WxFisch

I’m curious how everyone documents their core/critical configs to allow the non-technical in our homes work with it if needed. For instance if I’m on work travel and the Pi-hole goes down for whatever reason my wife wouldn’t be able to use pretty much anything online. I can remote in and fix it but that could be hours/a day or two later. Same then for the proxmox stack that everything runs on.

Along the same lines, how are folks documenting for EOL? It may not be a happy thought but we are all going to go someday, so what is your plan and how have you ensured loved ones can access/save important data?

Agree 100%. Most of the former Plex users turned Jellyfin users I have come across did so better Plex was broken in some way for them. For me it was the general lack of care in creating/maintaining a good Apple TV app. Over the past few years it’s just gotten buggier and buggier with a lot of complaints on the Plex forums where devs would essentially stop by to say they weren’t working on any fixes.

Jellyfin doesn’t fix 100% of the issues, but at least there is active development on Swiftfin that showed a desire to fully support all devices.

And I will continue to use it until they take it away

So paperless works as a service that ties into your storage. I point mine at an NFS share on my Synology and just backup that share. The documents are all stored as PDFs still so worst case I still have “dumb” copies without all the tagging available if my paperless instance goes offline for some reason.

I use Backblaze B2 through my Synology NAS to offsite my important data. Most things though I just backup locally and accept the risk of needing to rebuild certain things (like most of my movie/TV media files since I can just re-rip my physical media, and the storage costs are not worth the couple of days of time in that unlikely case).

I really think this is key when thinking about your backup strategy that is specific to self hosting compared to enterprise operations. The costs come out of our pockets with no revenue to back it up. Managing backups for self hosting IMO is just as much about understanding your risk appetite and then choosing a strategy to match that. For example I keep just single copy in B2, since the failure mode I’m looking to protect against is catastrophic failure of my NAS which holds my main backups and media. I then use Proton Drive and OneDrive to backup secrets for my 2FA setups and encryption for my B2 bucket. This isn’t how I would do it at work (we have a fair more robust, but much more expensive setup). But my costs for B2 are around $15/mo which I am fine with. When I tried keeping multiple copies it had grown to over $50/mo before I cared enough to really rethink things (the cost of the hobby I told myself).

I misunderstood what you were saying, I wasn’t sure if protect required a UniFi hardware console or could be self hosted like the network application can be. It looks like it does require at least a Cloudkey gen 2 (or the plus which is what they currently sell) or one of their integrated consoles like a UDM.

It’s supported natively in the UI to configure: https://help.ui.com/hc/en-us/articles/26301104828439-Third-Party-Cameras-in-UniFi-Protect

It was added in EA in mid September and should be GA now as far as I know.

I use UniFi Protect and record to my UDM, though you should be able to install it all on your own hardware if you’d prefer. Their cameras are pretty decent but a bit pricy in a lot of cases. Though they do support 3rd party cameras now.

I’ve also heard a lot of good things about frigate, but I’ve not really looked into it since I already have UniFi gear.

Something like LPS/TENS would fit your needs exactly, but it stopped being supported in 2021. It was essentially Tails but was built to be run from a wide verity of sources (we used to network boot onto PCs that had no hard drives at all, but had local network share access).

Kagi doesn’t hide that they use API calls to multiple sources for each search, they are fairly upfront about honestly. The benefits of use Jagi IME are the results are great, the site is fast and gets out of the way, it’s fairly affordable for what it provides, and the goals of the company is in line with mine (namely to find a thing I’m searching for). They are well funded enough to give me confidence that I’m not going to have to configure yet another search engine, and the integrate into pretty much all my access points easily as a default search engine.

I have seen no reason to think they abuse their position to impact my privacy, and bring closed source does not automatically make them evil. You included no alternatives that are open source, and the ones I explored were either difficult to get setup, required me to run something on my own infrastructure, or didn’t provide the integrations or results I expect. Kagi does.

Kagi isn’t perfect, and there are a ton of suggestions on their feature tracker that users rightly want implemented (including open sourcing more of their code-base). But as a paid search engine that makes me not the product, it does that job well.

Looks from the article like it was stolen by infecting the PC of a third party analytics firm user who had privileged access to Hot Topics snowflake data warehouses and didn’t have MFA enabled. That is just inexcusable in this day and age and $100k is a small price for Hot Topics snowflake to pay for that fuck up (assuming the bad actor actually follows through and doesn’t sell the data if HT pays the price set). Pro tip (or really amateur tip), MFA all the things. Even SMS based MFA is better than no MFA even though it’s not ideal.

No, because no one intends to hit a pedestrian with the car they are buying. That’s why we need to mandate safer vehicles, not trust people to factor that in as they look for a car.

They can, I turned off my plex VM to save resources but no real reason they can’t both point to the same libraries at once.

So still not addressing the myriad problems the player has, especially on AppleTV where it’s been reported for nearly half a decade to not work well. But hey you get yet another place to do photos things (which they admit literally no one wants or uses, they’d be better off dropping support for photos altogether).

This is super frustrating because plex is very polished despite its clear bugs and misdirection. I just switched over to JellyFin and it’s faster and much more focused but just still has a lot of rough edges. I’m not sure which will be my long term solution but plex needs to attract folks to subscribe and focusing on features that 1/5 of a percent of users utilize is not how you do that.

The article title is misleading, but the research is interesting. Essentially it’s saying that when the rocket self-destructed due to it performing off nominal (as the first test ever of this vehicle) it ionized a large swath of the ionosphere from Mexico to the SE US which can impact the accuracy of GPS for systems that require high precision. The ionosphere reionizes very quickly naturally though so the effects are short lived (hours to maybe a day) and the impact to navigation at least should be small because of how GNSS works with built in corrections for exactly these types of errors. It feels like Nature is stretching a bit with the doom and gloom headline that the authors don’t even point to in the article (though I have not read the paper to be fair).

From my reading this is misleading at best and likely wrong. I don’t work with CrowdStrike Falcon but have installed and maintained very similar EDR tools in enterprise environments and the channel updates referenced are the modern version of definition updates for a classic AV engine. Being up to date is the entire point and so typically there are only global options to either grab those updates from the vendor or host them internally on a central server but you wouldn’t want to slow roll or stage those updates since that fundamentally reduces the protection from zero days and novel attacks that the product is specifically there to detect and stop. These are not engine updates in that they don’t change the code that is running, they give the code new information about what an attack will look like to allow it to detect malicious activity as soon as CrowdStrike knows what the IoCs look like.

In this case it appears that one of these updates pointed to a bad memory location which caused the engine to crash the OS, but it wasn’t a code update that did it (like a software patch). That should have been caught in QA checks prior to the channel update being pushed out, but it’s in CrowdStrikes interest to push these updates to all of their customers PCs as quickly as they can to allow detection of novel attacks.

For me as the driver of not one of these cars, I think the driver monitoring and sheeting is perhaps one of the most important parts of these systems. I 100% want your car to scream at you for not paying attention while use the driver assist features because it’s such a common and easy thing to do (if it works 99 times without issues, human nature is to assume it will work that 100th time, so checking that email from work real quick is probably fine). When the consequences of a driver failing to post attention while using these systems is potentially other people dying in a horrific crash, your discomfort at an alert because you happen to be a perfect driver that never does other things in the car while driving doesn’t matter.

I would recommend prowlarr instead of jackett for indexer management, and pihole as at least an additional blocking service but in reality it’s really all you need for use at home. I’d also strongly encourage use of a VPN on your *arr download services. I use a separate box to run Plex and then have my *arrs all running on their own VM inside if it to provide separation and allow be to more easily segregate the network traffic (as someone that doesn’t really know docker that well it “just works” for me. Also probably worth looking at how to store your media on an external target, it’s easy to quickly accumulate 10s of TBs of media and trying to store that all on the server locally is asking for trouble. Better to set everything up on a NAS to start.