𝒍𝒆𝒎𝒂𝒏𝒏

Hey 👋 I’m Lemann: mark II

I like tech, bicycles, and nature.

Otherwise known as; @lemann@lemmy.one and @lemann@lemmy.world

Dancing Parrot wearing sunglasses

  • 2 Posts
  • 32 Comments
Joined 9 months ago
cake
Cake day: December 22nd, 2023

help-circle



  • ASMedia is the only controller IC manufacturer that can be trusted for these IME. They also have the best Linux support compared to the other options and support pass-through commands. These are commonly found in USB DAS enclosures, and a very small fraction of single disk SATA enclosures

    Innostor controllers max out at SATA 2 and lock up when you issue pass-through commands (e.g. to read SMART data). These also return an incorrect serial number. These are commonly found in ultra cheap desktop hard drive docks, and 40pin IDE/44pin IDE/SATA to USB converters

    JMicron controllers (not affiliated with the reputable Micron) should be avoided unless you know what you are doing… UASP is flaky, and there are hacky kernel boot time parameters required to get these working on Raspberry Pi boards. Unfortunately these are the most popular ones on the market due to very low cost



  • I used to use MQTT, static_status and Healthchecks.io, and have that data passed through to Home Assistant, but it started to get pretty cumbersome as the amount of machines I had grew.

    I now use just Zabbix and HealthchecksIO. I did need to spend some time writing new templates for some additional data I wanted to collect (like SMART data for SSDs that provide health metrics in non-standard attributes, and HealthchecksIO so I could see the status of various checks on my zabbix dashboard)

    Zabbix also has some additional features I found appealing, like proxies that can continue recording data when the main server is down, and built in encryption. Some checks like open ports/icmp responses etc can be checked using either the local agent, the remote server, or both, which helps quickly diagnose things like firewall config issues.

    I did look at some other solutions, but I wanted something integrated to hit the ground running. Mobile apps are very limited, and there is no official one to my knowledge. I use Moobix which I don’t believe is FOSS - but I could be wrong there

    Try each solution out and see what works best for you!







  • If anyone is interested in mitigation, the only way around this AFAIK is to start with a brand new domain, only use wildcard certs (with DNS validation), and don’t bundle multiple renewals into a single cert.

    Also, don’t enter your domain or related IP address into dns reverse engineering tools (like dnsdumpster), and check certificate transparency logs (https://crt.sh) to see what information related to your cert renewals has been published.

    This won’t stop automated bots from scanning your ip for domains, but should significantly reduce the amount of bots that discover them



  • Not exactly IMO, as containers themselves can simultaneously access devices and filesystems from the host system natively (such as VAAPI devices used for hardware encoding & decoding) or even the docker socket to control the host system’s Docker daemon.

    They also can launch directly into a program you specify, bypassing any kind of init system requirement.

    OC’s suggestion of a chroot jail is the closest explanation I can think of too, if things were to be simplified


  • I’m not planning to move anywhere tbh.

    Mozilla is almost 100% financially dependent on Google right now, if that funding goes away then so will Firefox, the Gecko engine, and likely all the forks. With all the layoffs happening in the industry, we can’t rule out Google shareholders looking elsewhere to cut costs too, such as the massive subsidization of Mozilla. The little we can do is allow Mozilla to find other sources of funding that are optional for users IMO

    Yes, stuff like pocket is garbage. But at least Mozilla allow you to turn it off, which is more than can be said for Google: on Android devices manufacturers have to pay a hefty “fee” just to allow users to remove the Google search bar from the launcher. As a user you can get around this by installing a custom launcher, but as a manufacturer, you will not get Google certification: no SafetyNet (Play Integrity DRM, required by Banking apps), no Widevine, and Google will block GMS & their other apps on your product.

    Regarding AI, mozilla’s memorycache is completely local (runs on the user’s machine) and does not call out to any servers. The new translation feature is the same. The only exception to this that I’m aware of is the AI helper on MDN, but the target audience of that site is already in a position to determine whether that is a useful feature or not.



  • Please don’t self-host DNS. It can be exploited and abused in many ways if you don’t know what you’re doing.

    Seconded

    One of these is DNS reflection, a type of amplification DDoS I found out about several years ago… You send a tiny packet to a DNS server requesting a domain with long records, but tell the DNS server to send the response to another address. Pretty interesting and amusing imo, but probably not if you’re on the receiving end of one lol


  • I went with the virtual appliance when I installed Home Assistant several years ago, turned out to be a great decision looking at how it’s architected. I only self-host the database separately, which i’ve found easier to manage.

    the fact that the storage usage keeps growing

    There should be a setting to reduce how long Home Assistant retains data for - I removed the limit on mine, however its possible that on newer versions they’ve changed the default

    Hope you find a solution though - I think node red (capable of doing dashboards on its own) with something else is going to get you part way there.


  • Or also possibly discoloration, I had an OLED display on my last phone, and while it was amazing in terms of deep blacks and vivid colors, the screen looked kind of tired and green-ish after 6 years of use… rip Galaxy S5

    I never really got burn-in because I mostly ran my display at lower brightness levels, however pretty much everyone else I knew with an OLED just treat it like a normal display left cranked at max brightness 100% - safe to say I’ve seen a few devices with some pretty noticeable burn in text and UI element outlines 😅

    My current phone is an LCD, and I may actually end up staying with LCD due to the extra brightness - particularly outside because I now use it as a bicycle computer too.

    I’m a little disappointed Steam discontinued the LCD edition of their Deck (besides the 256GB model) but it’s pretty understandable looking at how competitive the handheld gaming PC market is getting, and how much of an improvement the OLED display is for colors, HDR, and battery life in particular


  • This is honestly really great news. I watched Teaching Tech’s coverage of the X1Plus jailbreak firmware and it looked really comprehensive, the team even took his feature suggestion and had it implemented and ready within a day.

    While I do have some reservations about Bambu Labs’ proprietary printers in the typically open source 3D printing landscape, I do appreciate that they’re not dancing around that issue and instead found a path which allows customers to officially run custom firmware should they so choose.

    It’s a little unfortunate that the custom firmware waives your warranty though IMO, although it’s really nice that they’ve made the unlock process easy. Fairphone as an example offer a similar way of allowing their bootloaders to be unlocked, where you go to their website and type in some numbers printed under the phone’s back cover, and they take you to a page where you are explained the risks of doing so - however unlike Bambu, Fairphone are willing to respect the warranty as long as the phone has been reverted back to the OEM firmware.

    All in all though this is great to see and I’m looking forward to seeing what people do with their CFW Bambu machines