off-topic-tech

[charred relic]

He's not gonna be ok... is he...

[soft bloom]

and this is why you don't immediately trust every plausible explanation on the internet
https://www.youtube.com/watch?v=kY2YeM5fNDw

[arctic mason]

@lucid flint safado

[languid gulch]

if sodium is a light metal, then Magneto should be able to move people around

[pure karma]

my destruction powers strike again

this time i have broke task manager

everything is at 0 or not updating

and there she goes

[soft bloom]

I think i am going insane

Granger causality cannot look the same if I shift signals even by 1, right?
like... come on

[pure karma]

i think i am going insane trying to understand what you have been talking about for the past few weeks

[soft bloom]

so at least i am keeping my progress consistently uncoherent. great

[languid gulch]

ok, insane question

is there a way to jankily double the bus width on a GPU

🤣

[pure karma]

im going to go with no but i have no clue

[languid gulch]

average Finns should come to the US & become high paid professional drivers

anytime really. american drivers suck

you'd laugh at the amount of testing we do to get a license

oh definitely

in my part of the US people forget how to drive when it rains 🤣

i'm just glad i've never gotten a ticket or been in a wreck

yes 🤣

i can even drive stick

i have a fair bit of offroad experience, but had to stop cuz my back can't take it anymore

yeesh

tired is as bad as drunk

i had to drive a gas car a couple weeks ago & i had completely forgotten what it feels like 🤣

oh if we had decent mass transit here, i'd probably still have the car, but only because it's an EV. i'm good with never owning a petrol car ever again

🤣

sadly we're way too spread out here to make any kind of mass transit efficient or worth the tax money

digging equipment comes here to die 🤣

oh i'd love to see a TBM try here

we don't have dirt, it's half clay & half rocks

the big mountain range in california are the Sierra Nevadas

the rockies go from canada down to mexico tho, that's definitely the big one

[pure karma]

of course we do why wouldent we

well thats when you get the snow blower out and get to work

[languid gulch]

what's a snow blower?

[pure karma]

unless its frozen then you get a old fourtrax or something and send it across the top

[pure karma]

a tractor with a spinny thingy that yeets the snow everywhere

[languid gulch]

the only snow shovels we have here are for shoveling bird shit off of rooftops 🤣

[languid gulch]

oh i know 🤣 but i'm in the phoenix area, which would shut down if a snowflake fell

[pure karma]

fair

[languid gulch]

we have the opposite problems of everyone else 🤣

[pure karma]

we aint stopping for no snow

[languid gulch]

i've experienced midwest snow, that's enough for a lifetime

[pure karma]

we have our snowblowers ready year long

[languid gulch]

i do kinda like the russian approach of using MiG engines

i always laugh when people say it's so pretty here. it's all dead and brown

[pure karma]

i mean its literally in the name phoenix's generally represent fire

then better get looking for that X

you might just find some treasure

[languid gulch]

just don't get caught driving in it

the bad ones you can't see across the street for ~20 minutes

we're the test location for those 🤣

waymo

for some reason they use Jaguars & Porsches

mostly flat, and hilariously straight roads everywhere

either that or they're Toyota vans

we also have those bicycle cart things where like 8 people get on & pedal while drinking

it'll hit 50

air temp

you can bake biscuits in a car if you park outside

central air is 100% required here

we're like a mini australia

temp differential is too much here for it

remote start for cars is really nice here so that you don't hop into a car that's 70 degrees

oh we have a lot of solar here

but we also have one of the biggest nuclear plants in the world

it's possible, just declared to be too expensive

[pure karma]

not surprised cause temps reached 42C here up north last summer

crazy hot summer

but it was fun

[languid gulch]

what really pisses me off is that we could basically power the entire US with solar if policies would change. right now you can't just have rooftop solar as a "normal person" in arizona, it has to be tied into the grid & then you get a discount on your bill

you can't even tie rooftop solar to a local battery for outages

[pure karma]

that and its also not really cost effective right?

[languid gulch]

a bit, mostly local though for tesla supercharging

[languid gulch]

cost has dropped a lot

still expensive tho

takes like 5-8 years to pay off

[pure karma]

and plus arent solar pannel only 20% effecient or something

like only 20% of the heat is actually converted into energy

[languid gulch]

the old infrastructure is gonna be hard to get off of, and there's no middle step to do it

eh, most places have at least some of that

so long as it's paid for idc much

they're slowly working on tying it to the rest of the US grid

oh 100%

ngl tho as an american i like the UK power plug

the ground pin being coated & longer than the other 2 is brilliant

oh the fuse can fuck off

longer ground is great

i wish the US could do a double transition to a longer ground pin, plus going to 240V

🤣

yea, the cords can be really thin

[narrow folio]

US already has 240V, just not used much for the usual home gadgets

[languid gulch]

yea but i mean as primary, not just for EVs & appliances

i'd kinda like to see a split, where 12v gets put inside walls too for low-power things to replace chargers

[narrow folio]

true, but the whole US system with it's split phase transformer thing is kinda weird from any three phase country viewpoint

[languid gulch]

TC's rants are great

ooooooh what about mandating solar, tying it to an in-wall DC 12V system so you wouldn't need an inverter for it

[narrow folio]

usually everything has at least 3x400V/230V at 16A

typical 25A per phase

easier to use

[languid gulch]

local battery storage with a DC system tied to it would keep the efficiency high

[narrow folio]

12V DC is nice for very short connections or very low power

cable loss is an immense factor at 12V

[languid gulch]

what kind of distance?

[narrow folio]

figure a water heater with the typical 2300W at 12V...

190A

no difference between AC and DC here

HVDC is used because you have way less capacitor losses

[languid gulch]

maybe do solar into battery in the current/normal way, then have a transformer to drop it to 12v for distribution

[narrow folio]

12V is useless for distribution, you would need AWG 0 cables or bigger for this.

[languid gulch]

confuse it for water pipes 🤣

[narrow folio]

12V is okay for anything with low power

[languid gulch]

at least we're not japan with its batshit crazy 60hz/50hz split

i understand the history, but good god just vote to go with one

[narrow folio]

15kV 16,7Hz it is😉

germany, austria and the swiss share this

[languid gulch]

why not the dutch?

i like that central france "fuck all of you" section

[narrow folio]

London has (had?) 690V for some trams

modern trains can operate everywhere. well, as long as the rail width fits

Vectron❤️

but for me the Taurus will always have a special place in my heart

first search result

Steam is nice, but oh sooo much work to keep them up n running

had the pleasure to travel with some historical trains and talked a bit with the guys that maintained them

that one looks great 😃

skill can be learned if motivated and dedicated to keep something running, but yeah... who wants to do the work?

usually pensioners maintain and operate those things

when you like what you have grown up with 😉

[pure karma]

i think its because steam is simply so much more impresive

i have no clue how steam developed so much sooner despite being so complex at a large scale

[narrow folio]

I see myself fixing PCs from the 1995-2015 area in 20 years

[narrow folio]

the first steam engines were horribly inefficient, but did work good enough for it to be worth investing further research

big boy? more like steaming speedy steel moloch😁

[pure karma]

the big boy is about the only train i still care about

[narrow folio]

4468 Mallard is cool though

probably not enough space to get up to speed with more then the locomotive 😉

looking at the shinkansen I would imagine that the costs are a major issue

you talking about windscale?

oh, yeah. the best at what, lament the status quo?😁

[narrow folio]

as much as I like the technology behind trains I dislike travelling with a bunch of loud people...

[twin dew]

Whee, new stable UEFI, need to go and actually install it, before Asus puts out another Test one.

That 2704 hit Test last sunday, and was still Test yesterday.

So during last Taiwan workday it got promoted to Stable.

[pure karma]

let me guess the cable management is a big part of why its become a chore

i guess maintenece too depending on how much you want to keep your systems clean

[visual tree]

Did someone say Vectron?

Vectron is popular here

[narrow folio]

https://youtu.be/pOC42oN-3Qw?si=veJ9C9PKvZ8-dvB7

I still love the 'melody'

Sound on 😁

[visual tree]

"After a successful four-year run, Czech carrier RegioJet has made the strategic decision to discontinue its seasonal Prague-Croatia railway service."

[narrow folio]

they are a great piece of technology

[visual tree]

I think it's the same model from the video

[narrow folio]

ÖBB, so should be 15kV

[twin dew]

Damn... Memory Context Restore doesn't seem to work with Gear Down Mode off and 1T command rate.
Need to do some more checking to confirm, to see it isn't just that with 1T, the stability is too marginal for MCR to work.

[dire igloo]

Meanwhile Newag:
https://youtu.be/8OB2NqcSDXQ

[visual tree]

Just realized the pun in the video title regarding Newag, took me some time 😅

[twin dew]

No, just too marginal on the voltages I input at 6000MT/s.

Need to look into that more... and I don't want to!

9950X3D on ECO mode probably.

(Lowered max power)

But unless you do number crunching, no use getting any of the dual-CCD parts.

[pure karma]

it shouldent?

my 13700K dosent kill performance and can do almost gigabit speeds no problem

[twin dew]

Ok, MCR works fine with GDM off 1T, but RAM needed 1.40V VDD/VDIMM, and not just 1.35V.

So just stability margin on the training being so small that MCR didn't work.

[twin dew]

Still here?
Just that external USB connected units have mostly replaced the internal cards, for those that want something better than MB integrated.

[dire igloo]

CX31993 USB-C adapter

Don't bother with sound cards, get a proper DAC.
It's the same shit with a different connection - and external DACs have seen more development than internal PCIe soundcards

Actually, what difference even is there between external DAC and external sound card?
Just marketing? Maybe some QOL features?
Actually curious

[twin dew]

Same thing, different form factor.
DAC = Digital to Analog Converter.

Any sound card has to contain a DAC.

[dire igloo]

And if you want actual highend:
Shiit Modi (can also add Shiit Magni as an amp for hard to drive headphones)

[twin dew]

So just marketing.
Someone wanted to differentiate from "sound cards" and then everyone jumped on the train.

[narrow folio]

Shiit has good shit indeed

[dire igloo]

I know both of those, just wondering if there's an actual differentiation between the two terms even if they're functionally similar/identical

[twin dew]

If looked at very narrowly, DAC would be much more limited thing than Sound Card/Sound Adapter.

[narrow folio]

DAC is usually marketed as high(er) end stereo solution

[twin dew]

Only doing pure conversion, without any amplification after etc.
And absolutely no modification etc.

[dire igloo]

While a sound card usually does more things than just a DAC, the term DAC also includes usecases that soundcards usually don't/can't handle - like video

[narrow folio]

Soundcard is more targeted at gamers

[twin dew]

Yeah, should have clarified that on audio realm only.

[dire igloo]

The term soundcard comes from the time when audio DACs for PC use were sold as PCIe add-in boards

[narrow folio]

Audio interface is for the (home) studios and streamers that need mic pre amps

[dire igloo]

Because you bought a card that handled sound

[twin dew]

Again just different term for same thing.

[narrow folio]

yeah, but I still see the term thrown at USB stuff from creative

[dire igloo]

Audio interfaces include an ADC and usually some form of control, maybe extra connectivity

[narrow folio]

I know the differences, but marketing has their own language

[dire igloo]

Quite a difference from a regular DAC

[twin dew]

Because no-one is using the terms straight, and it is almost purely marketing.

Yes, usually the USB DAC sold things don't have inputs.
But some do, just crappier than the ones sold as Audio Interfaces.

[dire igloo]

Because creative became big with their internal PCIe soundcards - Soundblaster X was all the craze

[narrow folio]

my 8 bit Soundblaster was cool, way better then the buzzer😁

[dire igloo]

How can a DAC not have an input?
Or do you mean it doesn't act as an input to the connected device (PC, etc)?

[narrow folio]

DAC is an output, ADC is input

[dire igloo]

Cuz without the D there is no A to C to

[narrow folio]

when you make yourself feel old

[dire igloo]

DAC takes D as input from device and Cs it to A as output to equipment
ADC takes A as input from equipment and Cs it to D as output to device

[twin dew]

Basically if something is sold as DAC, it shouldn't have any adjustments, even volume.
And no inputs.

[dire igloo]

Actually, let me rephrase, ADC takes all the farm, overextends, gets killed once and runs it down

[twin dew]

When looking from the PCs perspective.

[narrow folio]

usually that's the way to go, but there are some who play live with their synths

[dire igloo]

Yeah, in an ideal world the PC should not get anything from the DAC except the info that it's there

[twin dew]

PC outputs digital stuff to DAC, that converts it as is to analog and outputs that as voltage signal.
Amplification to line level would probably still fit.

If needed, probably not.

[narrow folio]

oh, there are quite a bunch of performers who work without a DAW

[twin dew]

If the "DAC" has op-amps on it, it isn't a DAC anymore.
As the Op-Amps are as the name says, operational amplifiers.

[dire igloo]

There's a lot of variance.
Some use an actual DJ set with turntables and records that they mix/master against each other live on stage, others spend hours in preparation for creating remixes/mashups/transitions/etc and then there are those that just put on a Spotify playlist

My neighbors listen to good music.
-# whether they want to or not

[twin dew]

But that battle was lost many years ago when that "DAC" term was commandeered by marketers for external analog audio output devices.

[dire igloo]

tbf tho, a well-crafted playlist can go a long way.
If the songs naturally blend into each other, their mere selection already does a lot of heavy lifting

[twin dew]

Sound Card is just power source, control chip, bunch of op-amps, DACs and ADCs and output and input connectors, on internal extension card form factor.
And when you move that to be external thing, you get DACs, Audio Interfaces, External sound cards etc. as marketing names.

Depending on which part you want to emphasize.

[dire igloo]

It's also a matter of expectation.
When I'm at a friend's birthday party, a good Spotify is already more than enough.
When I have tickets to a Lost Frequencies live show, I'm expecting a much higher level of skill and effort

It's actually incredible how much of an improvement that simple $10 CX31993 USB-C DAC brought compared to the onboard chip - tho I've noticed that the most on a borrowed pair of DT880s

[narrow folio]

have a look at 'look mum no computer' on YT, he does some wacky stuff with modular and other stuff like a furby organ or Gameboy orchestra

[dire igloo]

Dirt cheap, simple USB-C to 3.5mm DAC, just the included USB-A adapters were shit

[dire igloo]

Seen him on Maker's Secret Santa. I'm not really into the audio/modular stuff, but I like his wacky stuff

[twin dew]

Might be higher amperage or voltage output to the headphones, making the driving more accurate.
Might be the interference caused by rest of the system on the low voltage signals between the DAC and op-amp on the MB integrated solution.
Might be interference from the long runs between the op-amps and the actual connection plugs.
Might be better op-amps etc. used.

All are usually crap on MB integrated, even when they would not need to be.

[dire igloo]

Same for phone jacks I presume?

[twin dew]

Yes.

[dire igloo]

But yeah, nowhere near a Modi, still one hell of a tool to have

Placebo

And placebo effect that despite there being no actual difference, the expectation of a difference still makes you experience one

[narrow folio]

you know your onboard is crap when you can hear it when you scroll a website😁

[dire igloo]

And idk what I'd call it when people just want to avoid buyer's remorse so they'll convince themselves that the overpriced crap they bought is actually good

[dire igloo]

Some form of confirmation bias maybe?

[twin dew]

So normally the MB sound chip lives on the lower left corner.
And in this case there are no op-amps at all, the outputs use the chips own driving, so headphone use will be absolute crap.
And the filter capacitors that are supposed to filter the very EMI filled normal MB power for the sound chip are pretty minimal...

And then the audio output is either via the MB panel, way up.
Or on the front panel, via the header on bottom.
And then the unknown quality case wiring etc.

[languid gulch]

i suspect that only boutique stuff will be any thing different besides green, brown, or black

it's probably the cheapest

[twin dew]

This board has two separate MOSFETs, and those 6-legged chips at the bottom might be op-amps.
But if they are, way away from the chip.
And it might just be using those MOSFETs as the headphone amplifier, instead of proper op-amps.
(ASUS ProArt Z890-CREATOR WIFI)

[languid gulch]

i'm personally waiting for translucent PCBs that we can RGB

i don't even know if it's chemically possible

clear PCB that could allow lighting to pass thru it?

yea but what a pain in the ass to cut out & fit around all the SMCs

[dire igloo]

B650 LiveMixer, Z790 LiveMixer

Only type letters, only use wasd, nothing else

Can't wrap my head around it either

[languid gulch]

i still love having a numpad

[dire igloo]

Oh and secondary layer

Number row

[dire igloo]

Numpad is dope for macros

Never used by most ANSI-US users

[languid gulch]

nope

hyper 7

$500

[twin dew]

I only use numpad for large amounts of purely numeric entry.
But still wouldn't get a keyboard without it.

[languid gulch]

(keycaps separate)

mechboards.co.uk/products/hyper-7-v4?variant=41911394926797

i could see it being useful in so many places

machinery control

for that price it better be fucking nice 🤣

plus another solid $100 for keycaps

i'd like to see modular attachments become a standard on keyboards

would love a left side panel

[twin dew]

Anyways.
Still need to check if tRAS and tRC will work lower.
IIRC had some problems with tRC below that "normal minimum in sane usage" value.

And see about IF/FCLK.

[languid gulch]

🤣

[twin dew]

But I need to run now some testing to see that the current set it stable.
Testing like Y-Cruncher, Memtest, Satisfactory, Prime95, etc.

[languid gulch]

someone should build a standard stress test in SF for tech youtubers

[mental oriole]

Why...

[languid gulch]

i mean, who's their competition 🤣

[twin dew]

Very small sales numbers raising the price, which lowers the sales numbers again, raising the price.
In a loop.
When that thing has lot of custom plastic parts which have very high setup costs to manufacture.

Ah, steel case, not plastic.
But again high setup costs for small runs.

[languid gulch]

so the handle is very real

i do miss the days of chunky electronics

[languid gulch]

sadly no

still on win10

yea but they're gonna nuke it this year

[wanton orchid]

there is no real actual difference

[languid gulch]

not just ending support, but making Office365 incompatible with it sucks

[wanton orchid]

windows 11 is basically windows 10.1

wdym ?

what kind of issues ?

[languid gulch]

yea, i grabbed PowerToys to grab some of the win11 functionality

[wanton orchid]

I know about the bloatshit ones

but system is basically same

I dont have that issue

[languid gulch]

yea i'll be stripping win11 down when i get it

[wanton orchid]

ngl I fucking slice windows down before even actually installing it

then 10 and 11 are basically same but with latest updates

10 not stripped to hell is a bug fuck

11 is too

but for me it's not going from 20 to 50
but from 1200 to 1500
not so huge of a difference once you strip it the hell down

dont use ms account for pc wide

that's always calling for shit

I know microsoft done a great job mixing the two

but having an ms account registered for apps, is not the same as registering it for pc wide

2 button to click, one is wrong one is okish

https://www.intel.com/content/www/us/en/download/15084/intel-ethernet-adapter-complete-driver-pack.html?wapkw=complete

[twin dew]

Point was that recent LAN adapters aren't supported in Win11 installers, and for long time it didn't give option to load drivers when it wanted internet connectivity.

So it wanted you to connect to Internet, but didn't allow you to load drivers for your LAN.

[wanton orchid]

hm

just dont

[twin dew]

24H2 finally IIRC added that functionality.

[wanton orchid]

the trick is to load it at disk driver discovery step

you can load any driver there

it will keep it later

technically not easy, I simply got used to it, and worked out a whole fucking meticulous procedure for it

I dont hate microsoft for no reasons

I keep saying it's shit

I simply dont agree with 11 being significantly more shit than 10

I'm like

first time ?

gif are disallowed ?

sorry I dont know "mych" what does that mean ?

[narrow folio]

the ifi go link from my friend is a nice USB to 3,5mm headamp

wow, how was my massage delivered just now and not when I sent it? maybe mobile network problems?

[wanton orchid]

the funny part is when you start getting the insights
it's pretty much like what grey market is
you gotta have the bounds with the right people to work around the stuffs

for instance, intel support on windows "client" is none

it wont install drivers

but you can go grab them manually and load the windows server 2025 drivers cores on the windows 11

it's like, "officially it's not supported" but if you hit the right doors you know

it's also made to work by the people actually making the stuff

no I meant the official relationship and marketing relationship from intel microsoft etc.. are clown

behind the scene you can actually load it, the back door is opened for some "reasons"

the reasons being it must actually work, even though officially everything is made to save the juicy shady corporate contracts

this is basically obscurity

no this is much more silly than that

it's actual sabotage for instance when win10 get eol

but to make it simple : in the end, intel and microsoft engineers need a working computer
so the working set actually exist

it's all marketing bullshit and obscurity

[soft bloom]

https://www.youtube.com/watch?v=i0IRYjPNzxs
at least there's accurately-looking map of seismo sensors

[soft bloom]

btw...
the presenter on that vid i mentioned claims results of https://en.wikipedia.org/wiki/Kola_Superdeep_Borehole to be an argument against plate tectonics predictions and in support of Hydridic Earth model

wut?!

[mental oriole]

Why

[edgy hazel]

pwetty

[soft bloom]

you see
results are presented and interpreted withtin plate tectonics
in my understanding, this creates bias

[dire igloo]

Well, that's how science works.
New data is compared to the current best models: if it fits it's seen as confirmation, if it doesn't fit there needs to be further research to figure out how to adjust the model

[dire igloo]

Also, do you even have a comprehensive and easy to understand explanation of how the hydridic earth model even works?
It's impossible to have an educated discussion without a common ground to start from

[mental oriole]

Good, because I don't want to.

[verbal raft]

LOL

i knew it

[twin dew]

So bursts to 150% of normal power.

[night girder]

under 200%, yes ( ATX 3.0 and 3.1 standard)

Older PSU's might struggle I read. (ATX 2.51)

[soft bloom]

I disagree on the 'best models' part since there's still a huge influence of authority, funding and media on what becames talked about and compared to.

[dire igloo]

Okay, and? You're just regurgitating conspiracy talking points.
Sure, science is flawed, everybody knows that. It's still the best system we have to make sense of the world.
You have a better model for a given field? Present it, show how it's better, make it known, make it accessible.
You may not have immediate success but sooner or later people will pick up.
Alternatively, your theory may have more holes than it attempts to close (example: expanding earth violating the laws of thermodynamics and being incapable of explaining sea fossils on land)

[soft bloom]

https://en.wikipedia.org/wiki/German_Continental_Deep_Drilling_Programme

[verbal raft]

what the fuack?

[wanton orchid]

fueakc*

sorry hard to type

[verbal raft]

[intentionall typo]

[wanton orchid]

this is not a typo
this is not a fuck

[soft bloom]

looks like it's going to be another night with time series...
So, i'm tinkering with various statistical tools for correlation
I have a random signal, the testing combination of 2 sine waves, and distorted version of it.
what bothers me is that both of them show up on cross-correlation, and Granger just doesn't behave when I change lag

[edgy hazel]

might as well ask here too: anyone know any good terminals for mac? I'm switching to one for work. I do love Konsole from KDE so a similar design option to this would be great.
A SSH manager would be so great since I do switch from server to server a lot
it also assigns a random color to each window which makes it great for having a lot of terminals open
especially when you don't want to accidentally rm -fr /* on prod

[night girder]

tabby.sh/about/features

SSH and the kitchen sink
A built-in SSH client with profiles, SFTP, key management, jump hosts, X11 and the rest.

Split tabs
Freely rearrangeable split panes which you can also save as a profile.

[edgy hazel]

looks nice 😄 I'll give it a try. Will get my new mac on tuesday

Tabby (formerly Terminus)
ah yeah I know them

[dire igloo]

i like orange cats

[night girder]

is that you maxeek?

[edgy hazel]

Oh shit it's spreading

[tough owl]

You get a new Mac

I’m jelly

[night girder]

Did the company pay for it?

[edgy hazel]

upgrade to the fucking latitudes

[edgy hazel]

yeah ofc it's theirs

[night girder]

Ok, yeah. Would 100% do the same 🤣 Upgrade everything I need.

[pure karma]

im just going to leave this here to brew

[edgy hazel]

but I am still root 😄

[night girder]

The best of the best.

It can be annoying to work on locked down machines.

[edgy hazel]

yeah being IT is great

[night girder]

I had to ask permission to get access to certain repositories.

[pure karma]

first step to working on something locked down is ask to be able to unlock it

if the answer is no do it anyway or refuse service

[night girder]

Yeah, not doing that again. Just not efficient.

[edgy hazel]

they sadly pay you to not refuse service you know

[edgy hazel]

bro tbh, I'm really happy everyones machine is restricted to shit

you can't even comprehend what people do

[night girder]

I understand it from your perspective.

But from developers perspective, it's different.

[edgy hazel]

I'm not saying I already experienced the worst already, because next week I swear someone is gonna try some shit and fuck over everyone again

I'd forbid them using a keyboard if I could

[dire igloo]

system runtime of multiple weeks on a fat client, I've seen Windows do the weirdest shit because of that

[night girder]

if you need permission for example, to update your frameworks (java, python, typescript, angular, whatever)... it's just not efficient. Or to even install them. It really depends on how the machine is locked down. And what the purpose is of the machine (office work, developement etc)

To me, it's a balance between security (which I 100% understand in a company) and beeing able to do my work efficient.

[edgy hazel]

yeah but then they install the bitcoin-miner-email-scanner-AI-9000

[night girder]

Haha, there are those too. But not everyone is like that.

[dire igloo]

I'd rather not take chances

[edgy hazel]

yeah

[night girder]

I don't know. I hated it and like I said, it was inefficient.

[edgy hazel]

even some devs (WHER YOU USUALLY EXPECT BETTER) tend to make the most batshit insane decisions

[night girder]

Working on unlocked machines is way better.

[edgy hazel]

yeah but then your company doesn't fulfill certain standard and you won't get certain certificates

[dire igloo]

people that think they know but don't are far worse than gullible users

[edgy hazel]

apart from it just being dumfuck insecure

[night girder]

well, you mean your unlocked machine is dumfuck insecure too then?

[edgy hazel]

nope

because I actually know what I'm doing

[dire igloo]

my machine is quite insecure, yeah - if I ever fuck up, everything's fucked

I just don't fuck up that easily is the thing

[edgy hazel]

just don't fuck up lol

[night girder]

🧠

[edgy hazel]

it's easy to do when you mainly work with servers, because you barely do anything on your machine anyways

[night girder]

For example, I would never log into public networks on a machine that isn't secure and has company value.

[edgy hazel]

only thing I do locally is spin up some test VMs/containers and change some /etc/hosts entries for testing

[night girder]

I didn't mind the ones that had a VPN. I like that.

[edgy hazel]

you are way too far man

we're talking plugging random USBs you found into it

[night girder]

that's just stupid?

[edgy hazel]

we're talking running random scrips they found on some github

[night girder]

ok, yeah. Fuck all that 😄

[edgy hazel]

welcome to IT

fucking welcome

and I can't even say only 1% is dumb like that

because we're in the double digits

[dire igloo]

we're talking "job application" email attachments

[night girder]

I think your company needs education on security and not doing dumb shit.

[edgy hazel]

we do

[dire igloo]

and even if that were the case - you only need 100 employees to expect at least one fuckup to happen

[edgy hazel]

everyone does

[night girder]

or atleast the people who fuck up need to get special class or something.

[edgy hazel]

they do.

[night girder]

Because double digits doesn't sound good.

[dire igloo]

that can only go so far. technological and organisational restrictions are far far more effective than education

[night girder]

I agree. But all 3 are even* more effective.

[edgy hazel]

And then they're a sales person that makes 25% of the companies money and you can't do shit

[dire igloo]

because people will not understand it or ignore it or forget about, etc

[night girder]

I know. But still, you have to try at that point.

restriction and raising awereness to not plug in random usb sticks.

[dire igloo]

still means you won't get an unlocked machine

[edgy hazel]

almost every company does at least a yearly infosec course

[night girder]

that's just what I want. It's fine that it's your company policy. I just wont work for such companies.

[dire igloo]

and most important of all: a no-shame culture. the only thing worse than an employee getting hacked is that employee not telling you about it

[edgy hazel]

just know that companies that do give you a fully unlocked device, do have a really incompetent infosec/IT team

because that's really really not a good sign

[dire igloo]

either that or it's a super high risk environment - in the sense that whatever hazard there can be, they just gamble on it not happening

and if they're that negligent on infosec, one should wonder about their data protection standards or their workplace safety protocols

[night girder]

Or, it's just a small company 😉

[dire igloo]

after all, they got an employee file about you somewhere, you wouldn't want people to access that data, would you?

[night girder]

Building websites for example.

And just selling them. Hosting not our concern.

[dire igloo]

as I said, high risk environment. but instead of gambling on the risk, they just can't afford protection

[night girder]

10 men companies don't even have a info sec team.

[dire igloo]

then it's usually the head of the company that'll be held responsible for any infosec fuckups

same for data protection

[night girder]

I do agree in general, there is just some nuance to it.

[dire igloo]

liability nightmare

[night girder]

what data protection?

You don't host the website/data.

You just sell websites.

[edgy hazel]

customer info
employment info
financial info

[dire igloo]

the main reason why you're safe in a small website making company isn't for any actual safety measures, it's simply because the company isn't as attractive of a target as other companies

[night girder]

True.

[night girder]

Like I said, nuance.

[dire igloo]

...

[edgy hazel]

imo there is very little nuance

[dire igloo]

you too are taking a risk, just like the company

[edgy hazel]

0-trust means 0-trust

[night girder]

coming from two people with unlocked machines I assume.

https://tenor.com/view/hmm-suspect-gif-22611582

[edgy hazel]

I did work ~2 years with a locked down thin client when I was in health insurance

I know how it feels, but I also know why it's absolutely necessary

[dire igloo]

my work laptop is a thin client, can't do shit on it without the password that's only in my brain

and even if you got your hands on it, you only have so much time until the next internet access bricks it

[edgy hazel]

yeah our windows clients are also locked down. I needed to use a script to disable all our hardening to be able to even enter an admin PW

and those were the IT admin devices

[dire igloo]

mine isn't even Windows

[edgy hazel]

yeah I'm on linux too lmao

next week on mac

fuck windows for server work

I'm ditching linux because we use MS accs

and teams is a nightmare

[jagged snow]

Teams is a nightmare

My job requires me to use it but I also have to work on my personal devices and I refuse to install teams

So I use the web version

And still want to cry

[languid gulch]

voluntarily?

[pure karma]

CTRL-SHIFT-ALT-WINDOWS to the rescue

[edgy hazel]

yuuppp

[languid gulch]

i'd need a paycheck before doing that

[edgy hazel]

tl;dr
windows sucks like in general and even more if you do server admin
linux sucks because we use microsoft products and have compliance policies which (again) microsoft sucks at and can't do correctly on linux
so what other choice is there?

[night girder]

I understand it.

If the job requires it, you use what you must.

and the os of Mac isn't that bad.

[edgy hazel]

And I already use a macbook privately so I know the workflow

[soft bloom]

I think my Windows is break
Some time ago it's windows key wouldn't do shit and search wouldn't pop up.
Now settings app permanently took over the focus...

[verbal raft]

https://www.youtube.com/watch?v=B_fGlVqKs1k

[willow pike]

recommendation to only use it when base frame rate is 80

watch as nvidia makes some new super path tracing shit that runs at 20fps, multi frame gen to 80

this is also what most people without 5090s will be doing

garbage

pure trash

[visual tree]

While most people hate when their packages are late, I am one of the few who actually love it. Reason? This:

I should keep buying products from Amazon where I know the specific courier who is going to deliver late package so I can keep claiming refunds

I hope Amazon doesn't ban me since it's not customer's fault if the courier keeps missing delivery deadlines according to Amazon ToS

[verbal raft]

i think it would be fine at 60fps

HUB Tim always has high standards

[verbal raft]

it looked like COMPLETE AND UTTER GARBAGE going from 30 to 120.......imagine what 20 to 80 would look like

[willow pike]

they're gonna do it, mark my words

the next black myth wukong big dick path tracing game

or worse; people with a 5060 will use it on their 120Hz monitors for most games

or even 60Hz

that's what it will be used for most of the time

not 240Hz singleplayer games by a 5090 owner

[night girder]

Anyone ever heard of ecosia?

it's a search engine that plants trees.

I noticed it's a default in firefox.

[verbal raft]

i dont think it will matter in the grand scheme of things

[night girder]

Also interesting that firefox makes it a default 🙂

Probably to spread awereness for people like me, who think "wtf is Ecosia" and investigate it.

Even has "AI" chat

[willow pike]

the fu

"yeah we're an eco friendly search engine! now use the fossil fuel powered AI"

you remember when words, like... meant something

[mental oriole]

If it's free you're the product.

[night girder]

Meta wants to own 1.3 million GPU's this year for AI.

📈

[mental oriole]

The AI bubble have to burst soon...

[night girder]

1.3!

[willow pike]

it will, but nvidia will have made their money by then

[night girder]

nvidia already made their money.

[willow pike]

yis, but still some billions to make!

[night girder]

And, yes I know this. I just found out about Ecosia. Found it a interesting angle they had and wanted to share 😊

Interesting as in; I've never seen a search engine trying to be ecological 🤣

[willow pike]

and they'll just tell tsmc "yeah no more orders, we'll still buy what we're contracted to, but after that we're good" then sit on the unsold stock to maintain scarcity and value

[night girder]

I went AMD for a reason.

[willow pike]

AMD will do exactly the same thing, they're also on the AI shit

[night girder]

Apple assigned Kim Vorrath as head of AI today or yesterday I think? Because they struggle.

So, companies are still going 100% for AI. Bubble isn't burst.

[willow pike]

not yet, but I'm gonna put every popcorn company out of business when it does

[warm blade]

So i bought 2 new fans, 120mm, i have 1 old fan, 90mm, and connected them to a arctic hub, connected the arctic hub to the sys_fan1 in the motherboard and they are SO, LOUD!

Should I do it like this in the msi motherboard settings?

[cedar lance]

yeah that should do it

[warm blade]

Set it up, nothing really happened (?), the fans are still loud af

[twin dew]

You need to switch that fan type selection on left from PWM to DC, if your fans only have 3 pins.

And you don't even seem to have any fans connected to the System 1 and 2 headers.
Only the CPU one.

So which exact Arctic fan hub?

Because at least the 10 fan one (which is only one currenctly listed), only works with PWM fans with 4 pins.

Everything else will just run 100% all the time.

@cedar lance So with 2 and 3 pin fans, the speed control is by varying the voltage by external control.
With 4-pin PWM fans, the control is done on the fan itself by pulse width modulation signal on that fourth pin.

That Arctic 10-fan HUB doesn't pass motherboards DC control onwards, only that PWM control signal.
So any 2/3-pin fans behind it will run at 100%.
Same if motherboard wouldn't provide that PWM control signal, then even PWM fans would always run at 100%.

[warm blade]

Text is on Serbian btw, it has 4 pin connectors, but the fans have 5.

[twin dew]

Yeah, that is the one that only works for PWM fans, not DC fans.

And I really don't believe you having 5-pin case fans.

[warm blade]

So did i fuck up or?

[twin dew]

Should be 3 (DC) or 4 (PWM)

[warm blade]

My fans are 3 pin, and the hub has a 4 pin connector..

[twin dew]

Yeah, so you have DC fans, and that fan hub is only usable for PWM fans (4-pin), if you want speed control.

3-pin DC fans connected to that hub will always run at 100% speed.

[warm blade]

Oh noo so what do i do?

Thats the only hub that there is, no other options

[twin dew]

Need to connect the fans direct to motherboard.
With y-splitter cables if needed.

[warm blade]

Yes but i have 1 rear exaust and 2 front intakes, the mobo has 2 connectors only, so idk what to do other than to return the hub?

Also where do you get the y splitter cables then?

[twin dew]

There are others in the world, but most don't do DC fan control splitting either.
Just cables direct to MB is usually the best option.
You can split one MB header to usually at least 3 fans each with just passive cables.

[twin dew]

Same place you got the HUB from, or any fan extension cables etc.

Should be 3-5e each or so.

[warm blade]

I ordered the hub off a website tho (Gigatron, the only tech store, there might be others that are also trustable)

[twin dew]

3 or 4 pin ones both are ok.

So something like this (1 to 2, 4-pin splitter)

[warm blade]

Mhm, but i have no idea where to get them tho

[twin dew]

I don't know the language, I cannot search for you.
You have to try to translate that pc fan splitter / y-cable to local language and search?

[warm blade]

Ill try but they sometimes dont have even the simplest of items but for a TECH store they have baby stuff 😭

[hardy forge]

Anyone really good with Gpu's

Cause like
My gpu liked to Shutdown when i play roblox for 0 reason
But every other game i play even satisfactory, never have that issue

[twin dew]

So what happens?

Black screen, computer on until manually shut down?
Black screen, computer turns off or reboots after a time?
Blue screen of death?
Computer automatically reboots without black screen wait?
Computer automatically turns off without black screen wait?
Something else?

[winged valley]

Ask magicz

He's good with gpus

[hardy forge]

Computer just goes black and i have to manually turn it off

Like its only roblox that gives me the issue lol
Like ik its roblox but still

[twin dew]

Try removing GPU drivers with DDU and reinstalling them after.
https://www.wagnardsoft.com/content/Download-Display-Driver-Uninstaller-DDU-18090

[hardy forge]

Cant i just presses reinstall on nvidia app

[twin dew]

No.
That does almost nothing.

Even the Clean Install toggle in Nvidia manual driver installer does almost nothing.

[hardy forge]

I will do it later tonight,
Im gaming with some friends rn

i still dont understand...why roblox though

[twin dew]

No idea, but that type of issue points to GPU drivers or the GPU itself as issue.
And first thing to try is to get full cleanup and reinstall of the drivers to see if that helps or not.

[pure karma]

Do you have multiple monitors by chance?

[hardy forge]

Only 2 and have made sure they are supported

[pure karma]

do you use suround for anything

[twin dew]

And shouldn't have anything to do with something like this, even more so if both are going black.

[pure karma]

because if so its the entire problem

suround has been absolutely windows corrupting as of 24H2 or whatever the hell were on

[hardy forge]

I dont use suro7nd

[pure karma]

it has bricked my pc like 3 times

one of the times it even starting yelling morse code at me

[twin dew]

That you have issues isn't anything weird.
Cannot find any mention that Nvidia Surround would have broken in general in Win11 24H2.

[hardy forge]

I have win10

[twin dew]

Yeah, but point was that MagicZ has unique issues all the time.

[twin dew]

And this was very bad joke to make to someone who isn't regular.

[winged valley]

I'm pretty sure magic would recuse himself

[warm blade]

Should i even turn on the game boost feature?

[twin dew]

No.
Don't.

But I might need to try to do physical shorting test for ECC error reporting tomorrow...
To see if ECC reporting is actually working or not.

[warm blade]

Kk, also, i just replugged the 90mm and 1 120mm fans into the motherboard, disconnected the hub from the mobo, left one fan unplugged, temps are fine, could be better, and im gonna buy new pwm fans tommrw probably

[twin dew]

Poking an empty RAM slot with needle while the system is running to short right pins together...
Something I would like to skip.

[edgy hazel]

baldur

what the fuck are you doing

[twin dew]

Fortunately any two neighboring pins between pins 130-142 will work, when one side ends at 144, and the two last pins are unconnected.

[twin dew]

Trying to get reported ECC error from RAM.

[edgy hazel]

there must be better ways

[twin dew]

When software methods don't work even with Disable Error Injection set to False.

[edgy hazel]

why do you even want an ECC error

[twin dew]

Not really, basically shorting data line to neighboring ground line so it always reads one way.

[twin dew]

To see if the error reporting is working or not.

[edgy hazel]

just... believe. Not even a company is doing that

[twin dew]

There are special test devices for that.
And in server systems that error injection is working when set to be usable, to intentionally write bad data.

And that is how I was able to test that the ECC is working on the ASRock Rack X570 MB.

It did report any software injected errors back.

So would just need to short any neighboring two of those pins together.
(This specifically only for one specific MB, with DDR5, as key location isn't visible)

And the two at the bottom are non-connected, so not dangerous to touch.

And the lowest 10 on other side are good too.

Sorry, only 283-287, with last 288 being another non-connected one.

[twin dew]

Well, seems I would need to run some Linux Live with RASDaemon on it to see.
Either MemTest86 Pro 11.1 doesn't actually support reading of AM5 ECC RAM errors, or the error reporting isn't working on the MB.
Caused several uncorrectable errors by going too far up, contacting two separate data lines to ground, causing computer to reboot immediately.
Which again is the wrong thing for it to do, but that cannot be disabled on AMD consumer platforms.
Should inform OS and cause that to panic and stop everything.

Now to bed, set the computer to run Memtest with ECC disabled for the night.

RASDaemon has been demonstrated to be able to read ECC RAM error reports on AM5 on MBs where it actually works.
MemTest86 hasn't and the theoretical support was coded before any MB AM5 had working ECC RAM support yet.

[edgy hazel]

Bro

Just ditch windows

If you don't play riot games games or destiny you'll be fine

Try ubuntu, its esay to learn anf after half a year you'll know enough to pick your actual distribution

Windows is fucked. It's too late to try and fix it

[night girder]

It would be funny, if it's not windows fault. But just a crappy scanner

Is it a well known brand of scanner?

[edgy hazel]

We're so close to Microsoft inventing their own file system that is only usable on windows

[night girder]

like, you read it on microsoft blog? Or your gut feeling?

[edgy hazel]

Gut feeling

They're getting really really selfish the last few months

[night girder]

all big tech are in my opinion.

[edgy hazel]

It was always bad, but sonce recall they made one bad decision after another

[night girder]

Yeah recall was really one I couldn't comprehend wtf they were thinking.

Either they wanted the bad PR, because it's still PR. Or they are really stupid. Or they dropped the ball. Or they just don't give a rat ass about QA. I don't know what happened.

but the backlash could have been prevented by just handling the recall feature smarter.

for example; before putting it in a preview build or whatever, check with cyber security teams for feedback.

Or maybe that was their plan, just release it in preview build, and let the QA be done by others on the internet for free.

Because apple OS does shit better than windows OS.

👆 And for all the apple haters out there, I said OS. Not mentioning Apple hardware being overpriced.

[stray badger]

thats what ntfs was, linux just reverse engineered it for the ntfs driver (which is a bit jank due to ntfs being bad anyways)

[night girder]

I never consider it evil. The dumbest shit they did was making everything compatible for iOS and OS. So one code to rule them all. Now we get fucking app looking things on our macbooks. Like the settings.

Same reason they axed iTunes for music.app. One code for both iOS and OS I believe.

apple is going to enable AI by default though. In a few months.

not for EU (unless it changed).

iOS 18.3 en macOS 15.3 will have standard AI enabled.

So opt-out instead of opt-in 🤮

omg, I didn't know they called it "Apple Intelligence"

Haha, actually that shuts everyone up who says: "It's not AI, it's ML/LLM" 🤣

I don't know. I know my phone would explode with AI.

So I don't want it.

those still didn't arrive? I send some last year.

[edgy hazel]

Anyways. Give linux. A try. No better time than now

[night girder]

herg turned into a linux preacher.

I have some doubts maxeek will install linux to get a scanner to work.

oh btw herg, this popped in my feed a few days ago, you might find it interesting:
https://www.youtube.com/watch?v=IXBC85SGC0Q

[edgy hazel]

I'm not that deep into it. I just fucking despise windows at this point

[night girder]

Me neither, but still found the video interesting.

[edgy hazel]

break the chains

be free

invest effort in something that makes you happy

into something that.. maxeesks you happy

then a week learning that basics of linux isn't that bad is it?

[night girder]

you do know there is a small security risk with linux right?

[edgy hazel]

smaller than windows

[night girder]

almost neglectible, but it's still there.

[edgy hazel]

windows seems to have an insane 0day every week

[night girder]

Oh right, it was the University of Minnesota that* got banned

[edgy hazel]

linux:
yeah so rsync is able to be used to access files outside of its scope (you need to be able to access the system with it in the first place)

windows:
you can get an admin account by sending an email

[night girder]

linux:
developers can push in sus code.

[edgy hazel]

can is carrying a lot of weight there buddy

90% of the internet is running on linux server but still windows has the most exploits by far

[night girder]

first, I know only of one incident, and that is the University of Minnesota being banned. So I know it's nothing major.
Second, that doesn't mean it cannot happen, that's why I said it can happen.

Quishi Wu and Kangjie Lu at the Universe of Minnesota decided to submit buggy patches of the Linux Kernel and see what happened. To their credit they ensured that none of these would actually end up in Linux by having a system in place to fix or remove the patch if it was accepted. When they tried it none of the patches were rejected for introducing dangerous bugs, more on that in a bit.

1. Linux 2. Mac. 3.Windows when it comes to least* exploits?

But it's hard to measure since only 1% or something uses Linux.

Trying to google for data that has an overview of operating systems and breaches. In total. Servers and normal computers.

[jagged snow]

Ms can too, and there's nobody to notice until it's a problem 🤷‍♂️

[night girder]

chances are lower than open source (is my gut feeling)

Microsoft as a company hires developers, they interview them etc. There is a whole process. And then you have all the regulations and goverment bodies keeping an eye on you.

[night girder]

and in both cases, chances are very low and almost non existing because of the systems that are in place.

[wanton orchid]

I like to know Linux use is under reported and even then it's few percent at least

btw Windows made offline install update packages more complicated by making security update report error 404 on normal update channels

So you have to manually download them
but then people think they have to runtime install them
.. but actually not at all
simply slap it in offline update patch cache and it gets detected

[edgy hazel]

My main issue with "usage reporting" is yeah maybe 10000 people are using windows amd only 10 Linux, but of those 10 Linux, 5 are servers at least 8000 Windows users are connecting to

[wanton orchid]

out played

[night girder]

That's what I am not sure about?

Most of these answers don't mention servers.

[pure karma]

i did and im not swaping

[edgy hazel]

yeah because linux overclocking is harder

prohibits you from breaking shit

[pure karma]

i broke it before even reaching the desktop

since i dont have a password setup terminal is softlocked

[edgy hazel]

where is the other ~30%??

macos server???

[night girder]

Not sure. When i click on the link I get this:

[edgy hazel]

tbh I'd rather have 100 unsafe clients than 1 unsafe server

[night girder]

depends on the traffic on the servers and the data I guess

[edgy hazel]

nah

not depending on anything,

karls homelab hosted blog better be secure

[night girder]

🤣

[edgy hazel]

add crowdsec or something similar to anything explosed in your homelab. You'll be surprised how many people are probing your shit

[night girder]

I know ...

that's why I don't want to expose my NAS.

[edgy hazel]

that's why you set up a reverse proxy (traefik) with crowdsec

And also use a VPN for your nas

Just buy a raspi man

[night girder]

mhm not bad idea

have to look a bit more into how crowdsec works.

[edgy hazel]

crowdsec is pretty sick. Public IP blocklist + WAF

I need more servers maxeek

please give me more rackmount cases

[night girder]

I am just trying to figure out how to set it up on my syn if possible.

[edgy hazel]

you don't

you will need 2 extra servers

[night girder]

you can set it up in docker

[edgy hazel]

one for running traefik + crowdsec middleware and one runnig crowdsec

use seperate hosts

trust me

at least spin up a proxmox

[night girder]

docs.crowdsec.net/u/getting_started/installation/docker/

was more looking intot hat

[edgy hazel]

yeah run it in docker

on its own host

excrypt communication to the traefik middleware

TLS

go hard or go home

in the trash

we're spinning up servers like nobodies business

we have 3 raspies, 2 servers, 1 nas
we have 16 VMs

we don't fuck around maxeek

you have your windows firewall

we have 2 firewalls, 1 DMZ, 3 web application firewalls

every transaction you send is checked, tls inspected and encrypted

you want secure, our name is secure

we have infrastructure you couldn't even dream of. We're redundant. Our Postgres is running in docker swarm, accessing redundant NAS'. We have 4 nginx running behind 2 traefik instances

You cannot keep up with us

we will end you

[stray badger]

But i have the power of friendship!

[sharp oasis]

So Nvidia got rid of hotspot temp reporting on rtx 50 series.

There's gotta be something up there then

[safe trench]

if you start playing thick of it and talk tuah on loud speakers it will lower the hotspot temps by 80c (as long as you eat lunchly with it as well)
(me at my lowest shitpost level)

[charred relic]

Desktop PC is dead. Looks like I'll be doing an unplanned PC upgrade.

[pure karma]

fun

[languid gulch]

just in time to go for the 9950X3D & 5090 combo!

[stray badger]

would not call that suffering but ok

beats a 4790k

not anymore

i had a 6700, not far off from it tho

[languid gulch]

i'm still glad that even 3dvcache CPUs don't really suck down intel levels of power

iirc it can still suck down like 250W

160W stock

[pure karma]

so 190+igpu

[languid gulch]

i don't think i've ever seen my 5600X break 90W even when i tried to OC it

[soft bloom]

Oh my, docker swarm in 2025

[languid gulch]

mews?

[charred relic]

probably getting a 9700x

i have a tight budget on this

the 7800x3d was another option but i doubt i'd benefit from the 3d cache that much personally... unless i upgrade video card which won't happen soon

i'd imagine i'll be gpu bottlenecked by a 6750 XT long before I hit the 9700x's limit

[sharp oasis]

I have made one do 130w

5.3ghz all core on air.

[languid gulch]

i don't trust my mobo to put that many amps thru it 🤣

[sharp oasis]

I did it on a sketchy 6 phase b450

...

It held. Surprisingly

[languid gulch]

yea, think that's what i have

sketchy gigabyte b450

[sharp oasis]

Mine was msi

[languid gulch]

& i wanna be able to give it a 2nd life when it comes time to upgrade, so i've been playing it safe

[sharp oasis]

B450M bazooka

I was able to do alot of wattage on my 5600's

[languid gulch]

i got to do the "dear god" bios update on it to go from a 1700X to the 5600X

[charred relic]

I'm replacing an aging 3700X

[languid gulch]

3700X still ain't too bad

[charred relic]

Was a great CPU in it's time

Yeah it still holds up... or did

[languid gulch]

definitely aging, but still usable in a 2nd platform if you need it to

[charred relic]

Well I have to figure out what's wrong with that system I think it's a dead PSU but I have no good way to test and it's time to upgrade

[languid gulch]

throw it in a NAS or a cheapo streaming pc hooked up to the tv

bypass those garbage TV UIs 🤣

[charred relic]

I'll be able to go pick up all the crap from Microcenter, getting erverything short of GPU

[languid gulch]

i still can't believe microcenter hasn't set up here

there's 5 million people here, along with heavy tech outside of CA

[charred relic]

Not sure if I'll make it to pick up tomorrow but Mon for sure

They have unbeatable combo prices for mobo+cpu+ram

[languid gulch]

and ram prices for ddr5 are dropping fast, finally

[charred relic]

"AMD Ryzen 7 9700X, Gigabyte B650 Gaming X AX v2, G.Skill Flare X5 Series 32GB DDR5-6000 Kit, Computer Build Bundle"

429.99

[languid gulch]

wow, that's downright reasonable

[charred relic]

And the best part is, really, their pricing is competitive with ordering from Amazon

The ONLY problem is it's about 1 hour 15 min drive from here, and that's if i don't hit some nasty traffic

[languid gulch]

make a day trip out of it, hit any other shops nearby that you don't have closer to home

[charred relic]

That's what I'm gonna do, just make the journey and look around while I'm there

The PC parts will be waiting for me if I get lazy though haha

I probably shouldn't look around I really can't afford to spend more than I am on this rig

[languid gulch]

just don't cheap out on the PSU

[charred relic]

Super Flower is the one currently on the list, 850w

[languid gulch]

never heard of that brand

[charred relic]

i hadn't either but apparently they 're good

although I might go with my standby Seasonic, it's more expensive though

[safe trench]

do they have CE label?

or something like 80+

[charred relic]

Seems to have all the certs I'd expect, 80+ gold

I'd looked into them quite awhile back and they were supposed to make good hardware

[twin dew]

Known as NTFS?
Which took very long before any other OS had any kind of support for it as the spec was closed and protected?

Or all the delays in getting FAT32 fully free (took until MS software patents ran out)

As MS acted as patent troll: "If you want to use FAT32, you must pay us for the right", even if the implementation was free to get from some other party.

[verbal raft]

intehesting......

[glossy glacier]

Or ReFS?

[twin dew]

ReFS is kind of new try, but it still isn't going anywhere fast.

MS still not devoting enough resources and will behind it to actually try to switch over from NTFS.

And it really doesn't currently work properly if you don't use it as layer over Storage Spaces with at least some redundancy.

[twin dew]

Large part of the long delay between XP and Vista was trying to invent completely different type of file system.
Which IIRC also had name of ReFS, but has almost nothing to do with the current iteration.

[charred relic]

Windows Neptune

[visual tree]

Lol https://www.reddit.com/r/technology/comments/1i9gwqt/frustrated_youtube_viewers_seek_explanation_for/

uBlock origin was working on chrome but is having issues recently. On firefox it works fine but youtube loading is slow which I suspect has something to do with google

Nvm, loading youtube video works fine on firefox. Haven't checked it for a while

[night girder]

Picking VPN 🤪 🔨

Wireguard is faster (994.5Mbps) than nothing 992Mbps. The hell?

This looks better.

[twin dew]

Within test variance.

[glossy glacier]

looks weird. maybe the CPUs didn't support encryption acceleration?
modern CPU should be able to de/encrypt at multi gigabit speeds, a VPN should add maybe 1-2% overhead then
or something else is a bottleneck? DPS/IPS, firewall, etc

[night girder]

agree

[glossy glacier]

regarding picking one:
wireguard is a bit harder to understand at first. but then relativly easy to implement, but you need to be able to open ports on at least one side and public IPs
tailscale is pa solid pick if you don't have control over firewall/portforwearding and/or don't have a public IP, but it'll cost you for more than 3(?) devices
afaik OpenVPN makes administration easier if you have many clients

but i only used wireguard myself and heard from tailscale from L1Techs, so take my opinion with a huge grain of salt

yes. most common usecase is probably for work
many use it to get a conenction to their home networking
circumventing geoblocking is a popular use-case

everything you hear about "improving your privacy" in VPN ads is a scam

[night girder]

Yeah, reading documentation as we speak.

[glossy glacier]

don't visit sites without https, use a public DNS and you should be good.
ISP will always see what IPs you connect to, be they the sites directly or a public VPN

[night girder]

tailscale seems too much overhead.

and overkill.

raspberry 4 + wireguard might be a good start.

was reading reviews for pi 5, but doesn't look good.

[glossy glacier]

tailscale needs the overhead to traverse NAT and non-public IPs probably

"people isp"?

[glossy glacier]

Keep in mind wg is p2p VPN. if you want a "client-server" structure you need some firewall/routingtable rules on the "server" side

[night girder]

ok

I wanted to deploy it on my NAS, but after some more reading up. I read somewhere that the attack vector of docker is larger than having services on a system behind a port.

And after thinking about that for a bit, it makes sense. So it would be better to have a pi or a mini computer handling it.

The PI have the trouble of not being able the handle large internet speeds, so the suggestion is a mini computer for 100 bucks or something.

And herg basically said the same last night.

[twin dew]

No?
Both just expose the specific service on a port.
And you can directly only attack that service.
With possible further attack service in whatever libraries etc. are in the container.
Then you have to attack the container service to break out to the main OS.

[night girder]

Not at all.

[twin dew]

Just taht with Docker or like, you don't have full control on that container contents, and have to deal with what the maker of specific docker image included.

[night girder]

No.

[twin dew]

And you need to make firewall rules between the Docker container and rest of the system and general LAN.

[night girder]

Docker itself is an architecture. It's way more complex than you think.

And has a larger attack vector.

Hey, but you do you If you want to throw it all in one docker container, go a head.

If you want to run it all on one system with docker. Also good.

[twin dew]

That includes those

With possible further attack service in whatever libraries etc. are in the container.
Then you have to attack the container service to break out to the main OS.
Steps.

[night girder]

But the general consensus seems to be; don't do it. Get separate hardware.

We are talking security here so.

[glossy glacier]

separate HW is also good if the docker host goes down and you need to remotely troubleshoot it

[twin dew]

That is attacking the Docker.

Which is easier than then attacking the other machine remotely.
But still needs that first step to get in anyways.

[night girder]

Docker has a larger attack vector than seperate hardware, with only a single service and a port opened.

[glossy glacier]

i guess it depends on your use case, if you want to handle large amounts of data then maybe, if it's just to get access to your private network it should be fine

[twin dew]

With separate NAS and separate VPN host:
Attack VPN, get control of the host, attack the NAS over LAN, get control of NAS.

With NAS with Docker for VPN Host:
Attack VPN, get control of container, attack Docker, get control of NAS.

If that attack NAS over LAN or attack Docker on NAS is harder depends on firewall rules etc. between the LAN and the NAS.

[night girder]

Yeah, that's something I am thinking about atm. How to set it up. And where in my LAN.

[glossy glacier]

you sure the pi isn't fast enough for you?
www.reddit.com/r/WireGuard/comments/eeafds/wireguard_throughput_on_raspberry_pi_4/

[night girder]

Here they explain upload speed got axed by raspberry

[glossy glacier]

weird, why should one direction be (so much) slower?

[night girder]

Maybe the guy is tripping.

Docker is not foolproof either. It has a higher surface attack vector than just hosting the ports with the underlying services. And if you don't configure the firewall properly to work with Docker, you'll be surprised to know how it works by default (hint, it sucks). I love Docker, but it's got caveats.

I'll probably get downvoted for not parroting the most newb friendly option, but really, if you actually care about security, you have to consider these things. If you don't care, great, but don't pretend like you're mitigating threats. Blocking IP's or countries is not security. VPN's are a thing.

[glossy glacier]

just saw some post pointing to the cipher and mtu settings. so maybe it's a config issue

[twin dew]

Point is that docker lives behind the hosts firewall anyways, and to attack it you need to first get into one of the services.
Yes, by default there is no firewall.
But that is the case for "just service" too.

[night girder]

We are talking (adding layers of) security here.

[twin dew]

Point is to limit what gets into the LAN, then what gets into whatever host that has something port forwarded to it.
And then limit on how stuff can get out of containers to the host running them, or from compromised host to any other computers in the LAN.

Which using container services usually does, over running raw services.
As there is extra layer that needs to be cracked.
As the host running the containers CAN limit how those containers can talk to the host, or with each other, or the LAN.
Until the hacker who got access to one of the containers breaks out.

[night girder]

And like herg said: "one for running traefik + crowdsec middleware and one runnig crowdsec"

Docker running those 3 on one machine... well I don't have to explain that do I?

[twin dew]

Usually running services in containers is seen as more secure to running multiple services on same host without containers.
Yes, often having separate computer for each is better, but even then you are better off running the service on container, just one container per machine.

[night girder]

Docker is fine. But when it comes security. Don't be dumb.

It's not because it's in a docker container, it's magically safe for everything.

[twin dew]

And to get real security with separate machines, you would need to make lot of firewall rules to limit how you can move laterally in the LAN once one host has been compromised.

[night girder]

That's wasn't even the purpose of the technology.

[twin dew]

No, just additional layer, other ones still need to be there too.

[night girder]

Which was scalability, efficiency, cloud solutions etc.

swarm behavior. All the cool stuff.

[twin dew]

And like I said, you don't have as much access to make sure the services, libraries etc. inside a ready made docker image or like are up to date with security fixes, and that the image doesn't have useless extra crap in it etc.

[night girder]

That's why I don't want it on my NAS.

[twin dew]

Containers are just VM-lite with larger attack surface from the container to the base OS.
Over from VM to hypervisor OS.

[night girder]

I barely have control over the OS of it anyway.

Right now, pi 4 + linux + wireguard seems like a good start.

[twin dew]

Ah, this was about Synology or like NAS running container services.

[night girder]

or www.crowdsec.net (have to start somewhere).

[twin dew]

That is more about the implementation on the two largest NAS makers OSes for those container services.
Where having enough control over the other security stuff might be hard or impossible.

[night girder]

Yeah, me and herg were talking about security last night and opening up your NAS to the scary outside world.

he told me to get crowdsec to see how much I get probed and shit.

[night girder]

If I put Pi in front of NAS, non of that is an issue.

Just get to make sure my NAS keeps functioning

[twin dew]

Yeah, but point is that the whole NAS isn't exposed, just that VPN service in container.
Like with Pi, only the VPN service on the Pi will be exposed.

After that, if you would have access via that VPN to the NAS, it is already about as exposed as if the VPN was running in container on the NAS.

Compared to that separata PI as VPN server, if the Pi is hacked via that VPN service, to the container run VPN service getting hacked on the NAS.

[night girder]

But that was not what we were discussing.

Having VPN + crowdsec + reverse proxy + ... + ... all in containers on ONE system.

vs

spreading the services in your LAN on different systems (pi's, servers, routers, ...) with layers of security between communication of such systems.

Also, wtf is crowdsec even?

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist.

It sounds like a firewall. But call themselves a server detection and protection system?

[twin dew]

Intrusion Detection and Prevention system.
Basically monitors whatever traffic firewall let through and tries to notice actual attacks in that traffic via protocol analysis etc.

Comparing to known attacks and attack sources.

And then blocking the detected ones.

[night girder]

What's difference between that and a firewall?

So, just a firewall with rules based on open source (a.k.a the people/users).

[glossy glacier]

Firewall logs what it stops
Crowdsec logs what the fw does not stop

[twin dew]

Firewall is set of static rules based on just ports, base protocol type (TCP, UDP), source and destination IPs etc.
IDS and IPS do more in depth analysis, but takes much more CPU power.

Complementary.

[night girder]

Ok. You have OS firewall. If I put my own firewall (rule: block all) behind the OS firewall.

I get the same result?

[twin dew]

No, as IDS/IPS also monitor outgoing traffic etc.

[night girder]

Because my own firewall will report everything it's blocking, which first one allowed.

[night girder]

firewalls work for in/out going traffic

[twin dew]

Deny all incoming firewall just prevents new connections from outside to come in.
But to have VPN service, you always need to allow that in at least.

[night girder]

Ofc, else shit no work.

[twin dew]

And if you have one that blocks everything in and everything out, you could just remove the network ccable.

[night girder]

That's not what I said.

I said you get same result. The second firewall will log everything FIRST ONE MISSED.

[twin dew]

Point is that IDS monitors and warns if that allowed traffic contains known attacks.
And IPS also then tells firewall to drop it right away.

[night girder]

Only difference here, is that crowdsec is community driven.

So people report malicious IP etc in a big db. crowdsec uses that. A bit like that windows thing.

[twin dew]

No.
Firewalls don't do protocol analysis etc.
IP based lists are just part of how IDS or IPS can work.

[night girder]

Ok, and that.

Mhm.

[twin dew]

Think firewall as rules to say if specific person is allowed through a door.
And IPS/IDS is security person checking the bags the person tries to bring in, or take out when he/she uses the door.

[night girder]

I think crowdsec works on synology, but I have to feed synology logs into crowdsec.

which I don't want to do.

I think I will start with VPN. And look into reverse proxy + crowdsec later

[edgy hazel]

What

That's the whole point

[twin dew]

But Crowdsec seems to be more of add-on service to firewall to get dynamic IP blocklists etc. based on if those IPs seem to be doing probing etc.
When everyone involved has their logs analyzed for the data.

Yeah, the point of that is to get massive amounts of firewall transit data to see if someone seems to be doing mass attacts or probing.

[edgy hazel]

Crowdsec does:
Log analysis
Global IP blocklist
WAF

[twin dew]

And then everyone using the service provides to that detection via log scanning locally.

Doesn't help as much against targeted attacks, but does against general ones.

[edgy hazel]

I kinda disagree

It does filter out the majority of known exploits and is able to detect weird access types. You just need to properly configure it to use appsec and not just use the general IP blocking

[night girder]

Herg, you misunderstand me.

[edgy hazel]

I do?

[night girder]

I don't trust the logging of synology OS.

so I don't want crowdsec, to be dependent on synology OS.

I want to run crowdsec on linux on a PI.

decoupled of synology OS if that makes sense?

[edgy hazel]

Thats why I told you to use traefik and install crowdsec as Middleware. You aren't dependant on log then, but do scan every access

[twin dew]

Yeah, but point was against kind of targeted attacks that just don't happen against individuals, but specific companies etc.

[night girder]

🙂

[glossy glacier]

Then buy

[night girder]

I am still reading up on how it all works.

[twin dew]

That Crowdsec etc. will help even high profile targets a lot, but doesn't help that much against real targeted attacks by nationstate actors etc.

[night girder]

if China wants into my NAS. They can.

if US wants into my NAS. They can.

if EU wants into my NAS. They can't. Because they are silly gooses.

Just saying, most of us are f'd if a goverment comes after us 😄

[twin dew]

Good tool, but just another tool.

[night girder]

Yeah, I can follow now 🙂

Traefik for the actually traffick. Those logs go to crowdsec and analyses those logs. But... so it's traefik who is in control of allowing traffic?

[twin dew]

Which is part of why I need to finish configuring Nagios on my firewall.

[night girder]

Because crowdsec just answers to traefik to let it go through or not?

[edgy hazel]

NO LOGS

[night girder]

Oh, ok it's proxy.

[edgy hazel]

you need traefik, the middleware for crowdsec in traefik and crowdsec. Every access will get checked before it even gets to your server

log analyzing always happens after the first access

[twin dew]

Sorry, not Nagios...

[night girder]

I can imagine it now, after I set this all up, the only service that runs behind it all, is a "Hello world" 🤣

[twin dew]

Meant Suricata

[night girder]

a honeypot!

I think that's what it's called.

[soft bloom]

https://youtu.be/zcr_xQFV--4?si=zyFLz9VU7sW_TutQ
Good ta)k points on scientific method
Also interesting channel
Also he forgot to do double-blind

[wanton orchid]

you strictly define growing procedures
then you put one enclosure with sound and one enclosure without
interleaving seeds and enclosure having the same location and light exposure
done
you can then simply do growing measurements

"can't be proven" : fake

literally any growing field have arrays of exact same enclosures with same orientation and equipments
which are empty part of the year

it's not costly to do

[twin dew]

And third to test would be some fans for airflow.
If the "Sound" is just moving the air enough to matter.

[wanton orchid]

^

[soft bloom]

I remember recently seeing something about adding fans...

Also people study how plasma exposure helps

[soft bloom]

Yeah that was a phrase to segway into discussion

[soft bloom]

Though i doubt audible sound counts as movement of air. I think he used like 4khz frequency

But that was a good step - not test with music but just sinewave

[twin dew]

Sound is specific type of movement.
Point is that it might be giving enough extra energy to the air to make it mix better near the leaves.
Where they take in CO2 and output O2.

Which changes the balance in air locally, so any extra mixing might be helping.