• 1 Post
  • 78 Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle
  • I generally find writing a good role takes longer than doing it manually. Especially as you have to keep testing failure conditions as you think of them.

    However, the point is, that once you’re finished with the role, you never have to do that process again.

    Not if you want to rebuild Not if you want to migrate to a new os Not if you build a second server Not if you move to a newcloud hosting provider

    Porting to a new OS or after an update that changes how the software works is about as fast as doing it manually

    Maybe it’s only one server today, but how many times would you need to rebuild it over the running lifetime?

    The killer feature is that having something like ansible lets you kill your darlings, and keep servers aa cattle, not pets.

    Manual setup chops isn’t a different skill here. I view ansible as a combination setup and documentation. If you’re going to figure out how, why not write down how you did it? If you’re going to write it down complete with code lines to run, why not script it?




  • Can highly recommend 4g. Went for a walk with some friends. Met a guy that made horse trails. Explored an abandoned property in a nature reserve. Had fun on the beach. 6hrs~ total. Mostly just giggling, fun and a extra large, rainbow diffraction spikes looking at lights compared to normal. And getting out of your own headspace.

    Non-extreme nature pairs well with mushrooms!

    Whatever anyone says, you don’t need to take a second stronger dose to go up again. The same will do again. A buddy who spent the whole first round disappointed because it ‘didn’t affect him’, was running around a field claiming the grass was so much greener on that side after 7g.





  • I use a synced kbdx file on Linux (keepass-xc) and Android (KeePassDX) daily with the same keepass file. It handles all my logins, TOTP, passwords, passkeys no problem. I synchronize it using syncthing. When the two machines are on the same WiFi (or on a meshed VPN like tailscale) and can talk to each other, they sync freely.

    I know someone who has it set up the same way who also uses Windows in the mix.

    I haven’t checked the code, but it seems the writes the file is not actively being held open for reading and writing, with constant updates happening, updates appear to be transactional. I’ve only ended up with two sync errors in 3 years of daily syncing and I was able to merge the two files with the keepass-xc cli merge options.

    The key distinction here is the program keepass-xc is not keepass the standard, just a program for reading the kbdx vault. A really good, externally audited, well coded, security first program for reading the vault!

    If you’re concerned about the sync, it might be worth checking out how the original program expects DB sync to be done.

    If you’re concerned about the manager working across os’s, don’t be. The primary use case, in the browser, is cross-platform by way be being a browser add-on. The brains of the operation are bundled in the keepass-xc app as a local server that only gets enabled when you switch on browser integration in the manager. The browser add-on sends web addresses to that server, and then the manager looks up the response, and sends back the correct credential. This interchange is encrypted during the pairing process.

    On Android, KeePassDX hooks in to the built-in passwords, passkeys, and accounts ‘preferred service’ and offers password autofill in the keyboard suggestions bar, and comes with a credential-fill keyboard you can switch to on the fly if needed. It also saves passwords in normal apps, by storing the app id in the credential under a custom field ‘AndroidApp’ to help narrow down hinting. E.g. com.hjiansu.thunder for my Lemmy app, or com.android.settings for WiFi SSIDs and PSKs.




  • Some of it is dark if you sit thinking about it too long. The toaster has a nightmare about choking it’s master with smoke, forks being stuffed in it, and falling in to a full bath. I wouldn’t have thought any of this is scary for a toaster, rather it shows a preoccupation with its master somehow committing suicide with it.

    On the flip side, my three year old just watched it, and is now obsessed. We’ve watched it 5 times this week. She loves it - even the “It’s a B movie show” song.






  • tl;dr:

    If you think something is blocking DNS traffic, you could try configuring DNS-over-HTTPs or DNS- over- TLS and picking a reputable upstream. This should obfuscate the traffic somewhat and get past common DNS interference issues and tactics.


    So building on what yourself and everyone else has said, it does seem to be a DNS issue.

    I found that at select times my local ISP was up to shenanigans with DNS.

    I live in a very small country and work in IT. The NOC for all three ISPs and I have met. It would surprise me if they were competent enough to do this intentionally for malicious purposes.

    If you can get access out to the internet via ping, see if you can do other things - get on a VPS and test with tcpdump at both ends. There’s a few free ones or trials great for disposable purposes like this. Set it up in advance…

    You won’t know what it is til you troubleshoot.

    I’ve had huawei firewalls reaching some simultaneous connection limit and fail, reversing their ruleset - blocking everything except ICMP, tr069 and ssh (concerning) outbound…

    I’ve had problems with specific DNS servers, through the ISP’s network.

    I’ve seen regular BGP changes causing outages all over the place (the ISPs locally don’t peer with each other…)

    Post your findings, would love to help/hear!