sugar_in_your_tea

joined 1 year ago
[–] [email protected] 4 points 9 hours ago

Well, the day my boss says that is the day I submit my 2 weeks notice, and probably half of our dept. We were hired with the promise of always having 3 days at home most days, and my boss kept to that, even pushing back against company policy that tried to shift to 3 days in office.

[–] [email protected] 1 points 17 hours ago

Yeah, Jan 1 2000 gang rise up!

[–] [email protected] 1 points 17 hours ago (1 children)

Wait, your name isn't SagXD?

[–] [email protected] 13 points 17 hours ago (3 children)

I'm 100% in the second camp. Facebook having my ID is a much bigger issue than having my kids' profile be public. I as a parent can ensure my kids' profiles are acceptable, or mark them as private myself. I can't ensure Facebook deletes my ID after verifying my identity.

Yes, kids should be safer online, and that starts at home. Educate parents and kids about how to stay safe, that's as far as it should go.

[–] [email protected] 5 points 17 hours ago

Exactly. We use a VPN to connect to anything somewhat important, and anything truly important requires manual access and approvals. I'm in a pretty senior dev position, and if I lost my laptop:

  1. they'd have to break my password or biometric login (disk is encrypted) - with this they get access to most of our code, but no secrets
  2. they'd need to hack my phone to access any internal documentation or test environments due to 2FA
  3. they'd need to hack my password manager to access anything non-documentation - code repos, prod logs, etc
  4. they'd need to hack someone else's machine to get access to actual prod data, which is probably what they really want

And I'm not doing anything special here (and I'm certainly not a security professional), that's everyone's machines due to company policy. We also don't handle anything particularly sensitive, the most sensitive thing I have is proprietary algorithms, and we'd sue anyone if we suspected they stole our code.

Oh, and if they try to run something sus, it'll send a report to our IT dept. I actually got contacted by our IT dept because I ran something unfamiliar (I really like my CLI tools), so they added an exception after personally verifying with me that it's not a hack.

We have teams across the globe, both inside the org and outside, and we haven't had any issues with security, and we do regular audits. Our security team isn't particularly special either, I'm sure many other companies have much tighter security than we do.

[–] [email protected] 2 points 17 hours ago

pretty trivial to do so

Yup. We have to "badge in" to our office, but the secretary will buzz you in if you ask nicely. Also, if you walk in with confidence as someone is entering/leaving, they'll hold the door for you. Or go in around the EOD when the cleaning staff are there and they'll let you in. All it takes is a very small amount of social engineering and you could steal a ton of stuff from my company.

But most people don't lose stuff like laptops at home or in their office, they lose them when traveling. Maybe you drop by a coffee shop on the way to work and someone filches your bag, or maybe you take a flight for work and someone swipes it while you're throwing something in the trash. They're not going to break into your home or your office, they'll snatch it while you're out in public and not paying particularly close attention.

[–] [email protected] 16 points 17 hours ago* (last edited 17 hours ago) (3 children)

Cool, glad I didn't listen to my parents, who wanted me to work for Amazon. Yeah, I probably could've made a ton more, but I'm making plenty where I'm at.

I work 2x in office, less if I have a somewhat passable reason to not go in. And I can WFH for a few weeks at a time if I need to travel for whatever reason. It's nice working for someone that somewhat respects me.

[–] [email protected] 6 points 17 hours ago (1 children)

Sure, and we should absolutely indict Facebook. And ideally our government wouldn't be so corrupt that it could indict our own government agencies from buying information from them in violation of the 1st, 4th, 5th, 6th, and 9th amendments (and probably the 14th).

[–] [email protected] 3 points 17 hours ago

Get an ad blocker, problem solved.

[–] [email protected] -2 points 17 hours ago (1 children)

Laws don't exist to protect the state, they exist to protect the people.

Also, what another country decides to do shouldn't really impact what we decide to do. If China blocks our apps, fine, their loss I guess. But if we start blocking their apps in retribution, that doesn't make us any better than them. We should be fighting disinformation with information. This means better education and transparent government-funded research and information. But when the US government is secretive and frequently caught spreading its own disinformation, it makes it hard for me to agree to block other countries doing the same.

TikTok should be allowed to offer its services here, but US companies shouldn't be obligated to host them on their services, and the government should publicize the negative information it has about them so journalists can help the public digest it.

[–] [email protected] 14 points 18 hours ago* (last edited 18 hours ago) (5 children)

Cool, let's ban Temu then. Nothing of value will be lost.

In all honesty though, I disagree with banning software, and that includes TikTok. I think it's a terrible platform and I refuse to use it, but I think we need to solve the underlying problem another way, otherwise we're just picking and choosing what speech is allowed in this country. The Constitution doesn't only protect American citizens, it protects everyone.

That said, if we're going to ban one, let's ban them all. These apps haven't provided any tangible value IMO and they've arguably caused a fair amount of harm, so I'm not going to die on a hill defending them.

[–] [email protected] 22 points 18 hours ago* (last edited 18 hours ago) (2 children)

Eh, I think it's totally feasible to quarantine the problematic parts of tech and retain control. For example:

  • GrapheneOS - I have a profile for my personal stuff w/o any Google services running, and then I have a "work" profile for things like Slack
  • Linux - no software company or hardware company is going to restrict me from maintaining my own machine; I've replaced parts, uninstalled default software, etc; I currently use a Lenovo laptop and a DIY desktop, and I'll probably replace my laptop w/ a Framework

"impossible to go without these services"

Have you tried? I stopped using Facebook over a decade ago, and I refuse to use anything else Meta has touched. I still keep in contact with those I care about. It turns out that if people value a relationship with you, they'll work with what you're comfortable with, provided you're willing to compromise a bit too. For me, that means SMS and email is my main form of communication, though I'd prefer more private alternatives like Matrix and Signal. Maybe I'll push my loved ones to switch eventually, idk.

No one uses fax

Nor should they, it's absolutely insecure and shouldn't be used by anyone. Period.

Mail is great, many of my friends have old-school watches, and while I don't understand it, I have friends who watch live TV. None of that really interests me (though I'll watch the Olympics OTA sometimes).

take back computers

What's stopping you? Do it one step at a time, and make adjustments as you go. I switched to Linux full-time something like 15 years ago, and it's all I use today. Since then, I have:

  • switched from gmail to my own domain (hosted w/ Tuta)
  • ripped all our DVDs and Blurays to a local Jellyfin server and cancelled most of our streaming services (SO convinced me to keep Netflix)
  • switched to GrapheneOS after a few years of slowly cutting out Google crap
  • self-host all kinds of stuff (I'm really close to eliminating Google Drive)
  • eliminated all commercial social media, and only Lemmy is left

Do the easiest stuff first, and keep going until you feel like you're in control. Your direction will probably look different than mine, and that's great! But waiting for someone else to solve your problems is what got us into this mess, so do something, and ideally do it today.

 

Here's what I currently have:

  • Ryzen 1700 w/ 16GB RAM
  • GTX 750 ti
  • 1x SATA SSD - 120GB, currently use <50GB
  • 2x 8TB SATA HDD
  • runs openSUSE Leap, considering switch to microOS

And main services I run (total disk usage for OS+services - data is :

  • NextCloud - possibly switch to ownCloud infinite scale
  • Jellyfin - transcoding is nice to have, but not required
  • samba
  • various small services (Unifi Controller, vaultwarden, etc)

And services I plan to run:

  • CI/CD for Rust projects - infrequent builds
  • HomeAssistant
  • maybe speech to text? I'm looking to build an Alexa replacement
  • Minecraft server - small scale, only like 2-3 players, very few mods

HW wishlist:

  • 16GB RAM - 8GB may be a little low longer term
  • 4x SATA - may add 2 more HDDs
  • m.2 - replace my SATA SSD; ideally 2x for RAID, but I can do backups; performance isn't the concern here (1x sata + PCIe would work)
  • dual NIC - not required, but would simplify router config for private network; could use USB to Eth dongle, this is just for security cameras and whatnot
  • very small - mini-ITX at the largest; I want to shove this under my bed
  • very quiet
  • very low power - my Ryzen 1700 is overkill, this is mostly for the "quiet" req, but also paying less is nice

I've heard good things about N100 devices, but I haven't seen anything w/ 4x SATA or an accessible PCIe for a SATA adapter.

The closest I've seen is a ZimaBlade, but I'm worried about:

  • performance, especially as a CI server
  • power supply - why couldn't they just do regular USB-C?
  • access to extra USB ports - its hidden in the case

I don't need x86 for anything, ARM would be fine, but I'm having trouble finding anything with >8GB RAM and SATA/PCIe options are a bit... limited.

Anyway, thoughts?

view more: next ›