IanTwenty

joined 2 years ago
[–] IanTwenty@lemmy.world 4 points 6 months ago

Synching will create a conflict file when this happens. Nothing is lost but a user must look out for these files and merge manually.

KeepassXC has its own merge logic and will happily absorb changes to a file on disk whilst open. However if two offline machines both change a database then you will get a conflict file and will have to ask keepass to merge them.

[–] IanTwenty@lemmy.world 0 points 6 months ago

I tried it, I like it!

[–] IanTwenty@lemmy.world 9 points 6 months ago (1 children)

Yes it's not too much bother to set this up, it can be put into ansible and once working I've not had to touch it again. Here's another dracut tool using dropbear that works well and has decent instructions on setup: dracut-crypt-ssh

The crypt-ssh dracut module allows remote unlocking of systems with full disk encryption via ssh

[–] IanTwenty@lemmy.world 5 points 6 months ago (1 children)
 

Update: CMA moving in right direction? https://www.theguardian.com/technology/2025/oct/22/apple-google-face-enforced-changes-uk-mobile-phone-dominance-uk-competition-watchdog-stricter-oversight

Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

On Google's recent announcement about developer verification he writes:

This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

He includes his report as a basis for others to use perhaps.

Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

On Google's recent announcement about developer verification he writes:

This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

He includes his report as a basis for others to use perhaps.

Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

On Google's recent announcement about developer verification he writes:

This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

He includes his report as a basis for others to use perhaps.

[–] IanTwenty@lemmy.world 4 points 6 months ago

Castopod looks interesting

[–] IanTwenty@lemmy.world 1 points 6 months ago

doesn't he weasel out of the responsibility to give clear, logical, verifyable reasons for his position?

Absolutely, if I remember right he leans back on having experienced bad comments more often than helpful ones. John questions this. I think it is close to dogma with Bob on this.

Can you explain that more?

And doesn't the example with the prime number generation algorithm show clearly that omitting context just does not work for code?

Quote from https://en.wikipedia.org/wiki/High-context_and_low-context_cultures

High-context cultures often exhibit less-direct verbal and nonverbal communication, utilizing small communication gestures and reading more meaning into these less-direct messages. Low-context cultures do the opposite; direct verbal communication is needed to properly understand a message being communicated...

Now I'm not making a strong claim that Bob and John are from different ends of the context spectrum. However it seems to me that Bob believes there is enough 'context' available in code and in coders themselves to communicate all meaning without comments.

Even Bob's diagram, to help explain the primes algorithm, assumes high context in the reader. It's lacking any labels or key - we are just supposed to see what he means if we stare hard enough at it. If we are already immersed in the problem space then this might work but its so inefficient for anyone else.

And once we step away from our code for even a short time we are that someone else. We are going to waste a lot of time rediscovering how the algorithm works. A case John makes convincingly I think.

Code cannot replace comments. The primes algorithm avoids division I believe but this is not clear from the code alone. A reader might work this out eventually but a comment saves so much time. Could the code be refactored to clearly express the avoidance of division? Yes there's probably a way, but imagine how bad that code would read and what a waste of time just to avoid a comment.

[–] IanTwenty@lemmy.world 3 points 6 months ago

Stow/chezmoi/your choice for dotfiles, config mgmt for system config. You don't need to rebuild whole server to start with ansible tho, you can take over one file at a time and grow as you learn.

As you've found I don't know of a tool that will cover both usecases as config mgmt for dotfiles is too much and dotfile mgrs for system config is probably out of their scope.

[–] IanTwenty@lemmy.world 1 points 6 months ago

https://blog.fyralabs.com/upgrade-error-with-vlc-plugins-freeworld/

That rpmfusion package looks like trouble, can you uninstall it or all of rpmfusion before upgrading? I also see internet problems here also so you might be better off fixing that first.

[–] IanTwenty@lemmy.world 5 points 6 months ago (2 children)

Another thank you for posting this, made my day.

I have read and followed a fair amount of Uncle Bob's work but was not aware of Ousterhout till now. Bob says during the time the Clean Code book was written there was an anti-comment sentiment about and this matches my own experience. I agree with Ousterhout that it's taken too far in his book though.

I wonder if there is another factor at play - some people/cultures prefer high context communication and some less. Bob seems clearly to prefer low context i.e. the burden is on the (code) reader to educate themselves. Whereas John makes it a matter of professional behaviour that we make the next reader's work as simple as possible by commenting code as appropriate.

Surely it's better to assume high context is needed and provide it (within reason) versus only catering for low context. As Bob discovered he became a low context person when he returned to his own code after some time had passed.

[–] IanTwenty@lemmy.world 8 points 6 months ago (15 children)

Messages are only sent when both online though, thet's the bigger difference (unless using Briar Mailbox). Also it can send over wifi and bluetooth without internet connection i.e. no other devices involved.

[–] IanTwenty@lemmy.world 0 points 6 months ago (1 children)

![1000043185](https://lemmy.world/pictrs/image/8a742443-7849-45ea-ae93-a5b1dece6743.jpeg

It's this little button. Re-reading my comment perhaps it sounded like I meant tap anywhere on the line to mark as done? It doesn't do that as far as I know.

[–] IanTwenty@lemmy.world 0 points 6 months ago

Fdroid are:

appealing to regulators and competition authorities to scrutinize Google's proposals, and for developers and users to put pressure on politicians.

So I think these are preferred avenues of action right now.

69
submitted 8 months ago* (last edited 8 months ago) by IanTwenty@lemmy.world to c/selfhosted@lemmy.world
 

Edit: thanks for all your help and replies, this is a such a great community!

I would like to host a public service for some family, probably Peertube so we can share some videos. Invite only.

There's no way I'm going to get everyone onto a VPN, it's a non-starter though I would prefer it.

I am thinking to use a VPS with anubis and either crowdsec or fail2ban (or both?!) in front of Peertube. Will apply as much hardening as I can muster behind that: things in containers, systemd hardening, SELinux/Apparmor enabled/tuned, separate users for services, the usual. All ports shut except 80/443, firewall up.

Despite all this I expect it will get scanned and attacked as it will have to expose ports 80/443 to the world so for family it will just work.

Is there anything else I should consider for security? Is Peertube the weakest link in the chain? (a little concerned their min password length is 6 it seems and no 2fa). So long as I keep whole thing up-to-date is it as secure as anybody can manage these days (without resorting to VPN)?

Is it all too much hassle and I should look for a company that offers hosted Peertube so they can worry about it?

Thanks for any and all advice.

 

As title, available in UK a bonus!

 

A 'masterpiece'!

 

Figured I'd ask here as thought self-hosters would care most about looking after their photos.

What do you do with friends' photos you'd like to keep hold of? Maybe there's a pic on a chat app or they've sent you a link to an album on google photos.

Would you just throw into your own pile of photos or do you carefully adjust metadata to indicate who took them? Just use dirs to separate them from your own? Interested in any and all thoughts.

view more: next ›