• 0 Posts
  • 55 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle






  • The OP made the argument that Zuckerberg wanted to know their passwords, such that if the users reused the same passwords elsewhere, then he would be able to log in there and check out their accounts.

    For example he could have seen a profile he was interested in, nabbed their password and looked into their email.

    Not that he wouldn’t have godmode on their Facebook account, and needed their password to access their account, because of course he could have just accessed those accounts without needing the password.

    I have not heard this rumor before, though I wouldn’t be completely surprised if it was true.





  • Are these restrictions set out by the ISP or the dorm?

    If you don’t do business with the ISP, then you don’t have to agree to and follow their terms.

    So as long as the dorms doesn’t have rules against setting up your own WiFi, then you should be well within your rights to purchase an Internet connection from another provider, but since you are likely not allowed to get your own line installed, you are probably restricted to ISPs that provide a service over the cellular network.

    Of course using a cellular connection will give you worse latencies for online games, but at least you can have your own WiFi with low latency for your VR.

    If you want to be nice, you could then run as much of your Internet network over ethernet as possible, so you congest the air waves as little as possible, possibly only running the VR headset over WiFi, and maybe even only enabling the WiFi radio when you want to play VR.

    To lower the chance of someone complaining about your WiFi, you should configure it as a “hidden network”, such that it doesn’t broadcast an SSID, and therefore doesn’t show up when people are looking for WiFi networks to connect to.


  • It kinda depends a bit on the user’s background… For someone who is used to windows and how computers in general works, I would probably agree with you.

    But for people who are more phone/tablet native, I don’t think something like Fedora Silverblue is actually that bad of a choice. It comes natively with Gnome 3, which isn’t too dissimilar to Android or iOS. Updates are installed in one fell swoop with a reboot, just like Android or iOS. Flatpaks behave much more like an App on Android or iOS, they are self contained, and don’t affect eachother.

    I just set up my daughters (9 y/o) first school laptop, and picked Fedora Silverblue, and apart from learning about the save icon, and learning how to store files in a filesystem, she was pretty much instantaneously functional, having most of her prior computing experience on an Android phone.


  • I really don’t see much benefit to running two clusters.

    I’m also running single clusters with multiple ingress controllers both at home and at work.

    If you are concerned with blast radius, you should probably first look into setting up Network Policies to ensure that pods can’t talk to things they shouldn’t.

    There is of course still the risk of something escaping the container, but the risk is rather low in comparison. There are options out there for hardening the container runtime further.

    You might also look into adding things that can monitor the cluster for intrusions or prevent them. Stuff like running CrowdSec on your ingresses, and using Falco to watch for various malicious behaviour.




  • So as far as I understand, you have

    • Outer router (Comcast), which has WiFi enabled
    • Inner router (your own), which has WiFi enabled, and further meshes with other WiFi mesh devices (or is the mesh separate?)
    • A plain switch, for stuff you want cabled and fast

    Is that correct?

    Why not get the WiFi in the Comcast router disabled, and use your inner network exclusively, such that both WiFi and ethernet devices are on the same network?

    That’s what I did with my network, and I even got the ISP to put their modem/router into bridge mode, so it’s completely transparent.