NaibofTabr

“Do you know why I pulled you over?”

“…do you?”

I am not vegan, but I’m open minded and in favor of reduced consumption. I’ve tried several meat substitutes and enjoyed some. I keep a package of Beyond Beef burger patties in my freezer and eat them regularly. I’m looking forward to trying the lab-grown salmon when it reaches my area. I eat meat-free meals at least three times per week (I know that’s not a lot, but my background is meat with every meal, so… one step at a time).

I’m saying all of this because I feel the need to preemptively defend the following:

Every version of vegan “cheese” I’ve ever tried was bloody awful and in no way an acceptable substitute for actual cheese. The best you could say about it was that it was vaguely the consistency and similar in mass to an equivalent amount of cheese. The flavor, smell, texture, and behavior (e.g. capacity to melt or be thinly sliced, shredded or grated) were all wrong. I have a distinct memory of eating a bagel with vegan cream cheese, which both tasted and felt like glue paste. It had as much in common with actual cream cheese as did the paper the bagel was wrapped in.

EA mismanages creative studio to death, as is tradition.

BioWare died 11 October 2007. We’ve been holding an open-casket wake ever since.

I’m not sure you know what SNMP is

Oops, I was definitely confusing that with ICMP. Good point.

https://oneuptime.com/blog/post/2026-03-20-block-icmp-firewall-risks/view

Also Iot devices aren’t really much of a threat.

I consider it a threat if a device maps my local network, identifies the other devices I have connected, and/or monitors my network traffic and then sends a report on that back to its control server.

Also don’t put things on the internet. That is generally a really bad idea and will bite you in the butt eventually.

Ain’t that the truth. We really should just not.

The same idiots that fill their homes with active internet-connected microphones.

I’m looking for advice to maximize security.

The most important answers to this all live outside your server. What is your home network like? Do you control the gateway? Do you have a dedicated firewall? Do you have devices segregated into VLANs so they can’t observe each other (especially IoT devices)? Do you have SNMP disabled?

1. Containers are not a security barrier. They cannot be, they never will be.
2. If you are defending against intrusion at your local file server, it is already too late. The call is coming from inside the house.

If you want security, you block all inbound and outbound traffic by default at your network firewall (not the server OS firewall), and then you open only the ports that you actually need, one by one. You set all the closed external ports to do not respond (“stealth” mode), so that anybody trying to reach your network from outside just gets nothing back except on the ports you specifically need to use. You segregate your internal network into logical areas, and you put things that need to talk to each other on their own VLAN, which may or may not have access to the upstream WLAN trunk depending on what they’re doing. You don’t allow crosstalk between VLANs except in very specific cases. You set static IPs and document them, so that you never have to ping or traceroute internally to find something, so you don’t need SNMP. Anybody trying to use SNMP is conducting surveillance on your network and should stick out from other traffic (some “smart”/IoT devices do this automatically - they are bad and should be treated as malicious and should not be allowed to phone home). And then you monitor your traffic at the firewall, and you deal with anything unexpected as it comes up (like once a week review the logs until you have a sense of what normal looks like on different days at various times, then maybe set a few automatic alerts for things that exceed normal-ish boundaries, then go to reviewing like once a month or so - you don’t need to be checking your logs hourly unless you have some reason to be actively paranoid).

If you handle everything correctly at the router/firewall level, you’re way way beyond the security of most residential and small business networks. You’re not, you know, impenetrable, but you’re at the point where somebody with experience and resources will have to be trying to break into your network specifically on purpose. If you’re that kind of target then nothing short of an actual SOC is going to help you, and running self-managed servers on your home network is a bad idea.

They’re cheaper to implement, and in this context it certainly looks the part. That panel looks like a Garmin circa 2008:

Ugh, I thought we were getting over this already.

The interior is fine, I can appreciate the clean lines and overall minimal ornamentation. White is probably a bad choice for a car that any real human is going to use.

But a touchscreen for the interior controls? Really? Is it 2015 again? Physical buttons are better. I would even go so far as to say they’re necessary for any controls that a driver might operate while driving - they should be findable by feel only, in the dark, while your eyes are on the road. A luxury vehicle design should certainly have physical controls, even if they’re tucked behind one of these panels to preserve the look of the interior:

It wouldn’t be ideal, but it would be much better than that thing that looks like a phone bolted onto the center spine, which is just ugly. It sticks out from the rest of the interior design like a flashing neon sign of cost-cutting. It looks like a POS terminal, like I’m about to pay for my coffee:

What a bad decision, or probably chain of bad decisions made through several committee meetings.

Ocado! I remember watching a promotional video about this being the future of grocery stores like a decade ago, and always vaguely wondered what happened to it. The whole hive-picker robot-carts-on-rails thing seemed very well developed, but I wasn’t convinced it was really practical.

Thanks for closing that loop for me.

Well the “critical/irreplaceable” qualifier is kind of important - that’s why I specified it. It’s up to you to decide what that means for your data and risk tolerance.

For everything that I consider irreplaceable, I’m not comfortable with anything less than 100% duplication on the live system, and also an external offline backup. Even with enterprise-grade hardware, I don’t trust storage devices, they’re all destined to fail. Storage is the most important part of a data server, and should be treated like it is constantly trying to light itself on fire, like a library with wooden shelves lit with torches. All the other components are just as unreliable, but more expendable.

Admittedly, when you account for hot standby drives, the cost is that my storage availability is only 40%. A 16TB storage pool is in fact 5x 8TB drives: 2 mirrored pairs and 1 standby. On the plus side, thanks to ZFS and TrueNAS those drives can be whatever, no need to worry about RAID considerations for matched drives. SAS or SATA? who cares? They can even be different speeds, ZFS will compensate. Buy whatever is the right size for the pool, let the system deal with the other issues.

Can you put a price on stability? longevity? peace of mind?

The server hardware is all old repurposed stuff - a desktop build from 2013, secondhand data center surplus, refurbished/used drives, none of it’s worth much and almost all of it is well past end of life, any part of it could fail without warning at any moment. It doesn’t matter, it is highly reliable because the redundancies have redundancies, including the boot drives. Trying to squeeze every bit of value out of the hardware is a losing game because it’s basically worthless anyway, but the same would be true if it were all new top-of-the-line gear. The hardware is expendable, the data is not. Buy more cheap hardware, plan for it to explode, learn how to build stable, recoverable systems.

Used data center drives are great for a home lab. They’re built like tanks for hundreds of thousands of hours of constant operation. Unless you’re running a business hosting a bunch of public-facing websites out of your garage, you don’t have that kind of workload (and if you are doing that you should just be buying new drives anyway and writing them off as a business expense).

Data center drives get replaced when they hit a ceiling of operating hours, with no actual faults, or if they experience any minor faults (it’s a business expense - drives are consumables - data centers have storage rooms of spares sitting around, they just replace them).

Any competent reseller should be able to give you a SMART report, and that should tell you if there are any major issues (generally they don’t get resold if there are, nobody will buy them). If the seller won’t give you a SMART report then obviously don’t buy, they’re either a scammer or incompetent.

If your array redundancy is set up properly then there’s no reason to be “scared” or trust in “good luck”. Assume luck will be bad. Mirror every storage device that has critical/irreplaceable data on it, and have at least one hot standby drive in every pool. Don’t bother with complicated striping schemes to try and scrape a little more storage space out of your drives, that’s dumb. One-to-one mirroring for every drive. Storage drives are consumables. They will fail, not if but when, even if you only buy new. Learn to read a SMART report. Enjoy quality hardware with no real problems at low prices.

“…A.I. it could very possibly become a powerful God that is visible and tangible to people…”
“…an A.I super being will be…”

My brother in machine-Christ, you need to take a deep breath, go outside, and touch some grass.

Computer networking is basically a completely different field from operating systems and programming, though obviously some of the concepts are relevant. Turns out plugging these things into each other so that they can share information in a useful way is kind of difficult. A lot of very smart people have been working on it for almost 70 years, and frankly it’s still a fucking mess, so don’t feel bad if you feel a little lost.

Starting with the basics is the right instinct, in my opinion. Start with the OSI model:

https://jakarta.telkomuniversity.ac.id/7-osi-layer-the-building-blocks-of-networking/

https://www.geeksforgeeks.org/computer-networks/osi-model-analogy-osi-7-layers-explained/

This helps to break down the actual functioning of the network into logical steps. It’s very helpful when you’re trying to visualize the operation of some of the more abstract bits of the technology stack (like TCP/UDP), and when you’re trying to think through what piece of it might be causing your problem in the moment (the router is on and the cables are plugged in, why is there no connection?). It’s a map that can help you when you’re lost. It’s also a guide to how a lot of people who work on networking technology think, so it can help you understand how things are supposed to work.

Beyond that, Professor Messer is a great resource: https://www.professormesser.com/

If you feel reasonably confident with computer hardware components and various types of cable connectors, you can probably skip the A+ part and go straight into Network+. Because you’re doing this as a home hobbyist (not for the actual certification), I recommend just listening to the courses like you would a podcast. Don’t try to memorize or fully understand everything, just use it to get a grasp of the terminology and purpose of the various pieces.

I also recommend taking on a project to gain experience. Implenting PiHole https://pi-hole.net/ for your home network will cover routing, DHCP and DNS, plus you can do it with a Docker container.

Blasphemy! Only the wicked are punished by The Hand! Crush the heretic!

Ah yes, I too require everyone else to only express views that agree with my own or else keep silent. Of course, I am the only person allowed to have nuanced opinions.

🤡

Does Proton really support Trump? A deeper analysis

One thing to note is that while on Reddit, people are alleging that Proton is a company run by a fascist, pro-MAGA, pro-dictatorship CEO, users on X are accusing Andy and the company of being anti-MAGA/anti-Trump.

So, in the face of all the evidence I’ve found, to compare Andy to a tech oligarch like Zuck and Elon, who are now bootlicking on display for all to see, is not supported by the evidence.

[…]

However, being disillusioned with one party on one issue doesn’t mean that all of a sudden Andy Yen changed all of his stances and that now he’s actually pro-Republican or pro-MAGA. All of the evidence gathered suggests the exact opposite.

Considering how many users here have expressed similar disillusionment with the current Democratic party, it seems a bit hypocritical to judge Andy Yen for having the same feelings (or expressing them on occasion).

This whole “Proton supports MAGA” thing is another example of internet mob-think where everybody has an opinion informed by no facts at all, actively ignores or dismisses the larger context in order to protect that fragile opinion from reality, and most haven’t even looked at the original statements that sparked the controversy.