Elvith Ma'for

Former Reddfugee, found a new home on feddit.de. Server errors made me switch to discuss.tchncs.de. Now finally @ home on feddit.org.

Likes music, tech, programming, board games and video games. Oh… and coffee, lots of coffee!

I � Unicode!

  • 1 Post
  • 784 Comments
Joined 2 years ago
cake
Cake day: June 21st, 2024

help-circle

  • You might have also remembered some what-if-discussions online (or offline) or maybe misremembered some fan art.

    Also, if you watched that series when it was aired, there was a pause between the seasons and you may have made up your own what ifs and misremember?

    I still have the whole series in my library on BluRay , but haven’t watched them recently enough to confirm or deny other comments in this post.











  • Ironically that won’t help. Email is unencrypted and you’re not allowed to send “sensible data” over it as it would be violating the GDPR.

    On the other side you’re technically not allowed to use a fax machine for that either as the recipient might forward faxes to an email inbox and that’d be unencrypted.

    But nobody talks about fax being unencrypted either… Also the argument for fax is that POTS is a direct connection between two fax machines while the internet wouldn’t be and were easier to eavesdrop on. Since everything is SIP nowadays,… But I don’t know what they’re thinking besides “we’ve done that for all those years why wouldn’t it work now?”


  • The best answer to such calls is usually the same as with security related rules: “Yeah, that rule / task /… sounds exhausting[, silly, a good chunk of work or whatever]. I’m ready to ditch it or rework that. The only thing I need from you for that is that you explain to me WHY this was introduced, WHAT it should prevent/WHAT is the purpose of that rule and HOW this is not needed anymore or already covered by other rules. Or what is a better way to achieve the same or a better result.”


  • Microsoft accused of leaking Dutch civil servants’ names to U.S. government

    Wait… Leaking? Aren’t they required to…

    American tech companies are required to share data with the U.S. government due to the Cloud Act in force in that country.

    No shit Sherlock. And you’re surprised? Let me guess: This shouldn’t have happened as they were required to store all this only on European servers but somehow MS was still required by the US to hand over that data? Although it was stored in Europe? On servers owned by an American company? On servers operated by an American company? A company that’s bound by American legislation?

    Oh well, that sucks. If only someone had told them that this might happen. But there’s one good thing: Because of the Privacy Shield, the American government and American companies still cannot use that data to do whatever they want with it, right? Because if they could, then all data transfers to and usage of products from American tech companies were likely already banned in Europe, right?

    sigh




  • Google Groups allows spammers to subscribe you to their groups in a workspace account, but doesn’t allow you to unsubscribe since you’re not part of that workspace account… Worse - all autoresponders for the spam will also be forwarded to all members of said group.

    Since I do not participate in Google Groups, the nuclear option is to file all mails from Google Groups as spam with a Sieve script.

    Note the require part may be too large as may sieve script also contains more rules than this one.

    require ["body", "date", "editheader", "envelope", "fileinto", "imap4flags", "mailbox", "regex", "reject", "variables"];
    
    if anyof(
        header :contains "List-Subscribe" "groups.google.com",
        header :matches "X-Google-Group-Id" "*"
       ) {
    	if header :matches "Subject" "*" {
    		set "subject" "${1}";
    	} else {
    		set "subject" "";
    	}
    	deleteheader "Subject";
    	addheader :last "Subject" "[Google-Groups-Spam] ${subject}";
    
    	fileinto "Junk";
    }
    


  • My current setup for this:

    I own a domain - say homelab.com - and use it exclusively in my internal network.

    The public DNS records do only resolve to 127.0.0.1 (as my domain holster doesn’t want me to have no A record).

    In my home network I have a pihole running that resolves this domain and it’s subdomains locally (say pihole.homelab.com, proxmox.homelab.com and so on).

    For HTTPs: As this server is not publicly reachable, I use the DNS API of my domain host to get a let’s encrypt certificate with the DNS-01 challenge. That way, the internal systems do not need to be exposed to the internet.

    Edit: Caddy can do DNS-01, but you usually have to compile it yourself to include the plugin for your provider. To circumvent that, I’m just using plain old certbot and told Caddy to use the certs that are already on the machine