nekusoul

It might be feasible, but it's a bit awkward to implement because Wireguard is stateless and doesn't know if a client is offline or just hasn't sent any traffic for some time.

That's kind of weird, because the reason why I never bothered with (selfhosted) VPNs before Wireguard was because it was the first one that just worked. Granted, due to its nature, you don't get a lot of feedback when things don't work, but it's so simple in principle that there's not a lot that can go wrong. For external VPNs like this, it should just be: Load config, double-check, done.

I'd be more concerned as well if this would be an over-night change, but I'd say that the rollout is slow and gradual enough that giving it more time would just lead to more procrastination instead, rather than finding solutions. Particularly for those following the news, which all sysadmins should, the reduction in certificate lifespan over time has been going on for a while now with a clear goal of automation becoming the only viable path forward.

I'll also go out on a limb and make a guess that a not insignificant amount of people only think that their "special" case can't be automated. I wouldn't even be surprised if many of those could be solved by a bog-standard reverse-proxy setup.

Part of this might be my general disdain towards sysadmins who don't know the first thing about technology and security, but I can't help but notice that article is weirdly biased:

Over the past couple of days, these unsung heroes who keep the internet up and running flocked to Reddit to bemoan their soon-to-be increasing workload.

Kind of weird to praise random Reddit users who might or might not actually sysadmins that much for not keeping up with the news, or put any kind of importance onto Reddit comments in the first place.

Personally, I'm much more partial to the opinions of actual security researchers and hope this passes. All publicly used services should use automated renewals with short lifespans. If this isn't possible for internal devices some weird reason, that's what private CAs are for.

Personally, I watch the channels from the creators I like and slowly grow my channels through their recommendations. My bookmark goes straight to the subscription page and have uBlock filters for all the unwanted recommendations.

I couldn't stand having an algorithm decide what I watch.

That's assuming people actually use a parser and don't build their own "parser" to read values manually.

And before anyone asks: Yes, I've known people who did exactly that and to this day I'm still traumatized by that discovery.

But yes, comments would've been nice.

On one hand I agree, on the other hand I just know that some people would immediately abuse it and put relevant data into comments.

At the very least it failed in a way that's obvious by giving you contradictory statements. If it left you with only the wrong statements, that's when "AI" becomes really insidiuos.

It’s a little bit faster for encoding and decoding

On the other hand, the time spent uploading/downloading much smaller files probably more than makes up for that, although even that difference might get pretty small with modern internet connections.

Considering the movie industry is currently at a point where it's even punishing paying customers with low-quality 720p for daring to use the "wrong" browser, I don't think the industry will figure out that there's a market out there for high quality drm-free media anytime soon.

There really should be a right to adequate human support that's not hidden behind multiple barriers. As you said, it can be a timesaver for the simple stuff, but there's nothing worse than the dread when you know that your case is going to need some explanation and an actual human that is able to do more than just following a flowchart.

Interesting. I knew about their hardware compatibility list, but not their list of certified hardware list. Their list of requirements looks quite a bit different from those intended for a regular OS and is (unsurprisingly) tuned for Qubes, but considering that it'd make sense to mention them, particularly if the user intends to run that.