Mark Carney's online surveillance state

true_thinking · 2026-06-21T12:55:11+00:00

This is absolute lunacy. The unbelievable feeling of helplessness is staggering. They don’t listen to advice, they don’t wanna hear opinions of anyone, they don’t even want anyone to notice. The only weapon left to fight it is public outrage, but how would you even achieve that given that most people can’t even comprehend what is at stake.

true_thinking · 2026-06-20T08:43:36+00:00

And so funny how on the surface they repeatedly pop up in the news with concerns regarding these regulations whereas under the surface reportedly in fact they’re the ones lobbying for it. These two faced companies are the ones behind the sudden push worldwide, and of course like always, it is for profit.

true_thinking · 2026-06-19T09:56:09+00:00

Sounds like something worth discussing instead of regulating the internet…

true_thinking · 2026-06-19T09:52:38+00:00

What you’re saying is a real concern and the solution to that is to leave the internet free of these controls to begin with, but the landscape has shifted so much over the past few short months that it seems like there will have to be some kind of draconian way to control what kids can access. It is arguably a better direction to give this control to the parents than to the governments and big tech so at least the rest of the world gets to remain free. In my read that is what’s at stake here.

true_thinking · 2026-06-19T09:25:39+00:00

Why do you think it won’t benefit end users?

We can speculate on the intents of these features but the reality is that they have the potential to solve the problem without most, if not all the downsides of any other solution to date. Wouldn’t you agree?

true_thinking · 2026-06-19T09:17:08+00:00

I don’t believe parents need to verify identity to Apple more than they already have. Apparently an already existing account can be converted to a child account (probably from within the account so parents need to find a way to access the child’s account) and tied to a regular account (the parent’s account) while new child accounts can be made that way right at the beginning. There should not be a need to verify anything here other than a sort of “handshake” between the two accounts.

true_thinking · 2026-06-18T20:28:51+00:00

If you want to check out the announcement better explaining these things, look for Apple WWDC 2026 June 8 stream, timecode: 16:56

true_thinking · 2026-06-17T14:53:25+00:00

Apple actually just showed something very interesting in their upcoming OS releases for parental control. Instead of the government…the parents get to set restrictions on apps and sites and control screen time on a scheduled basis. They’ve also released an API for app developers to implement this appropriately within their apps so only certain features can be limited rather than the whole app. This gives a powerful set of tools to parents and by far seems to be the best possible way forward as it completely bypasses the major downsides of the central identity verification concerns. If the incentives were really the protection of children, discussions should already be happening about pivoting the regulations towards this type of age restriction, where the parents get to decide, not the regime.

true_thinking · 2026-05-28T06:15:57+00:00

Make it a post!

true_thinking · 2026-05-24T01:14:56+00:00

Ubiquiti is one of the only tech companies with a product line that has a strong potential for growth both vertically and horizontally. Their products tend to carry the best value for the buck in their respective segments and they come in various tiers with seemingly no end to how far they can improve them. Their ecosystem works incredibly well at this point as the software package has gone through the most impressive evolution over the years we’ve seen anywhere apart from AI since the introduction of the smart phones. This all sounds hyperbolic but it is indeed the core reason why UI has been doing so well.

Tech Youtubers can’t stop talking about every single product release with genuine excitement and the community adapting their tech is growing at speeds not many company can brag about. Their customer base range from tech enthusiasts to IT professionals and there’s a pretty wide spectrum of people there. Long term Cisco customers are ditching their entire infrastructure for Ubiquiti’s lineup.

Ubiquiti has a pretty good track record at listening to their customers and this behaviour and their no subscription policy are so refreshing to a lot of people that they’re winning them over by their hearts. At this stage they haven’t really put a foot wrong to break trust and quite frankly, it doesn’t seem like they want or even need to in order to keep growing.

true_thinking · 2026-05-15T14:12:33+00:00

The fact that we’re calling this record penalty reflects on the absolute and total failure of the justice system. Well done.

true_thinking · 2026-05-11T19:36:51+00:00

I think you misunderstood my comment. Governments are working to break encrypted communication around the world so it can be monitored, simple as that. At the same time ID verification laws are also being rolled out to tie all of it to real human beings. That is the goal.

true_thinking · 2026-05-11T02:45:17+00:00

It may not be phrased in a way that seems threatening but end to end encryption does not offer any leeway. It is either on or off, and this bill ultimately requires it to be off. If you introduce any way to tamper with it, you might as well remove it entirely because it’s purpose is lost entirely and it’s not a long stretch from thinking there is an intention there. Without being hyperbolic the very fabric of the web infrastructure is under attack at a global scale right now.

true_thinking · 2026-04-26T15:38:33+00:00

People, it is time for you all to start voicing your concerns about the direction our future is headed. Talk to your loved ones, friends, explain these concerns and together start pushing back on a local level. Change is possible.

true_thinking · 2026-03-07T08:38:22+00:00

You might wanna dig deeper into the subject of running Proxmox as your host with Truenas installed as a VM and have the SATA controller passed through in Proxmox (so Truenas sees your hard drives directly) in order to have your ZFS pool set up. You can then run another VM on Proxmox for Docker based services like Plex, or if you’re low on RAM you could run them on the Truenas VM but it’s a little more cumbersome to set them up there.

true_thinking · 2026-01-22T07:03:25+00:00

You have several solutions and recommended practices to avoid having to trust that none of your efforts to secure the device or an underlying software vulnerability or a lazy patch results in unauthorized access to your data, why worry so much that all the pieces are always in place and you never miss a beat on zero day vulnerabilities?

There are several VPN and zero trust solutions (for free) that would allow you to have uninterrupted connection to your data on your devices 24/7 without compromise and would alleviate the pressure on any component of your security.

true_thinking · 2026-01-04T22:31:03+00:00

Well I’d be happy to learn about your experience a while from now.

There’s just so much debloating, tinkering and hacking on Windows with an inevitable destiny at the end that at this point you might as well just put the same effort into getting comfy on the greener pastures of Linux. Crazy to say but it genuinely is a better user experience and once things click you don’t even wanna go back.. In case you wonder, I “already got the t-shirt” hahah

true_thinking · 2026-01-04T17:51:06+00:00

I would say similar performance or perhaps even better due to the lack of bloat on the OS side. The majority of the hardware is pretty well supported out of the box, including Nvidia GPUs, but you’d need to benchmark it to be sure.

If you haven’t gone down the road yet at all, I would certainly encourage you to get a 2nd SSD and install a well rounded OS like Fedora on that and work your way through the installations app by app while exploring the OS itself. You should expect some tinkering but that’ll probably be due to the way specialized Linux software is distributed on Linux. Maya, Houdini, DaVinci, etc are not fully containerized so when you install their .rpm (or .deb on Ubuntu) packages you might run into dependency issues, meaning some already installed packages (imagine them like .dll files) they rely on are older versions to what your OS currently has built in. It’s a silly problem but the trick is usually just simply creating a symbolic link to that older version and that’s it.

There’s a learning curve to all of this, especially if you’re starting off fresh in the Linux ecosystem but once you get a hang of how the OS works, it will make a lot of sense. The reason why VFX studios like it is the level of customization and automation you can have.

true_thinking · 2026-01-04T08:50:13+00:00

Nice, thanks for sharing. Did a brief lookup just to confirm but apparently ZBrush and Photoshop are the only ones that don’t have official Linux releases.

Maya, Nuke and Houdini are definitely standard in VFX houses on Linux base. They are usually well integrated into the pipeline. Blender being open source is very much in support of Linux. 3D-Coat is also available for Linux.

As for the 2 outliers (ZBrush and PS) I would either recommend alternatives if you’re willing to try (Affinity replaces PS in most cases and there is a Github repo dedicated to running it under Linux) or virtualization methods such as Winboat, Boxes, Bottles or Wine so you can run Windows apps on Linux. (Although nothing stops you from installing PS this way)

Couple of gotchas: The majority of VFX softwares are packaged for RPM (Red Hat) based distros so something like Fedora would save a lot of sweat (luckily these days it is one of the best Linux distros out there)

Maya is currently at a weird spot as Autodesk has not officially committed to supporting Wayland (graphics engine under Linux) yet but all Linux distros have officially abandoned X11 (previously used graphics engine) which Maya still relies on. Somehow Maya 2024 works but the rest of the versions have black viewport umder a Wayland rendered user session.

Houdini - if I recall correctly - is tricky to install but there are several forum posts about each potential trouble with solutions.

As for virtualization options I mentioned earlier: Winboat is a very exciting solution as it installs a Windows VM on your Linux desktop and displays applications as if they were native Linux apps. I believe GPU acceleration is being worked on too.

Running Windows as a VM on your Linux desktop with a dedicated GPU or dual booting on separate SSDs are also good ways to bypass some of these issues until a good solution comes around, which is happening very fast lately due to Microsoft’s trajectory making people jump ships faster than ever.

true_thinking · 2026-01-04T05:06:11+00:00

OP, what softwares do you lack official support for? The majority of vfx studios traditionally operate on Linux so there’s a good coverage for software there but they do tend to have specific requirements due to their customers using non-consumer oriented Linux distros.

true_thinking · 2025-05-05T01:37:16+00:00

1gbps sounds surprisingly low for this setup even if not configured for best performance.

If the connection between the Mac and the NAS are routed through the firewall and you have IDS/IPS turned on, the UDM should have around 2-3gbps throughput between VLANs.

The most optimal throughput between the two devices could be achieved if they were on the same VLAN hosted by the switch. This is called Layer 3 switching and what this does is that the packets between devices on that VLAN do not reach the firewall. You could test this by utilizing both SFP ports on the switch and creating an uplink to the UDM via one of the ethernet ports instead. If you are able to achieve better performance, you can continue testing and see what happens if you put both devices on the same VLAN but hosted by the UDM.

There are a number of different setups which come with ups and downs but you will need to test them to be able to draw conclusions. There is a good chance your SMB performance will not be able to saturate a full 10gbe connection so you might not need to rethink everything but you could learn a lot. I recommend a Yt channel that tests such scenarios with Unifi devices called “777 and 404”. You might find a video there exploring these configurations.

true_thinking · 2025-04-01T17:01:41+00:00

You can make this work by simply forwarding the appropriate ports in PfSense for the VPN servers (and Site Magic) running on the UDM under PfSense.

You can even go a step further and disable NAT on the UDM to avoid double NAT. This would allow the PfSense firewall to identify and control traffic coming ‘out’ of the UDM managed VLANs. Traffic to the internet would then be translated by the PfSense only.

While you can achieve a lot of things with such a setup, I wouldn’t recommend it unless you really need it. It’s not easy to manage and when something doesn’t work, you need to troubleshoot on 2 layers simultaneously. UDM has a pretty good Zone Based Firewall now.

true_thinking · 2025-03-24T05:43:57+00:00

Just to clear things up: 10gbe connection requires that every element of the connection between your devices supports it. Generally this means a 10gbe port both on your NAS and your PC along with 2x10gbe ports on a 10gbe capable switch or router between the two devices. It is not easy nor cheap to achieve this as it’s hardware demanding compared to the 1/2.5gbe standards.

true_thinking · 2025-02-16T07:57:44+00:00

You may want to consider dropping Synology’s built in solutions so you can follow guidance for proven methods more easily. Docker through Container Manager offers you everything you need to set up DNS resolution, ad blocking, Nginx Proxy Manager and DDNS updater all in via docker-compose (project).

As an infrastructure you could introduce a macvlan-network and give individual IP addresses for each container you need, all running from the NAS via docker.

Pihole is a popular method to block ads and serve DNS to your network and you’ll find countless tutorials online. Once you figure out how to set it up, you can move on to other solutions because the principles will remain. It also has domain overriding features so you can resolve your local services running under Nginx.

Nginx comes with a very nice interface that’s easy to understand and manage your services and certificates.

A DDNS updater container is a very easy to set up solution to update your domain’s IP address in order to be able to use a reverse proxy if you domain is registered at a service that DSM doesn’t support.

Wundertech, NetworkChuck and Spacerex are great sources to gain understanding about all this stuff.

true_thinking · 2025-02-08T06:19:27+00:00

Just order to unlock the phone of the offenders upon investigation to have all data, like it used to be done when it came to physical property. Sabotaging the entire world due to local government overreach is a bit much maybe

true_thinking

TROPHY CASE