9,360 karma · joined December 7, 2016
A feature, not a bug. If I go to a website meant to distribute source repos (git, etc), I expect them to be FOSS. Also, the title mentions 'EU Open Sources [...]' so this is irrelevant to the topic at hand.
Either way, perfect is the enemy of good, and this is good. You can find hypocrisy or lack of perfectionism anywhere.
[1] https://en.wikipedia.org/wiki/Mark_Carney%27s_Davos_speech
On a second thought (addendum), ...
1) Publishing PII like phone number of a high profile person in your society is causing them harm since they obviously put effort into not having such out in the open. (e.g. I can find anyone's phone number in my country via leaks. No big deal... but I shouldn't publish such. I shouldn't possess such data either.)
2) SSN is a different category of PII. Publishing this of anyone is an invitation of harm, even more so of a high profile person in your society.
It is akin to inviting people to DDoS a website, or blocking them physically access to exit their house. That kind of thing. Except that on the internet, anyone can abuse this. Even people (including criminals) in foreign countries, residing in hazardous jurisdictions (e.g. Russia).
Either way, what's the point of publishing such information? When German activists published the fingerprint of a German minister, they were making a point. They got the fingerprint via a glass of wine, but the interesting point is that a fingerprint cannot be revoked. It isn't used to authenticate a password, but a user(name). It should therefore not be used as single factor.
I'm also a Kagi user, but the index they mainly use is Google's. So I am paying for a good UI, a couple of nice features, and a frontend/proxy.
The only independent index I am aware of, is Mojeek.
It works similar, but requires some effort to get working (if you already self-host its peanuts think Frigate plus reverse proxy and I also use Wireguard to have it available from outside). My home connection is fiber 1 gbit, but with DSL (only 30 mbit upload) it worked fine, too.
Since I want to decrease my reliance on US cloud, I like to self-host. I also still rely on Unifi APs and the doorbell. Right now I wouldn't spend money on building a self-hosted server, given prices.
I should mention I use iGPU via SR-IOV on a VM. The Google Coral sits in the device unused.
I also immediately copy the stream to an offsite backup. This way, if I get coerced to destroy my doorbell feed, I will happily oblige.
I do that with my Unifi Protect doorbell. RTSP streams. Google Coral. Frigate. Scales very well. Do ML on low quality stream. Look/save the high quality stream. You do it all centralized, and you can put the camera(s) on a seperate VLAN. They don't even need internet access. If you run them over PoE twisted pair, the attacker would need physical access to perform MITM. Wireless, one should assume the camera is insecure (e.g. KRACK).
If PoE required: use copper twisted pair.
If both sides SFP+ (preferred, but not always possible):
Physical presence: DAC (very cheap).
Not physical presence (e.g. has to go through wall, floor, or longer distance): fiber (OM3 are very cheap but apparently the color being translucent is regarded as nice).
Else: copper twisted pair.
I've applied this on my (rental) house. One server has a 10 gbit copper twisted pair NIC because it also has a PCIe switch with M.2 storage on the same physical PCIe board. Two WLAN APs are powered by switch in fusebox. The Unifi Protect appliance is also powered by twisted pair copper. But I was also able to get an OM3 fiber through the same wall hole.
And always terminate at walls. So if a cable in house goes bad, the one through the wall or the socket is unaffected. Works with both fiber and twisted pair copper.
You can already notice it in this post. DAC barely is part of the content. It is fire and forget, no caveats, lowest latency and lowest power usage. So it tends to be forgotten, but a DAC cable is useful if both devices got physical (vicinity) presence. An alternative could be networking over TB.
DACs are copper, and they're happy.
> I have another Thunderbolt dongle that has an SFP+ module, so I ran a fiber line from my switch to my computer, and that runs considerably cooler. That's what I use nowadays.
This is also what I am doing, and I love it. Much better and more reliable than WLAN. I want as much wired as possible.
However... recently, Realtek released several products adding cheap, affordable, low-power 10 gbit SFP+ and PCIe copper (even certain for routers/switches, too). STH did reviews: they're performing. Specific chipset are: RTL8127, RTL8127AP (servers, with management), RTL8127ATF (fiber, no 10/100 mbit)), RTL8127AT (idem, but copper), RTL8159 (USB-C), RTL8261C (SFP+ copper, and media converter). See the examples here: [1]. I've already seen various been selling since ~December on AliExpress, especially copper RTL8127 variants (back then, even one RTL 10 gbit PCIe SFP+ variant). There appears to be one caveat: macOS isn't supported, Windows and Linux are.
I get the case for PoE, but PoE is apparently not as power-friendly as using a dedicated charger. I do find it much more elegant though.
Edit: I'd like to add that I've been having good success with Aquantia AQC100S which I use in my desktop (running Linux, and using a SFP+ for 10 gbit fiber), as well as a Sonnet TB3 (to SFP+ for 10 gbit fiber, running macOS M1 MBP). Both don't get hot, don't use a lot of power, and the connections saturate. Mind you, it is important to specifically go for the AQC100S and not the AQC107 or AQC113 which are both much more common. Both use more power. Because I got good success with these, and my router is sporting a X710 4 port SFP+ NIC (which could be more efficient, to be fair, but it is what it is) I am no longer interested myself in any alternatives. I'm settled.
[1] https://www.techpowerup.com/337113/realtek-to-bring-affordab...
I actually regret buying a Nvidia Shield TV. Yes, software support might be there. But what isn't there is the interface (without advertising, the cancer of the world) it came with. Thanks to Google. Thanks to Google, my children are now forced to see inappropriate advertising when the TV gets powered on.
In the Dutch hacker scene, Diginotar was a meme. Everyone knew it was a mess there.
No.
[1] https://tweakers.net/pricewatch/1419292/corsair-vengeance-lp...
No, then you get proprietary forks of the BSD codebase.
Apple doesn't like GPLv3, but this is by choice.
Sometimes, inventions by OpenBSD team (often using Open as prefix) become standard, such as OpenSSH and PF.
It'd be great if say Mozilla Firefox included this font natively (for the app itself). Then again, the default is currently Times New Roman...
Which countries do that? The ones in NL actually invest in US big tech.
Once Europe stops investing in USA, Europe will be better able to compete.
> Talent & compute: due to #1, Silicon Valley can outbid Europe for the best talent and hardware. Watch an OpenAI launch video and listen to all the European accents.
That just denotes European students are high quality.
Brain drain is happening due to bullying and fascism. The extend of longterm danage of current administration is unclear.
> Local market fragmentation: Europe is a collection of countries that pretend to work together while not even having a unified capital market. The average EU citizen can barely communicate with their neighbor in a common language beyond the level of a toddler (english fluency is massively overstated by Americans who only experience tourist capitals).
Bollocks. I have been in Berlin and Munich various times past decades, and people there speak English very well. Nowadays, translation is a profession which got hit by the AI club.
The people in the rural areas don't have to work together with other people from rural areas. They just need websites and tooling in their native language, or a major language.
Case in point: the French company Mistral has Dutch company ASML has one of their major investors. If you go to Eindhoven area (Netherlands mini SV called Brainport Eindhoven), you get away with English perfectly fine, and there too you will hear all kind if accents.
One thing to remember is 2.5 gbit/sec uplink is shared between all clients. So if one client is on 1 gbit, and one client could saturate their 1 gbit while switch and router can handle better. An advantage of that is QoS isn't needed to be applied manually.
So, for example, it maybe worth it to have higher than 1 gbit uplink on switch to router, and maybe a server to switch, but devices such as your TV or WLAN clients do not need such.
75 mbit up is pretty good compared to DSL (I bet it is cable), and yes 1 gbit up is nice for off-site backups. But the upsell of going above 1 gbit symmetric IMO isn't there.
Cable providers know this. Which is why they sit below 1 gbit symmetric, at a level average subscribers are comfortable with.
Why not use the cert on the ID to sign your own private key in the chain? That way, you can revoke the keypair should the need arise. The private key on the ID card would be valid for as long as the ID card is valid (here in NL: 18+, 10 years; 18- 5 years). And you can use each keypair for whatever. The benefit (and possible disadvantage) is the government knows you are you.
I didn't expect you to agree either. I wanted to inform the reader and lurker, not convince you. Why you have to resort to 'you are exactly the kind of person' is beyond me.
Since you decided to edit your post, so have I:
Yes, a government can outsource/delegate such, if the quality is good, why not? For example, the audit has to be thorough and the outcome non-discriminatory.
As far as I am concerned it is a very sick platform because (well anything related to cryptocurrency is) some of the bets are about dark things, seemingly allowed. For example, imagine being able to bet when the next murder of the Zodiac is happening, and how it'd occur. Same with the missile example. Should we therefore ban or regulate it? I don't know what is wisdom. But I do know EU and Spain can decide on this for themselves. One thing of note: insider trading is illegal in EU, yet Trump's clan hobby (yes, in past presidency it occurred as well, but not as severe, nor as ridiculous).
Other countries such as USA work in a similar manner. Work permits such as green card, to name an example.
The people who complain about regulations and law either don't understand why they exist or how they work, or they have an interest in the abolishment of it because they benefit from that.
Then you get that BS about how USA is better off than EU. Well, if you're healthy, educated, and employed, sure. Otherwise? You can just use your eyes. Go drive through a rich and poor neighborhood in both. The poverty in USA is horrendous, and the effects are shown. We got poverty too, but not as severe. No need to go to that area between West and East coast. You can experience this right near the Bay Area. San Jose is supposedly a mess. I'd love to compare my visit to a Fry's in San Jose 2005 with today's.
I end up doing a lot of searching with Mistral Le Chat (also a subscriber).
What I'd like to know is power cost difference between the two (on the server-side). Ie. is Mistral sustainable financially or are they also running on vc / burning money. Although France uses nuclear, so it is a drop in a bucket I suppose.
My recommendation is use OpenSSH (alternative: Wireguard, Tailscale for whole TCP/IP stack), tmux (or equivalent, there are alternatives such as zellij and rmux), and a keyboard (wired is more secure, YMMV). Then you have a thin client. Run Docker remotely, on a far more capable device than whatever your smartphone is. With Waydroid or another variant of remote Wayland you could even have the GUI part working.
I was able to do the above 5 years ago on Ubuntu and Arch. I am sure you can still do it nowadays.
One caveat. Don't do this in environments where you cannot auth in privacy. You must be able to trust your hardware, too. Don't bring this setup to e.g. China. You can put a strong password on your SSH private key, rotate it, and combine OTP/MFA.
Which leads me to say: I am puzzled how people can work in environments like coffeeshops, cafes, and I even see laptops used for work in swimming pool where I go weekly. Your screen can be viewed, recorded at all time, and I doubt the users are aware of that. Even passwords can be recorded.