• 1 Post
  • 93 Comments
Joined 26 days ago
cake
Cake day: June 9th, 2024

help-circle


  • The captcha stuff is customizable, but yeah, you have to pay. The issue is that they have, in the past, shipped breaking changes in their default rules that made huge messes, and a huge portion of their customer base just uses the defaults. They’ve gotten better at this, but again, there’s nothing other than their testing to prevent it in the future.

    Also based on experiences doing infosec stuff, I can also say that there’s ABSOLUTELY a huge portion of “admins” that think more security is more betterer, and configure shit in a way that breaks so many things then get mad that they did that; there’s a LOT of depth you have to understand to configure something like Cloudflare’s WAF properly, and way too many admin types just don’t fully understand the impact of any particular thing is and get way way way waaaay too restrictive and then get mad that it breaks things.

    The SSL offload requires you to trust your vendor, and agree that the odds that they’re doing anything suspicious is likely zero: their business would damn near instantly implode if they got caught. But, again, you’re trusting policy and procedure to keep people out of data.

    I think there’s a LOT of bias against “MITM” meaning “malicious”, and Lemmy ranging from very left to leftish, a huge bias against big tech (which, imo, is 100% warranted and totally earned by decades of shitty behavior) which shows up as a ‘Cloudflare is bad because the MITM your traffic’ lacking the nuance that, well, every WAF and a heck of a lot of caching CDNs do that because that’s how it works.


  • 90’s Linux gaming was a lot of Freeciv, Doom, Quake 3, and Tux Racer.

    Wine really didn’t work for shit for AT LEAST another decade, and even then, didn’t really really work for a further decade after that. It took a very very long time for Wine to get to where it is now with Proton and playing basically everything that doesn’t need a rootkit to run.

    As for finding Linux games, I could just go to Microcenter. They had a whole shelf full of Linux software ranging from distros, to games, to commercial office suites, to just random shit that looked like it was boxed up in some guy’s garage and contained just… stuff. I miss being able to buy software in big shiny boxes, though :(


  • #1 is by and far the cause I see when people ask me ‘why did thing break?!’

    There’s a lot of ‘Well, I edited the registry and then deleted these two files and installed this 3rd party software so that it looks like it did in Windows XP!’ floating in my circles, which almost entirely correlates to the people who are mad that their install is, yet again, broken/not working as expected/having weird problems.

    Of course, people are doing this because Microsoft can’t stop shitting up Windows in a way that annoys people, and thus leading them to do things that maybe aren’t the best idea.

    So, in summary: it’s a land of contrasts, but stop adding bullshit nobody wants Microsoft.


  • I’m not opposed to them, but a lot of people on Lemmy have pretty strong opinions, primarily around the centralization around, and potential of MITMing data.

    I don’t think they’re wrong, because the centralization has given Cloudflare a shocking amount of power over who sees what and how: they, for example, will put you in captcha hell if you’re using certain browsers, connecting from certain networks, or using TOR. I don’t ever run into those issues, but they’re certainly ones that happen to people often enough that a quick search will find story after story of people that run into this mess, and that it’s sometimes annoying and painful to dig out of when and if it happens.

    And, due to how their service works and the way the certificates are handled, they are essentially MiTMing your traffic. The certificate chain between your client and cloudflare and cloudflare and your server, depending on how exactly you’ve configured it, can be done in such a way that there’s a re-encryption happening with them in the middle, and thus, Cloudflare can see all your data.

    I’ve met their CEO and VP of Safety and worked extensively with them in a previous job and don’t actually believe they’re doing anything untowards, but the fact is that they, if they so desired, absolutely could.

    I use their stuff on anything I setup for public access, either via an argo tunnel or their more traditional CDN stuff, but I can understand why other people concerned about user blocking and privacy (which are less of a venn diagram of users impacted, and more of a single circle: the privacy people are usually using browsers, addons, and VPN connections that are directly the cause of the block) wouldn’t be Cloudflare fans.









  • I’ve recently moved drives between m2 slots and usb-c enclosures and everything worked, but that’s also why I used the word ‘should’ a lot.

    I’ve had zero issues in the past few years moving drives around (even between different systems!) and my experience has been nothing but ‘shit just works’, but yeah, I know that there’s probably edge cases where that’s not true.

    For what they’re doing, though, it should be fine, since there’s a relatively low amount of complexity and grub really doesn’t care where the drive is as long as it has the UUID at this point.


  • Because I don’t sit down at my Linux destop and feel like the product. There’s no ads or suggestions or popups or apps installing themselves or shit copying my files around in ways I didn’t really want or AI bullshit or anything even remotely suggesting I buy more shit, just… whatever the fuck it is I was intending to do.

    The value in not having my computer act like a damn slot machine trying to get me to insert more quarters is, frankly, immense.




  • I have watchtower configured to update most, but not all containers.

    It runs after the nightly backup of everything runs, so if something explodes, I’ve got a backup that’s recent and revertible. I also don’t update certain types of containers (databases, critical infrastructure, etc.) automatically so that the blast radius of a bad update when I’m not there doing it is limited.

    In the last ~3 years I’ve had exactly zero instances of ‘oops shit’s fucked!’, but I also don’t run anything that’s in a massive state of flux and constantly having breaking changes (see: immich).