• 0 Posts
  • 16 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle
  • You misunderstood my point. LocalSend is great. It does exactly what it promises, and works well.

    But you’re claiming “AirDrop = LocalSend” and that is not true and causes false expectations. People used to Apple think they can use it in all the same situations and for the same things, which they can’t. Just because you mostly used it in the same network doesn’t mean most people use AirDrop that way, and I know quite a few that mostly use it while out and about, meeting new people etc.

    The “Good advice” version is too tell them there is LocalSend, which can do quite a few things like AirDrop, but not all. Basically make it clear they need to be on the same network.


  • This is such bad advice. If you tell people that, people expect it too work like AirDrop, which it doesn’t.

    LocalSend is great, but it is much more limited than AirDrop. As the name suggest, it only works if people are in the same network. If you’re in your home network, and both devices are yours, that’s probably fair enough, but that isn’t the point or (only) use case of AirDrop.

    Also if you’re installing it on a Linux machine which happens to have a firewall enabled by default, you will have to open the correct ports for it to to work out even just see the other devices.




  • It’s all a matter of what you consider reasonable risk. I also run some specific services exposed where it makes sense (they are designed to do this, think things like home assistant or next cloud or jellyfin), but would never put anything that is used to do server administration public facing (Webmin, Termix, proxmox, that sort of thing). If the purpose of the tool is to perform or allow elevated actions, I run it behind a VPN (yes for me that includes ssh).

    There’s also a difference between being randomly port scanned and/or probed, or being actively and personally targeted for some reason. If the second is ever a reasonable threat, that changes what is acceptable dramatically as well.


  • Yes, it inherently is. Authentication/encryption happens as the very first thing at the network level, before anything resembling a service becomes accessible. This is fundamentally different than for example a web interface, which needs to present “the Web page” to allow the user to log in, which might involve multiple individual parts that can already have a 0-day.

    As a more direct comparison: look into historic vulnerabilities between ipsec VPN and SSL VPN. The former is the older technology, the second is more “web like”. The number of serious CVEs for the latter over just some manufacturers (Cisco, fortinet, …) in one year probably beats the number for ipsec in is entire life time.

    Going back to Tailscale (or netbird, …): it is one very secure layer which then secures everything. You can have 1 service or 20, same security. If you expose individual services, c you also expose every possible vulnerability of all of them, so all 20 services if that’s what you run.


  • If you’re in a country where there’s is snow or just cold temperatures, you don’t “randomly” have 4 extra tires. You literally need them for at least a few months. Typically you’d swap over in late October, then back in March/April depending on how it’s going. Swapping them yourself is trivial enough, but it’s also incredibly cheap to get them swapped at a shop.

    Note that at least last I checked, the proper transition temperature isn’t “freezing” or “there is snow”, but about 7-8°C. That’s when winter tires will have better grip, and summer tires grip steeply diminishes below this. Once there is actual snow, your just actually up shit creek with no paddle on summer tires. But if you have to emergency brake at like 3°C for example, it makes a significant difference what kind you got on your vehicle.





  • But that’s exactly the problem. Those that were the target audience for the article do not have well managed passwords. For them the passkeys arguably do increase security, while having a bit more “lock-in”.

    For those that have well managed passwords (like probably most in this community), they are perfectly fine to use because they don’t have lock-in either. I have full control over my used passkeys.

    Basically you’re not getting the “normies” to use proper password management, and for them they do provide additional security and convenience. They can always add more passkeys on different vendors, you’re not limited to just 1 per service. Yes, adding them is a hassle, but so it’s managing passwords and following higher security standards in general.


  • My various servers, firewall and nas are relatively power optimized. Everything including switches (most with some 10g ports) and access points is 160 W or so combined. I can’t give you monthly usage, as I’ve got solar+battery so it’s frequently just 0 kWh for some days. It’s also rather hard to separate from the other power usage in the house when solar doesn’t fit cover it.





  • After switching to Linux (CachyOS) over a year ago now, I think I’ve booted my still existing windows installation twice. Both times was at the very start to get some settings from installed software to migrate and to sync some data or something, I barely even remember. That has also been over a year ago.

    Ever since I’ve switched, I stopped noticing I even have an operating system. I just use my PC. Unbothered by popups, updates and bloat are (re)appearing pinned in my start menu (no I didn’t want to have candy crush installed). Literally everything just works, and I’m mostly using my PC for gaming.

    I regret not switching much sooner.