“Use google sheets” is an interesting solution in the “selfhosted” community.

The Raspberry Pi 5 doesn’t have h264 hardware decoding blocks anymore afaik. But it’s fast enough to do better and faster software decoding anyway from what I’ve heard.

I see, then the website is probably just very out of date. The main repo hasn’t seen a release in a while either, so it might still be the latest available version.

The github page they link has been archived over a month ago, the last release is from november last year and I don’t think much development happened in the meantime. Their website doesn’t scream up-to-date either.

Did I miss something?

Like I said: unless your ISP sucks. I don’t see the issue with dual stack and I don’t know why you’re bringing other transition mechanisms into this. Obviously they kinda suck. Dual stack really doesn’t have much of a downside or a performance hit unless your clients or DNS are doing something stupid. In which case you can still choose to configure a client to use one over the other. Many ISPs, especially outside the US, don’t have enough IPv4 address space and have to use CGNAT, in which case you’re much better off with a dual stack setup and a DNS config that prefers AAAA records, imho. IPv4 only leaves you with NAT, which sucks and IPv6 only isn’t feasible currently.

Dual stack setups are not an issue unless your router doesn’t support it or your ISP sucks.

I didn’t know that Canada was basically Mordor…

There are some good points in it, though I wouldn’t really consider go dependencies all that decentralized in practice and I don’t understand how checksum db will protect against supply chain attacks with stolen credentials, but I admit I haven’t looked into the details.

But why hasn’t JavaScript established a defacto stdlib to replace ask the left pads and is even type packages?

I’m guessing things were working out pretty alright, even with the insane amount of dependencies per project. The awareness and the increasing frequency of supply chain attacks is relatively recent for npm. But who knows, maybe the tech giants in control of the web standards are happy to keep using their own vendored registries.

Npm probably has the biggest attack surface and many of the libraries hosted there are in extremely widespread use. They’ve taken some steps to mitigate these supply chain attacks, but as we’ve seen with more recent examples, it’s unrealistic to think they can be prevented completely. Most of these attacks use stolen developer credentials, which invalidates almost all potential security measures on the registry side and the best you can hope for is catching a malicious package quickly. To be clear: I think the JS ecosystem is uniquely positioned to be the prime target of supply chain attacks and while that doesn’t excuse the slow implementation of security measures from the npm team, the people arguing that other package managers and registries aren’t vulnerable to this have to be huffing fumes.

Npm has gotten a few config options that prevent this behaviour. We can only hope that they will become the default eventually.

It does. Enforcing a minimum package age can be useful for some applications, but the average user isn’t one of them.

The good news is that there already is a gold standard for supply chain security: the Go programming language.

Lmfao

I see. It uses AI generated code, I just checked.

Is there a version of n8n without AI generated code?

You don’t really need to care about that from a consumer perspective. Unfortunately however, this is a common weakness of FOSS projects. If the maintainer is an asshole, the project suffers and eventually dies most of the time. Being an asshole is not conducive towards attracting contributors. Who knew?

Asking for help online just gets you a “lol, RTFM, noob!”

Depends heavily on what place you ask for help in. There are plenty of spaces explicitly meant for community tech support. In OPs case, I’ll say the title doesn’t help and asking an LLM for advice on a topic you’re unfamiliar with (and not second-guessing the commands you paste into the terminal) is such a bad idea that it really can’t be understated. I regularly catch some of my colleagues making AI-assisted mistakes and they’re professionals who genuinely know better. This shit shouldn’t ever be recommended as a learning tool for beginners without some kind of supervision or guard rails to ensure you’re not being gaslit.

I don’t blame people for thinking that something is off after reading the linked blog post. This wouldn’t be the first time Google does something like this to OSS that poses some kind of potential threat to their business model (this is also mentioned in the post).

To me this looks nothing like Discord beyond having a compact sidebar… In fact, I would hope that Discord never inspires any software UI, because it really fucking sucks.

It’s probably not a good idea to infer how privacy friendly an open source software is, based on such a superficial visual similarity to a closed source proprietary product.

Using Traefik outside of k8s is for masochists. Especially after configv2. Caddy is by far the easiest reverse proxy to configure and has the sanest defaults.