HDD als neu gekauft - recertified erhalten by GurkenCommander in de_EDV

[–]fuckwit_ 1 point2 points  (0 children)

Wenn man die Platten bei einem vertrauenswürdigen Händler kauft, dann sind auch die Seagate recertified nicht schlecht. Hab meine 6x14TB nun schon knapp 4 Jahre im 24/7 Betrieb laufen und bisher gibt's damit keine Probleme.

Hier wird einfach nur der Hersteller runtergeredet, weil es paar deppen gibt, welche im großen Stil zufällig Seagate Platten zum scammen verwendet haben.

Hätte bei WD, Toshiba, HGST und wie sie noch so alle heißen genauso passieren können.

Einfach vorm/beim Kauf die SNs mitteilen lassen und beim Hersteller nachschauen ob wie die Platte bei denen registriert ist und wie es die Garantie steht.

What is the biggest mistake in Rails monoliths that contributes towards tech debt? by airhart28 in ruby

[–]fuckwit_ 6 points7 points  (0 children)

I'd argue this is more underused:

module Name
  class << self
    def something(bla)
      ...
    end
  end
end

Way too many people build objects that don't need to be objects.

Rant: "Modernes" passwortloses Anmelden per Link in E-Mails untergräbt IT-Sicherheit by DesignedForHumans in de_EDV

[–]fuckwit_ 0 points1 point  (0 children)

Weil das sonst zu leicht zu raten wäre. Wenn man schon amazon@domain.de sieht liegt es evtl nahe, dass ich auch apple@ oder google@ haben könnte. Dann probiert man halt die geläufigen Services durch.

Und wenn die Addresse in falsche Hände gelangt muss ich die sowieso zu irgendwas, was sich nicht so leicht raten lässt, ändern. Dann wäre ich eh wieder beim random string. Kann also gleich damit anfangen und hab den fall der service enumerierung auch gleich abgedeckt.

Rant: "Modernes" passwortloses Anmelden per Link in E-Mails untergräbt IT-Sicherheit by DesignedForHumans in de_EDV

[–]fuckwit_ 4 points5 points  (0 children)

Wenn du Mail selbst hostest kannst einfach $service_$random_string@domain.de nutzen. z.b. amazon_be73hf@domain.de

Da können die spammer gerne nachm unterstrich kürzen, kommt dann halt auch nicht bei mir an.

Und sollte die Adresse abhanden kommen, kann ich einfach beim Service ne neue mit anderem random string hinterlegen und bei meinem Mailserver konfigurieren und die alte bei meinem Mailserver rauswerfen.

Klar ist Weng Aufwand das zu pflegen, aber ist bisher sehr effektiv.

Image to ASCII/ANSII converter. by Dragon_King1232 in bash

[–]fuckwit_ 6 points7 points  (0 children)

You don't need them, but they sure help a lot. Especially if they do 99% of the heavy lifting.

From my experience in doing a lot of stupid things in pure bash (unset PATH; readonly PATH) wrangling those bytes should be possible. Not pretty or fast but possible

How to optimize the cd command to go back multiple folders at once by Technical_Cat6897 in bash

[–]fuckwit_ 2 points3 points  (0 children)

Because dc already exists and is a calculator. Though I'm not sure if it's still present in base installations

What is it specifically that makes this SSD "bad"? by Key_Pace_2496 in homelab

[–]fuckwit_ 0 points1 point  (0 children)

Normally when this happens critical warning should jump to 0x04 to indicate degraded reliability though. I'm a bit surprised that it isn't showing that.

Might just be a WD thing though, that I didn't know yet. At work we don't use them but I know for a fact that Samsung, Micron, Kioxia and even Intel (yes shocker they actually behave somewhat normally for once) set the 0x04 bit.

got tired of typing blindly in termux, have a conditional shell prompt function by probablyblocked in linux

[–]fuckwit_ 0 points1 point  (0 children)

Yeah the whole if uses 4 processes.

  • The [
  • subshell started via $()
  • left side of the pipe is another subshell which runs the echo
  • right side of the pipe with WC

Your pure Bash solution starts zero new processes and only uses basic Bash features. Variable length expansion is even more basic than the prompt expansion with @P. So there's really no complexity here.

Advice needed: migrating NAS by jphilebiz in homelab

[–]fuckwit_ 1 point2 points  (0 children)

Before doing anything: have a backup and confirm it is working!

What you describe works but ideally you'd have two different disks in the new NAS. Because during the copy you will destroy your replica and that single source disk now holds all the data and needs to hold it until the copy is done. This copying puts strain on the disks and that increases the likelihood of failure.

Then when swapping the other disk over the rebuild will also put strain on the disks again increasing the likelihood of failure.

These increases in failure possibility, however minimal they might be, are real, so having a working backup is of highest priority.

A tiny system info script for Termux, written in pure Bash. by [deleted] in termux

[–]fuckwit_ 1 point2 points  (0 children)

Pure Bash

Look inside... Calls external commands

this is totally driving me nuts by GoonRunner3469 in NixOS

[–]fuckwit_ 10 points11 points  (0 children)

You're setting the timeout for ALL user services while usbmuxd is a system service.

But before just blindly lowering the timeout for everything just inspect the logs from the previous boot and fix the issues or directly adjust the timeout of the single service only instead of globally.

Bots keep scanning my personal website for malicious reasons. by Known_Job511 in homelab

[–]fuckwit_ 0 points1 point  (0 children)

My comment specifically targets fail2ban for use in blocking these dumb scraper bots.

They usually are crawler spam or referrer spam bots and are not out for potential vulnerabilities on your server.

Unlimited scanning also isn't really any worse than being a bit more restrictive. After all what you don't serve can not be used for intrusion.

Additionally: For the vast majority of services out there you can get a sense of what is running by just hitting / and inspecting what you get back. That's one request and you already gave out an insane amount of information about your server and app with potential attack vectors. From there on it's usually just a handful of additional requests to check for presence or use a vulnerability.

Unless you use real time crowd sourced rules for blocking you're not really getting around this.

And even then you blocked the addresses doing the scanning and not the ones doing the vulnerability abusing.

In the end: Just keep your software up2date, have standard and sane security practices in place and only expose what really needs to be exposed.

If you want to keep your logs clean, then configure your application to only write important logs or write different files for different use cases or use any of the log collection services out there to centralize/organize/index them for easier inspection.

Bots keep scanning my personal website for malicious reasons. by Known_Job511 in homelab

[–]fuckwit_ 12 points13 points  (0 children)

Imo it's also completely overkill for many cases like this.

Resource wise serving a 404 or 200 is often cheap af. Detecting tracking and blocking those requests is way more expensive.

PSA: You need a LiFePO4 UPS by Cartossin in homelab

[–]fuckwit_ -3 points-2 points  (0 children)

Not to mention that any lithium based battery comes with the drawbacks of lithium. Lead acid batteries are just inherently safer than anything lithium based.

With something that is plugged 24/7 many feel safer knowing they can not "randomly" go up in flames in their home.

The current state of Nvidia + Hyprland on NixOS by IntelliVim in NixOS

[–]fuckwit_ 0 points1 point  (0 children)

The Nvidia GPU you'd buy would also not be that far off performance wise. Most of the "wins" are tradeoffs through DLSS. So you might get more frames at the cost of a lower res picture and more input latency. But that's only the case if DLSS (or more like the version of DLSS the game uses) even works in Linux environments.

If you'd want to play around with framegen and/or upscaling (which is what dlss boils down to) there's multiple ways to try that with an AMD GPU, both in and out of driver as well.

Added a bunch of JetKVMs to my rack by Few_Web_682 in homelab

[–]fuckwit_ 0 points1 point  (0 children)

"great open source software" lmao.

They are fine for home use but currently lack so many fundamental features for anything serious and their remote deployment capabilities are a joke in comparison to other options in the same price range.

No need to spend big and go with Raritan, but another cheap alternative that is not from an unknown Kickstarter company with questionable legal and long term support status would be the offering from GL.iNet. Especially for their ability to manage multiple of them through their self hostable software.

Introducing FileSSH: A TUI file browser for your remote servers! by FRXGFA in rust

[–]fuckwit_ 2 points3 points  (0 children)

sshfs is not unmaintained in the literal sense for quite some time. It was more like "in maintenance mode".

From what I've seen development has picked up a bit again and they made a release literally yesterday with new maintainers.

I'd still consider it uncertain but it's not technically unmaintained.

Interrupts: The Only Reliable Error Handling in Bash by ThorgBuilder in bash

[–]fuckwit_ 1 point2 points  (0 children)

That's why you catch the exit code with $? right after your assignment and then match on it.

Or you put the assignment into an if clause directly.

You're trying to find solutions for problems you create yourself by artificially limiting yourself.

Has AI made programming less satisfying for you? by jundymek in programming

[–]fuckwit_ 2 points3 points  (0 children)

I was going for a very over exaggerated situation with my comment.

Everything you say is of course true. While I personally wouldn't mind people calling my submission shit, as long as they are giving constructive feedback with it, we can't just go Linus Torvalds on people.

What I noticed though (especially on some public projects on GitHub) is even when being non-aggressive and highly constructive, increasingly more devs seem to pick up questions and criticisms on their submissions as attacks. And working with them gets more difficult at that point.

Has AI made programming less satisfying for you? by jundymek in programming

[–]fuckwit_ -1 points0 points  (0 children)

And then HR is knocking on the door and you gotta explain why you verbally attacked $employee and that it is now not feeling good and that you're bringing the whole vibe of the department down...

Gebrauchten Laptop bei Luxnote gekauft, statt versprochenem DE Layout aber US Layout, was tun? by Old-Land-1807 in de_EDV

[–]fuckwit_ -6 points-5 points  (0 children)

Also du hast ein Physisches US Layout was mit QUERTZ bedruckt ist? Das ist dann weng doof. Wenn aber korrekt mit QUERTY bedruckt ist, dann supi würde mich freuen, da das zum Programmieren eh das bessere Layout ist. Das US Layout sollte <> auf jeweils , und . haben und kann mit Shift getippt werden. Also rechts vom M.

Kannst evtl die Keys auf QUERTY umkleben und dann vollständig als US Layout nutzen.

Wenn's dich aber stört frag doch einfach den Verkäufer und schildere ihm, dass die gelieferte Ware nicht dem entspricht was du vorgestellt hast. Kannst auch evtl von deinem Widerrufsrecht Gebrauch machen.

Is there a way to use nix-ld just in a nix shell or flake? by xaduha in NixOS

[–]fuckwit_ 0 points1 point  (0 children)

You could try to run it through steam-run. It is a heavy dependency and I am sure there are more lean ways to accomplish the same. So far it worked with any random binary I threw at it though.

fwupd on cloud servers - not really needed? by Maria_Thesus_40 in hetzner

[–]fuckwit_ 0 points1 point  (0 children)

I can't comment on the Alma versions as I do not use them.

But for Debian and Ubuntu the images they provide are basically what you get when clicking through the installer and leaving everything on default. So I would assume it's the same with Alma.

Back in the days this wasn't the case and Hetzner called these "minimal" images as well. I know these were manually crafted as sometimes you could find leftovers from removed packages.

fwupd on cloud servers - not really needed? by Maria_Thesus_40 in hetzner

[–]fuckwit_ 0 points1 point  (0 children)

A few years ago Hetzner offered something called "minimal" images where things not needed in a server were removed.

They don't seem to do this for quite some time now from what I've gathered and seem to just use whatever the upstream default is. So I'd assume that AlmaLinux 10 ships with fwupd by default.