• 0 Posts
  • 41 Comments
Joined 3 months ago
cake
Cake day: June 8th, 2026

help-circle






  • I mean, would you want it to serve clients outside of your subnet? I guess maybe if you had something like a guest network. But I tend to take the “fuck it, you get basic service and nothing else” approach to things like guest networks.

    Isn’t it a potential security issue to have your pihole serve things on any subnet, because it allows an improperly configured firewall to stab at your pihole? I think you can specify any additional subnets it will serve in the settings somewhere. But IIRC, the default behavior is to intentionally drop traffic from unknown subnets. But that’s just off the top of my head.



  • Yeah, I very distinctly remember the “just wander and figure the details out later” feeling of adventure from my first time playing. As a noob, I carted around most of the starting gear (basically everything that exists on your toolbelt now) just in case I needed it while I was out and about. Because I didn’t have a good idea of the map yet, (and the game map at the time didn’t give you a “You Are Here” marker) so I didn’t want to find myself lost in the middle of nowhere without a tinderbox or fishing net.





  • I’m somewhere in the middle, because comments like yours actually reinforce my concerns. A reverse proxy isn’t really doing anything to make you more secure, unless you’re using it for some sort of access control. It hides which ports you’re using, and allows you to encrypt your traffic with TLS… But it doesn’t add any additional security to the services you are exposing.

    Maybe if you use it for access control, to add a secondary username/password to the services. But that breaks most legitimate things (apps, mostly) that try to reach the double-password-protected service. Because a user on a web browser may be able to type in two passwords, (one for the reverse proxy, and then one for the service itself) but an app will try to pass that info automatically using headers.

    Any vulnerabilities in the services will still become potential attack vectors. Anyone who remembers the Huntarr debacle will know exactly what I’m talking about, because a single service being vulnerable can do a lot of damage. Yes, containerization does a lot to help mitigate damage by excluding access to everything except what you give it. But it won’t completely stop things from going wrong.





  • inb4: i didnt vote for him - then im not talking about you

    The current literacy crisis in a nutshell. Literacy is much more than simply being able to read individual words. A large part of literacy is being able to look at a work, and infer the intended audience. And most of the time, the target audience is not “me”.

    But algorithmic feeds have effectively destroyed our ability to detect when something isn’t aimed at us. We have become so accustomed to having everything in our feeds laser-focused to our specific interests and worldviews. Before algorithmic feeds were common, people would see something not aimed at them and they would move the fuck on. They would go “meh, not for me” and keep going. But now people tend to get hostile because they feel like they’re being left out, or being singled out.

    And we have literally started seeing it reshape the way our media is written. News articles come with blatant “this is only meant for {target audience}” disclaimers. Recipes come with disclaimers. Opinion articles come with disclaimers. Tutorials come with disclaimers. Maybe not always stated so bluntly, but the idea is the same.

    Let’s say I make a TikTok about the proper form for throwing a baseball. It’s focused on muscle groups, limb placement, the way you balance as you proceed through a throw, proper follow-through, etc… Obviously aimed at people who are already comfortable with (and are capable of) throwing a ball. But I’ll still need to add some sort of brief cutaway “and this is only really meant for the people looking to perfect their form. If you can’t throw a ball due to disability, or if you’re just not interested in baseball, you can probably just keep scrolling” disclaimer. Because if I forget that disclaimer, I’ll be inundated with all manner of “{but I have a shoulder injury,} {but I’m in a wheelchair,} {but I’m blind in one eye and don’t have good depth perception,} {baseball is stupid,} {I have a bad back and can’t rotate my trunk,} what about me” comments.

    TikTok calls it “Bean Soup Theory”, because of a (now infamous) post about a bean soup recipe. The comments were full of angry “but what if I don’t like beans? What should I substitute instead of beans? What about meeeee” comments. If you don’t like beans, don’t make bean soup. It seems obvious. But people have literally lost the ability to infer when something is (and more importantly, when it isn’t) aimed at themselves. Since algorithmic feeds are tailored specifically to our interests and worldviews, the default expectation has become “I am the target audience.” Even though the vast majority of media isn’t aimed at you, that expectation still bleeds into how you interact with the media you encounter.

    Anyways, \rant. It’s just something I’ve been seeing more and more these days, and it has become a constant reminder that literacy rates are plummeting.


  • Trump has also posted images of himself as Jesus Christ, which is extremely disrespectful to the conservative Christians that make up a large part of his voting base. And yet that wasn’t a dealbreaker for them.

    The point is that “disrespectful” isn’t enough. Trump wasn’t lying when he said he could murder someone in the middle of the street, and still get votes. His voting base is that entrenched.