preisschild

I paid ~70EUR/yr for the /44 prefix + ASN to a RIPE LIR

And also hope that laws wont kill such companies

https://www.palladiummag.com/2026/09/22/wealth-taxes-could-k...

Lots of german STEM content creators who made ads for Radiacode (Advanced Tinkering for example)

How long are the blocks on this point-based train control system? They were 25kms away from the other train when LZB went offline

Tbf in the recent years Gitlab has become quite enshittified (most new work is focused around selling LLM subscriptions) and the people working on more prominent public issues seem to have been laid off, so I dont have great confidence in its future.

Forgejo has fewer features, but those features work a lot better than the equivalent Gitlab features.

Tbf there are always bad implementations. Good "smart" devices nowadays should be based on the Matter standard, which natively uses IPv6 addressing

https://en.wikipedia.org/wiki/Matter_(standard)

much easier than `cafe.local` with mDNS :)

i find NAT64 acceptable

You can always just use IPv6 where there is plenty of address space available. You can even get a /44 as a hobbyist easily

I'm currently using the Radxa Q8B, which already includes EDK2 OOTB and provides the device tree to the linux kernel. But its still a new board and some things are not supported in mainline linux yet.

There are also less-powerful RK3588-based boards like the Radxa Rock5 series which are supported by this edk2 port: https://github.com/edk2-porting/edk2-rk3588#platinum. Thanks to collabora the mainline support is quite advanced: https://gitlab.collabora.com/hardware-enablement/rockchip-35...

If you are searching for more powerful enterprise hardware, AmpereOne SoCs have ARM SR certification. You can just use any modern linux distro uefi generic aarch64 iso and it will boot.

There is also HTTPS boot, which might be a lot more secure than PXE

https://tianocore-docs.github.io/EDKIIHttpsBootGettingStarte...

some arm64 sbcs support edk2/uefi btw. I make sure I just use those. Look for "Arm SystemReady" certification, which requires this

they also provide device trees to the kernel on modern arm uefi environments. And in servers they provide an interface for the baseboard management controller to interact with the firmware directly.

Before you manually configure a rule in your WAF you might as well just fix the vulnerability in the vulnerable component directly ^^

especially in free/open source software like edk2

Its Georgism, after Henry George

I'd love to see a distributed sqlite solution using something like OmniPaxos[1] being used for consensus instead of raft

[1]: https://github.com/haraldng/omnipaxos

Its not like govt agencies care about security either. Its just "compliance" bs. Most european eID stuff works like that.

I have renovate set to automerge gitlab patch releases

Dont even need "AI" for that. Just renovate.

You are just exposing the application to the internet with extra steps in between

If the application is properly secured (strong encryption, strong authentication) there is no point for the VPN

and if the application isn't configured correctly, the vpn/internal network might not be configured correctly either.

So you can control them over a network that you are almost always connected to, even if you are at home or mobile

> at least IP whitelisting

home or mobile users often have dynamic IPs and thus can't be "whitelisted". Why would you not want someone on their phone access the controls?

And VPNs are just external authentication & encryption mechanisms, you might as well implement those properly inside the application and forego VPN entirely.

If you connect them to the internet you can control them remotely, there is nothing wrong with doing that.

Internet-connected fridges are fine. Sometimes you want to control your fridges remotely and the internet is perfect for that.

But use strong cryptography (tls1.3) and authentication (oidc)

Electricity is only a small part of farming but fossil fueled engines are used a lot

I enjoyed his linux sucks talks before 2020, but around the time of covid his brain become cooked.

He fully embraced culture war politics the last few years and is trying to infect everything in the free software space with it and personally attacks free software volunteer maintainers.

Just having a LGBTQ+-flag on a homepage during the day of visibility, or the project leaving Twitter after Musk took over is enough for him to declare war on your project: https://github.com/BryanLunduke/SoftwarePoliticsTracker

Heck, he even labels display protocols (Wayland) as "woke"

Populism. Data centers are unpopular even though rulings like this should also apply to more areas like farming, which is a lot worse for the environment.

> One of the reasons given at the time was that Framework was connecting people to individuals with "Hitler particles." I wish I was making that up.

This is just factually correct

Also this blog post only references Lunduke, who is a grifter and liar

> syncing and backup are critical requirements to non-technical users

hardware-bound webauthn tokens are also important since they are more secure

They could have just implemented their own worse, non-standardized solution to be anti-user. Good actors can use cool tech for good purposes, bad actors can use cool tech for bad purposes.