2,847 karma · joined November 10, 2007
[edit]: oops HN does not allow emoji … go here https://emojipedia.org/winking-face-with-tongue
1. A USB keyboard.
2. A USB mouse.
3. A USB flash drive (using a partition on its internal SD card) for storing bootable ISO to install/rescure systems.
4. A USB NIC which is very neat. I can use it on the PC to expose management SSH port just on that instead of the primary NIC, so that the PC has a sorta dedicated IPMI interface.
Newer versions of the device software come with WireGuard and Tailscale support, so I can just connect to it over VPN.
Still have some minor issues, but the developers are working fast to fix them.
For Dynamic DNS you want minimal TTL, ideally less than 60 seconds, otherwise the DNS records will be cached and will not reflect the correct address during the short period of time window it changes.
Dedicated DDNS services usually have very short TTL (some offering as low as 5 seconds IIRC), but free Cloudflare accounts have a minimal TTL of 300 seconds (5 minutes), coupled with the crontab running every 5 minutes, your endpoint could be out of contact for 10 minutes if everything aligns right.
Please SSD manufacturers: make it official!
I'm asking coz the OP mentioned the need for a PCIe-to-SATA bridge chip to have more than a couple of SATA ports. I'd assume that if HDD were also NVMe devices, it will be simpler to just wire each PCIe lane to a drive, without requiring any bridges. A PCIe 2.0 x1 lane is 500MB/s, on par with SATA III 6Gbps.
I'm a bit confused, but isn't eSATA exactly what you are looking for?
Background: I use an x86 box as home router. I've changed the configuration in the BIOS that it should automatically boot up on power. However if the BIOS battery is dead, the config will be lost and it will revert to default settings, which is not to boot on power.
But there is no way to know how much juice is left in the BIOS battery, thus there is no way to issue warnings that the battery should be replaced soon. If there is power loss AND the battery is dead, when the power comes back up again, the router will just stay off indefinitely until it's manually turned on.
That's when I realized why most consumer routers do not feature RTC nor do they require batteries.
Modern storage hierarchy has become so convoluted precisely because of many conflicting goals: performance, efficiency, durability, cost, etc.
Disk also might be in standby mode, which saves motor spin up and head load cycles too.
> It is IMHO the strongest security guarantee you can offer without forcing each module author to manage keys.
Outsourcing the problem to DNS still forces module authors to manage keys. Not keys to sign code, but keys to sign TLS certs nonetheless. Granted, authors can further delegate managing TLS keys to other people, but you cannot escape the ultimate issue of managing control of the domain (passwords at registries at least).
If we cannot get rid of key management anyway, can we split the problem into 1) Code Signing and 2) Code Distribution? Once we get the Code Signing done right, Code Distribution will be much easier with robust solutions (e.g. content addressable storage and various kinds of proxies/caches for high availability).
Now code signing, lots of schools of thoughts… On the extreme end of decentralization, PGP/GPG people will say Web of Trust and Crypto/web3 people will say hardware wallets; while on the other end of centralization we seem to be getting by just fine with publishing public keys on GitHub and various social networks. Just pick a place where you Feel Good Enough™ :p