rentar42

joined 2 years ago
[–] rentar42@kbin.social 8 points 2 years ago (1 children)

Do you have any devices on your local network where the firmware hasn't been updated in the last 12 month? The answer to that is surprisingly frequently yes, because "smart device" companies are laughably bad about device security. My intercom runs some ancient Linux kernel, my frigging washing machine could be connected to WiFi and the box that controls my roller shutters hasn't gotten an update sind 2018.

Not everyone has those and one could isolate those in VLANs and use other measures, but in this day and age "my local home network is 100% secure" is far from a safe assumption.

Heck, even your router might be vulnerable...

Adding HTTPS is just another layer in your defense in depth. How many layers you are willing to put up with is up to you, but it's definitely not overkill.

[–] rentar42@kbin.social 9 points 2 years ago* (last edited 2 years ago)

They are in fact the same image, as you can verify by comparing their digest:

$ docker pull ghcr.io/linuxserver/plex
Using default tag: latest
latest: Pulling from linuxserver/plex
Digest: sha256:476c057d677ff239d6b0b5c8e7efb2d572a705f69f9860bbe4221d5bbfdf2144
Status: Image is up to date for ghcr.io/linuxserver/plex:latest
ghcr.io/linuxserver/plex:latest
$ docker pull lscr.io/linuxserver/plex
Using default tag: latest
latest: Pulling from linuxserver/plex
Digest: sha256:476c057d677ff239d6b0b5c8e7efb2d572a705f69f9860bbe4221d5bbfdf2144
Status: Image is up to date for lscr.io/linuxserver/plex:latest
lscr.io/linuxserver/plex:latest
$

See how both images have the digest sha256:476c057d677ff239d6b0b5c8e7efb2d572a705f69f9860bbe4221d5bbfdf2144. Since the digest uniquely identifies the exact content/image, that guarantees that those images are in fact byte-for-byte identical.

[–] rentar42@kbin.social 8 points 2 years ago (2 children)

"Taking care of my sick mother ..." stops them real quick.

[–] rentar42@kbin.social 16 points 2 years ago* (last edited 2 years ago) (1 children)

I don't follow it either, but read up a bit on it (partially from here https://pluralistic.net/2024/01/22/anything-that-cant-go-on-forever/) and the basic gist of it seems to be:

Boeing has been fucking up perpetually since shortly after merging with McDonnell-Douglas (a company that was apparently well-known in the industry for perpetual fuck-ups) in 1997, but political influence/interests/corporate capture has prevented it from actually failing the way that commercial companies that perpetually fuck up ought to.

What we see now is just another case of some of those fuck ups becoming visible again.

[–] rentar42@kbin.social 7 points 2 years ago

The Ministry of Truth will make sure those facts are well-documented.

[–] rentar42@kbin.social 1 points 2 years ago

Mind me asking where that was? Highschool/Sound of Music makes me guess the US. And what decade roughly?

If it was the US then I'm impressed how successful that myth was communicated outside of Austria. I always thought that was mostly our own delusion.

[–] rentar42@kbin.social 2 points 2 years ago (1 children)

Honestly I don't believe "Hitler was an Austrian" is as important for Austria to come to terms with as it is to accept/finally internalize that Austria wasn't "the first victim", but to a large degree welcomed the Anschluss (not 100%, obviously, but quite a big majority).

[–] rentar42@kbin.social 10 points 2 years ago (2 children)

That is unfortunately pretty true. The So-called Austria victim theory, which is basically "oh, we poor Austrians were Nazi Germanys first victim!", is obvious bullshit.

This was only really officially stated to be definitely false in the late 1980s ... and there's still plenty of people who probably would believe it or at least like to pretend that that was the case.

But as I said: at the very least we got to the place where pretty much any official/political actor has to acknowledge that it's wrong.

[–] rentar42@kbin.social 2 points 2 years ago* (last edited 2 years ago)

The Pope is the infallible word of God

Well. Yes and no. The Pope has the capacity to provide infallible words according to church law. But that ability is used surprisingly rarely.

Just because he uttered "man, that's the best bagle ever" during breakfast doesn't mean that it's suddenly sacrilegious to claim any other bagle is/was better.

The pope has to be speaking "ex cathedra" for it to be considered infallible and there's some pretty severe limits on what that means and what topics that can be about. The last two times this power was used were 1854 and 1950, so not really a frequent thing.

I just find that an interesting detail.

And religion is all about what should be instead of what is, so there shouldn’t be any precedence for being practical.

I agree. But this isn't about religion per se. This is about the church. And church and religion are two very different beasts. And in matters of the church they are required to take practicality into consideration.

Note that I'm by no means defending the catholic church here, I too think they did many, many harmful things and suspect their overall effect on the world is net-negative by many metrics.

[–] rentar42@kbin.social 16 points 2 years ago (1 children)

There is no pace at which he could have gone that wouldn't have created some backlash.

If he had waited a hundred more years, there would still have been backlash.

The catholic church is an organization that is built around stability first and foremost. It changes, of course, but very, very slowly. That is very much by design.

That design has helped them "survive" for as long as they did, but it might end up being what eventually leads them into irrelevancy.

[–] rentar42@kbin.social 22 points 2 years ago (12 children)

The issue is that according to the spec the two DNS servers provided by DHCP are equivalent. While most clients favor the first one as the default, that's not universally the case and when and how it switches to the secondary can vary by client (and effectively appear random). So you won't be able to know for sure which client uses your DNS, especially after your DNS server was unreachable for a while for whatever reason. Personally I've "just" gotten a second Pi to run redundant copies of PiHole, but only having a single DNS server is usually fine as well.

[–] rentar42@kbin.social 3 points 2 years ago

There's actually a bunch of kangaroos just 5 minutes by foot from where I am right now ... so no, we're okay in that department.

view more: ‹ prev next ›