sugar_in_your_tea

joined 1 year ago
MODERATOR OF
[–] [email protected] 1 points 9 minutes ago

I don’t hate totp, I just recognize the faults in it.

Same, I wish I could use security keys everywhere. I have an older YubiKey (version 4?), and it doesn't get used because only like 2 services I use support it, and those support TOTP. I would switch all of my banks today if I could.

So I stick with TOTP because it's "good enough" and works everywhere. If I had more than a small handful of services that worked with my YubiKey, I'd absolutely bring it with me everywhere.

hate the trend of companies requiring an app for 2FA…

Yeah, it totally sucks. I have decided to just not install apps if I can get away with it, which is nice because tons of them don't even work with how my phone is set up (GrapheneOS, no Play services). So I'm going to be a thorn in their side as long as I can. They should just support TOTP since it's already ubiquitous, and ideally also support security keys.

[–] [email protected] 2 points 14 minutes ago

Eh, I haven't convinced anyone, but I have gotten questions from my brothers about it. They don't come over often, but I've done a lot of work on my self-hosted setup, so I'll probably show it off at our next reunion (next summer).

My brothers both want to host video, and they've asked about ripping DVDs/Blurays. I've now finished ripping my entire collection (took a few weeks), so now I'm more well-equipped to answer questions.

[–] [email protected] 1 points 17 minutes ago

would you be using that HDMI port?

Yes, absolutely. At work, we use MBPs, and I often ask someone with the port to connect to the TV so I don't have to go find a dongle (and those dongles can be very finicky). I've had to work around the lack of an HDMI port, and it's been incredibly annoying for the almost 4-years I've had my MBP.

My personal laptop has an HDMI port, and I also use it frequently to connect to our TV. It's something I'd use weekly, if not more frequently. This laptop is older, yet I still prefer using it to the MBP, largely because of the HDMI port.

[–] [email protected] 0 points 19 minutes ago

Exactly. And with AI tools, getting a transcript and generating a summary shouldn't be all that hard.

All I'm looking for is a handful of bullet points that give me a reason to watch the video. I'm not watching a random video someone posts just based on the headline, I need a bit more reason to invest my time to contribute to the discussion. And if you provide a basic summary, I'll probably do the legwork and find some articles to add to the discussion while I'm watching the video.

[–] [email protected] 1 points 21 minutes ago

Yeah, I'd need to run cable if I moved my machines to a closet, and I'm putting that off. I do plan to do that though, so maybe someday. :)

[–] [email protected] 1 points 24 minutes ago* (last edited 22 minutes ago)

Yup, VFIAX (the Vanguard S&P 500 index) is what everyone is saying.

Here's what you're invested in:

  • VFIAX - S&P 500 fund; 500 biggest companies in the US
  • VEIRX - basically a "value" tilt version of the S&P 500, but with far fewer companies (~200 vs 500)
  • VSMGX - conservative, properly diversified fund - 60% in stocks (diversified with international stocks), 40% in bonds
  • VUSXX - basically cash

So overall, here's what you're looking at (back of the napkin math):

  • 35% - cash and bonds
  • 55-60% - US stocks
  • 5-10% - international stocks

So you're pretty lightweight on international stocks.

Personally, here's what I'd invest in:

  • VITSX - Total US market, meaning there are smaller companies in there as well; 85% of it is the same as the S&P 500, so it's not that different, but small companies have historically done better than big companies, so it's good to have some of that exposure
  • VTMGX - pretty much total international market

To be evenly diversified globally, you'd do something like 60% VITSX and 40% VTMGX, but I personally think the US will outperform, so I do 70% US and 30% international.

If you're risk-averse and feel like you'd sell if there's a market downturn, you can add some bonds (VBTLX) and put something like 10-20% in it (assuming you're young-ish; if you're over 50, increase it to 30-40%). But honestly, there's not much point if you'll just set it and forget it. If you want something super simple, VASGX looks pretty decent (20% bonds, so a bit less extreme fluctuations in a downturn).

A lot of people honestly just go 100% S&P 500, because a lot of those companies do business in other countries, so you're kind of getting international exposure. I personally prefer explicit international exposure though, hence my recommendation.

[–] [email protected] 2 points 38 minutes ago

Fair. I grew up with 140 character limits for SMS and having limits on how many texts I could send, so I get it. But instead of cutting out punctuation, I used more direct language and abbreviations. Now that there's no real limit on texts, I'm a bit more wordy and am extra careful about punctuation, especially since I use swipe texting.

[–] [email protected] 1 points 41 minutes ago

Agreed. And I really wish we'd have a popular resurgence of privacy, but it seems we're going the opposite direction where people prefer convenience and "safety" to control.

[–] [email protected] 1 points 47 minutes ago* (last edited 46 minutes ago)

Yup, started with 0 and working my way through.

Some genres I especially like:

  • puzzles - Return of the Obra Dinn, Manifold Garden, etc
  • platformers - absolutely loved INSIDE and LIMBO, currently enjoying A Hat in Time, loved Psychonauts (Psychonauts 2 is on the list, but it's not really "indie" anymore), little nightmares
  • metroidvanias - Blue Fire, Hollow Knight, etc
  • point and click - Darkside Detective, Deponia, etc
  • fighting/souls-like - Furi, Titan Souls
  • story - What Remains of Edith Finch
  • other - Recettear, Grand Mountain Adventure, Human Resource Machine

Basically, if it has really good gameplay or story, I'll probably like it.

It's probably more interesting to point out what I tend to not like:

  • roguelikes
  • city builders - I like high quality builders like Cities: Skylines, but indies tend to not have the budget
  • rhythm
  • stealth
  • shooters - very samey; I'd rather play AAA, such as Doom

But then again, there's an exception to each of these (e.g. I loved Slay the Spire and Black Mesa). So honestly, I'd probably enjoy anything that really stands out as being unique or interesting.

[–] [email protected] 1 points 58 minutes ago (2 children)

I'm more interested in multi-bay enclosures, but as you said, the chipsets tend to be kinda crappy. And that's what makes me hesitate to use these mini PCs, my use-case is for a NAS, but these enclosures are kind of expensive and seem to have pretty poor components.

So for now, I'm using larger cases to hold the drives. But it takes up a lot of desk space, so these mini PCs are very attractive, if I can get a compact external enclosure to work.

[–] [email protected] 1 points 1 hour ago (1 children)

TerraMaster, Orico

I honestly have never used either of these, yet they show up at a lot of retailers.

ASUS is a bit sketchy these days IMO, so I try to avoid them.

[–] [email protected] 2 points 1 hour ago

But why in-person? Surely the priority should be resetting passwords quickly, and doing it in-person is far from quick.

manually validating employees' identities on camera

A password has nothing to do with validating your identity, it's merely about authentication. Authentication and authorization are completely separate concepts. They should be resetting authentication to limit chance that an outside attacker can use compromised credentials, and then perhaps re-verifying identities separately for people with access to critical systems first.

Resetting passwords in-person sounds terrible. I use a password manager, so I would be more likely to make a bad password than a good one if I have to do it in front of someone in an interview.

 

Here's what I currently have:

  • Ryzen 1700 w/ 16GB RAM
  • GTX 750 ti
  • 1x SATA SSD - 120GB, currently use <50GB
  • 2x 8TB SATA HDD
  • runs openSUSE Leap, considering switch to microOS

And main services I run (total disk usage for OS+services - data is :

  • NextCloud - possibly switch to ownCloud infinite scale
  • Jellyfin - transcoding is nice to have, but not required
  • samba
  • various small services (Unifi Controller, vaultwarden, etc)

And services I plan to run:

  • CI/CD for Rust projects - infrequent builds
  • HomeAssistant
  • maybe speech to text? I'm looking to build an Alexa replacement
  • Minecraft server - small scale, only like 2-3 players, very few mods

HW wishlist:

  • 16GB RAM - 8GB may be a little low longer term
  • 4x SATA - may add 2 more HDDs
  • m.2 - replace my SATA SSD; ideally 2x for RAID, but I can do backups; performance isn't the concern here (1x sata + PCIe would work)
  • dual NIC - not required, but would simplify router config for private network; could use USB to Eth dongle, this is just for security cameras and whatnot
  • very small - mini-ITX at the largest; I want to shove this under my bed
  • very quiet
  • very low power - my Ryzen 1700 is overkill, this is mostly for the "quiet" req, but also paying less is nice

I've heard good things about N100 devices, but I haven't seen anything w/ 4x SATA or an accessible PCIe for a SATA adapter.

The closest I've seen is a ZimaBlade, but I'm worried about:

  • performance, especially as a CI server
  • power supply - why couldn't they just do regular USB-C?
  • access to extra USB ports - its hidden in the case

I don't need x86 for anything, ARM would be fine, but I'm having trouble finding anything with >8GB RAM and SATA/PCIe options are a bit... limited.

Anyway, thoughts?

85
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

Horse styles of the ’50s

31
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

For crying out loud, Jonah! Three days late, covered with slime, and smelling like fish! … And what story have I got to swallow this time?

0
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

You know what I’m sayin’? … Me, for example. I couldn’t work in some stuffy little office. … The outdoors just calls to me.

4
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

Look! Look, gentlemen! Purple mountains! Spacious skies! Fruited plains! … Is someone writing this down?

1
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

Sure, I’m a creature—and I can accept that … but lately it seems I’ve been turning into a miserable creature.

 

It has been a while since the last one. So...

Tell us what game you are currently, or recently played, greater than 6+ months old.

If the game happens to be on sale, a link would be a plus.

 

The link goes to a related post on another community so I don't have to duplicate it here.

Basically, I'd like to discuss tech options for a Reddit/Lemmy alternative. Here's what I've found:

  • Iroh - early days alternative to IPFS promising improved performance and application control
  • Appleseed - old-ish proposal for a distributed trust system - I'm thinking of using it for moderation (i.e. if you block/report similarly to someone else, that will get automated; you could also explicitly trust someone else [e.g. a CP-detector bot])
  • TrustNet - builds on Appleseed - still reading through the paper to know what it adds over Appleseed, if anything

Goals:

  • distributed storage - worried the fediverse will scale poorly (become too expensive)
  • distributed moderation - power-hungry mods suck
  • local-first - cache/host stuff you care about, reserve some space for preservation

Non-goals:

  • make money - it's a hobby for now, everything would be FOSS
  • image/video hosting - legal issues if you get random CP or something
  • preserve all data - I'd rather sacrifice older/less popular content than lose users - community can run caching servers
  • fediverse compat - P2P makes that difficult, but a bridge should be feasible

Thoughts? What am I missing?

Also, would anyone like me to post updates? It'll mostly be stuff from my research, if I post code, it won't be for a while (I have limited time).

0
submitted 6 months ago* (last edited 6 months ago) by [email protected] to c/[email protected]
 

I'm going to be overhauling my network over the next few months as I get ready for my new municipal fiber installation. I have a general idea of how to set things up, but I'm not an expert and would appreciate a few extra pairs of eyes in case I'm missing something obvious.

Hardware available:

  • Microtik Routerboard - 5 ports
  • Ubiquiti AP - AC-Lite; plan to add U6+ or U6 Lite once I get faster service
  • some dumb switches

Devices (by logical category; VLANs?):

  • main - computers and phones (Wi-Fi for now, I plan to run cable)
  • media - TVs, gaming consoles, etc
  • DMZ - wired security cameras, Wi-Fi printer (2.4GHz wireless g only)
  • guest - guests, kids computers

Goals:

  • main - outgoing traffic goes through a VPN
  • media - outgoing traffic limited to certain trusted sites; probably no VPN
  • untrusted - cannot access internet, can be accessed from main
  • guest - can only access internet, potentially through a separate VPN from main

Special devices:

  • NAS (Linux box) - can access main, media, and DMZ
  • printer - accessible from main, rest of devices on untrusted don't need to be (I can tunnel through the NAS if needed); can potentially configure a CUPS server on the NAS to route print jobs if needed

Plan:

Router ports:

  1. Internet
  2. WiFi APs
  3. main VLAN
  4. untrusted (VLAN)
  5. unused (or maybe media VLAN)

WiFi SSIDs (currently have a 2.4Ghz and 5Ghz SSIDs):

  1. main VLAN
  2. guest VLAN
  3. untrusted - hidden SSID (mostly for printer) - 2.4GHz only

If the VPN causes issues, I would like the ability to move individual MACs to another VLAN (say, to media, or a separate, usually unused backup VLAN). Not required, just a backup plan in case the VPN causes issues.

This is my first time configuring VLANs, so I'm not really sure what my options are. Also, I'm not super familiar with Mikrotik routers (I'm not a sysadmin or anything, just a hobbyist), I just got fed up with crappy consumer hardware and wanted something a bit more reliable.

Does that sound like a reasonable plan? Is there something I could improve or suggestions you have?

Edit: DMZ is the wrong term, so I replaced it with "untrusted". By that I meant a local-only network, so no Internet access. Ideally I could access these devices from my main network, but they can't initiate connections outside their VLAN. However, that's not necessary, since I can tunnel through my NAS if needed.

 

Here's an archived version of the page.

What follows is largely a reaction to analysts predicting a recession and giving advice on how to adjust your investing strategy. The TL;DR here is: don't, they get it wrong more than they get it right.

Among PF enthusiasts, there's a saying that goes something like this: analysts have predicted 20 of the last three recessions.

Here's a chart for the S and P 500 long term after inflation. As you'll notice, long downward trends are quite rare, and the general trend is upward. In general, you can expect 6.5-7% long term after taking out inflation (~10% before inflation) if you buy and hold a broad stock market index fund. It seems almost every year someone calls for a recession, and this year is no exception. People were calling for recessions staring in 2015 or so, and look how that turned out.

Finance pundits and blogs like saying outlandish things like "recession will happen this year, liquidate stocks and buy X, Y, and Z," and if you're lucky, they'll throw some fancy charts up to make you think they know what they're talking about. But just know that all of this is for attention, they make money through ads or airtime, and some will try to sell you a book or something. The worst ones do a pump and dump scheme where they'll invest in security X, hype it up, and then sell when there's a bump in prices and average investors are left holding the bag.

Everyone seems to think they have some system for beating the market, but few professional fund managers manage to beat the index they benchmark their fund with, and even fewer can do it consistently:

Across all domestic actively managed equity funds, 88.4% underperformed their respective benchmark over the last 15 years, according to an analysis of the S&P SPIVA report.

...

More than 80% of large-cap funds underperformed the S&P 500 over the last five years. In 2019, 79.98% of large-cap funds underperformed compared to the S&P 500, which was just a hair better than the five-year average.

So if you buy a large cap index fund, you'll do better than 80% of professional fund managers over 5 years, and you'll outperform nearly 90% of them over 15 years. So don't listen to their nonsense about changing allocation during a recession (or even whether there will be a recession) because you're statistically better off ignoring it.

To really drive it home, let's look at the linked article about Betty, the world's most unlucky investor, who invested only at the worst possible times (just before every major recession) since the 1980s:

Even though she picked the worst six moments since the 1980s in which to invest, she made an average profit over the next five years of 20% and an average profit over 10 years of 100%. She doubled her money. Despite her disastrous, terrible timing, she was in the black after five years on four occasions out of six, and in the black after 10 years 10 times out of 10.

Today, even though her total cash costs from those six investments totaled just $3,500, her portfolio is worth $17,500. That’s more than five times her investment. And that’s even factoring in losses this year, which have seen the global stock market — and Betty’s portfolio — fall 22%.

Just think of how much better she could've done if she had invested consistently, which means she would've bought at the lows and middles instead of just the highs.

If you instead listen to the pundits, you're likely to buy high (you'll miss the bottom, I guarantee it) and sell low (you'll sell early or late). Do what has worked well historically and buy and hold a diversified portfolio.

I don't know if a recession is coming, but I do know it'll change nothing about my investing strategy, other than perhaps how much I can invest. If you're nervous about the economy, make sure your emergency fund is funded and stay the course with your investing strategy, whatever your desired asset allocation is.

 

I like to review my financial situation near the end of the year to prep for tax season, give to charity, etc. For any who cannot access the article or are too lazy, here are the things they recommend:

  1. Tax loss harvesting
  2. Contribute to retirement accounts
  3. Convert IRA to Roth
  4. Reassess risk tolerance
  5. Review RMDs - only for 73+
  6. Charitable contributions
  7. Fund accounts for dependents

I check most of these, but more importantly I look at the new limits for 401k and IRA, as well at HSA limits for the upcoming year.

Is there something you like to do financially at the end of the year?

view more: next ›