What I’m worried about is whether we’ll be able to connect to anything else. With open source, sure you can remove age gates, but with device attestation coming to a device near you, you won’t be he able to log into your favorite game or website.
Its already like that with CloudFlare randomly blocking my Firefox on Linux install occasionally.
Yeah it’s useful and I’ve been using it for my home lab, but too many of my containers want outbound connections to the Internet. Like Forgejo needs :443 to be able to mirror or remote push repositories, so either I have to identify and allow list github.com, gitlab.com, etc. or end up allowing 0.0.0.0/0:443 which is not very strong protection.
I’d love for some kind of CNI or network plugin that filtered based on domain name.
Since you’re using Kubernetes, have you looked at external-dns? In my home lab, I use external-dns to take Ingress and Service resources and register them into my internal DNS zone. I use the etcd backend. external-dns registers zones in etcd, then CoreDNS queries from etcd. As soon as I create a new Ingress, it’s automatically registered and pointing to my Traefik service.
https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/coredns-etcd.md
Why is a lake name stored in code versus a database?
a pipeline for finding new recommended content with
This is the thing I miss the most about going from streaming to self hosted. The shuffle exposing me to new content.
How do you discover new music and artists preferably based on listened music? I tried scrobbling Jellyfin to listenbrainz but had mediocre success because either I wasn’t interested or it took me researching similar listeners.
Agreed. As a software dev, a huge portion of my job has been fixing exception handling and adding centralized error handling to figure out what bugs my users are experiencing. Many devs I worked with seemed to only care about the happy path.
I think steam randomly selects users each moth to contribute. You’ll get a pop up asking you to share.
Its been awhile since I took stats, but we should expect some fluctuations. Whether it’s statistically significant or not depends on the confidence intervals.
this is not an “AI” data center
I was a bit more high-level in the supply chain planning side (more on the long-term supply planning than rack planning), but AWS definitely has different rack types including AI rack types with dense GPU hardware setups. Are they slicing the buildings by rack type or is it heterogeneous with some AI racks + compute racks?
Partially. I started with hosting my own llama3.2 + granite4 models using Ollama for my Home Assistant smart home and for general chat with OpenWebUI. I also run whisper for speech-to-text locally on my 1080 Ti GPU. I like the privacy and ownership of my self-hosted models, but I started to run into limitations with the small weights. So I built some tools that allow me to selectively route traffic to larger models hosted on DeepInfra depending on my need. For example, to GLM/Kimi models for code reviews or for my custom harnesses or harder problems.
It’s a question of security risk profiles.
Security ultimately often times comes with a tradeoff for user experience or privacy.
How does device integrity checks materially affect the security posture for theft when considering this system? Presumably the security checks for remotely unlocking a car is based around credentials and authN/authZ for the unlock service call?
Enforcing client side security has entered the picture recently, but a lot of it comes from security checklists from people saying did you add this check? Sure adding a device integrity check may stop at least one malicious actor, but is it worth the cost? To most companies, they’re going to say they don’t understand or care about the impact.
They could just go back to key fobs since those can’t run arbitrary code.
Does it support Health Connect so I could import from other services or just Google Health? I’ve used Samsung Health for long time and want to move to something open.
For inbound, I use Postfix + rspamd + dovecot directly to my server. Outbound, I used to send it directly from my server. I did this 15+ years with DKIM, DMARC, and SPF. It worked well for like 95% of the emails I sent, but I started relaying through smtp2go.com after I had just a couple really important emails not get delivered or me not be sure if the recipient saw them.