chaospatterns

I'm always impressed with the quality and speed of complex features that Blender brings. Now if only I had the skills to use them.

Please do. I always have to plan my flight arrivals based on when the light rail is running. Maybe it was later, but for some reason I recall the last train from SeaTac going all the way being around 11pm-ish, but now it's at least 12:05am.

I wish Traefik exposed the ja4 fingerprint. There's an open issue: https://github.com/traefik/traefik/issues/12421

Lemmy.world does. I get it anytime I'm on my mobile web browser. It's not set to a high level so the apps are able to bypass the checks.

If I had to guess, teleco buildings already have strong internet connectivity and backup power or secondary power utilities which malls don't have because they don't have the same needs.

Ignoring the other comments around complexity. If anybody is considering running LiteLLM in their lab. I strongly recommend looking at GOModel instead. LiteLLM was nothing but bugs, slow page loads, and security issues for me. GOModel just worked and was simple.

https://github.com/nix-community/impermanence

Your root directory is mounted as a tmpfs which means it gets cleared every startup. The only way to persist config or data is to have it in your Nix config or use impermanence to bind mount a folder to a persisted directly.

I use it on my servers. I have Impermanence + LUKS with remote unlocking on my servers

Sounds like the US

Spammers and other nefarious actors.

There's a lot of trust built into federation.

Back when I had a Wordpress blog before I switched to a static website, when I got these spam comments, I'd just edit the positive sounding ones to remove the spam link and post them. It made me like people were reading my blog and caring.

WebPKI (the term for certificates used for web browser as opposed to the general usage of certificates outside of the web) requires that all certificates now be included in a public, widely used certificate transparency log. That fact gets included in the certificate delivered to your browser. Your browser will reject any certificate* that was not included in a certificate transparency log.

Take your instance discuss.tchncs.de for example, we can see all the certificates here. If you looked at that list, do you see anything wrong? Probably not.

But you're on to something. A malicious certificate is minted and it's in the CT log, so what? I don't check the CT log every time I go to a new webpage. Instead, CT logs are more able giving information to security organizations and companies to detect violations under their own properties. A company like amazon or google would setup CT log monitors to continually monitor for certificates issued for their domains. If they detect one, and they didn't request it, they can flag it to the cert authority board and it can get CAs pulled from the root trust stores. I can (and probably should find time to) setup certspotter on my own domains.

Certificate transparency means that all certificates have to be publically logged.