimworld fans for such heresy, but it’s true.

    For the longest time DF has been free, disgustingly ugly, and getting updates for like 20 years (think you can still download freeware version, but there’s a steam version now you can pay for. I bought it because it’s been a gem for YEARS and devs more than deserve my $20 or whatever it was).

    Rimworld took the DF game, made it sci fi, and made it not absolute dogshit to look at.

    You could always mod DF with icon packs that made it look a lot better but it was still pretty ugly.

    The steam version of DF looks much, much better but it’s not quite as pretty as Rimworld still, I think.

    Either way, if you got any time out of Rimworld and want something similar, Dwarf Fortress is your best choice. They’re both great and are IMO the best in class of whatever genre you’d call it.


  • Sure, bad implementation is bad. Hardware, software - whether lazy, ignorant, malicious, negligent, whatever. It’s bad, and we agree on that.

    My analogous argument is NOT that you should SUPPORT any vaccine no matter what, it is that you should not oppose ALL vaccines because they can be dangerous to some.

    The original guy I replied to was like “it’s your civic duty to disable TPM” and went on an unhinged rant about how it’s about forcing AI integration or something. Completely ridiculous claims that show a completely ignorant and emotionally charged opinion that I equate to an anti vax type of line of reasoning.

    Repeatedly I’ve criticized bad implementation of TPMs and specified that they’re effective only when used correctly.

    Sounds like you and I agree on pretty much all points but you’re getting wrapped around the axle on an analogy that I made to highlight the absurdity of a different person’s statement, and then you’re straw manning it to boot.

    The reality is that there’s a need for TPMs in systems these days as we get more and more reliant on devices to do literally everything for us, and bad actors find new ways to threaten the baskets we put all our eggs in. We should very much so criticize bad conduct and highlight what is bad, but not poison the well on the technology itself. That doesn’t help. The conversation has nuance and watering it down to “TPM bad because Microsoft” completely misses the mark.



  • TPMs are exceptionally effective at preventing the threats they are designed to mitigate, when used correctly.

    A TPM is a device specific hardware security module (HSM). HSMs are a key component of modern enterprise security. You might think that’s far removed from your PC at home, but it’s a difference of scale, not of kind.

    Anti-vaxxers don’t understand the science behind how vaccines work and they dislike how vaccines are implemented, in their perception of society.

    If you dislike TPMs on face value it’s because you also don’t understand the science behind how it works and you dislike how it’s implemented, into your perception of society.

    Microsoft is a PoS company for mandating TPM compatibility as a baseline for their OS to function. It’s a security feature, and not one that’s important enough at this juncture to be REQUIRED for an everyday consumer device. It has trade offs. It can be argued that the trade offs aren’t worth it at this juncture.

    But, as I said, TPM is not inherently bad. It’s inherently good, in fact - but shitty implementation is shitty.