• 1 Post
  • 129 Comments
Joined 3 years ago
cake
Cake day: June 22nd, 2023

help-circle
  • I’d DIY it (maybe with FreeNAS, about which I know nothing) instead of buying a proprietary NAS in a box. What’s the point of self-hosting if you’re going to be at the mercy of someone else’s software anyway? If you’re DIY’ing, there are 3.5" drive enclosures with soundproofing stuff in them that should keep the drive pretty quiet. Or if you can afford enough SSD’s for your storage requirements, then use those.


  • In the backup world, 50TB isn’t really a lot, and you’re not really ready to talk about tape systems or maintaining an always-on disk system. Also, HDD’s have been getting more expensive due to AI idiocy. But, cheapest is probably a second raid system, like 4x 20tb drives. Do the backup at home and then move the backup system off site and either keep it spinning, or make sure to spin up and test the individual drives every so often.









  • No idea about Pixelfed, which I don’t use. I thought the article gave an interesting perspective on the internet in general, not just the fediverse. So the concrete stuff about Pixelfed, cross-fedi accounts, etc. didn’t seem that important.

    There are some interesting posters on Mastodon and also on Lemmy, but I think the fediverse in general is nowhere near what Usenet or Reddit used to be. No idea about Facebook or IG, both of which I stay away from, though there is a musician on IG who I was thinking of emailing to suggest cross-posting on Youtube.





  • It’s possible but I haven’t felt the need, and it’s another thing that can go wrong. If I think my key may have been compromised I have much bigger problems. I should assume my whole machine is pwned and trojan’d, so I should replace the disk and reinstall everything.

    I can see some benefit in using a special token to hold the key instead of just generating it on my laptop. One of these days.


  • Are you running a planet-wide server farm from your 20 year old key or what? Just a few machines? If you want to regenerate your key and fix the knownhosts files and it’s not too much hassle, then go ahead and do it. Do something else later if you want something fancier. Yes there are some hardware key encaapsulation approaches possible, some people like to use jump hosts as gateways (the remote hosts firewall block access to anything but the jump host) etc. Also people rely in part on virtual LAN security in their data centers or ISP’s.

    If it’s just a few personal machines you’re probably overthinking this. I just don’t store secret keys on any remote machines, but use ssh-keygen on my laptop and ssh -A from there.


  • Do you think they are compromised? Generally you have to invalidate the public keys in any .ssh_hosts file that accepts them, and create new ones instead. I generally install .ssh_hosts on remote machines using an ansible playbook. I don’t have any automation to cycle them but I guess I would also do that with ansible if I thought it were needed.

    Ansible may be old school by now, but it works for me. Maybe the cool kids are using something newer now. I want to look into nix or guix one of these days.


  • I’ve bought most of mine on craiglist but either way you sort of have to know what you’re doing. I’d say just sort by price and scroll through the results in the range you want to pay. You might also filter on “within 25 miles” or whatever, and get a unit that you can pick up in person. Or at least, try to talk to the person on the phone to get a sense that they know what it is that they are selling.

    Thinkpads forum is still around and has a forsale section. It has slowed down but is still active:

    https://forum.thinkpads.com/viewforum.php?f=11

    I’ve bought stuff from there in the distant past.



  • Thanks, it is kind of intriguing though I keep telling myself to just use normal Linux stuff instead of Android. I’d want the 14 inch one which is around $300. Is there any trouble installing F-droid and apps from there?

    Alternatives I’m thinking of include Lenovo Yoga laptop (16 inch) and a Raspberry Pi thing with an HDMI monitor (that would be plug-in only but I mostly read at home).