IsoKiero

joined 2 years ago
MODERATOR OF
[–] IsoKiero@sopuli.xyz 5 points 9 hours ago

You are on the right track. Installing Debian packages don't require password to access shared libraries but to write into system wide directories. That way you don't need to install every software separately for every user. Flatpacks are 'self sufficient' packages and thus often way bigger, since they don't generally share resources.

From security point of view there's not much difference in every day use for average user. Sandboxed flatpacks can be more secure in a sense that if you harden your system properly they have limited access to the underlying system, but they can be equally unsafe if you just pull random software from a shady website and run it without any precautions.

Flatpacks tend to have more recent versions of the software as they can 'skip' the official build chain and they don't need to worry about system wide libraries. Tradeoff is that the installations are bigger and as flatpacks run on their own little sandbox you may need to tinker with flatpack environment to get access to files or devices. Also if you install flatpacks only for your user and you have multi-user setup other users of the machine can't access your software, which might be exactly what you want, depends on your use case.

Personally I stick with good old Debian packaging whenever possible, I don't see benefits of containers like flatpack on my own workstation. Newer software releases or using software not included in official repository are pretty much the only exceptions when flatpacks make more sense to me.

But there's a ton of nuances on this, so someone might disagree with me and have perfectly valid resons to do so, but for me, on my personal computer, flatpacks just don't offer much.

[–] IsoKiero@sopuli.xyz 3 points 1 day ago

My now near adult kids have actually understood and been thankful that their childhood was 'unfairly strict' on what they could do on their devices. They have friends who have had unmonitored access to anything on their devices and it starts to show badly enough that even their peers notice how short their attention span is and how twisted their view of the world has become.

[–] IsoKiero@sopuli.xyz 1 points 2 days ago

There are all kinds of laws regarding on how parents should treat their children and one might argue that keeping non-age appropriate material away from them is a reasonable line to draw into. For example in here with movies it's pretty common practice (depending on a theater) to allow kids to 'higher age bracket' PG-rating with a guardian.

But the whole problem, at least from my point of view, can't be solved only by either technological or legal barriers or solutions. Parenting is a tough job and from what I can see there's really not enough support for them to do the job. "It takes a village to raise a child" used to be pretty commonly understood approach where all individuals from school bus drivers and cashiers played their small part on educating kids on how to behave and how the world works. Today it's just rules and regulations which adults can use to hide behind and avoid taking any kind of responsibility and also, at least on some cases, the same rules say that you're not even allowed to intervene if kids are being kids and do something stupid.

Obviously a lot of things are better now too than even in the 80s and 90s when I was a stupid kid, but I'd say something is also lost on the way.

[–] IsoKiero@sopuli.xyz 4 points 2 days ago

We need to pick our battles. I don't see much difference in paying Google for a service than having a Spotify family plan like I do. I know spotify has its own problems and my money would be more ethically spent on some other service, but with everything else going on life I can't be arsed to switch to anything right now. For me it gives enough value for the money spent and that's good enough for now.

[–] IsoKiero@sopuli.xyz 1 points 2 days ago

I agree. It's a bit tedious to configure, but rock solid and has all the features you could ask from a proxy.

[–] IsoKiero@sopuli.xyz 2 points 3 days ago (1 children)

Sikäli kun tämä muutos menee läpi niin sehän ei suinkaan tarkoita automaattisesti mitään ydinasevarastoa Keuruulle. Näin kaikentietävänä nojatuolikenraalina veikkaan että jos ydinaseiden käyttö Suomen lähialueilla jostain syystä tulisi ajankohtaiseksi niin todennäköisempi skenaario on, että jonkun natomaan sukellusvene/lentokone koukkaa vain Suomen alueen läpi itään päin mennessään. Ehkä pysähtyvät matkalla tankkaamaan ja abc-burgerille.

Sitä minäkään en ymmärrä että miksi tuo muutos piti nyt noin hosumalla alkaa puskemaan läpi, ei tässä nyt mikään kiire asian kanssa ole ja, niinkuin uutisissakin on ollut, tällaiset päätökset on aikaisemmin viety ihan koko eduskunnan voimin eikä minkään hallituskabinetin ilmoitusasiana.

[–] IsoKiero@sopuli.xyz 1 points 3 days ago (2 children)

If they actually worked, sure. I've been a parent for nearly 20 years now and at least in here there's always been some kind of programs, information campaingns, news articles, tools and pretty much everything you can imagine to help keeping your kids safe. You obviously don't buy porn magazines for your teens and don't show news from war zones to your young kids and keep eye on the movies/shows they watch, but somehow every precaution is lost when it comes to the internet. I don't know if it's lack of understanding in general (as in what you can find from the net) or if it's just the easy way out since you don't need to learn how to apply limits on devices, but somehow (at least in here, based on what I've seen/heard) it's not taken as seriously as PG-ratings on physical media.

And in that a system-wide setting on devices which would include allowed PG-rating on HTTP-headers (or equivalent) might be a decent solution. Obviously parents still need to pay at least some attention on the devices their kids use, but that wouldn't require setting up a pihole on your network which blocks tiktok. However, as I said, that's helpful tool to the parents only as long as it's just a field on a local user account for the device, not something you'd need online services to verify.

Technically that would be pretty easy to implement and even if it's just an extension to HTTP headers that would cover nearly all of the use cases today. Sure, the kids interested in tech could bypass that pretty easily, but that applies to nearly all of the parental controls anyways. But all those benefits obviously vanish if the age setting needs verification from someone else than the parent and it's not stored just locally in the device. Building systems for adults to verify their age in order to look some bare nipples is a colossally stupid idea, but I'd guess nearly all of us here on fediverse already understand that.

[–] IsoKiero@sopuli.xyz 3 points 4 days ago (4 children)

A lot of parents sadly lack any kinds of skills to use those tools nor even know that they exist. I'm not inherently against the approach where user agent sends some rough age (allowed R-rating or something) to the website which can then block minors from accessing porn/violence/whatever. If it was just that, locally stored info if the user is minor or adult, it could be a pretty decent approach to even technically less inclined parents to give some limits on what their kids can do.

But as with nearly every 'protect the kids' thing, it's a pretty damn slippery and steep slope. If adult verification requires something more than a local variable that's the point when the whole system becomes a tool for surveillance instead of a helpful thing for parents/schools and all of these "solutions" worldwide seems to be going in that direction.

[–] IsoKiero@sopuli.xyz 11 points 5 days ago

Said all bread tasted like dessert.

A friend of mine was couple times on a work trip in the USA back when Nokia was a dominant player on cellphones for a few months at a time. He often complained that his breakfast sugar could have used more juice/youghurt/bread/whatever. Also, while he was a bit on the heavy side and not a light eater by any stretch, the portion sizes around there were apparently just ridiculous everywhere and everything was covered in some form of grease. Either straight up deep fried or just buried in cheese/bacon/etc.

I don't think situation has much improved in 20 or so years.

[–] IsoKiero@sopuli.xyz 10 points 1 week ago

"They intentionally had schoolgirls in a school for girls that we were targeting with missiles in order to give the other guys something to whine about". I don't know what kind of twist in thinking you'd need to make that sound perfectly legitimate and good reason.

[–] IsoKiero@sopuli.xyz 6 points 1 week ago

I'd guess there's some tools which rely on RSS feeds or something to update seeds automatically, but that's just a gut feeling. Also it shouldn't be too difficult to write your own, but I don't know if anything 'production ready' is out there.

[–] IsoKiero@sopuli.xyz 18 points 1 week ago (2 children)

Discoverability is one issue and trust for longevity is another. No bigger distribution is going to rely their official download links on an individual home lab which can disappear overnight. Also I guess there's also guestion if images are provided as is without adding/removing your own 'extensions', but that's what cheksums are for.

And this is obviously on a general level, I'm not trying to suggest that xana is not trustworthy :) But torrent seeding is a helpful thing for community, and easy/safe to set up.

 

I got few SAS drives recently from a decommissioned hardware and I'd like to add them to my home server. However, my server case doesn't have any 2,5" slots and as I'm planning to use 8 drives on an array I'd rather have a proper mounting for them instead of duct tape and zipties.

Ideal enclosure would fit in a 5,25" slot and have a backplane with power bus and miniSAS-connector. There's plenty of similar cases around for SATA-drives (like this one, but does anyone know if similar exists for SAS drives? And obviously cheaper is better.

One option I have is to cannibalize a backplane from IBM x3540, but it'd need a some kind of frame to hold the drives. I have a 3d-printer, but getting mechanically good results would mean couple of afternoons worth of tinkering with CAD and that won't fit nicely in the case I have, so maybe this hive mind can come up with a suitable solution?

 

Hello all,

I've been fighting with razberry7 pro on top of rpi4B and it just doesn't work reliably (if at all). I've dug around the internet, tried different software on it, verified that firmware is up to date and so on and even fed my logs to LLMs in hopes they could spot something. Currently my z-wave devices are practically useless (gladly I got devices with physical controls too) and based on discussions around I'm not alone.

So, I think it's time for me to just get something better. Ideal device would be wired over ethernet and have z-wave and zigbee hubs and possibly POE, but I haven't found any which would also be fully supported by HA.

ZWA-2 should be pretty solid choise, but I'm running HAOS in a virtual machine on my proxmox host and I'd really like to have an option to migrate VM to different hardware as needed but that would require also physically moving the USB plug from one host to another.

What are your experiences, what I should get? I'm in EU, so frequencies need to match, but otherwise I'm pretty open for suggestions and having a rock solid z-wave network is a top priority. If it means using ZWA-2 or some other USB gadget I can work with it, but, again, ideally I'd like to have something wired to the network. Wifi is of course an option, but good old ethernet would be preferred.

 

Vuonna 2022 viranomaiset suosittelivat, että kun autoilija havaitsee takaa tulevan hälytysajoneuvon, tulee oman auton hätävilkut laittaa päälle. Sillä hälytysajossa olevalle viranomaiselle kerrotaan, että tämä on huomattu.

 

Pakkasia pitää ja tuuli on lähes olematonta, joten koko kansan suosikkivalituksenaihe sään lisäksi kipuaa huomenna melko vallattomiin numeroihin. Näin sähkölämmitteisessä omakotitalossa ei ihan älyttömästi naurata, etenkin kun ennuste koko ensviikolle lupailee 20-30 sentin kWh hintoja eikä yölläkään ennusteen mukaan päästä alle 10snt.

Nyt jo viimeviikon hinnat on olleet melko reippaita ja varsinkin lattialämpöjä on tullut väänettyä pienemmälle mutta se mitä lattiavaluun ja muuten rakenteisiin saa varattua ei näillä pakkasilla riitä oikein vuorokauttakaan eli ei auta kuin purra hammasta ja pitää vastukset päällä ettei tule isompaa vahinkoa vesiputken halkeamisen tms yllärin kanssa.

Nyt jos tässä pitäisi vielä yrittää sen esitetyn tehomaksun kanssa taiteilla niin sitten on jo ihan sama siirtyä kiinteähintaiseen sopimukseen ja haistattaa pitkät haaveille siitä että kuluttajat ohjaisivat kuormaa halvemmille tunneille. Oma mökki kun nielaisee tässä -20 kelissä karkeasti 4kW ympäri vuorokauden ihan vain sillä että sisällä on lämmin ja valot päällä ja jos kulutusta ohjaa kalliilta tunneilta pois niin sitä enemmän siellä halvoilla tunneilla pitää sitten kiskoa verkosta tehoa että tuon 'vajeen' saa kompensoitua. Ja toki se väläytelty 5kW on muutenkin ihan naurettava, suurin osa sähkökiukaista kun vie yksinään enemmän.

Aletaan ainakin oman kulutuksen ja säätömahdollisuuksien osalta olla siinä rajoilla että kannattaako enää pysyä pörssisähkössä. Nyt muutama vuosi on pörssissä oltu ja tähän asti tuo on koko vuoden osalta ollut satasia halvempi kuin mikään tarjollaoleva kiinteä vaikka Tammikuun lasku onkin aina riipaissut. Jos tuo kallis jakso ulottuu myös koko Helmikuulle niin alkaa pörssisähkön edut jäädä nollille. Käytännön elämän helppoudella ja ennustettavuudella kun on hintansa silläkin.

Ei auta kuin nakkoa puuta leivinuuniin ja viritellä termostaatit niin pienelle kuin vain suinkin mahdollista. Oma arvaus on että ainakin kaksi viikkoa on vielä tätä herkkua luvassa.

 

Tulipa tuossa eteen sen verran sitkeä kryptoscammeri että palkitsin ahkeruuden ilmoittamalla hemmon "kryptopankkisivuston" että puolenkymmentä puhelinnumeroa kyberturvakeskukselle.

Eilen "James" soitti ja kertoi että minun kryptotilillä on nyt jotain kovin epäilyttävää ja kertoi olevansa firmasta joka auttaa ihmisiä saamaan omaisuutensa takaisin huijareilta. Sattui olemaan töissä sopivan tylsä hetki päivityksiä odotellessa että ihan huvikseni leikin hetken aikaa mukana. James kutsui minua tosin ensin väärällä nimellä, mutta korjasi sitten tilanteen, vanha sähköpostiosoite oli jostain kaiveltu ja Jameksen antamalla salasanalla (incognito-tilassa tietysti) kirjauduin sitten tuonne "pankkiin". Siellähän oli mukava 300 000 ameriikan rahaa bitcoineina ja tilin olisi saanut takaisin omiin näppeihin, ei tarvita kuin 200€ edestä bitcoineja tilille että se saadaan vahvistettua minulle kuuluvaksi ja sen jälkeen voisikin tuon potin kotiuttaa.

Noh, päivitykset pyörivät loppuun ja työ vaati taas huomiota niin sanoin Jamesille että lopettaa tämmöisen kusetuksen ja että minulta ei ole irtoamassa lanttiakaan. Sitten alkoi kova vääntö siitä että miten hän ei ole huijari ja ihan oikealla asialla ollaan liikkeellä. Löin luuria korvaan ja arvelin että eiköhän se ollut siinä, mutta eipä James siitä lannistunut. Soitti vielä eilen uudestaan ja tänään kahdesti, tosin tänään en ehtinyt vastaamaan. Nyt alkuillasta tuli sitten vielä whatsappiin viestiä että eikö hoideta tili auki että saan rahani kotiutettua ja kovasti vakuutteluita että täysin virallisella asialla ollaan ja huijauksesta ei missään nimessä ole kyse. Whatsapissa selvisi myös että tutkinnassa on poliisikin mukana, että kiire olisi ennenkuin tili jäädytetään viranomaistutkintaa varten.

Puhelut tulivat sekä Ruotsin että Brittien suuntanumeroista, joka kerta eri numero ja whatsappi vielä uudella brittinumerolla. James väitti kovasti olevansa Ruotsissa ja lähtöisin Latviasta, aksentin perusteella saattoi ollakin. Satunnaista intiahelpdeskiä en ehkä olisi lähtenyt ilmoittamaan, mutta toivottavasti viranomaisyhteistyö Ruotsiin toimii sen verran että sieltä saadaan numerot suljettua.

Kusetussivusto toimii osoitteessa helix viiva vault piste com jos joku haluaa tutkia enemmän, tietysti omalla vastuulla. Domainrekisteröijän tai cloudflaren abuseen en ole ottanut yhteyttä, noita sivustoja kun nousee niinuin sieniä sateella.

14
Lista TOP 40 (areena.yle.fi)
submitted 1 month ago* (last edited 1 month ago) by IsoKiero@sopuli.xyz to c/suomi@sopuli.xyz
 

Areenaan on näköjään ilmestynyt täysi kattaus kunnon top 40 listaa musiikkivideoineen. Melkoinen kulttuuriteko sanoisin, ~500 kertaa 45 minuuttia ysärijyystöä, rokkia ja kaikkea muuta tyynnyttänee pahimman nostalgianälän. Näitä tuli ysärillä katseltua ja varsinkin kuunneltua.

 

Traficomin Timo Ojalan mukaan ohjeistuksen pääviesti on, että auton korjaamiseen käytettyjen komponenttien täytyy olla tyyppihyväksyttyjä ja testattuja. Ajoneuvojen halutaan olevan turvallisia ja vastaavan korjausten jälkeen alkuperäistä.

Ojala myöntää, että paine Traficomin laatimaan ohjeistukseen on tullut autoalan toimijoilta. Pelisääntöjä uuden teknologian korjauksiin kaivataan.

view more: next ›