• 1 Post
  • 611 Comments
Joined 3 years ago
cake
Cake day: June 14th, 2023

help-circle
  • I ran Matrix for like a year, and pretty much hated every minute. It was fragile, complicated, and incredibly, bafflingly resource intensive. Matrix is an overengineered nightmare in my opinion, and it seems to be quickly distancing itself from self-hosters while pursuing enterprise usage. Neat technology, horrible implementation, misguided company.

    XMPP is a breath of fresh air in comparison. Just like we still use email everywhere (even for authentication nowadays, fun!), XMPP is not obsolete simply because it’s older. It’s a solid foundation, plenty extensible, and does almost everything I can imagine needing to do without unnecessary complexity.

    Matrix’s bridges are its killer feature, and it’s nice… when it works. But it’s simply not worth the headache of dealing with Matrix, in my opinion.


  • If the polls are rigged, does that imply that most Israelis don’t support the genocide? So … you think you’ve got a majority of people who don’t support the genocide and with that majority you plan to do … nothing? Just gonna … let the minority do what they want?

    There’s a word for that, the word is “support”. You might not think you’re supporting it, but if you’re not doing something to fight it, then yes, you are supporting it. Get to work. Nobody ever promised that doing the right thing has to be easy.



  • Lots of enabling in your comment.

    People like you, with no control over the big decisions. Just like Palestinians can’t control Hamas, Russians can’t control Putin, US citizens can’t control Trump, and so on.

    If people can’t control their own governments, who can? Who should? Other people’s governments? Is that how you think it’s supposed to work? That’s why Israel is obliterating Gaza? Because Gaza can’t get rid of Hamas themselves so Israel is going to do it for them? Do you think that is justified and the right way to do things? Is it Canada’s job to rescue the US? Is it Europe’s responsibility to stop Russia?

    Are Iranians responsible for the Iranian regime? Yes, they are, that’s why they’re fucking protesting and dying in the streets right now. Resist, fight back, don’t comply, undermine your illegitimate government until they can be toppled.

    Take responsibility. I am responsible for the actions of my government and my country. And so are you. You will be held responsible. And you should be. Other countries are not responsible for fixing your shit. You are. Fix it. Figure out how. Stop acting like it’s somebody else’s problem and you are just a humble peasant. Humble peasants can start revolutions. Lazy citizens who are happy with the status quo while pretending they don’t agree with it do not start revolutions. Which one are you?



  • I don’t want the free petition websites online getting my personal network’s info and sharing or selling it, hence the interest in self hosting.

    So either you’re creating a petition with a size of exactly “1” or you’re asking other people to trust YOU with their personal info instead, or you’re asking for a federated solution (extremely difficult to establish a verifiable web of trust framework, and STILL shares your “personal network’s info” whenever it federates or validates its data to dozens of other servers).

    None of these scenarios are viable for creating a petition that anyone is going to take seriously (to the extent that anyone takes petitions seriously at all)


  • fail2ban mainly, but also things like scaling login delays (some sort of option often built into the software you’re running, but just as often not configured by default), or if you’re feeling particularly paranoid account locking after too many failures, and in general just not using default, predictable, common usernames or weak passwords, and honestly it’s even helped a bit by having slow hardware and throttled network bandwidth.

    The goal is to make it so that someone can’t run a script that sends 100 million login attempts per second for common or stolen usernames and passwords and your server just helpfully tries them all and obediently tells them none of those worked… until one of them does.

    Not only does this encourage them to TRY sending 100 million login attempts per second because your server isn’t refusing it, which is a huge waste of bandwidth and resources, it also makes it really likely that they’re eventually going to guess one right.


  • I’m really hoping that the magic Carney is doing is all behind the scenes, top-secret, serious powerbroker shit. And if he is, that’s going to be fire.

    But if he isn’t, “meh” is an understatement. Because most of what he’s done in public has been typical neoliberal status quo, rape the environment, fuck the people, while telling them how much they’re both going to be enjoying it.

    I’ve always believed he’s a sneaky snake. I know he was one to get elected.

    The optimist in me wants to believe he’s a sneaky snake working on our side.

    The pessimist in me is convinced he’s a sneaky snake working against us.

    I guess time will tell us which one is the case.











  • FWIW I don’t find Apache dated at all. It’s mature software, yes, but it’s also incredibly powerful and flexible, and regularly updated and improved. It’s probably not the fastest by any benchmark, but it was never intended to be (and for self-hosting, it doesn’t need to be). It’s an “everything and the kitchen sink” web server, and I don’t think that’s always the wrong choice. Personally, I find Apache’s litlte-known and perhaps misleadingly named Managed Domains (mod_md/MDomain) by far the easiest and clearest way to automatically manage and maintain SSL certificates, it’s really nice and worth looking into if you use Apache and are using any other solution for certificate renewal.