greyfox

"The party told you to reject the evidence of your eyes and ears. It was their final, and most essential command." - George Orwell, 1984

They stick 9.81 in for acceleration, so that is presumably for gravity.

Often in dry pipe setups there is still a stopper in all of the sprinkler heads that has to melt to let the water out. This is common in places like datacenters or other places where accidentally hitting the sprinkler head would cause major damage from the water.

Basically smoke/heat detectors trigger the pipe to fill, then heat from the fire releases sprinklers wherever it is hot enough to melt the stopper.

But I suppose there are cases where the fire might be expected to spread so fast that they don't put the stoppers in and just let all of them go.

I've had one of these 3d printed keys in my wallet as a backup in case I get locked out for 5 years now. I certainly don't use it often but yeah it holds up fine.

The couple of times I have used it works fine but you certainly want to be a little extra careful with it. I've got locks that are only 5ish years old so they all turn rather easily, and I avoid my door with the deadbolt when I use it because that would probably be too much for it.

Mine is PETG but for how thin it is, it flexes a lot. I figured flexing is better than snapping off, but I think PLA or maybe a polycarbonate would function better. A nylon would probably be too flexible like the PETG.

Netflix had Dolby Vision and HDR, this is just adding HDR10+. HDR10+ is similar to Dolby Vision in that it give your TV dynamic metadata for the HDR. Constantly adjusting min/max brightness of the scene.

For dynamic metadata Dolby Vision support is much more common in TVs, some brands like LG don't have any support for HDR10+ even in their high end TVs.

I am pretty sure from a content perspective Dolby Vision is also much more prevalent. It does look like most streamers support HDR10+, but I don't think much of their content is available in HDR10+.

Anyways still a good change. HDR10+ is royalty free unlike Dolby Vision, and it is backwards compatible with regular HDR TVs.

In areas that don't have variable rates like where I am at it is just a straight discount per kwh no matter when you use the power.

However the power company puts in a separate meter which has this lower electric rate for the things you want on the off-peak service (the charger in this case). That meter has a unit that they can remote control to cut the power whenever they choose.

So when the power company sees that their grid is nearing capacity they start shutting off customers off-peak meters for a couple of hours at a time. This usually happens in the middle of the night in winter when it is really cold, or the mid to late afternoon in the summer when it is really hot.

Traditionally this was for homes with electric heat. The power company would only allow this when you had a second heat source like a furnace. The point being that they are effectively shifting from electric heat to some sort of fossil fuel. A lot of homes from before the 70s/80s had multiple heat sources because fuel shortages forced a lot of homeowners to add electric heat, but they still had oil furnaces they could fall back to.

Also many of these chargers are installed on off-peak meters so that you can get a few cents per kwh off. In the winter in cold areas like Minnesota peak shaving happens in the middle of the night because many homes are on electric heat.

So if it is cold enough for the electric company to be peak shaving, you may lose several hours of charging through the night

All of the modern yubikeys (and it looks like the nitro keys as well) can have fido2 enabled so that you can use them as a hardware token for sites that support passkeys. I think yubikeys come with only OTP enabled so you need to download their utility to enable the other modes.

If you are a Linux user (that's required to be on Lemmy right?) you can use either the fido2 or ccid (smart card through pkcs11) mode to keep SSH keys protected. The fido2 ssh key type (ed25519-sk) hasn't been around that long so some service might not support it. The pkcs11 version gives you a normal RSA key, but is harder to get setup, and if you want extra security they don't have any way to verify user presence. With fido2 you can optionally require that you must physically touch the key after entering the pin.

There are also pkcs11 and fido2 pam modules so you can use it as a way to login/sudo on your system with an easy to use pin.

And if you have a luks encrypted volume you can unlock that volume with your pin at boot with either pkcs11 or fido2.

Unlocking LUKS2 volumes with TPM2, FIDO2, PKCS#11 Security Hardware on systemd 248

If you are on an Ubuntu based distro initramfs-tools doesn't build the initramfs with the utilities required for doing that. The easiest way to fix that is to switch to dracut.

Dracut is officially "supported" on 24.10 and is planned to be the default for Ubuntu 25.10 forward, but it can work on previous versions as well. For 24.04 I needed hostonly enabled and hostonly_mode set to sloppy. Some details on that in these two links:

https://askubuntu.com/questions/1516511/unlocking-luks-root-partition-with-fido2-yubikey-and-ideally-without-dracut

https://discourse.ubuntu.com/t/please-try-out-dracut/48975

So a single hardware token can handle your passkeys, your ssh keys, computer login, and drive encryption. Basically you will never have to type a password ever again.

If your NAS has enough resources the happy(ish) medium is to use your NAS as a hypervisor. The NAS can be on the bare hardware or its own VM, and the containers can have their own VMs as needed.

Then you don't have to take down your NAS when you need to reboot your container's VMs, and you get a little extra security separation between any externally facing services and any potentially sensitive data on the NAS.

Lots of performance trade offs there, but I tend to want to keep my NAS on more stable OS versions, and then the other workloads can be more bleeding edge/experimental as needed. It is a good mix if you have the resources, and having a hypervisor to test VMs is always useful.

If you have Ethernet cables that are old or have damaged ends in your pile just sacrifice them to make your own cable ties. Cut it into pieces as long as you need to wrap your other cables and in each section you cut you get four twist ties.

Cheap, readily at hand, and if the cables were bad you can call it recycling.

If you are just using a self signed server certificate anyone can connect to your services. Many browsers/applications will fail to connect or give a warning but it can be easily bypassed.

Unless you are talking about mutual TLS authentication (aka mTLS or two way ssl). With mutual TLS in addition to the server key+cert you also have a client key+cert for your client. And you setup your web server/reverse proxy to only allow connections from clients that can prove they have that client key.

So in the context of this thread mTLS is a great way to protect your externally exposed services. Mutual TLS should be just as strong of a protection as a VPN, and in fact many VPNs use mutual TLS to authenticate clients (i.e. if you have an OpenVPN file with certs in it instead of a pre-shared key). So they are doing the exact same thing. Why not skip all of the extra VPN steps and setup mTLS directly to your services.

mTLS prevents any web requests from getting through before the client has authenticated, but it can be a little complicated to setup. In reality basic auth at the reverse proxy and a sufficiently strong password is just as good, and is much easier to setup/use.

Here are a couple of relevant links for nginx. Traefik and many other reverse proxies can do the same.

How To Implement Two Way SSL With Nginx

Apply Mutual TLS over kubernetes/nginx ingress controller

Assuming you are in the US and on Android check out NOAA Weather Unofficial

AD supported free version, pro I think is only $2 so it isn't unreasonable.

Daily forecast page appears to match the daily detailed descriptions but the really powerful part is the hourly chart.

Bit cluttered you aren't used to it, but you do get to pick which metrics you want to see. Feels like the old weatherspark days before flash got killed off.

The radar section isn't anything special so I use a separate app for that (MyRadar). I also have weather alerts running through MyRadar so I can't say much about alert functionality in this app.