Neshura

You apparently have little interaction with regular users because one of the top problems a non-power user has is “oops I accidentally hit delete on this important file I don’t have a backup of”.

Not saying qbittorrent-nox of all things switching makes a ton of sense but at least for desktop applications there is a very good reason why deleting things becomes a two step process.

I somewhat disagree that you have to be a data hoarder for 10G to be worth it. For example I’ve got a headless steam client on my server that has my larger games installed (all in all ~2TB so not in data hoarder territories) which allows me to install and update those games at ~8 Gbit/s. Which in turn allows me to run a leaner Desktop PC since I can just uninstall the larger games as soon as I don’t play them daily anymore and saves me time when Steam inevitably fails to auto update a game on my Desktop before I want to play it.

Arguably a niche use case but it exists along side other such niche use cases. So if someone comes into this community and asks about how best to implement 10G networking I will assume they (at least think) have such a use case on their hands and want to improve that situation a bit.

Personally going 10G on my networking stuff has significantly improved my experience with self-hosting, especially when it comes to file transfers. 1G can just be extremely slow when you’re dealing with large amounts of data so I also don’t really understand why people recommend against 10G here of all places.

Yeah they definitely could have been quicker with the patches but as long as the patches come out before the articles they are above average with how they handle CVE’s, way too many companies out there just not giving a shit whatsoever.

If I buy a switch and that thing decides to give me downtime in order to auto update I can tell you what lands on my blacklist. Auto-Updates absoultely increase security but there are certain use cases where they are more of a hindrance than a feature, want proof? Not even Cisco does Auto-Update by default (from what I’ve managed to find in this short time neither does TrendNet which you’ve been speaking well of). The device on its own deciding to just fuck off and pull down your network is not in any way a feature their customers would want. If you don’t want the (slight) maintenance load that comes with an active switch do not get one, get a passive one instead.

So first of all I see no point in sharing multiple articles that contain the same copy-pasted info, one of those would have been enough. That aside, again, patches were made available before the vulnerability was published and things like MikroTik not pushing Updates being arguably more of a feature since automatic updates cause network downtime via a reboot and that would be somewhat problematic for networking equipment. Could they have handled that better? Yes, you can almost always handle vulnerabilities better but their handling of it was not so eggregious as to warrant completely avoiding them in the future.

Can you elaborate on how their response was lacking? From what I found the stable branch had a patch for that vulnerability available for several months before the first report while the lts branch had one available a week before the first article (arguably a brief period to wait before releasing news about the vulnerability but not unheard of either).

MikroTik also offers a 2 year warranty since they legally have to, no idea what you’re on about there. Also also not sure what you think they sell other than networking because for the life of me I can’t find anything other than networking related stuff on their website.

oh boy that would be one hard sell. Probably would need 500k or more to justify never listening to them again

The way I see it the point where it becomes too negative would also be the point where several laws would crack down on it anway (ie the game would be shut down for inciting violence) it’s rare for an actual hate mob to skirt the line between “legally hateful” and “illegally hateful” for long so in that sense the problem would regulate itself

As the other commenter already said it’s an abundance of caution. GItea is already moving in the direction of SaaS and an easily self-hostable solution runs counter to that plan (Gitea is already offering a managed Cloud so this is not a hypothetical). One thing that has already happened is Gitea introducing a Contributor License Agreement, effectively allowing them to change the license of the code at any time.

I’ll be that guy: Use forgejo instead, its main contributor is a Non-Profit compared to Gitea’s For-Profit owners

Well in that context yeah the only reason to get upset about this is if you have a problem with the mechanic itself, otherwise they should and would have started protesting a while ago.

As for your question: Yes absolutely. Such is the consequence of freedom of speech: people will have opinions you dislike. This isn’t some serious irl matter, it’s about features in a video game so let them have whatever they want. In fact forcing inclusivity might be the least inclusive thing one can do. Sure voice your dislike if you see a group playing a game you don’t like. That is your right. But it is also their right to play that game (and voice their dislike at your voiced dislike).

Well the contents of this particular change aside I could see someone upset over the principle of it. I’m not familiar with old-school runescape but if the salespitch really was “no changes unless the community approves them in a poll” then this marks a breach of “contract” (I doubt them only ever adding stuff after polls was ever contractually agreed on) on the developers part. Now that door is open so what else are they going to change without a poll? Is this going to be a one off or will this now become a regular occurence where the developers go over the communities wishes?

So, again, the politics of this particular change aside I can absolutely see why a player would be upset by this change, it’s not the change itself that is worrying but rather what that means for the future, if players were sold the idea of control this change robbed them of that control they were sold. But again I have no clue about old-school runescape so I don’t know if the community just took the status-quo as granted and never had any promises made to them that only polled changesmwould happen.

Not on the phone but I had to threaten the Bitdefender E-Mail rep with a lawsuit in order to get my money back.

A few months into my 2 year subscription I changed my e-mail associated with my Bitdefender account. Thereafter all mail I got from them went to that new email, as it should. A short while after that I switched over to Linux and my “need” for an AntiVirus evaporated entirely between Linux’ workflow not really requiring one anyway and me learning how little AntiVirus Software offers over the default Windows Defender. Queue forward to the end of that 2 year subscription (whose auto-renewal I had disabled before leaving Windows exactly to prevent what happened anyway but alas I have no proof of that anymore) I notice a really weird charge while reviewing my credit card statement. A charge that by all accounts should not have been there and one I was not made aware of beforehand. Guess what, those fucks sent only the mail about the upcoming renewal to the old email account which I had no reason whatsoever to suspect would still receive mail from them. Curiously the mail about them cancelling the renewed charge after I went off on them was sent to the new email again…

Initially the customer service said “oh well can’t do anything here’s a 50€ discount” until I lost my cool and threatened to sue them for theft because by all reasonable standards I could not have expected them to inform me on my old email about this upcoming charge.

On that note my stance was reaffirmed: Between and AntiVirus and an actual Virus I’d pick the latter, at least those are upfront about their motives and intentions instead of pretending to provide you with a service.

I think you have the wrong idea about what I was referencing. I’m not talking about Cloudflare Tunnels but their Encrypted Client Hello. While Cloudflare could intercept the inital ClientHello the rest of the HTTP traffic still is encrypted between Client and Server not between Client and Cloudflare. In that sense they have not turned into more of a MitM than they (or any other DNS Nameserver) were already anyway. So unless governments decide to completely dismantle the trust chain the internet works on they won’t be forced to fuck with ECH for anti-piracy either.

But ultimately anything going over a public DNS Server is susceptible to being compromised. We simply trust that the providers don’t.

I’m sure this is definitely going to go how the regulator thinks it will go. What with Cloudflare being one of the driving factors behind e2e encrypting more and more of the HTTP stack, making it ever harder for ISPs and other 3rd parties to see inside the HTTP traffic.

Yeah really not much else needed to be said here. What happened with Crowdstrike is exactly the sort of exploit Kernel Level Anti-Cheat in general has been critized for enabling on consumer hardware.

The worst part really is just getting off the damn spam lists. There is almost no documentation anywhere for do’s and dont’s. I ultimately had to setup a sending relay for the mail on my status monitoring VPS because my residential IP triggered most spam filters, but I only found out that that was the problem from forum posts investigating the same problem. I check with stuff like mail-tester, get back perfect scores and yet most of my outgoing emails have a good chance to land in the spam folder anyway (but at least they get delivered so that’s a plus I guess)

As others in other threads have said: Google and Microsoft have killed the ability to self-host email simply by black-boxing their spam filters. As a user you have no real way to fix your mail server such that your emails get delivered into the inbox reliably.

I self-host email, it certainly isn’t something I’d recommend

Imo you probably save more money keeping the server up 24/7 than constantly shutting it down and starting it up again. Especially once you get a good list of services going.