theit8514

@theit8514@lemmy.world
0 Post – 44 Comments
Joined 12 months ago

I mean it was not too long ago there was a bug which could lead to an unauthenticated RCE against Bluetooth on Android.

https://nvd.nist.gov/vuln/detail/CVE-2022-20345

So yea, reducing surface area of attack when a feature is not needed is kinda important.

5 more...

The creator's clear check doesn't count towards the level being cleared, so these levels are uncleared. I think if the creator plays it on the uploader account it wouldn't count either.

You can, sure, but you probably shouldn't. Encrypting and decrypting consume additional cpu time, and you won't gain much in terms of security.

14 more...

A torrent is broken into pieces, and further into blocks. The torrent file contains hashes of all the pieces that make up the full torrent. The client validates each piece that is downloaded and will re-download from another peer if an invalid piece is encountered. The spec goes in to more depth if you're interested. https://wiki.theory.org/BitTorrentSpecification

On one hand you definitely don't want to be assigning manual/static IPv6 to all your devices because if your prefix ever changes you'll have to update it everywhere. IPv6 doesn't really have a concept of private address space (with a few exceptions). On the other hand most modern IPv6 stacks support dynamic protocols like SLAAC while also assigning a static suffix to the published prefix (e.g. You want :0:0:1234:1 to go to your server, and SLAAC gets the prefix 200x::5678/64 your server would assign itself 200x::5678:0:0:1234:1).

DHCPv6 fixes a lot of these headaches for managed networks by allowing you to reserve specific IPv6 for a given DUID.

IMO, your network, do what you want. I have two jump Raspberry PIs that I have static suffixes so I always know where they are without relying on DNS or whatever. Edit: I apparently misremembered how I had these setup. I use a custom interface up script to take the SLAAC prefix and append the custom suffix to it as a secondary IP.

11 more...

Since this is a github pages site, the whole thing can be downloaded from the git repo: https://github.com/xenevel/dark-souls-2-sotfs-cheat-sheet

Easiest is to select the green Code button and click Download ZIP. You should be able to open the index.html page in your browser and use it like normal. YMMV if this uses content/data from other sources/sites.

I've been watching this guy's backlog on building a kernel and bootloader from scratch. A bit monotone but amazing technical knowledge. https://youtube.com/@nanobyte-dev

You seem to be misinformed on how the internet works. Nothing is "free". ISPs have to buy equipment, pay for expensive physical connectivity (without disturbing existing infrastructure), and usually have to deal with constant, ever increasing bandwidth requirements.

I'm all for a bit of net neutrality, but ISPs tend to get a lot of flak for policies like this, for seemingly no reason. For example, let's say ISP A and Upstream B have a mutual bandwidth sharing policy (called Peering) where both sides benefit equally from the connectivity. ISP A determines that N is using all the bandwidth to Upstream B. ISP A has three options: N gets all the bandwidth to Upstream B (disturbing other traffic to/from that network), N has to be throttled to allow all traffic equally, or ISP A and Upstream B need to expand their network again (new equipment, new physical links) which will cost a lot of money. N doesn't even pay ISP A or Upstream B, they just pay their ISP C. In the end, ISP A has to throttle N, and N is the one who had to expand/change their business model to deliver content to their customers. They had to go out and buy services from many upstream providers to even the load and designed a solution to install Caching boxes inside each ISP's datacenter so their traffic could reach end users without going upstream.

3 more...

I believe ZFS works best when having direct access to the disks, so having a md underlying it is not best practice. Not sure how well ZFS handles external disks, but that is something to consider. As for the drive sizes and redundancy, each type should have its own vdev. So you should be looking at a vdev of the 2x6TB in mirror and a vdev of the 2x12TB in mirror for maximum redundancy against drive failure, totaling 18TB usable in your pool. Later on if you need to add more space you can create new vdevs and add them to the pool.

If you're not worried about redundancy, then you could bypass ZFS and just setup a RAID-0 through mdadm or add the disks to a LVM VG to use all the capacity, but remember that you might lose the whole volume if a disk dies. Keep in mind that this would include accidentally unplugging an external disk.

2 more...

Yes, but as I've found recently AES-NI is only as good as your software support for it. Had a team using an ancient version of winscp and they kept complaining about download speeds on our 10Gb circuit. Couldn't replicate it on any other machine with the newest version of winscp so I installed their exact version. AES-NI support wasn't added until like 2020 and it gave them 5x better download speed after upgrading.

Hover over the window in the task bar and right click on the preview. This should show the restore/minimize/maximize dialog. Click restore if it's an option then do the same and click move. You should be able to then use the arrow keys and "attach" the window to your mouse and move it to the visible area.

Edit: the other way to get this menu depends on the application but if you select the window and hit ALT and then space it should show the restore/minimize/maximize options.

Could be trying to mount it loopback instead of by ip. What does your exports file look like? Can you do a mount from 192.168.0.55 manually?

IANAL, but this is likely a legal gray area regarding software licenses, especially if you read the AGPL code prior to writing your library. Companies that do this sort of thing professionally have a/b teams that don't speak to each other (one reads and generates design documents, the other uses those design documents to write a new library) to prevent a lawsuit for violating licensing terms. They can claim that the developers writing the library didn't copy any code from the source library.

As for the typedef, it's most likely considered a public definition document. I would think it would be like a public C# interface, where it's only the method declarations and expected parameters and the actual implementation is not included at all.

If you're considering publishing this or using it commercially you should definitely consult a lawyer that specializes in copyright.

So after the 60+ (/s) play tests they're going to EA? Strange decision.

Make or find yourself a cart to drag around (g or G to drag it). It it doesn't have wheels it'll be quite loud. Sound = attraction = death in most cases.

Don't bother with cars for a long while, even one that actually runs. They take a lot to maintain and cause a lot of noise (see above). You're better off starting with a bike for midrange transportation (or if using mods a foldable bike).

When you start building or find a nice base area, make a crafting nook and drop all your items nearby to it. When crafting you can pull ingredients from 1-2 tiles adjacent.

Neat. I remember me and my friends trying to come up with enough stuff to build our own world. Pretty sure we didn't but still cool to see all the player built stuff.

Looks like 1.4.1 is the first Graal Reborn revision. Don't see a 1.4.0 anywhere. Are you running the server as well or just the client?

Based on your edit about getting the public IP: Most firewall/routers are not configured to do this operation by default (called Hairpinning). If you request your firewall/router's external IP address from the internal network you won't get a response unless Hairpinning is enabled and some devices don't allow you to do that. If you have an internal dns server, you should override the internal dns to return the private ip address so it goes to your nginx reverse proxy instead of the firewall/router.

3 more...

Sounds about right, just be aware that your LAN and WAN networks need to be different, so you'll likely need to change your old router's dhcp subnet. E.g. 192.168.1.1/24 on the WAN and 192.168.0.1/24 on the LAN.

This is funny because most object storages now use keys that represents a path. For example, you can host a website on S3 with folders for js/css/etc and it "just works".

One of my system engineers started using TFS a few weeks ago. All he knows how to do is click Sync Changes in vscode and call me if there's a problem.

For the disks, you may have a small issue with having multiple types of disks in a single RAID10, as those disks might have slightly different physical attributes. ZFS is an option here as you can add two vdevs for the different drive types and add them to the same zpool, which effectively creates the RAID10 you're looking for. You would typically not use LVM on top of ZFS but if you go with RAID10 it would let you create logical partitions that can be expanded easily at a later time.

Another ZFS option is to use RAIDZ1 with the 4 disks in a vdev. The vdev will use 1 disk of space across all disks to maintain a parity with the other disks. You will have 12TB of usable storage on your 16TB raw storage. This will allow you to lose one drive with no data loss.

You've always been able to run unsigned or unpackaged add-ons with developer mode. What's wrong with that? This only affects packages uploaded to AMO.

2 more...

As an aside, these are the client logs, check the /var/log/ auth.log or secure files or journalctl to see if the server logged why the access was denied.

29% of 112 and 60% of 170 is 134, which is 47.7% of the total. Math checks out.

1 more...

Synology's support is also quite crazy. I'm still using my 8-bay NAS that I bought in 2015. It's been replaced twice by RMA. Just upgraded it to DSM 7.0 a few months ago. Almost unheard of in the era of planned obselecense.

Cool. Yeah, as a professional I am constantly aware of data integrity and have most of my shit stored on redundant drives. I had a WoW Guild Officer who shared his home setup with like 8x12TB drives in Windows Storage Spaces with no redundancy that was like 80% full. I had to ask how he slept at night knowing he could lose 80TB of data at any time.

Personally my TrueNAS has 5x1.92TB SSDs setup in two mirror vdevs and a hot spare for my ISCSI LUNs and 8x1.2TB 10K drives in a raidz2 (2 disk parity) for my NAS storage.

If your home ip changes a lot a dynamic dns provider will keep up with it so you don't constantly have to change your phone's wireguard configuration

Since we don't know what server or VM tech you're using the advice will be pretty generic. For self hosting, you can likely get away with your ISCSI traffic sharing the LAN interface with your usual vm traffic but if you need high throughput you will want ISCSI optimized nics and turn on jumbo frames (mtu of 9000 is the standard here). This requires a switch that supports jumbo frames as well.

For Windows, I find the ISCSI support to be very lacking. Every time I have used it I have had sporadic loss of connectivity, failure to mount on boot, and other issues. I would avoid it.

For ESXi you can map an ISCSI lun as a datastore and create vmdks on top. This functions the same if you use actual FC luns or NFS mounts, and have had no issues with reliability. There's also RDM which is raw direct map which can mount the ISCSI lun as a disk of the vm. If you're using vSphere I would advise against this as you lose the ability to vMotion or use DRS.

So now you want it everytime you switch weapons ;)

Its a bit complicated and depends on your ISPs support level.

If your ISP supports basic IPv6 they will likely use SLAAC or DHCPv6 to advertise the /64 that any directly connected devices, like your router, can use (/64 being the default size for a single LAN segment, even between point-to-point connections). If you have devices behind that router that want to use IPv6, you will need additional prefixes. The most common method nowadays is to use Prefix Delegation (DHCPv6-PD) where your router will ask the upstream router for an additional routeable prefix which you will use on another interface of the router. The RFC for prefix delegation recommends a /48, but many ISPs are not delegating that much. I only get half of a /60 from my ISP's modem.

If the ISP just provides you a static routeable prefix, then you would just assign that to your router's interface and enable SLAAC/DHCPv6 to give out that prefix. This would only need to be configured in a single device and is why they don't recommend hard coding servers and workstations with IPV6 addresses.

Keep in mind that your router will also need a firewall as all of these IPv6 prefixes are routeable and public. While IPV6 space is quite like finding a needle in a haystack, you could still find yourself having a bad day if you treat it like private IPV4 space.

The end result though is that you would setup DNS so that devices register their IPv6 addresses and it just works. There's also the MDNS protocol that supports IPv6 which will do segment-local resolution for device names.

4 more...

Does cryptsetup/luks do that? I thought that was only software encryption.

1 more...

I have used gocryptfs (https://github.com/rfjakob/gocryptfs) in the past, it creates an overlay mount that encrypts each dir and file separately, so no need to precreate a container. There are some security downsides to this approach though so be aware of that. https://nuetzlich.net/gocryptfs/threat_model/

I was thinking this too, if you have an open-ended 4x slot it can fit a 16x card but only runs at 4x.

TBH if you're running 10Gb you may want to look for a board with on-board 10Gb rather than a PCIE which will save you the slot. My HP server has a swapable daughter board for the nic so you can chose 4x1Gb or 4x10Gb.

It's likely a Google Console verification file to show you own the domain (e.g. to make changes to search results). It has to be published to the site with a random url that only the owner and Google know, but it's still a public file. I don't think it's an issue if it's stored in source as Google will query the site and not the source for that file.

If OP is concerned they can also change the verification method: https://support.google.com/webmasters/answer/9008080?hl=en

Running stock 14, but rooted with Pixel Xpert. I also have a dark mode quick tile and I don't think it was added by Pixel Xpert.

I would start by testing if you can resolve acme-v02.api.letsencrypt.org from the PiHole and if not, see what you need to unblock that.

1 more...

Probably not but if you want to test it create a directory with some fake files then add and remove it from the interface.

Edit: if you have any movies mapped to /downloads you should probably move them first.

Not sure about the pipette tool working for landfill, hopefully there will be a way to disable that.

My line of business is entirely a Microsoft shop so everything we've ever written has been for MSSQL.

That being said, I can understand the benefits of having a choice in backend. For example, for our Zabbix deployment some engineer just installed mariadb+zabbix on a server and called it a day. This has caused us no end of troubles (ibdata misconfigured, undo files too small, etc). After the last time I had to rebuild it due to undo file corruption I swore that if it broke again I was switching to postgres. So far knocks on wood we haven't had any major issues. We're still looking into and planning for a postgres migration but we're hoping to hold out for a little longer prep time.

Maybe I should contribute a MSSQL engine for Zabbix so I can move it to a platform I'm more comfortable with. ;)

I can't believe this is 15 years ago. Still hear these in the song today. https://youtu.be/VWqC4KKiVbU