Not OP, but it's two-way TLS. It's not only your server providing a certificate to prove it's the real thing and not just some men-in-the-middle device or your connection for redirected, but the other side of the connection using a certificate, too, to show they are actually the devices allowed to communicate.

So this basically reverts the security. You are no longer trying to filter out access attempts when they show questionable behavior, but completely reject anything unless it's explicitly authorized. Which of course only works when you or (a small number you can manually manage of) others access that stuff from fixed devices that you can set up properly.

PS: For me fail2ban does basically something similiar. I have several web interfaces exposed via reverse proxy. But I barely ever use those interfaces manually; normally it's via apps that access the services via that web interface. So things like failed authentifications or misstyped passwords don't happen (unless when setting up something new maybe and then I'm there to unban a device manually if I screwed up). So fail2ban is set up to aggressively bans IPs for hours just for a single failed attempt.

That's keeping all those spammy bots looking for easy targets away very effectively, yet completely invisible for my legitimate use. After all that's always the core issue: security vs. convenience. You build the best possible security that also doesn't overly interfere with your normal use. Also the reason there is no on-size-fits-all solution because it's about your use-case.

So you didn't do the math... Let's say we go with the 200k per interception of a drone (because there is more than just the spend missiles/fuel but also wear on the jet and a lot of work going into it for just a few hours of use). By above's cost for efficient gun-based systems those 200k get you about 20m of border covered. You would need 13,750 times that money just to cover the small Lithuanian border with Russia (pretending that flying object cannot jsut go around the direct route...).

Sure, you can spend some more money on developing lasers (in fact they do - because that's peanuts spend anyway compared to the actual production costs in numbers) to decrease the cost from ~1000€ for a salvo of smart air-burst ammunition to a fraction of that. Doesn't change the base calculation. It actually only gets worse if those guns are more expensive because of the high energy systems required for each.

Russia is just testing our defenses now

Correct, but not in the way you think. Covering everything in air defense (especially against low text/cost) wepons is simply not viable. The actual defense is deterrence, the ability to react offensively (in this case even as part of a big defensive alliance) to an act of war, while protecting only the most critical infrastructure and the stuff used offensively (the latter being the reason air-defense is mobile).

So the actual and very real failure is our cowardly politicians being afraid to call an act of war by its name and react accordingly.

its a government so they don’t have a profit margin?

As long as the government pays public money on jobs in the public sector there isn't. The moment that government tries to replace workers with AI –that they definitely not build, train, probalby not even run themselves– there is a profit margin, for the AI companies. Also now for the first time the public money spend to provide public services is no longer going back the tax payers in the form of wages but flow out to private companies. And it's about AI so out of country, too.

Falsche Perspektive: "Die westlichen Regierung bekämpfen seit Jahren die Windkraftindustrie für ihre fossilen Gönner" trifft es besser.

Einfach alles auf x Sekunden im Format eines Tiktok Videos verkürzen, dann wird das schon. Bonus: Dann bekommen diese ekligen Intellektuellen auch endlich mit, dass sie in unserer schönen neuen Welt von Verblödung und populistischen Narrativen unerwünscht sind. 👍

Ich mache mir eher Gedanken darüber, wie normalisiert die negative Konnotierung von "intellektuell" inzwischen ist...

This is the cheapest way to shoot them down, because the jets already exist and are available.

Sure you can build more cost efficient (per drone shot down) anti-air alongside the border... for billions and billions that don't do anything but shoot down one drone every once in a while. That's much more expensive than the cost to get a Eurofighter in to the air to do it.

(Reference: the first two Skynex units for Ukraine cost ~180 million €. That's one radar, the control unit and 4 guns, each with just a few kilmometers range. Say you want some overlap to not create gaps between them and you can assume to cover 10 km of the border for nearly 100m... you can do the math yourself.)

Long story short: You cannot defend huge areas cost efficiently against single flexible threats with pre-build, often even static defenses. That's like equiping the whole population "cheaply" with bulletproof clothing because someone might get their hands on a gun.

"UK.gov begins killing off passwords for 23 million users

vs.

"The NCSC is encouraging users to switch, although passwords aren't disappearing just yet. Passkeys remain optional, and anyone who would rather continue signing in the old-fashioned way can do so."

Clickbait bullshit.

Es gibt solche Menschen in der CxU, die den Schaden für Deutschland und Welt kleiner halten würde

Nein, es gibt nur solche die geschickter sind und dir nicht wie Merz offen ins Gesicht schreien, dass sie dich verachten und du gefälligst still mehr arbeiten sollst, damit seinesgleichen reicher wird. Denn wer immer in der Führungsposition der CDU landet, wird von der CDU in diese Postition gewählt, um die korrupte Scheiße an CDU Politik umzusetzten. Der einzige Unterschied ist, dass die, die es erfolgreicher tun, nicht in großem Theater abgesägt werden, weil sie an allem schuld sind und die CDU jetzt einen "Richtungswechsel" braucht, bevor eine neue Personalie sie ersetzt, die exakt der selben Richtung folgt, aber dabei anders redet.

Because if your prime factor to optimize for is cost savings "AI can do the same job equally well but cheaper" quickly becomes "AI can so a somewhat worse job but much cheaper", then becomes "AI does quite a shitty job, but that's what we have to live with now as we laid off all workers to save money"...

(Also thanks to capitalism it then continues with "Now that AI is the only option in that sector, let's raise prices to increase our profit margin".)

Low TTL of dns entries is there to avoid classical Cache Invalidation, so kind of...