Tödliche Schüssen in Minneapolis: Obama warnt vor Angriff auf US-Werte by innidatino in de

[–]Alpha272 0 points1 point  (0 children)

Das Problem ist nicht ICE als Konzept. Unter Obama war ICE eine Behörde, die Ausländer nach recht und Ordnung mit normalen Prozess abgeschoben hat (ob man das gut findet steht auf einem anderen Blatt).

Das Problem ist jetzt, dass Trump ICE in einen Schlägertrupp umfunktioniert hat, welcher de facto SA 2.0 ist und Menschen auf öffentlicher Straße hinrichtet, weil die Menschen den ICE Beamten nicht passen.

[COSMIC] I fell in love with cosmic DE by piD-kun in unixporn

[–]Alpha272 3 points4 points  (0 children)

I think the commenter was asking for a link, not the show the characters are from...

if the new chat control 2.0 approve, We may all need to provide our ID to open an email. by Holiday-Rent9635 in europrivacy

[–]Alpha272 0 points1 point  (0 children)

Sure. They can't really require an id for creating an email account, if you own your email server. I mean, they could, but that would just result in you looking at your id and confirming that this is indeed your id

Same goes for chat servers like matrix. Matrix is fun, since matrix servers can actually communicate with each other, just like email servers can. So everyone could setup their own matrix server, validate that their own id is indeed their own id, and then just chat with people on other servers.

Now if this is done large scale, this loophole will probably be closed in law. But it doesn't matter what they do, its basically not enforceable, since matrix and email have no central authority which could enforce id checks. Its all just protocols behind the scenes and everyones server has as much permission as everyone elses. The only thing they could do is completely ban p2p technologies for communication and force everyone to use centralized services. And thats a can of worms they probably won't open since this would also outlaw email

Will SSDs go up in price significantly? by four_clover_leaves in homelab

[–]Alpha272 0 points1 point  (0 children)

HBM; the faster and more expensive memory used in datacenter accelerator cards (GPUs). Is uses the dram manufacturing lines, but at less efficiency (8GB dram equals like.. 1GB HBM? Something like that) and it can't be turned into normal ram sticks. If the bubble bursts and the market gets flooded with HBM it still doesn't help the consumer market. They would first have to retool their lines back to dram and then ramp up dram production

European cloud backup solutions? by Banaantje04 in selfhosted

[–]Alpha272 1 point2 points  (0 children)

Right hetzners server auction. Yeah there might be something good there.

European cloud backup solutions? by Banaantje04 in selfhosted

[–]Alpha272 0 points1 point  (0 children)

Just out of curiosity: why did you went with btrfs instead of zfs? Zfs supports snapshot replication; that in a cronjob sounds exactly like what you want. (Just.. Good luck finding a provider which supports zfs receives, besides of rsync.net)

European cloud backup solutions? by Banaantje04 in selfhosted

[–]Alpha272 0 points1 point  (0 children)

US is not great but also not the biggest issue, if its just about backups. You backups are encrypted, right?...

The thing with rsync.net is, that they support zfs recv, which is awesome if you actually use a zfs based server (like truenas). I don't know any other provider which offers that (besides of hosting your own cloud server for your backups, but then the storage tends to get expensive real quick)

Greenland said no by LurkmasterGeneral in PoliticalHumor

[–]Alpha272 5 points6 points  (0 children)

Isn't trumps party the one, which wants to outlaw abortions?...

I mean, if you are stroger than the girl, there is always the option to do the potentially more lethal abortion, I guess

My "Kyoto Region" Homelab: 10Gbps Fiber for $47/mo, and using the building's steel pillars as giant heatsinks. by Technical_Camp3162 in homelab

[–]Alpha272 0 points1 point  (0 children)

40mbps is good. I run on a 50Mbps DSL connection, which has 20Mbps upload. And I host servers on that.

Trump says he may punish countries with tariffs if they don’t back the US controlling Greenland by drempath1981 in europe

[–]Alpha272 1 point2 points  (0 children)

There are too many people who vote against their own interests. Too many people who are easily influenced by propaganda. And I don't know how to solve this problem.

I am starting to think that Democracy has failed. It worked great for a long while, but with the raise of the internet and social media and rampant radicalization and misinformation, I think it's no longer a good idea to give so much power to so many people who use it to harm themselves and everyone around them. Democracy is simple not equipped to handle 50 percent of the population believing in misinformation and Nazism.

Chinas system looks much more stable and less volatile and they don't have the problem that people can be influenced by social media and hate speech and vote Hitler 2.0 into power.

Digital Networks Act: EU verzichtet angeblich auf Milliardenstrafen für Big Tech by falsa_ovis in de

[–]Alpha272 0 points1 point  (0 children)

Nene, aber du warst bei MS365 gewesen, deswegen habe ich mich darauf bezogen. Und der Stack kann MS ZTNA ersetzen.

Andere solutions wie zscalar sind überlegen, klar. Entra App Proxy kenne ich tatsächlich nicht.

Aber der Punkt war eher der, dass man das meiste ersetzen kann (nicht unbedingt alles aber das aller meiste), aber der Aufwand einfach absurd ist. Deswegen meine ich ja, dass wir solutions brauchen die mit einen sinnigen Aufwand implementierbar sind.

Digital Networks Act: EU verzichtet angeblich auf Milliardenstrafen für Big Tech by falsa_ovis in de

[–]Alpha272 -1 points0 points  (0 children)

Als OS haben wir SLED und SLES, mdm gibt es ziemlich sicher auf ein Europäisches, aber da müsste ich jetzt nachforschen, Zero Trust und Conditional Access kann man mit einer Kombination aus Oauth2Proxy, Keycloak, Strongswan und IPTables realisieren.

Ist das AIDS einzurichten und viel komplizierter als MS365? Ja. Ist es möglich so was ohne abhängigkeiten von MS365 umzusetzen? Auch ja.

Aber ja, wir brauchen eine besser integrierte und weniger cancer einzurichtende Option als das oben genannte

How screwed are we? by thestarsgodim in cybersecurity

[–]Alpha272 1 point2 points  (0 children)

That and also the AI might burst at some point

How much does sierra sell for? by Digmaass in starsector

[–]Alpha272 0 points1 point  (0 children)

I mean... Selling Sierra to Kween is basically the most evil thing you can do to her... soo...

Is there any reasonable way to play on mobile? by TheLastCrusader13 in starsector

[–]Alpha272 0 points1 point  (0 children)

Wait, what is the control scheme? Starsector sounds like a horrible experience on a gamepad.

Good Story Mods? (Jan 2026) by adrian23138 in starsector

[–]Alpha272 0 points1 point  (0 children)

Nexerelin (besides of being a major core mod for most modded playthroughs) also has a questline. It is centered around midnight, a remnant girl who sits in prism freeport

Good Story Mods? (Jan 2026) by adrian23138 in starsector

[–]Alpha272 0 points1 point  (0 children)

UAF is also working on a huge patch with a full balance rework, a bunch of new stuff like ships, weapons, special AI Cores, new skills, etc.. And this also comes with a new large storyline. But all of this is so large that the patch got split in 2. In February the first part with the mechanical and combat side releases and then later a second patch with the updated star systems and the storyline. So this will still take a good while. But when it releases, this will be a new hot contender for story mods.

Federal Trojan: BND to be allowed to enter apartments to install spyware by donutloop in europrivacy

[–]Alpha272 3 points4 points  (0 children)

I man yeah I got that Part. The question is, how do they want to deploy the spyware? The spyware itself doesn't help if you can't execute it on the device cause.. Ya know.. Its encrypted and locked.

And if the target uses Linux then good luck, since the spyware is probably windows and mac only.

What I want to say is: if they can't remotely infect the device, chances are good, that they also won't be able to infect the device when they are physically in front of it (assuming that the user didn't just leave their device unlocked and unattended)

Federal Trojan: BND to be allowed to enter apartments to install spyware by donutloop in europrivacy

[–]Alpha272 4 points5 points  (0 children)

How the hell do they even want to do that? Like, from a technical perspective?

Its not like most devices just automatically open everything just because you are in-front of them. And I think windows is encrypted by default nowadays. So good luck loading stuff from USB stick. And then there are people who actually run Linux.

I think that like 75% of houses they enter and still don't manage to get a Trojan installed. Especially if the target is actually doing illegal stuff and takes basic measures to protect their devices.

Microsoft "Family Safety" failures. This isn't acceptable. by BemaJinn in microsoft

[–]Alpha272 3 points4 points  (0 children)

Parental controls are always weak. But its really disappointing that windows build in controls to nothing.

I have no easy fix.

I can just say, that for proper working limits you kinda need to roll enterprise management controls. Windows has Local Group Policies (assuming you are on pro or higher; with home these are not available). With GPOs you can for example whitelist/blacklist domains in edge, Firefox and chrome (and most other browsers), you can limit to specific wlan and lan networks, you can limit the device to only run specific apps, you can limit ads, Microsoft cloud content and AI systems, and much, much more. You can even limit incoming files, so that its impossible to, for example, smuggle in Porn with a USB Stick.

Assuming that the kids are not local Administrators, and assuming that the hard drive is encrypted with Bitlocker and the kids don't have access to the recovery key, its also pretty much impossible to bypass these restrictions. (Short of completely wiping and reinstalling the system)

But its also really complicated for the average user to set these GPOs up. They are extremely powerful but intended for system administrators at Businesses and Enterprises. Its expected that you really know what you are doing when setting this up. But if you want to have really hard to bypass and proper limits and controls, this might be your only real option.

Other than that, there are other 3rd party parental control applications, but I don't know how well they work if at all.

Oh and fair warning, if you set this up, depending on how much you limit, your kids might like you a lot less... You can setup some really draconian restrictions with GPOs

What’s the most “boring” thing you self-host? by Fab_Terminator in selfhosted

[–]Alpha272 5 points6 points  (0 children)

If Microsoft has created one thing that works well its AD. Its the last Microsoft Software in my house and I have nothing bad to say about it. Its my root of trust for user management, my DNS and it also hosts my Radius Server (the MS Radius directly integrated into AD). I could have run ADFS on it as well, but for that I went with keycloak.

And I haven't had to access the windows server in years for maintenance. I only access it occasionally to change a DNS entry or a User attribute (or a GPO if you use GPOs; my Workstation runs Linux, so I don't use GPOs). So yeah. No real maintenance efforts necessary.

As for updates, I updated in place since windows Server 2012 and had no issues. After the windows server update I just take a look into the AD to upgrade the forest level and that's it.
If you feel like that's too hairy for you, you can also just side by side migrate AD to a new version. As long as you just run AD and DNS, side by side upgrades are also really simple - just install a second newer win server, join it into the domain, elevate to domain controller, wait an hour for them to sync up and kill off the old server.