• 0 Posts
  • 52 Comments
Joined 1 year ago
cake
Cake day: June 19th, 2023

help-circle
  • Having a non-garbage domain provider can be a luxury. I used to work at a place where we were paying boatloads of money for certificates from Sectigo for internal services, and they were charging us extra per additional name and even more if we wanted a wildcard, even though it didn’t cost them anything to include those options. Getting IT to set up the DNS records for Let’s Encrypt DNS verification was never going to happen.




  • A large percentage of those hosts with SSH enabled are cloud machines because it’s standard for cloud machines to be only accessible by SSH by default. I’ve never seen a serious security guide that says to set up a VPN and move SSH behind the VPN, although some cloud instances are inherently like this because they’re on a virtual private network managed by the hosting provider for other reasons.

    SSH is much simpler and more universal than a VPN. You can often use SSH port forwarding to access services without configuring a VPN. Recommending everyone to set up a VPN for everything makes networking and remote access much more complicated for new users.


  • Shodan reports that 35,780,216 hosts have SSH exposed to the internet.

    Moving SSH to ports other than 22 is not security. The bots trying port 22 on random addresses with random passwords don’t have a chance of getting in unless you’re using password authentication with weak passwords or your SSH is very old.

    SSH security updates are very infrequent and it takes practically no effort to keep SSH up to date. If you’re using a stable distribution, just enable automatic security updates.









  • Apple doesn’t want it to be VR. They want people to buy this expensive VR headset and wear it all day, but you can’t wear it in public because of how silly it looks, and you can’t carry it around everywhere because it doesn’t fit in your pocket and you can’t just toss it in a bag without damaging it, and you can’t even just wear it around your house unless you’re moving from outlet to outlet. The Vision Pro is an impossible cross between Facebook’s Quest Pro and Smart Glasses products. The technology to make a successful product out of it doesn’t exist yet.

    There are ways to use the Vision Pro as a regular VR headset, but then you’re paying for things you’re not using.




  • Calling an unspecified gender person anything other than “they” was until recently considered to be incorrect. “They” is plural but now is used to refer to singlar persons because writing “he or she” everywhere is too much. Calling a user “he” does not imply that users are male or can only be male. Not using “they” or “he/she” or obscure gender neutral pronouns does not make something inherently transphobic. Closing PRs that unnecessarily change pronouns as spam is not inherently transphobic, but the accompanying comment is not very inclusive.

    The post talks about “white suppremacist language,” but the proposed change did not remove white suppremacist language. It was just a generic anti “woke” message, possibly motivated by people brigading after the original PR to change “he” to “they.” White suppremacists may use also use similar language, but you can’t just pick things that a white suppremacist has done and decide that anyone else who does the same is a white suppremacist. He’s not blameless, but people are intentionally provoking the developer and exagerating the responses for drama.




  • The Index by itself is 500 dollars, not 1k.

    LCD screen was a feature of the Index over the OLED screen in the Vive. On the Vive, the OLED has a visible pattern and some of the image is lost because there aren’t an even number of red green and blue subpixels (similar to PSVR2). The Beyond is screen is micro OLED with a more regular subpixel pattern.

    PSVR might be the only headset available with these features for cheaper, but not much cheaper, and it doesn’t have the headphones.