hemmes

@hemmes@lemmy.world

This is a remote user, information on this page may be incomplete. View at Source ↗

⁨Comment⁩ on ⁨Haribo gummies are so hard you can use them instead of rubber bullets.⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
Yes, but riot control would be so much fun for everyone!
⁨Comment⁩ on ⁨Florida draft law mandating encryption backdoors for social media accounts billed 'dangerous and dumb' | TechCrunch⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
🌎🧑‍🚀🔫🧑‍🚀
⁨Comment⁩ on ⁨TLS Certificate Lifetimes Will Officially Reduce to 47 Days⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
Can confirm, am poor bastard.
⁨Comment⁩ on ⁨How to harden against SSH brute-forcing?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
What VPS are you using?

You should be able to setup a firewall, blocking all access to the SSH port. Then setup a VPN so that only you can access via SSH after making your VPN connection.

If you connect via a static IP, you can also create an ACL for the VPN connection just in case. You can set an ACL for the SSH port forward rule directly as well, but I don’t like that personally. I prefer keeping things behind the VPN.
⁨Comment⁩ on ⁨Windows 11 is closing a loophole that let you skip making a Microsoft account⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
The guest VM requires TPM to install Windows 11.

It depends on your hypervisor platform. Some platforms can enable vTPM (emulated TPM) without host hardware support, like KVM with swtpm.

Hyper-V can do passthrough TPM or emulate vTPM but still require the host to have hardware TPM enabled to do so.
⁨Comment⁩ on ⁨Windows 11 is closing a loophole that let you skip making a Microsoft account⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
No, your guest VM still requires TPM enabled
⁨Comment⁩ on ⁨Microsoft is killing OneNote for Windows 10⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
That right there might beat Microsoft and Google name changes combined
⁨Comment⁩ on ⁨Microsoft is killing OneNote for Windows 10⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
Yes, that one too! smh
⁨Comment⁩ on ⁨Microsoft is killing OneNote for Windows 10⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:
Their enterprise products as well. Azure is now Entra, all the admin page rebrandings like defender, purview, intune, the URL changes, etc.

Please just stick with a name already!!
⁨Comment⁩ on ⁨Europe bets on RISC-V for homegrown supercomputing platform⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
This is the way
⁨Comment⁩ on ⁨Saw this somewhere with Canada, fixed it⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
How did these two even come to this position??
⁨Comment⁩ on ⁨Not real... *for now*⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
Black Mirror
⁨Comment⁩ on ⁨Why doesn't phones numbers have a "DNS" servet so we can just type in words like we do with the internet?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
VoIP systems are getting us closer to your example. Properly provisioned VoIP (on-prem or cloud) can take a SIP user which looks exactly like an email address and direct digital calls to a physical phone. These days it’s likely going to be sent to an office desk phone or a Teams user, but many years from now it will likely be more common to dial out like that from/to any phone device.

I think your example is a bit more nuanced in that there’s some sort of regional database that I suppose one could register for when they change their address. But I don’t think we’re moving in that direction. Things are moving in a decentralized manner and folks hold onto their digital identities, regardless of their geographical location. So like others comments have said, the phone book system is not evolving any further, because modern communication systems are already the evolved version.
⁨Comment⁩ on ⁨Why doesn't phones numbers have a "DNS" servet so we can just type in words like we do with the internet?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
This is awesome.

The multi xxxx registration is god damned mad lad max level.
⁨Comment⁩ on ⁨Bad UX is keeping the majority of people away from Lemmy⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
Yeah, true. But that’s cool. Having choice like that is great!

But I suppose that’s the issue. Trying to keep signup simple to help drive user engagement. How much do you try to wrap someone’s head around such nuanced differences, and when do you say “just join me on my instance”?
⁨Comment⁩ on ⁨Bad UX is keeping the majority of people away from Lemmy⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
I’m on three different instances and the sort by All-hot feed is nearly identical.

I’m not on Beehaw or Hexbear, but those instances make it pretty well known they block a lot of other instances.
⁨Comment⁩ on ⁨Help! DNS A Records only ones getting filtered.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
Very strange, but glad you worked it out!

I’ll keep this thread in mind if I ever run into something similar.
⁨Comment⁩ on ⁨Help! DNS A Records only ones getting filtered.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
Well, dig is available also of course, but nearly all distros still include nslookup despite it getting deprecated. I like the simplicity of its interactive mode.

Host is also really great with more human-readable output.

Don’t get me wrong, when things are getting hairy, you’re going to make a lot of use of dig. I just find that most troubleshooting can be taken care of a lot simpler with host or nslookup.
⁨Comment⁩ on ⁨Help! DNS A Records only ones getting filtered.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
nslookup is available on macOS and most Linux distros as well (and very helpful indeed).
⁨Comment⁩ on ⁨Help! DNS A Records only ones getting filtered.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
Yeah if you can dig a record and received a response it’s not a routing issue.

But aren’t you on the same subnet as your DNS server? There’s no routing happening if you’re on the same subnet which I was assuming.

Even through dig defaults to outputting A records when no other options are specified, I would use the A option anyway just in case:
```
dig @192.168.0.249 study.lan **A**
```
If you use “ping <a-record>.lan” do you see it output the A record IP address in the first line of output?

Did you try using nslookup as I described?
⁨Comment⁩ on ⁨3 Best Free Blu-ray Copy Software to Copy Blu-ray Discs⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
Yeah MakeMKV is great. That should be top on any ripping software list.
⁨Comment⁩ on ⁨Help! DNS A Records only ones getting filtered.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
How exactly are you testing this from your client, with ping? What are you using to query the DNS?

If you run nslookup from the client
- Does the ‘server’ command return the correct DNS server?
- Does <A-record>.lan return the expected record?
I’m assuming you’ve run ifconfig to verify your client’s NIC has been assigned the correct DNS via DHCP?
⁨Comment⁩ on ⁨Which MDM/UEM should I consider?⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:
Are you looking for something free?

MS Intune works very well especially when using multiple platforms. Not positive about the Chromebook though.
⁨Comment⁩ on ⁨M4 Mac Mini Power Button Has New Bottom Location⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:
You can handle those issues with power, setting group policies, and inhibiting action when the power button is pressed (that includes keyboard power buttons). Nothing will stop the user from killing power by holding the physical power button down, except for changing that setting (if available) in the BIOS.

Computer config->Preferences->Control panel settings->Power options
⁨Comment⁩ on ⁨M4 Mac Mini Power Button Has New Bottom Location⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

Jokes aside, how could I implement such a policy?

The policy you’re looking for is in Computer Configuration->Policies->Windows Settings->Security Settings->Local Policies->User Rights Assignments->Shut down the system

This policy takes account or group names from your local or domain AD as its variable (like Domain Admins). After it’s successfully applied, only those users or groups will be able to shutdown the machine gracefully.

Create a new GPO or edit an existing one and apply it to the ADUC organizational unit containing the computer objects you need to target.
⁨Comment⁩ on ⁨Guess who’s suing the FTC to stop ‘click to cancel’ | Companies fight back to make subscription services easy to cancel⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:
Sirius XM has entered the chat