• 0 Posts
  • 31 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle
  • I had a picture of the device since I was curious, but I spotted at Walmart, and some other stores, a Cellular/Wifi/BT gateway that was branded by some company providing facilities services. As far as I can tell, the device was intended to provide secure connectivity to some service provider. I found a similar device in the freezer section of another store.

    I imagine that there is remote control/remote monitoring of all the freezers or other on-premise machinery (which, is a perfectly sound thing to do), but if the central provider doesn’t take security seriously, and stay on top of their systems operations, can easily be the target for any kind of attacks.

    More practically, I suspect that everyone involved has insurance whose cost is much less than ongoing proactive security + maintenance of their systems, which is why these incidents don’t seem to instantly put these companies out of business.


  • This is the pretext for taking away individual’s rights to general computing – because once all the providers have guard rails and are locked out, individual users with local hardware are the last source for ‘illegal content’. “We have to scan everything you do on your local computer, or you could be doing something we don’t approve of”. https://lemmy.world/post/52743759 <-- see this story up on the front page just now. She (foolishly) thought her prompts in OpenAI were private to her, and now she’s charged with “sending a threat in a way that others can read” – we won’t be able to use our computers for private diaries or planning anymore the more they get locked down to only ‘approved’ data and programs.

    And remember, it starts with CSAM, and then it moves on to “illegal content”, then “terrorist content” – and how many times has the Trump said “if you are against the president and the laws I’m enforcing, you must be a terrorist?” …






  • They’re not advocating violence, just reporting a fact. (A hammer is a tool, but also a murder weapon) But you do understand the power asymmetry of an unaccountable police force, right? And just how dangerous this is to civil society? There have been multiple accounts of excessive and incorrect deportations by ICE, with no visible effort to attempt to correct those problems. People are now using the meager tools we have left to try to enforce accountability, before there is only one last tool in the toolbox.







  • I also use syncthing. And it works pretty well. There is some turmoil with the android version in light of changes so the underlying sdk. And I am not sure there is an iOS syncthing that would work as well. I actually use it primarily to sync my keepass databases, and before Immich, my photos.

    The photo management Immich brings makes it a nice alternative for that use case, but either way I need to have one or more servers elsewhere managing storage so I can get things off of my phone into a system I can control.








  • At $dayjob I switched from Apache to nginx 15+ years ago. It’s Callback/Event based process model ran circles around Apache’s pre-fork model at the time. It was very carefully developed to be secure, and even early on it had a good track record. Being able to have nginx handle static content without tying up a backend worker process was huge, and let us scale our app pretty well for the investment of time. Since then, Apache implemented threaded + Event based process models, Caddy, traefik, and a bunch of others have entered the scene.

    TBH, I think the big thing nowadays is sane defaults, and better configuration, even automatically discovered configuration – traefik is my current favorite for discovering hosts in consul/Kubernetes/simple host definition files, but since traefik can’t directly serve files, I simply proxy from traefik to … nginx :)