Some attackers check services that have already cataloged the services you are running, even on uncommon ports. You won’t hear from them unless you are running a potentially vulnerable service.

If you’re self hosting Headscale you can configure your network such that Headscale is reachable on your network with or without internet access and available from the internet.

Nearly $1,000? ChatGPT can’t even give correct instructions for building a computer capable of hosting itself.

Don’t expect Gitea to make progress on federation. Forgejo is a fork of Gitea and anybody that cares about federation is probably on the Forgejo side of the fork.

If you’re running Kubernetes, what is the point of LXC or Proxmox in this setup? Kubernetes will give better scaling and utilization.

Nix isn’t just for reproduction. It has immutability so if you break your system configuration you can revert to a previous profile, and the way installations are managed allows you to install software that uses incompatible versions of the same dependencies at the same time.

If you can keep it disconnected from the internet you can keep the company from pushing out a downgrade to introduce new subscriptions. I’m already doing it with my TV. If it doesn’t have subscriptions and it can be disconnected from the internet so it can’t sell my data or introduce new subscriptions, I might buy one.

Is it really 29,990 or is it 29,990 and monthly subscriptions and your data?

I think it would be harmful to my children to know that people like this exist and are hurting everyone, including children, supposedly on the behalf of those children. I would like to require age verification to interact with these politicians. They can only use services that support age verification and cannot interact with anyone who hasn’t verified.

What if I want myself or my children to have access to this content? Where is my control?

Giving a container access to the docker socket allows container escapes, but if you’re doing it on purpose with a service designed for that purpose there is no problem. Either you trust Watchtower to manage the other containers on your system or you don’t. Whether it’s managing the containers through a mounted docker socket or with direct socket access doesn’t make a difference in security.

I don’t know if anybody seriously uses Watchtower, but I wouldn’t be surprised. I know that companies use tools like Argo CD, which has a larger attack surface and a similar level of system access via its Kubernetes service user.

Mounting the docker socket into Watchtower is fine from a security perspective, but automatic updates can definitely cause problems. I used to use Rennovate and it would open a pull request to update the version.

Will they? It’s possible to do on Android but I’ve never heard of anyone doing it. Cordova on Android uses the Android web view component rather than ship its own copy of Chromium. Of course Android web view is now Chrome so it’s less likely that you would have difficult compatibility problems that would make you want to ship your own browser engine.

React Native and React are different. React Native does not use a web browser.

Git does have a server component. When git connects to an ssh remote it executes an ssh command that needs to be present.

You’re missing GitLab. I’d be looking at GitLab or Forgejo.

But you might not need this. When you access a private Git repository, you’re normally connecting over SSH and authenticating using SSH keys. By default, if you have Git installed on a server you can SSH to and you have a Git repository on that server in a location you can access, you can use that server as a Git remote. You only really want one these services if you want the CI pipelines or collaboration tools.

The issue says at the bottom that SealedSecrets is unaffected.

You’re wrong about not being able to levelage your Intel graphics. Intel 11th gen has hardware HEVC (h265) encoding. Your Samsung phone probably also has HEVC hardware encoding faster than your CPU encoding. You want the ffmpeg hevc_vaapi codec, and it should go even faster if you use -hwaccel vaapi for decoding.

Not Skype: Skype for Business, which is a different product from Skype.

Microsoft would go on to make this mistake again, naming both Teams and Teams the same thing before ultimately combining them into Teams last year.

At least in the past, if you had a fixed amount of work to complete, underclocking would increase overall power consumption.