• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle
  • Innevitably whatever public transportation you use the route will end up in the ghetteo.

    This is a mindset that many people in the U.S. will need to get over before the “quality” of public transport improves: that busses, trains, subways are for “the poor”.

    I’ve been on the subways in New York and busses and trains elsewhere in the States. They’re gross. Especially, compared to most of Europe (Italy, Denmark, Germany, etc). In Asia, they’re also a clean. The mindset in Asia and Europe is “this is what people (not just the poor) take to get from point A to point B”. There aren’t school busses, the kids just take the same city bus/train/subway that all the other people take to get to work.

    I’ve spent 45 minutes in the States on my daily commute staring at (and riding on) the bumper of the car in front of me. I’ve also spent 45 minutes, in Europe, peacefully riding the subway to work. I’m able to surf the web, watch a video, relax. I definitely enjoy/recommend the later experience.






  • Microsoft creates thousands of tons of ewaste for no reason…

    Of course there’s a reason, you said it yourself: TPM.

    With TPM, Software will be able to cryptographically verify that the OS and Hardware are all unmodified. This’ll be an end to piracy and end to unauthorized modifications to your PC (“We’ve detected that you’ve installed an Ad Blocker, please remove it before accessing your banking website”)

    This won’t happen overnight, but the forced hardware upgrade is all about control (Microsoft over you) and creating a walled garden to drive profits (like Apple).

    You can take a look at Android’s attestation and how it prevents running your banking apps on a rooted cellphone as an example of things to come.








  • Basically, my company is tightly wed to using outlook and exchange.

    We would have liked to have kept all this “on-prem”. Meaning, we have physical machines running in our company network that has paid licenses for exchange.

    The “force” that Microsoft has applied, is that we will not be allowed to purchase licenses for exchange (disclaimer: I don’t know if the licenses are not available/discontinued or if it’s not cost effective - I wasn’t involved in those conversations). Long story short: If we want Outlook/Exchange we must use MS Cloud solution. Depending on your organization’s size - this cost us an ungodly amount of money but (and here is where the anti-trust is) you get Office 356, Teams, and the rest of the MS eccosystem “for free” (or at a deep, deep discount).

    This means the cost of Cloud Exchange (which includes Teams, O365, etc) . Was about the same (maybe a little less) than what we paid for “on-prem” exchange, plus Google docs, plus slack, plus Zoom. However, since “on-prem” exchange isn’t available - our only other option would be to ditch exchange for Google (which costs a lot more) or some open-source solution (which probably won’t integrate seamlessly into outlook).


  • Wow, 12 - you’re living the dream ;)

    Could you share your setup? I’m on Linux, but I’ve tried both Edge and Brave. Both only show 4 people.

    When a 5th person joins, I need to switch to the “group view” (?), which has a auditorium background and crude attempts by Teams to “crop” people from their background.

    It’s such a perfect summary of my Teams experience : you want something simple (ie: see 5+ people) and MS delivers the most useless feature… I cannot even call it half passed, cause I’m certain the “group view” took far more engineering effort than it would have taken to just show 5 or more people on the screen.





  • I’m curious, how would you do this in such a way that it wouldn’t come at the expense of effecting your high availability?

    If the server were on-prem or in the cloud… and the system crashed/rebooted, how would you decrypt (or add the passphrase) to the encrypted drive?.. cause the likehood of the kernel crashing or a reboot after and update is higher than an FBI raid… and it would get tiresome to have the site being down, while we wait for Bob to wake up, log in, and type the passphrase to mount the encrypted hdd.

    You could use something like HashiCorp Vault, but it isn’t perfect either. If the server were rebooted, it could talk to Vault and request the passphrase (automatically) , but this also means that the FBI could also “plug in” the server (at their leisure) and have it re-request the passphrase. … and if Vault were restarted there’s quite a process to unseal (unlock) a vault - so, it would be as cumbersome as needing to type in the passphrase on reboot.

    My point / question is: yes, encryption (conceptually) is easy, but if you look at “the whole life cycle / workflow” - it’s much more complicated and you (as an administrator) might ask yourself “does this complexity improve anything or actually protect my users?”


  • As others have mentioned use a credit card instead of debit.

    But if you need/want to use a debit card, then take a look at services like Revolut or Wise (non-referal links included).

    Both provide you with debit cards that you can enable/disable instantly within their app. Revolut gives you “virtual cards” which can be used for online subscription, so you can create a dedicated virtual card for each subscription (minimizing the impact if/when one of your cards is leaked). Revolut also has “one time use cards”, so a new debit card number for a single purchase. In practice, more and more vendors are disallowing “one time use cards”, but you can create a similar effect with the virtual cards.

    Both platforms also allow you to set up dedicated (monthly) spending limits on either the physical or virtual cards. So you can limit your exposure that way too.


  • But the nice thing about email is it’s decentralized, and everyone already has it.

    That is true, but in the case of email as an issue tracker: only the people who have received it will know of its existence (unless it’s mirrored on public facing websites - like Debian does with their issue tracking).

    The thing we’d lose is the “ease of access”. Tbh, I’d see Usenet being a better distribution medium than email for OSS apps… but I really appreciate the intention behind solutions like git-issues: move the issue tracking into the same tools used to track code changes. It, in my opinion, is more in line with K. I. S. S.