NaibofTabr
@NaibofTabr@infosec.pub
- Comment on shit 13 hours ago:
not after the cirrhosis sets in
- Comment on The Road to Quantum Teleportation 2 days ago:
At the moment it’s experimental, so no.
And just to be clear, this cannot be used to move information faster than the speed of light, ever.
In theory it might have application as a sort of tamper-evident seal for digital encryption.
- Comment on The Road to Quantum Teleportation 2 days ago:
In the November study, the researchers successfully “beamed” polarization between a photon pair, and they could do this because the particles were entangled.
Equating quantum (information) teleportation with physical teleportation of objects really just reveals that the author has no idea what they’re talking about.
- Comment on Report: Microsoft quietly kills official way to activate Windows 11/10 without internet 4 days ago:
Anyone know if massgrave still works?
- Comment on Windows 11’s 2025 problems are getting impossible to ignore 5 days ago:
Especially if you’re an Active Directory shop. Switching out that infrastructure is a heavy lift.
- Comment on Windows 11’s 2025 problems are getting impossible to ignore 5 days ago:
Win12 will be decent again
Windows 12 may stabilize a lot of the functional problems occurring in 11, but it will also have all of the new AI-powered end-user surveillance features they’re currently trying to implement fully integrated.
- Comment on Windows 11’s 2025 problems are getting impossible to ignore 5 days ago:
I do admit that I run Win10 IOT in VirtualBox for a few small programs that won’t run under Wine. Once a week, for a few minutes. I’m sorry. I don’t wear the shirt, because I feel like a fraud. Please forgive me.
Dude, virtualize all the things! In open source land, you run whatever code you want to because you can, and you don’t feel embarrassed about it.
- Comment on I'm there! 5 days ago:
So, yes actually. Check out earthwatch.org, they offer trips where you participate in ecological research and/or conservation efforts. For example, here is a 2-week trip focused around counting animal populations in the Mongolian steppe:
earthwatch.org/…/wildlife-mongolian-steppe
These trips are somewhat pricy (this one is US$4250), but typically include room and board for the entire period and all local travel. Also:
As a paying volunteer, you directly fund scientific research by covering permits, equipment, and other costs while supporting local vendors.
You do have to make your own arrangements for traveling to wherever the research location is.
- Comment on Contract for self-hosting help 6 days ago:
Whatever you do, and whoever you end up working with, document document document.
And I mean on paper, in a notebook, something that can’t crash or get accidentally deleted and doesn’t require electricity to operate.
You’re doing this for yourself, not for a boss, which means you can take the time to keep track of the details. This will be especially important for ongoing maintenance.
Write down a list of things you imagine having on your network, then classify them as essential vs. desired (needs and wants), then prioritize them.
As you buy hardware, write down the name, model and serial number and the price (so that you can list it on your renter’s/homeowner’s insurance). As you set up the devices, also add the MAC and assigned IP address(es) to each device description, and also list the specific services that are running on that device. If you buy something new that comes with a support contract, write down the information for that.
Draw a network diagram (it doesn’t have to be complicated or super professional, but visualizing the layout and connections between things is very helpful)
When you set up a service, write down what it’s for and what clients will have access to it. Write down the reference(s) you used. And then write down the login details. I don’t care what advice you’ve heard about writing down passwords, just do it in the notebook so that you can get back into the services you’ve set up. Six months from now when you need to log in to that background service to update the software you will have forgotten the password. If a person you don’t trust has physical access to your home network notebook, you have a much more serious problem than worrying about your router password.
- Comment on Contract for self-hosting help 6 days ago:
Because they want step-by-step guidance and support, and even design help, not just a few questions answered.
- Comment on How do you get a certificate for an internal domain? 6 days ago:
You can just use openssl to generate x509 certificates locally. If you only need to do this for a few local connections, the simplest thing to do is create them manually and then manually place them in the certificate stores for the services that need them. You might get warnings about self-signed certificates/unrecognized CA, but obviously you know why that’s the case.
This method becomes a problem when:
- You need to scale - manually transferring certs is fine maybe half a dozen times, after that it gets real tedious and you start to lose track of where they are and why.
- You need other people to access your encrypted services - self-signed certs won’t work for public access to an HTTPS website because every visitor will get a warning that you’re signing your own encryption certs, and most will avoid it. For friends and family you might be able to convince them that your personal cert is safe, but you’ll have to have that conversation every time.
- You need to implement expiration - the purpose of cert expiration is to mitigate the damage if the cert private key leaks, which happens a lot with big companies that have public-facing infrastructure and bad internal security practices (looking at you, Microsoft). As an individual, it is still worthwhile to update your certs every so often (e.g. every year) if for no other reason than to remind yourself how your SSL infrastructure is connected. It’s up to you whether or not it’s worth the effort to automate the cert distribution.
I’ve used Letsencrypt to get certs for the proxy, but the traffic between the proxy and the backend is plain HTTP still. Do I need to worry about securing that traffic considering its behind a VPN?
In spite of things you may have read, and the marketing of VPN services, a VPN is NOT a security tool. It is a privacy tool, as long as the encryption key for it is private.
I’m not clear on what you mean by “between the proxy and the backend”. Is this referring to the VPS side, or your local network side, or both?
Ultimately the question is, do you trust the other devices/services that might have access to the data before it enters the VPN tunnel? Are you certain that nothing else on the server might be able to read your traffic before it goes into the VPN.
If you’re talking about a rented VPS from a public web host, the answer should be no. You have no idea what else might be running on that server, nor do you have control over the hypervisor or the host system.
- Comment on Need some help troubleshooting 1 week ago:
This looks like either underextrusion causing gaps in the surface, or the filament sticking to the nozzle a little too much and tearing as the nozzle passes over it.
Simple things first:
-
check that the extruder clamp screw (that holds the filament against the extruder drive gear) is still tight - it’s possible that the filament is just not being pressed against the extruder drive, allowing it to slip
-
is your nozzle clean on the outside? or does it have a clump of plastic buildup on it? if there’s plastic stuck on the outside of the nozzle, the extruded plastic may be sticking to it and tearing
-
is this a filament that you’ve used on this printer before? have you done a temperature tower? have you done a flow rate calibration?
-
do you have more pictures of your test prints? other angles?
-
- Comment on Deeper babe 1 week ago:
Yeah man, this thing’s just a prototype for airframe design testing:
en.wikipedia.org/…/Lockheed_Martin_RQ-3_DarkStar
Tell me that wouldn’t create UFO sighting reports if it was seen flying around in 1996.
There is a government coverup, but it’s boring, it’s just to protect military secrets. People embellish because they want it to be exciting, otherworldly, special.
- Comment on Banana For Scale 1 week ago:
I am a banana!..
- Comment on Solder-It-Yourself DDR5: Russian modders pitch the Idea of making their own RAM 1 week ago:
Hey, would you like to buy some dehydrated water?
Easily produce your own water whenever you need it!
To make 1 liter of water, just add 1 liter of water!
- Comment on US | NY Governor Hochul signs bill requiring warning labels on ‘addictive’ social media 1 week ago:
Oh, I don’t know, putting labels on things can be very effective for general public awareness. Plenty of people using Instagram never think about these kinds of things, it’s just not part of their normal concerns. The notifications might be an annoyance, but they will also start a lot of conversations between people that would not have happened otherwise, conversations that will turn into “wait, why do we let this company do this kind of thing at all?”
- Comment on Random idea: a federated alternative to Amazon Prime built from independent shops? 1 week ago:
This is basically eBay.
- Comment on Tip yer driver! 1 week ago:
That driver is so cut.
- Comment on What is the moral jurisdiction behind not wishing who're rich and in executive positions to die? 2 weeks ago:
Meet the new boss, same as the old boss.
- Comment on Roomba maker iRobot swept into bankruptcy 3 weeks ago:
…maybe? I’m not so much of an absolutist… I think there’s room in the world for companies that focus on design over production…
- Comment on Finally, Common Ground... 3 weeks ago:
Dude, chinaman is not the preferred nomenclature.
- Comment on Roomba maker iRobot swept into bankruptcy 3 weeks ago:
Hmm… counterpoint: Arm Holdings
- Comment on Are you sure about that? 3 weeks ago:
It’s not paranoia if they really are out to get you!
- Comment on Change my Mind 4 weeks ago:
A lot of advertising is built around making consumers feel good for buying particular products, not convincing them to buy in the first place. Debate in this context would be useless because it’s more about confirmation bias.
- Comment on Where Winds Meet: Why China's Wuxia RPG is Winning Over Global Gamers 4 weeks ago:
This is an ad.
- Comment on UK campaigners condemn ‘creepy’ digital billboards that can track viewers’ responses 4 weeks ago:
The supplier, 30Seconds Group, says the cameras allow them to track “occupant engagement” from residents who are a “captive audience” as they wait for lifts to their apartments.
JFC, how do these people sleep with themselves at night.
- Comment on Amazon’s dynamic pricing is causing chaos for school budgets 4 weeks ago:
…move fast and break things?
- Comment on Looks Like We Can Finally Kiss the Metaverse Goodbye 4 weeks ago:
To be fair, they’ve been doing mobile surveillance for a long time.
- Comment on Epic boss Tim Sweeney thinks stores like Steam should stop labelling games as being made with AI: 'It makes no sense,' he says, because 'AI will be involved in nearly all future production 5 weeks ago:
OK, sure, but again the claim was:
there is no problem in keeping code quality while using AI
Whether or not human-written code also requires review is outside the context of this discussion, and entirely irrelevant.
- Comment on Epic boss Tim Sweeney thinks stores like Steam should stop labelling games as being made with AI: 'It makes no sense,' he says, because 'AI will be involved in nearly all future production 5 weeks ago:
OK, sure, but again the claim was:
there is no problem in keeping code quality while using AI
Whether or not human-written code also requires review is outside the context of this discussion, and entirely irrelevant.
