arcza

Tl;DR - Apple's own apps tend to be quite good at not tracking you, whilst others call a wide variety of proprietary and third party tracking endpoints.

I looked at a few ways to regain total control of DNS inside a corporate network, given the slow advance of DoH.

Nice, yet another breach that doesn't affect me self hosting my Unifi controller.

No ads, no tracking, unbelievable. Just downloaded. Thanks

Why is there absolutely nothing cached by default? How many times does the topology of the Atlantic Ocean change every day that an outline cannot even be shown? I get not caching high zoom levels, but there is literally zero optimisation here done.

Yeah, those Maps ads... that's just going to be a feature technology historians will cringe over in 50 years

I made some ufw/firewalld rules to block all inbound traffic to my servers from cheaper VPS providers like Contabo, OVH and DigitalOcean, to filter out bots and scrapers. I have repeatedly seen attacks originating from these providers due to compromised servers (probably due to less technical customers compared to AWS/GCP leaving :22 open), or customers who are running data scrapers for their next big LLM I'd rather not entertain (due to cheaper pricing than AWS for egress traffic I'd guess). Data correct as of 13-Dec-2023. Disclaimer: I am not saying these corporations are malicious; like all networks they are subject to abuse from their customers.

i know it might sound like something from an alien movie but my setup is 100% on premise with no Azure or O365. I did some googling which says an "HTTP PING" is kept going like a long running socket essentially. I think I'd still need to pcap the Exchange cluster to determine what happens before and after a notification fires.

how does on prem Exchange ActiveSync send notifications to iOS?

Pretty much a non story and hence MS didn't bother entertaining Akamai's rage bait post here. A lot more things can go wrong with a default AD install as others said. Yawn.

Yet another thing irrelevant to me by spending 2 hours learning BIND and spinning up my own resolver... :)

What point are you trying to make?

Navigated back the moment I saw it was Medium. RIP

+1 for not using GMaps

"tens of millions"? you must specify what. hosting mail with 20GiB average mailboxes? Or a publicly accessible file share with a million monthly hits? Big difference. I would not productionise Nextcloud for a large organisation.

Finally there are very few orgs worldwide even with a few hundred k employees and any firm would get huge Microsoft discounts at that scale for products like SharePoint (on prem), Exchange (on prem) and Office Server (on prem also)... and oodles of support over a very mature product which Nextcloud is simply not.

Of course XTX is sponsoring this

thanks

Its not, because the same infrastructure doesn't crap out when through a tunnel (same routers and same ISP network, same MTU on my VDSL router etc)

good point. what's the alternative? I like 1.1.1.1/8.8.8.8 etc as its memorable.

If this didn't work for you earlier, the blog is now behind a CDN. Any good technologist would put practicality before pride :)

* UPDATE * pride has been swallowed and Cloudflare is fronting the site. Yes, it's ironic. Still sort of self-hosted and not on EC2 :)

don't even :) well, a second copper connection is getting installed on Monday with a less awful provider.

Correct, my crappy VDSL2 connection is not cut out for this level of traffic. I am grateful for the traffic from HN nonetheless :)

I already have an AAISP line coming on Monday! Very excited. AAISP = the new Zen.

A short story on how I diagnosed half the Internet being broken for me, but the rest would be perfectly fine. And no, it's not DNS for once.

A short post on stuff I've learnt the painful way running bare metal and VM firewalls. Anything obvious I've missed please comment and I'll update with attribution.

I will "sticky" this comment at the end of the blog. This is pretty much the entire point of these questions, to assess culture.

Uhh... Win 2008 DCs as well I assume I should be grateful for, right? Right?

I assume you work in edge case testing :)

Thoughts on my list? What "green flag" questions do you like asking?