Amju Wolf

They aren’t really even in budget phones anymore. When you don’t want a notch and want a headphone jack there is almost nothing to choose from: https://www.gsmarena.com/results.php3?nYearMin=2023&chk35mm=selected&sFormFactors=1&sOSes=2&idDisplayNotch=1 :/

Yeah, just like headphone jacks. Oh wait…

It’s not just that they demand more, they demand more/faster growth all the time. It doesn’t matter that the economy has slowed down to borderline recession, it doesn’t matter that they pretty much captured all the market they can, they still need to make more and more money every quarter otherwise they’re considered a failure even if they are one of the biggest companies in the world.

Yes, that’s one option. Then you only have to distribute the certificates and keys.

Or you allow remote access to that DNS server (Bind has a secure protocol for this), do the challenge requests and cert generation on some other machine. Depends on what is more convenient for you (the latter is better if you have lots of machines/certs).

Worst case if someone compromises that DNS server they can only generate certificates but not change your actual valuable records because these are not delegated there.

What you can (and absolutely should) do is DNS delegation. On your main domain you delegate the _acme-challenge. subdomains with NS records to your DNS server that will do cert generation (and cert generation only). You probably want to run Bind there (since it has decent and fast remote access for changing records and other existing solutions). You can still split it with separate keys into different zones (I would suggest one key per certificate, and splitting certificates by where/how they will be used).

You don’t even need to allow remote access beyond the DNS responses if you don’t want to, and that server doesn’t have anything to do with anything else in your infrastructure.

Have been for a long time. You just have to use the DNS validation. But you should do that (and it’s easy) if you want to manage “internal” domains anyway.

…which shouldn’t be an issue in any way. For extra obscurity (and convenience) you can use wildcard certs, too.

Packages or dependencies with only one maintainer that are this popular have always been an issue, and not just a security one.

What happens when that person can’t afford to or doesn’t want to run the project anymore? What if they become malicious? What if they sell out? Etc.

Waiting for Proton to acknowledge and fix critical bugs that can cause data loss was way more painful… took them years with the solution being “just wait for the bridge rewrite it will be (most likely) fixed there”.

Chrome dev tools are better for JS debugging, but Firefox wins with everything else, IMO. Especially their flexbox, grid and font visualizations and debug tools are amazing.

If you ask a user to show you a “core dump” they’re more likely to shit on their floor and send you a photo than do what you actually mean.

Telemetry is absolutely crucial in determining what to focus on in development, to fix issues the users might not even realize exist. Especially for projects that aim at the general public. As long as it’s communicated clearly, used truly only for development purposes and an opt-out is available there’s nothing wrong about it.

I dunno, having a free, open model made by a trusted company would be nice. I like initiatives like Mozilla Voice, this could be something similar. Probably not great if it’s replacing focus on the other things though.

…and, more importantly, none of the donations go towards Firefox development. Instead they go towards “causes” that Mozilla Foundation finds worthy, and usually they have nothing to do with the open web.

…especially when they don’t bother to fix years (sometimes decades) old bugs.

I’d like to add that even if you use full disk encryption and have to enter a password to unlock it they could just install a modified loader that captures your password. Though it’s not necessary something I’d worry about from them.

Heck if they wanted, they could use your machine to mine crypto if they wanted to. Or ransom it with encryption of their own. Or get you in legal trouble in so many other ways like putting incriminating files on your machine.

All of that is unfortunately true about any anticheat and pretty much any software you use, really.

Obviously not if you run it unprivileged in a separate OS, but the vast majority of users don’t even use more than a single (usually not password protected administrator) account.

Wait but I already have that diagnosis…?

It’s the best. Thankfully it still works just fine under Wine, even if I haven’t really bothered to use it there lately.

…which is pretty ironic considering that the way they do it (at least in Jellyfin) is extremely limited and for some reason they don’t use the file metadata. Like, I already have all the music metadata correct. So use that, not some fucking filename.

Because unlike your file manager both Darktable and any decent music player can work with file metadata in addition to the actual files.

And why do they do it? Because most people like to use it that way - instead of painstakingly making sure your files are in the correct folders (and then being fucked when you want to play anything that’s not sorted like that - say, you have everything by artist and album, but now you want to play everything by a specific genre; or in image editing you want to filter by how you rated that picture so you know which one to pick for an edit).

Not everyone needs that, sure. But most people appreciate it - especially if the software does it well.

While I agree with the recommendations (I have a ThinkPad P14S Gen4 now) I wouldn’t say the battery life is great - especially if OP wants to do video editing and such. Otherwise it’s an amazing laptop (now that it’s actually supported by the kernel). I still suspect the Intel variant would be better for battery life though.

With that being said for anything this intensive you’ll need a charger with any laptop because it will simply not be able to keep working for 8+ hours with this kind of software. In fact get a docking station and a second screen too unless you plan to be on the go all of the time; the productivity increase from getting a second screen is insane.

Oh and be prepared to lose a lot of the fancy stuff with Linux - sure you get an amazing screen but no HDR. You don’t get the sound improvements from the official Lenovo drivers for Windows, etc. Oh and you should keep the Windows partition (just shrink it to a minimum) - makes it much easier to keep the bios up to date.