cron

@cron@feddit.org

• ⁨Comment⁩ on ⁨YSK that you can/should budget yearly for long term purchases⁩ ⁨⁨6⁩ ⁨hours⁩ ago⁩:

  Right. Basically, I can assume that at at least one thing in the household breaks each year. This year, it was the microwave oven.

• ⁨Comment⁩ on ⁨YSK that you can/should budget yearly for long term purchases⁩ ⁨⁨8⁩ ⁨hours⁩ ago⁩:

  One downside i see with this is that it is often unclear how long an item will last. For example, I bought my dishwasher in 2021. When will they need to be replaced? The last one lasted 24 years, but I’m not going to bet on the new one lasting as long.

• ⁨Comment⁩ on ⁨Do you rebuild your container images yourself?⁩ ⁨⁨5⁩ ⁨days⁩ ago⁩:

  I did it only once (yet) because i needed a specific addon for the software.

  In my case, I wanted to use caddy webserver with a specific plugin. It was quite easy to create a new image exactly the way i wanted it.

• ⁨Comment⁩ on ⁨Steam winter sale is live. What patient games are you picking up?⁩ ⁨⁨6⁩ ⁨days⁩ ago⁩:

  Why would you buy a game now that you have no hardware to play on?

  Maybe I‘m wrong, but there will probably be one or two more sales until you hold that shiny new hardware in your hands.

• ⁨Comment⁩ on ⁨better look at it⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Sure, there are some that are equipped with filters to prevent burning your eyes.

• ⁨Comment⁩ on ⁨better look at it⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Please don’t use a telescope to check, otherwise you will have no eyes.

• ⁨Comment⁩ on ⁨Mbin v1.9.0 release (stable)⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I’m not a mbin user, but the combined frontpage looks interesting.

• ⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  And if this is a known exploit, why not fix it?

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  The maintainers of the big web browsers have pretty strict rules for CAs in this list. If any one of them gets caught issuing only one certificate maliciously, they are out of business.

  And all CAs are required to publish each certificate in multiple public, cryptographically signed ledgers.

  Sure, there is a history of CAs issuing certificates to people that shouldn’t have them (e.g. for espionage), but that is almost impossible now.

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  For 3 more months or so, you can’t buy them in april 2026 anymore

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Short lifespans are also great when domains change their owner. With a 3 year lifespan, the old owner could possibly still read traffic for a few more years.

  When the lifespan ist just 30-90 days, that risk is significatly reduced.

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  No, these are completely separate issues.

  • CRL: protect against certificates that have their private key compromised
  • CT: protect against incompetent or malicious Certificate Authorities.

  This is just one example why we have certificate transparency. Revocation wouldn’t be useful if it isn’t even known which certificates need revocation.

  The National Informatics Centre (NIC) of India, a subordinate CA of the Indian Controller of Certifying Authorities (India CCA), issues rogue certificates for Google and Yahoo domains. NIC claims that their issuance process was compromised and that only four certificates were misissued. However, Google is aware of misissued certificates not reported by NIC, so it can only be assumed that the scope of the breach is unknown.

  Source

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  There are some nameserver providers that have an API.

  When you register a domain, you can choose which nameserver you like. There are nameservers that work with certbot, choose one that does.

• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  The only disadvantage I see is that all my personal subdomains (e.g. immich.name.com and jellyfin) are forever stored in a public location. I wouldn’t call it a privacy nightmare, yet it isn’t optimal.

  There are two workarounds:

  • do not use public certificates
  • use wildcard certificates only
• ⁨Comment⁩ on ⁨Decreasing Certificate Lifetimes to 45 Days⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  The best approach for securing our CA system is the “certificate transparency log”. All issued certificates must be stored in separate, public location. Browsers do not accept certificates that are not there.

  This makes it impossible for malicious actors to silently create certificates. They would leave traces.

• ⁨Comment⁩ on ⁨⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  The “accepted anwer” feature seems very nice, i would love to see this implemented in other fediverse projects too.

• ⁨Comment⁩ on ⁨Rustdesk's lesser known features⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  I think its a completely different use case. MobaXterm is a fancy ssh/rdp tool with some extra features, while rustdesk is an alternative to teamviewer or anydesk - tools for remote support.

  Disclaimer: I haven’t used rustdesk yet, I have no need for this use case.

• ⁨Comment⁩ on ⁨Set desktop mode screen resolution⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Didn’t help. Still thanks

• ⁨Comment⁩ on ⁨Set desktop mode screen resolution⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Thank you. I found the option now with your help, but it doesn’t allow any change. The field is just greyed out.

• Set desktop mode screen resolution
  Submitted ⁨⁨4⁩ ⁨weeks⁩ ago⁩ to ⁨askandroid@lemdro.id⁩ | ⁨5⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨Should I replace NPM?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Yes, that is exactly what I meant.

• ⁨Comment⁩ on ⁨Should I replace NPM?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Personally, I would try to avoid publishing nginx proxy manager’s management web ui to the general public.

• ⁨Comment⁩ on ⁨Should I replace NPM?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Please don’t confuse the nginx proxy manager (npm) with the node.js packet manager (npm). The latter is frequently in the news regarding security vulnerabilities.

• ⁨Comment⁩ on ⁨fireTv⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  There is no content in this post.

  @taher12@lemdro.id I see this is your first post, welcome here :) If you need help, feel free to ask.

• ⁨Comment⁩ on ⁨Which operating system should I choose?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  For selfhosting, I would advise against installing a desktop environment and rather suggest to install a server version without GUI.

• ⁨Comment⁩ on ⁨Why would I buy this?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  True. According to protondb, it is not possible to even start the game.

• ⁨Comment⁩ on ⁨Why would I buy this?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Take a look at the reviews, and find this insanity on the top:

  need to be connected to online services even when you just want to play singleplayer campaign, and keep getting connection errors.

  Thanks, I’m out.

• ⁨Comment⁩ on ⁨VoidAuth Release v1.4.0 - SQLite Support 🗃️⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Does anyone know any important difference between voidauth and authentik? The latter seems to be a far more mature product, but the feature set looks similar.

• ⁨Comment⁩ on ⁨Immich mobile app sync V2⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I don’t think this feature is live yet, looks like it still needs some internal refinement. At least nothing like this was mentioned in the last few changelogs.

• ⁨Comment⁩ on ⁨We Built It, Then We Freed It: Telemetry Harbor Goes Open Source⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  It has a grafana integration, so it probably doesn’t include dashboards natively.