irusensei

Most companies providing corporate security consulting I had to deal in the past are operating on a checklist.

I really wanted NFSv4 ACLs but Linux doesn't like it while FreeBSD doesn't make use of my hardware (intel p/e cores) in the most efficient way.

To be fair setting up a KDC and then distributing krb5.conf and idmap.conf files is not such a hard task.

Then it's not unencrypted anymore because sec=krb5p handles signing and encryption. I have better throughput using sec=krb5p than with samba signing and encryption. I don't know if it's because Samba uses GNUTLS but the transfer speeds are always awful.

My beefs with NFS is MacOS being extremely quirk with settings. That and the extremely misleading error messages.

>Dev1: Here's a great idea! Let's run an insecure network server in Kernel space!

>Dev2: OMG! You're so smart! Let's also exclude any encryption!!!

If it wasn't such a cool idea they wouldn't be doing it again, this time with direct access to memory: https://docs.kernel.org/filesystems/smb/ksmbd.html

>I don’t know if this is actually a problem or how big of an advantage it would be to use NFSv4.

Of the top of my head only one port is needed for V4.

I've hit command+f and then looked for this.

> The default install isn't very useful, because it doesn't do a lot, and so "only two remote holes" or whatever isn't really saying much.

Thats not really true. Comes with spamd, pf, httpd, OpenSMTPD and others. Its actually one of the open source unix-like systems that packs more functionality out of the box.

Great firewall and VPN server. You can setup wireguard with just ifconfig.

Interesting. I had a 705 G4 (or 74 g5? Idk the one with the Ryzen 2400Ge) and the firmware supported putting the machine secure boot system on setup mode.

Secure boot and TPM are good technologies. You can roll your own keys and Microsoft won't have anything on it.

Do people still think you need to have your boot program signed by Microsoft in order to use it?

I also wonder if this sentiment is what stalled development in other more traditional projects like BSD derivatives. I'd love to have FreeBSD with secure boot and loading ZFS keys from the TPM.

> "In the EU, there is a a political discussion about outlawing privacy."

> "In the US, the government is using illegal methods to violate rights granted by the constitution."

Agreed one is obviously better than the other. The EU treats privacy as a privilege granted by the government while the US treats it as a fundamental right.

I'm not a fan of the US gov but I also don't agree with the candy colored view of the EU as an institution that does no wrong and when it does its a "well intended but misguided".

Pretty sure candy colored EU paradise even today is discussing on breaking encryption and privacy for its citizens.

I'm posting from the EU.

Enumerate by creation time in descending order the unwatched videos posted from the accounts the user follows.

Like social media 1.0.

> I mean, their foundational philosophy is Ayn Rand, a fiction writer? The whole right-libertarian ideology is a joke compared to the intellectual rigor of anarchist theorists like Kropotkin, Bakunin, Malatesta, etc.

Ayn Rand is not consensus within libertarian circles.

From the top if my head on the libertarian camp I think of Rothbard, Hayek, Mises, Menger, Von Bawerk who debunked Marx economic policies. Also arguably Kant and Adam Smith and many others who influenced it.

My guess is that since you know Bakunin and these others there might be a chance you are deep into the other extreme. I think it's okay to disagree but your comparison shows you probably need to do better research before putting things together to avoid the "our blessed homeland, their barbarous wastes" situation.

From the fine article:

>What makes this particular hallucinatory mushroom so unusual is that it causes the same kind of hallucinations in different people, across cultures.

I use kubernetes extensively at work. I don't manage the kubernetes cluster anymore since now we have a team that runs centralized services and you can request a namespace with a quota. But back when my team had a dedicated Azure Kubernetes cluster it was not that bad as people says it is and the biggest hassle was the extremely short lived support for each version.

Then I started to realize most people who complain are rolling their own which is also not bad since there are products like k3s that are very simple to use.

It seems things start to fall apart when they try to stuff it with all kinds of crazy idiotic controllers and the favorite of the month CNI and CSI. I always shake my head when I see people creating sand castles by setting up stuff like Ceph from within the cluster.

If you want to play with it keep things simple and have all the persistent data outside of the cluster. Use good old NFS instead of the latest longceph horngluster version. Keep databases and the container registry out. Treat it like a compute pool not a virtual datacenter. Stop recursing chickens inside eggs.

I think 1450 EUR for a 16GB RK3588 is hard to justify. Is the Rockchip open to begin with?

I'd go for a framework using the Roma or CIX boards if I wanted to go for an "open hardware but not really" goal.

I use disposable digital debit cards for my subscriptions. These can be issued by fintech companies like Wise. If something like this happens to me I'll just delete the card.

That would make extremely inconvenient if MS ever need to revoke a certificate.

In my opinion pre alder lake intel is the sweet spot for FreeBSD. Not sure about AMD but anything before 2020 should work just fine. Just avoid CPUs with heterogenous core configurations for now.

In most cases you can put your computer secure boot in setup mode and roll your own keys.

Companies coming from Active Directory and Office.

I'm sorry I had to use a feature on my browser I rarely use which is summarize. I'm pretty sure your point is valid and concerning but the way that page was designed is just too painful to read.

Yeah I'm terrible with analogies.

Depends.

MLX is faster because it has better integration with Apple hardware. On the other hand GGUF is a far more popular format so there will be more programs and model variety.

So its kinda like having a very specific diet that you swear is better for you but you can only order food from a few restaurants.

>Oh does llama.cpp use MLX or whatever?

No. It runs on MacOS but uses Metal instead of MLX.

I guess the point is that without the hype subsiding it enshitification will ensue.

I stand corrected thanks.

Fun fact: Bonnel Atoms (D510 etc) were not affected by the meltdown vulnerability that plagued every Pentium processor since the 1995 Pentiums. These Atoms use purely in-order execution engines which kinda makes them supercharged 486s.

Is it the same guy who pulled the stunt saying he was going to swim from Norway to the US?

https://press.opera.com/2005/04/21/the-one-million-download-...

Ironic that Brazil government tends to pay lip service to digital sovereignty while forcing their own citizens to handle their data to Zuckerberg and Peter Thiel.

As someone who was inspired to buy their first Apple laptop by the "send all other UNIX boxes to /dev/null" ad I feel like Apple is already done and we are just catching the last remaining tail of that legacy.

Seems underlying features such as kerberos, NFS, auto mount and others are just bit rotting by now and its a matter of time before MacOS becomes Windows 8.