Ooops

“If flywheels seem like an exotic energy storage solution, that’s largely because they have generally been relegated to niche applications. A spokesperson for Qnetic told pv magazine USA that grid-connected flywheel pioneer Beacon Power deployed 400 of its 100 kW (25 kWh) units at two utility sites in New York and Pennsylvania between 2011 and 2014 to provide fast-responding frequency regulation. Each location had 200 units with a nameplate capacity of 20 MW (5 MWh), and both are still providing frequency regulation service and generating revenue.”

I would assume that flywheels are exotic because their niche (short- to mid-term storage, quick reaction times) wasn’t much needed so far in a grid dominated by non-renewables. But for the same reason I don’t get all that talk about competing with lithium-ion batteries. Flywheels don’t really fit the same category as batteries. And lithium-ion batteries in particular are not well suited for grid-level storage anyway. Their benefit at the moment is basically just availability because that’s the type of battery that was produced and optimised at scale for the last decade.

but I believe you can get a free domain usually from noip

Up to three, including stuff like mx entries. For the free tier you get a mail every 30 days with a link to confirm that you are still using that name and that’s it.

My “script” was literally

curl *<blocklist1 link>* > templist
curl *<blocklist2 link>* >> templist
grep ‘^0\.0\.0\.0’ templist | awk '{print “local-zone: \”“$2”\" always_refuse"} > blocklist.conf
systemctl restart unbound.service

and an include blocklist.conf at the bottom of unbound.conf (awk to convert it from the “0.0.0.0 <site>” format to “local-zone: <site> always_refuse”).

It literally is cron job or systemd timer to load an updated blocklist from time to time and I haven’t looked at it for years.

If you just want simple ad blocking you don’t actually need pi hole for it’s web interface you don’t ever look at once it runs. Unbound alone can do the job with minimla configuration.

Nowadays I even changed my setup to dnsproxy, which doesn’t even need any config. It’s just a handful parameters when you start it. And it does all the filtering for my home network as well as providing DoH access for when I’m not at home and connected from somewhere else.

I never understood pihole in the first place. It’s just a fancy web interface you do never look at if the thing does its job quietly in the background. And unbound alone is perfectly able to use blocklists with one line of configuration (and an onliner script to convert the common lists into the right format).

no-ip because that was one of the few my router back then many, many, many years ago supported out-of-the-box and there was never a reason to change…

That’s generally good advice but not actually security related.

Removing all the stress on your ressources by using a non-standard port is good for your ressources, But those automated scanners looking for unsecured devices and trying out password like admin/admin are not actually a risk. It’s just a case of security by obscurity and never actually serves its purpose.

No, thanks. My “research” is testing AI from time to time. And it is indeed artificial idiocy most of the time.

And when basically all answers I ever get from AI proponents is either “Those local models are just not powerful enough so it’s on you that you don’t get sane results” or “Those models just need some tuning so it’s on you for not running a local one you can optimise for your usecase” you start to realize there might be an entirely different problem…

I get perfectly good search results by avoiding AI, so there is really no need for me to tune anything but the settings on my searxng instance…

I still don’t understand where people are findign these useful AI answers. Every single time I try it seems AI is an acronym for artificial idiocy and I wouldn’t even trust it to tell me the time.

(In fact I just resently tried asking that stupid meta AI in sand-boxed Whatsapp (I still have to keep because of some stubborn examples of humanity) about the time in another time zone… It could tell my local time, in which time zone I was, what timezone I was asking about and what the difference between those zones was. Yet it could somehow not answer the question directly before being led there step by step. And then it still did the math wrong… 🤬)

I have made the completely opposite experience. I tried so many distros and every single time some non-trivial issues came up my search ended in the arch wiki finally explaining stuff and writing out available options in config files instead of just telling my what option in what GUI config tool (that might or might not exist in my distro) I should click, then pray it works.

So I wasted years listening to the “No, Archlinux is a meme and totally unusable for inexperienced people” before installing archlinux, which is now running for more than 9 years without problems, and will happily point people asking questions for other distros to the relevant parts of the arch wiki that actually spell stuff out properly.

how it affects the temperature

positively… 🔥

That’s what the documentation says. I don’t know if/when that changed as I barely use docker.

Well… it’s the default iirc (192.168.65.0/24). So that’s what docker uses if there is no explicit configuration.

the 192.168.65.1 address that manifested out of nowhere

Or it’s the internal virtual lan your docker config uses…

If you use the shortlived profile and your key is compromised, you benefit from the short lifetime.

Maybe I’m just too stupid to understand how those certificates work.

But in what scenario is my key compromised but not my server? Because someone getting control of my server can just get an new long-term certificate. That was my actual point in the comment above. I understand the argument of added security if they only issue short-term certificates. But where is the benefit of my short-term certificate when someone compromising my server can just get a new long-term one in seconds?

Also we are talking about self hosting. I understand the issue of revoking certificates when you have a massive userbase where some might miss the revocation for quite some time. Not so much with the dozen max family and friends.

I know that I could easily change my config. My point is that a) they are failing to advertise this and b) I don’t see any reason to do it. I understand the arguments about security benefits of shorter certificates on their side and iirc they are already planning to change it from 3 months to 1.5 months in the future. But in what scenario do I benefit from a short-term certificate as long as the regular ones are still available anyway?

Certbot came with a systemd timer running twice a day (0, 12 +12h random) that only renews –iirc– when the certificate has 30 days or less to live. Also I looked it up and my Version 6.7 Cerrtbot neither mentions the option with the --help option, nor in the manual (where there is just one instance of “profiles exist, no other details given”).

So they probably need another way than a random blog post when they want users to use (or even just know about) that option…

So exactly like an AGI emerging after just one more update.

You mean they are reaching geo-synchronous orbit after already skyrocketing this year?

“new analytical methodology”

faeceomancy?

Wait… IT isn’t informations technology?

It’s basically two-way TLS. It’s not only your server providing a certificate to prove it’s the real thing and not just some men-in-the-middle device or your connection for redirected, but the other side of the connection using the certificate, too, to show they are actually the devices allowed to communicate.

So this basically revert the security. You are no longer trying to filter out access attempts when they show questionable behavior, but completely reject anything unless it’s explicitly authorized. Which of course only works when you or (a small number you can manually manage of) others access that stuff from fixed devices that you can set up properly.

PS: For me fail2ban does basically something similiar. I have several web interfaces exposed via reverse proxy. But I barely ever use those interfaces manually; normally it’s via apps that access the services via that web interface. So things like failed authentifications or misstyped passwords don’t happen (unless when setting up something new maybe and then I’m there to unban a device manually if I screwed up). So fail2ban is set up to aggressively bans IPs for hours just for a single failed attempt.

That’s keeping all those spammy bots looking for easy targets away very effectively, yet completely invisible for my legitimate use. After all that’s always the core issue: security vs. convenience. You build the best possible security that also doesn’t overly interferes with your normal use. Also the reason there is no on-size-fits-all solution because it’s about your use-case.

it will bring value to […] the community.

I’m inclined to find this more believable than similiar statements of all the usual AI suspects.

I’m more irritated than I’d like to admit by the fact that there is no 16V to 6x SATA power converter going with that M.2 to 6x SATA adapter.

But you are not scalable.

The companies that in my country have already applied for grid connections of more solar and battery capacity than would be needed in the next few years yet waiting and waiting and at some point just giving up would be.

Oh, and now law changes will also kill all future plans as no one will build any more solar with their own money (or get loans from banks) after the decision if they can actually feed in their produced electricity is shifted to the control of grid providers all-well connected or subsidiaries with fossil-fuel focused energy companies.

I think the more active people are in countering propaganda

Oh, so you never actually tried to talk to those lost propaganda victims conditioned to reject facts (because otherwise they wouldn’t fall obvious bullshit anyway) and can’t be convinced of reality anymore?

Propagandists spend so much time and money on propaganda

Your mistake is believing that they are spending much money. It’s actually a small fraction of the money they makew from burning the planet, miniscule if compared to the amounts accumulated over decades, and i’s also the easiest option. They could also just buy politicians who are incredible cheap but still more expensive than the ongoing media desinformation campaign.

They already moved on to different tactics like restricting the ability to connect solar to the grid or simply burying all applications in red tape for years.

en.wikipedia.org/…/Wikipedia:Signs_of_AI_writing

That’s the probably most unhelpful and stupid thing I saw in quite some time. The AI or Not Quiz right at the beginning regularly links the exact same things to human or to AI (404 links are a sign or AI hallucination or just natural link decay that show it’s from a human; wonky grammar is a sign for AI unless the text is human-written where it’s just bad english that LLMs would not produce intentionally…).