kassner

There is federal funding available to finance the connection of underserved areas, specially rural, so the nature of the problem makes it natural to be fragmented. Also considering how bureaucratic Brazil is, most of the red tape was greatly streamlined for small providers.

PHP 8.1 on Ubuntu 22.04 had the fix backported and released via security.ubuntu.com

Is there a public announcement? I can only see PHP 8.5.11 images, but having a recent build date is not enough to say they are indeed patched.

It will be registered if you ask Skatteverket directly, but if you go via a company (i.e.: Eniro), the subject does not get to know it.

Nice to have another alternative, thank you!

Can you disclose how your assemble your GeoIP information? It doesn’t seem to match Maxmind’s for the couple of IPs I’ve tested.

One small piece of feedback: the CIDR pages don’t make much sense to me. For example, https://worldip.io/range/1.0.0.0/8 shows as Cloudflare owns the /8, when they actually own the /24, /8 is not allocated. I understand those pages are generated, so please consider something similar to bgp.tools’s prefix not found page, which shows me all allocated ranges, including sub-allocations: https://bgp.tools/prefix/1.0.0.0/8

In a similar tone, I made Caddy module that temporarily blocks an IP address once it tries to access specific URLs: https://github.com/kassner/caddy-trapdoor It’s great to catch those bursts of requests, nowadays I see a single IP probing hundreds of paths in a couple of seconds. This catches majority of them for me.

Their datacenter at Datavägen 15 is about 100 meters/yards away from residential buildings, not a great example.

It depends how much EU do you need. ZeroSSL is through HID Global, part of Assa Abloy, a Swedish public company. HID, however, is American according to Wikipedia. Caddy uses ZeroSSL by default.

If you want only single host certificates, Actalis is Italian and issues free ones as well: https://github.com/acmesh-official/acme.sh/wiki/Actalis.com-...

I don't have a credit card on file, I'm not sure how they are going get paid if my balance goes negative.

Also: https://support.bunny.net/hc/en-us/articles/360000235911-How...

But yes, other services will run until your account is dry, then it gets suspended. You can't set a spend limit on your scripts without it taking down the whole account. You can't do cost optimization, but at least you are protected from going bankrupt.

It’s not like they’re going to put a debt collector after the $0.73 that you’d owe, so I’m not sure what was your point. If you want the services to continue you gotta have some balance. If they allow your account to run below balance I’d say that’s on them.

You wouldn’t be charged thousands because the service is pre-paid. Your websites will be suspended once the balance runs out, but you can re-establish them once you add more balance.

AFAIK is the only provider in which you can have functional billing limits and not just alerts that still depend on you reacting on them in time.

TBF you can keep the account dormant if you delete all the resources. I have like $3 in balance left for over a year now.

Ansible will be terrible slow to update things if you're geographically far from the servers. Updating around 100 servers from another continent already takes longer than a 5 minute TTL. Parallel connections only work up to a point before a playbook run always have at least one failure and requires a re-run.

Ansible also does not have locks or parallel users coordination, so you’ll need a single user/VM/GHA workflow running the playbook or at some point concurrent users will start overriding each other.

Token Now Pay Later coming soon then

I wonder if at some point we’ll be start taking about non-smartphone sovereign payments. The main reason I still use card is to be able to use it without a phone, and the technology of debit cards (around Europe at least) is quite OK. Maybe Europe should have a parallel payment track that is just a new card brand.

It is pretty much unacceptable to have a domain bouncing emails, so I’d be out of the provider before the MX TTL even expires.

For outgoing emails, reputation is a huge issue, but at the same time it’s also fairly trivial to set up a (different) 3rd-party (gmail, outlook, sendgrid, whatever) with previous reputation so you can get back communicating.

1. Both tools will not catch it, you need something like https://github.com/maglnet/ComposerRequireChecker

2. That doesn’t apply to PHPUnit specifically, but if you, for example, import PHP-cs-fixer as dev dependency, it will bring symfony/console, and if you rely on that on your own code without importing it on composer.json as a regular dependency, the class will be missing when you composer install for production.

> I would recommend declaring the phar dependency with phive

+1. This eliminates a whole class of bugs in which you declared phpunit as a dev dependency but end up using a class that it brought in without declaring as a regular dependency. Without an external linter, you can’t really catch that until your production code doesn’t bring the class in and throws a fatal error.

That’s a 15% price increase. Last increase from $5 to $6 was in October 3, 2023.

> Brazil with Pix

Are you aware of any banks that don’t require you to use their Android/iOS app to use PIX? I’ve had accesss to maybe a dozen banks and none had that ability. Sometimes you get via web, but needs their app’s 2FA to log in.

Spotify does not own that copyright, only a distribution license. How they can get away with it?

There are some EU cloud providers that try (OVH, Scaleway, Hetzner, Upcloud, Evroc), but AWS is a product 20+ years in the making and only in the last 5 that people are really opening their eyes to the sovereignty problem. And even if those providers did have the money and regulation breaks AWS had, today is a much different market than the one AWS grew up with, in which there wasn’t an incumbent and they were leading the market. Nowadays everyone has to be at least similar to AWS for people to consider it, and I feel sovereignty alone is not enough.

In other words: making a cloud provider isn’t that difficult, making a cloud provider that people will use INSTEAD OF AWS is an exponentially harder problem.

> asset we have is our home and there are many websites out there that tell you how much it's worth but they each vary an awful lot and change dramatically - so much so sometimes that any savings you've made in the same period are eclipsed

I honestly completely ignore my purchased home value. It is not a regular asset because you have to make use of it, you can’t really liquidate it without a substantial change in your life (renting, marrying, going homeless, etc). If you trade it, you’d have to use that money to get some other housing. My strategy in my personal finances is to threat the house as if I’m renting. The money is gone from the balance, the equity isn’t tracked anywhere.

You are the exception. Most people follow the “Parkinson’s Law” for money.

> Budgeting can make that manageable by significantly lowering your living standard

I’d say that budgeting allows you to see how far off your ideal standard you are living. Spending too much on the kids school can be a deliberate choice or an afterthought from 4 years ago. Budgeting lets you see that and be deliberate about those choices.

In the 2010s I had used virtually all existing Personal Finances software on the internet and ended up building my own [1] that I still maintain and use to this day.

A ton of software out there was too US-centric, sometimes not even supporting multi-currency, or the UI being terrible to a newcomer. I've recently tried Beancount, but it still didn't convince me to switch over, because:

1) Double-entry bookkeeping is about what happened, and I want the software to tell me what's coming up. I can still handle that in Beancount, but it's unaware of $CURRENT_DATE, making it labour intensive: if you post an expense for the next week, it will already deduct it from your balance, you'd have to post the item as a liability, and then later move the liability to an expense once it actually hit the bank account (and you have to do that manually);

2) I matured my personal finances by following the YNAB method, and I'm not sure how to apply that to DEBK;

3) I think most people use a Personal Finances software differently than me. I see discussions about importing transactions and monthly reconciling. I open it nearly daily to check what is coming up, and I post transactions as soon as they happen. I want to know how much clothing/groceries/restaurant budget I have left before I leave home;

Any tips on how to handle those things on Beancount/DEBK, or that's just not for me?

1: https://www.kassner.com.br/projects/money/

I had troubles with Apple blocking a bunch of range IPs from OVH, because they don’t handle abuse claims. It didn’t show up in blocklists at the time, but was in practice unusable.

IME anything that can be purchased by an average developer is in some list nowadays and deliverability is always crap (with luck it lands on spam folder).

> Thats just a matter of buying a decent IP

Please expand on this. Public cloud IPs would be on spam lists, and providers like Hetzner and OVH aren’t any better. Where does one go to buy a decent IP?

> Does Framework get mainstream media treatment?

I automatically bundle Linus Tech Tips into mainstream, mainly because how much people with no hands-on experience (i.e.: bring their laptops to a shopping center’s IT shop to upgrade RAM/SSD) around me watch it. I hope that eventually they are encouraged enough to try stuff on their own, and if they are in that mindset, framework is the best brand they can buy.

I think it depends. At least on $dayjob’s stack (webdev/Go) both are interchangeable and I’m fine using either. Ofc they aren’t the same thing, but depending on your task and constraints, both a MacBook or a Framework can attend your needs.

I can agree with you that they don’t have the same position, but users are going to see a Framework laptop on mainstream media and are going to compare options. A few might try out, and even though they’ll get frustrated, they might now understand the ideology around open hardware.