forbiddenlake

joined 2 years ago
[–] forbiddenlake@lemmy.world 10 points 1 week ago (4 children)

The client has the private key, the server has the corresponding public key in its authorized keys file.

The server is vulnerable to the private key getting stolen from the client.

[–] forbiddenlake@lemmy.world 9 points 1 week ago (2 children)

Use the DNS challenge instead? You'll need a DNS provider with an API though

[–] forbiddenlake@lemmy.world 3 points 3 weeks ago

So you can have your own Coriolis and planet bases now. But, to be realistic, it is a shit ton of hauling(at least solo) and you are just the architect. After construction you get no special privileges other than naming rights.

[–] forbiddenlake@lemmy.world 5 points 3 weeks ago* (last edited 3 weeks ago)

It's comfort food. Never pushing the envelope much, but always high quality.

Note that the first game came out in 1986. These remakes will look great and put some modern conveniences on.. But it will still be a game from 1986. If you want a modern DQ then 11 is great.

[–] forbiddenlake@lemmy.world 3 points 1 month ago (1 children)

The pm2 has a small distro and pp, limiting the builds hard. Pacifiers or fragments are very good though. Here's several options

Python Mk2 PVE Builds

No Engi, Multis: https://s.orbis.zone/qEkV No Engi, Frags: https://s.orbis.zone/qGd0 Full Engi, Multis: https://s.orbis.zone/qEkX Full Engi, Frags: https://s.orbis.zone/qEt2 Full Engi, Pacis: https://s.orbis.zone/qEt4

[–] forbiddenlake@lemmy.world 1 points 1 month ago

If you configured your X server manually, remove any mentions of Nvidia or it won't start. Yeah I didn't that to myself.

[–] forbiddenlake@lemmy.world 1 points 1 month ago (1 children)

Do you get fined?

[–] forbiddenlake@lemmy.world 1 points 1 month ago

I use this, it's fine, but development on the open version is very very slow.

And they still haven't fixed my pet bug: they introduced Unix socket listening, I found that enabling it prevented upgrades, reported the bug with details and repro, and nobody cares. The workaround is simple, delete the socket file before every start. But I remain confused why a bug that prevents upgrades remains.

[–] forbiddenlake@lemmy.world 2 points 1 month ago

Not perfect for me, I was also wondering if it would be in this post.

I find the scrolling in the sms display wack, and the copy otp button doesn't work (just enabled the log follow workaround, so we'll see), and the right click menu on the system tray icon goes off screen the first try.

[–] forbiddenlake@lemmy.world 17 points 2 months ago (4 children)

By default, unencrypted, and unauthenticated, and permissions rely on IDs the client can fake.

May or may not be a problem in practice, one should think about their personal threat model.

Mine are read only and unauthenticated because they're just media files, but I did add unneeded encryption via ktls because it wasn't too hard to add (I already had a valid certificate to reuse)

[–] forbiddenlake@lemmy.world 5 points 2 months ago

You could use a reverse proxy to terminate tls, and take the tls off of ad guard itself.

 

tl;dr: self-hosted report-uri.com ?

I messed up my site's Content-Security-Policy and blew up my report quota on report-uri.com last month. I'm happy with them, but I don't really want to pay for this service, and I want to avoid that in the future. So I'm looking for something(s) to:

  1. Collect Content-Security-Policy browser reports (go-csp-collector is sufficient here, if not great, as it doesn't support the newer Report-To) and log to JSON (or whatever)
  2. Collect other browser reports such as NEL, Deprecation, Crash and log to JSON
  3. Collect SMTP-TLS and DMARC email reports and log to JSON
  4. Display them somehow for searching and for seeing trends: preferably something less manual than Grafana, but I can collect the logs and do custom dashboards in Grafana that parse JSON (or whatever) logs if I need to.
  5. Let me filter incoming reports based on various things (like ignore CSP reports with no URL)

In my searches I found plenty of SaaS and no source code for the whole thing. Sentry and its clones are too much; I don't want to instrument an app I don't have. I did find plenty of 5-year old abandoned projects, though.

So, what's out there in this space for self-hosting?

For reference, report-uri.com looks like the below, with the ability to drill down and filter and see reports.

 

Edit: Solved

Either:

  • Set K-9 to Unrestricted Battery in Settings > Apps > K-9 Mail > App battery usage, OR
  • Allow K-9 in Settings > Apps > Special app access > Alarms & Reminders.

If K-9 is already set to Unrestricted, then it won't appear in the second place.


OS: Android 14, Pixel 8

I'm annoyed by this fixed bug (watch does not vibrate when receiving mail), so I enabled the K-9 beta in the app store, and as of today I have version 6.713 which hopefully has the fix.

The release notes say:

Note: For now please manually allow "alarms & reminders" in Android's app settings when using Push on Android 14

... but I can't find those settings. Under Settings > Apps > Special app access > Alarms & Reminders, K-9 mail isn't listed, and there's no Add button.

I do have Push enabled on my email accounts; and I have the notification silenced.

I have K-9 set to Unrestricted battery access.

What am I missing?

view more: next ›