Cyber

joined 2 years ago
[–] [email protected] 1 points 49 minutes ago

Not sure why you've been down voted - I think the fossify apps are really good.

I even contribute towards their app development

[–] [email protected] 2 points 50 minutes ago

Vivaldi has a CalDav Calendar built in.

If you're open to that possibility, I've been using it on both Windows and Linux laptops and works well with my radicale server.

[–] [email protected] 1 points 1 day ago (1 children)

Ansible is an automation tool to setup systems to a known desirable end state.

TBH, for a single device, it's overkill, but you seem like someone who keeps good notes and has some custom files to copy across.... you could convert your setup note into an Ansible file, and it will also copy over your custom config files.

For Ansible you define the desired outcome and it does "all" (kinda) the work for you... so... say you want Apache, MariaDB and PHP, it doesn't matter if half are installed already, or not, or their dependencies - you just say:

Do an update Install packages: A B C Copy my config files over Start the services Relax

Yep, it'll take 10 times as long to get it working up front, but the day you want to duplicate it / start on a fresh Pi / VM, it's all there for you.

I use it to setup all my Pi Zeros thr same way (they're doing BLE presence detection) and for their regular updates

I've also got some VMs setup that way

But... I tried it on a laptop and as it's a single device I just ended up setting it up manually and now the ansible script is woefully out of date... just some balanced feedback.

[–] [email protected] 1 points 1 day ago (3 children)

Thanks. No need for the setup notes (but thanks for the kind offer), it was more about the experience, but I think you've already answered my question with less surface area (I do have 1 Pi that's internet facing for Radicale)

Have you looked at Ansible? That might also cover what you're trying to do.

[–] [email protected] 2 points 2 days ago

If I've understood you correctly, I think you'd need to link 0VDC / GND between both the system PSU and the HDD PSU, otherwise you'll get variable reference voltages for the data lines

Happy for someone else to shoot this idea down in flames, but I think the data is using absolute, not differential voltages

[–] [email protected] 1 points 2 days ago (5 children)

I went with Arch Linux on ARM for a minimal approach - did you try that?

Genuninely interested in your experience of Alpine Linux as I'd not considered it on a Pi (only VMs so far...)

[–] [email protected] 4 points 3 days ago

If you're just looking for something to chew up CPU cycles and don't know what to host, consider something like BOINC where you're "self-hosting" (extremely loose term) scientific research, like cancer, new drugs, etc.

[–] [email protected] 6 points 3 days ago

If they're sharing it with me, then sure, I'll add it to the folder for that party, holiday, event

Immich would scan it and faces are taken care of and if there's metadata in there, great, if not, dunno if I could be bothered to edit it... maybe date stamp if that was wildly off.

[–] [email protected] 8 points 3 days ago (1 children)

I commented elsewhere here, but E2E encryption is just between the server and the end user (ie a VPN)

You're thinking about encryption at rest, on the storage.

Immich would have to setup a whole new design to be able to store all the metadata on a per-user basis... but... you could have multiple Immich instances if you were to host it for your friends, but I think we're drifting into "why bother" now...

[–] [email protected] 2 points 3 days ago

Well... E2E is still feasible, that's your VPN for example.

Encryption at rest is where de-dupe, search, etc, can break.

[–] [email protected] 6 points 3 days ago

The scalability problem with FOSS is monetary and motivation.

The successful products need longterm financial security in order to plan and support their peoduct(s) - so, do we start seeing more subscriptions as corp. sponsorship fades away?

And, just like XKCD 2347, FOSS needs to step up and support the components they rely on

That's going to need some more maturity from the developers too: it's a great feeling doing something new and interesting, but - like having a pet - you can't just abandon something when you're bored of it, or too busy, without rehoming your project(s)...

That's where I see the industry needs to improve before they're really ready for the big time.

[–] [email protected] 0 points 6 days ago (1 children)

Why wouldn't this apply?

One day in the future the later version of sudo would become available...?

 

Interesting article where ~35k devices from 45 manufacturers have vulnerabilities

Advice is probably not as easy to implement as this in real life:

Forescout recommends that you immediately stop the direct connection of devices to the Internet, to use VPNs or segmented networks, and to ensure prompt firmware updates. Otherwise, tens of thousands of systems around the world will remain a potential entry point for attackers.

 

I have a few VMs and PMs around the house that I'd setup over time and I'd now like to rebuild some, not to mention just simplify the whole lot.

How the hell do I get from a working system to an equivalent ansible playbook without many (MANY) iterations of trial & error - and potentially destroying the running system??

Ducking around didn't really show much so I'm either missing a concept / keyword, or, no-one does this.

Pointers?

TIA

6
submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/[email protected]
 

I'm 99% happy with Logseq.

The one thing that I struggle with is keepng an eye on ToDos.

Is there a better way of looking at them without looking at a ToDo page or an advanced query slowing down my journal template?

Is there another application that can parse the logseq .md files so that I'm not getting behind on my work?

 

I saw a similar post here recently, but this is slightly different.

I'm running MythTV on Arch which is working fine (of course), but when MythTv came out of the main packages and went to the AUR, it was just a little harder to maintain and had some compolation issues due to ffmpeg, etc - to the point: my last update was probably 3 years ago.

The (minor) issues I currently have are:

  • terminator won't start 1st time, but starts fine 2nd time
  • shutdown's take a few minutes due to a systemd issue
  • everything's woefully out of date

So... considering all the changes with audio and video over the last few years do I just pacman -Syuv and crack on... or... start again from scratch?

(Yep, full backup 1st)

 

First holiday rental BBQ of the year.

These are always an adventure, broken legs, crumbling gas pipes, spiders and snails in all the crevices...

In this case, it's not too bad, just lit the fire so we'll see if it explodes / melts...

And... just burgers, sausages and halloumi for this one, nothing too adventurous

 

It's already 25DegC in my home office.

The best cooling automation I have so far is to turn the fan on when it's 25 for >5mins.

Is there a nice zigbee / ESP32 evaporation cooler that I can enjoying setting up with HA?

 

Just found my Vivaldi update contained a little more than just bugfixes... it now has Proton VPN built in.

It's actually part of the browser, not an extension, so I'm in two minds whether I like that... or not.

You need either a Vivaldi account or a Proton account, so it's not completely anonymous, but it's a start.

The free-tier of Proton VPN also appears to be bandwidth limited and your exit point is randomised, so... yeah, it's ok...

 

"On 11th November BBC iPlayer will no longer be available directly on this device."

OK, so, I didn't purchase this particular (Blaupunkt) TV, but as it's my mother's then, well, I'm the one that has to "fix" this.

Personally, I use TVs as a simple screen and watch everything through other devices (Roku, or a Linux PC running MythTV).

I see the BBC website has some links to review sites, but I thought this might be another place to ask for - preferably open source - devices that could be used.

Comments?

44
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
 

As a long-term MythTV user, I read all the discussion about Plex vs Jellyfin, but I'm still here... recording Live TV, watching films, listening to "me choonz" all on free, open-source software. What am I missing? Any other MythTV users out there?

39
NAS vulnerabilities (www.theregister.com)
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
 

Just stumbled across this (overly dramatic?) article and thought I'd just post it here...

It's more to act as a reminder that if you've got a NAS that is serving content to the interwebs, then make sure it's behind a proxy of some kind to prevent weaknesses (ie in the management Web UI) being exposed.

Obvz, this article is pointing to Zyxel, but it could be your DIY home-built NAS with Cockpit: CVE-2024-2947 - just an example, not bashing that project at all.

I've used Squid and HAProxy over the years (mostly on my pfSense box) - but I'd be interested to know if there's other options that I've not heard of

 

Before I dive headlong into debugging and throwing bug tickets around, I just needed a sanity check from someone else..

I have an old Lenovo laptop as my daily driver / experimentation box (ie it gets a lot of paclages installed and removed)

Recently I've been using Vivaldi's built-in calendar to use as a CalDAV client for my radicale installation.

It's the only open tab and Vivaldi's using ~20% CPU (according to htop)... actually, I just closed that tab... even with 1 blank tab the CPU's the same.

Is this just my battle weary laptop needing a good clean, or can someone else confirm?

TIA

 

pfSense... Anyone have much experience with the new Kea DHCP server?

I'm using 2.7.2 (Community Edition) on a fairly good Celeron based system that's not heavily loaded, but I have 7 network segments (VLANs and physical interfaces), so I have 7 DHCP pools / configs.

Just adding 1 more static reservation can cause a significant delay when reloading the service and because I register static reservations in DNS, the network loses DNS so I "break the internet" for a short while.

Would Kea fix this?

view more: next ›