Viewing profile — peanut-walrus

> The rational soul can be made only by creation. From Aquinas' Summa Theologiae. The argument this article presents does seem very similar. Weirdly, the article itself is very dis…

Because web security has a lot of legacy crap. Such as cookies. Oh you added Domain=foo.com to your cookie? Now marketingvibecodedapp.foo.com can access the cookie from your main d…

In theory, yes, in practice this will currently result in deliverability issues, both for servers which don't speak dmarc and for spam signals. I have tried this :) If this mode of…

Missed opportunity to get rid of SPF. What I want to my DMARC policy to say: if someone is sending you an email that claims to be from my domain and it's not signed by one of the k…

Turns out you don't actually need top-tier engineering talent if your only business is selling ads to scammers to prey on the elderly?

It's a feedback loop between governance, social structures and individuals. But out of those, only individuals are the ones with free will who are able to "break" the loop and dire…

It's your personal toy server, you are optimizing for something entirely different than high availability.

Yup, podman quadlets autoupdate quite nicely. Setting up a local registry mirror with ~3d delay before applying updates is on my todo list. My own service images already have a scr…

I see no reason not to go with a rolling release distro for personal servers. Run all the services in containers and have the base OS auto-update itself as often as it needs. Went …

I do fight botnets, malware and scams. Criminals flock to any service where they can spread their stuff and appear legitimate. Google, Facebook, Vercel, Netlify, Amazon, Oracle, Mi…

Oh absolutely agreed. Cloudflare becoming a giant internet chokepoint is certainly a real problem. It would be a much better world where ddos protection would not be a needed servi…

So "big companies only, absolutely no anonymous sign-ups" should be the only ones able to put stuff on the internet without fearing that a random teenager can take your site offlin…

Articles like these seem to hold a weird belief that Cloudflare does not react to security reports or legal orders? From my experience, they react appropriately and relatively quic…

90% of those sites don't have anything resembling a sysadmin. If they've not already been hijacked by one of the Wordpress vulns or hijacked plugins years ago, they will be now. An…

Yes. But it's quite an uncommon setup. For IPv6 multiple addresses is the default.

I've always found the most complicated part of IPv6 to be address scopes and source address selection. The fact that one interface can have any number of addresses in different sco…

And eventually even a worm will turn.

Yes you can. Fight with clever technical solutions and the politics will follow once the solution becomes common or displays its usefulness. It is in fact the most effective way to…

Why the hell is this a name suffix instead of just using subdomains? myapp-123456789012-us-west-2-an vs myapp.123456789012.us-west-2.s3.amazonaws.com The manipulations I will need …

It sucks so much that there is no standard way of linking additional domains to your main one and inheriting the reputation. Want to set up a new domain for whatever purposes (conf…

I've always found it weird that CNAMEs get resolved and lumped into the answer section in the first place. While helpful, this is not what you asked for and it makes much more sens…

I've been a Linux admin for 25 years but up until a few months ago my personal computer has been windows (gaming desktop) or Mac (laptop). I decided to give desktop Linux another s…

Disagree. If you have an error that NEEDS fixing, your program should exit. Error level logs for operation level errors are fine.

Personally I find just using nftables.conf straightforward enough that I don't really understand the need for anything additional. With iptables, it was painful, but iptables has b…