lazyweb

Agreed, it's my GUI of choice as well.

Are you talking about the mobile app? You should always update. There have been fixes for (pretty bad) security issues in the past [1].

[1] https://www.whatsapp.com/security/advisories/archive/

> The 60-Hertz AC (alternating current) from the wall oscillates 60 times a second, but the power supply needs steady DC (direct current) that flows in one direction. The full-bridge rectifier [1] below converts the AC to DC.

[1] https://www.youtube.com/watch?v=sI5Ftm1-jik

I just knew which video is linked without clicking. ElectroBOOM is a treasure.

Monthly subscription with Classpass (App). Discovered several new workouts I really like, HIIT and spinning classes in particular. Did them almost daily before lockdown happened here. Can't wait to get back at it.

Their subscription model is really fair as well, at least from the customer side. No dark patterns, and automated account freezes during the lockdowns so I'm not accidentally paying without using any in-app credits.

That sounds to me like you're having an emotional / nostalgic response to things you were exposed to during your youth. And there is some kind of novelty to watching older commercials, no doubt. But IMO that wears of quickly. What's left is capitalistic propaganda often riddled with sexism, misogynism, homophobia etc. which to me is the real cultural significance. Not exactly sure what changed though, wether companies discovered it's more profitable to put on an act of some kind of progressive consumerism, or if it's an actual response to an evolving society.

Very nice! Great for junior sysadmins, or people wanting to get into that kind of work.

Discovering that the target machine is hosted on AWS halfway through reminds me of previous gigs .. revealing essential information about the infrastructure along the way.

Replying to self, looks like it got fixed today. Got an update via apt.

Anyone having issues with nextcloud client segfaulting after upgrading from 20.10 to 21.04? Running Xubuntu. Their latest AppImage seems to work though.

I wonder how much more effective malicious scripts might be if something like "curl -L 16843009" is used as an obfuscation. Sure, it would have to check the locally installed curl version first. But hiding something like this away in a deeply nested function .. anyway, don't do "curl | sudo bash", kids.

Was about to post the link as well. Very funny / interesting read, sucked me right in!

I've said it before, but the entire ad business is a cancer. Every minute of the modern human experience is exploited for maximizing profits. I've read an interview recently with an journalist / documentary film maker (forgot his name) where he was talking about "bullshit jobs" and for most people, their actual function is to consume. That's why ads are penetrating every last part of our private lives, greatly accelerated by modern consumer electronics. Want me to disable adblock to look at your side? Fuck you, I'll never visit again. Youtube video with forced ads at the beginning? Instantly closing it, never to visit again. All my devices have some kind of adblock mechanism, my "smartphone" is rooted, my "smart TV" will never have any internet connection, my browser will always be the one working best with adblock technologies.

Sorry for the rant.

Yes exactly. If you don't understand the controls, reading the linked FAQ is really worth it and doesn't take that long.

One short story in Cory Doctorow's "Radicalized" is exactly about that. In the story, immigrants living in social housing supplied with "smart" appliances are only allowed pre-approved detergent, among other things. Can recommend the other stories from the book as well. The one about the doomsday fetishists is something I think about every once in a while, especially now during the pandemic.

Nice writeup, but another detail I'm very positively surprised about - no external resources, no 3rd party JS libraries or external tracking, not even on their landing page. This is an exceedingly rare thing these days!

I'm running a few bare-metal Hetzner servers (Falkenstein and Helsinki). Can recommend. Reliable, comparatively cheap and tickets are usually responded to within 24 hours. One time I even got through to the guy swapping defective hard drives on one of the servers in the data center by phone, since there was some other issue.

Not OP, but hosting my own mail as well (postfix, dovecot, spamassassin) for six seven now. Had one issue with outgoing mails to Microsoft (hotmail I think) bouncing. The IP of my dedicated server had been blacklisted from before it was used by me, but I got them to remove it. No other issues I can think of.

I'm getting about 1-2 spam mails a month delivered to my inbox, usually french SEO spam. Not worth investigating.

It's simple really. Have your doctor take a blood sample, get it tested for vitamin D deficiency and regulate your intake accordingly.

I've had myself tested december last year, mostly out of curiosity. Turns out I was severly deficient. Not really surprising, being a vegetarian locked inside. Started taking the highest available dosage (20000) via prescription twice per week and now feel much more energetic and "awake" I think. I've had another test a few weeks ago, and while there's no acute deficiency anymore, doc suggested keeping up the current intake for another few months.

Yep, analytics is disabled. Thanks for the link, didn't look into the data being sent. But I can't confirm my devices trying to send out data if I SSH into them (just tried it for the 1st time).

You're probably right, but blocking doesn't seem to be a problem. I'm going to leave it like that for now. Not sure I would need any more firmware updates for hardware which came out 3-4 years ago anyway, but I think enabling 13.224.195.59:443 for the devices only (not the controller) would trigger and download firmware updates.

Mentioned it before, but since a few days ago my unifi devices (2 wifi APs, a small switch, plus one Debian VM with the controller, all on it's on VLAN) are not allowed to do outbound traffic anymore, with the exception of NTP, DNS and one trusted apt mirror.

Looking at the firewall logs it seems the devices try to ping (ICMP type 8) a bunch of AWS IPs every few hours. The controller tries to connect 80/443 on different AWS IPs a lot more often, even without me navigating the web interface. Other than that, no ill effects. Device firmware update notifications are gone, just says "up to date" now.

Interestingly, I still see the ad for their "dream machine" on the dashboard, as it seems to be baked into the controller. It's also trying to load external resources from "net-fe-static-assets.network-controller.svc.ui.com" while navigating the new web interface. The "classic" interface still seems to be truly self-contained. Using the latest controller version as of today (6.1.71-15061-1).

Condensed firewall logs for reference below. Not that it matters much, but why not.

Unifi controller VM:

  zgrep unifidrop /var/log/syslog\* | grep "SRC=$unificontroller" | awk '{print $12, $21}' | sort | uniq -c | sort -h

  5 DST=13.224.246.17 DPT=443
  5 DST=143.204.174.59 DPT=443
  5 DST=143.204.174.83 DPT=443
  5 DST=34.210.116.187 DPT=80
  5 DST=34.211.38.191 DPT=80
  5 DST=34.218.198.60 DPT=80
  5 DST=99.84.5.14 DPT=80
  5 DST=99.84.5.24 DPT=80
  5 DST=99.84.5.51 DPT=80
  5 DST=99.84.5.82 DPT=80
  7 DST=13.224.246.67 DPT=443
  7 DST=13.225.74.11 DPT=443
  7 DST=13.227.220.19 DPT=443
  7 DST=13.227.220.38 DPT=443
  15 DST=54.201.165.155 DPT=443
  25 DST=44.239.243.150 DPT=443
  28 DST=44.238.226.202 DPT=443
  28 DST=52.89.51.163 DPT=443
  28 DST=54.218.175.125 DPT=443

Unifi devices (all ICMP 8):

  zgrep unifidrop /var/log/syslog\* | grep -v "SRC=$unificontroller" | awk '{print $12}' | sort | uniq -c | sort -h

  2 DST=13.224.230.94
  2 DST=143.204.9.24
  4 DST=99.84.6.169
  6 DST=52.84.94.172
  6 DST=54.230.54.165
  24 DST=52.222.138.169

I'm running one on an older RPi at home. Never really "needed" it, but sending text messages for free from an airplane wifi somewhere above the atlantic ocean felt like a nice nerdy flex.

Yeah my few Unifi devices (and the controller SW instance) are already restricted to their own VLAN, but I'm going to disable outgoing internet access as well.

Wow, are you serious?

For real. Cut down on my reddit usage last year - mostly lurking anway.

Might also have something to do with discovering hn around the same time :)

Maybe somewhat nostalgic, but I remember cycling through many artworks by digitalblasphemy [1] during the early-mid 2000s. Honestly surprised to see there's still new content!

[1] https://digitalblasphemy.com/

I often think about that. If I can thoroughly convince myself to believe a factual lie, would classic lie detector devices still work on me?

That would likely unironically be a thing if Google were a german company.

Go vegetarian, or even vegan, if you can.

I see you're somewhat bitter about this topic. Is that a good way to present your argument though?

It seems to me that this kind of sentiment ("I've experienced hardships or know people who did, so why does this group deserve better?") is quite prevalent here in germany as well.

I think this is a common trope among richer countries at least, and probably one of the most effective strategies or rhetoric patterns to stall social progress.

Sometimes I'm catching myself thinking along similar lines, and when I do, I'll try to step back and try to examine why I'm having these thoughts, and if there's actually an argument against having changes like this. Is there any disadvantage for me, or for anyone really?

Yep, ideally you'd have seperate partitons for /var, /tmp, /home, root, any application/db data ..