longsword

Where exactly is it good, that:

* apple told admins how to fix the vulnerability * apple shipped update 27.2, with no fix (today) * the update reverted the admin fix quietly

There is a tool called deepclaude, which runs a proxy in the background capable of doing this, by simply doing /model in Claude.

used a down-detector site to check if cloudflare is down, but the site is running on cloudflare, so i couldnt check if cloudflare was down for anyone else, because cloudflare was down

No, they can't. They don't have any access at all to your device. But as jeduardo already said, you can fetch updates from the device manufacturer. The mentioned Fritz!Box from AVM has automatic updates and is known for delivering them for a really long time. My 12 year old repeater from that brand is still receiving security updates from time to time.

BYOD is really easy here with DSL. With fibre they try to push the legal limits by arguing that their device is required because its part of their network. But because the law explicitly says the network has to end at a passive point, they got fined. If they don't provide the login and vlan id's, you can just report them to the authorities and they will handle it.

i'm really glad that i can use my own modem. In germany every ISP is by law required to accept self brought modems. They can't force you to use their often shitty hardware. My current modem/router is up for 3 months without a single interruption to my connection.

I'm not sure the Maps API gives you access to the raw vector data.

I can't really confirm this data - atleast for my city it is very low. I started working fulltime last year and i'm already in the median and will crack the top 25% when 30 years old in some years. And my employee is not known to pay well.

There will always be 0 days out there, but they will always be very expensive and rare. If you have the ressources to buy or find a 0-day, you definetly won't blow it by executing known malware, or other stuff, which falls under the detected by AV's. I really don't thing that having AV installed will protect any user from a 0-day.

On the other side, you install a very invasive av software, which runs as privileged user and intercepts everything thats happening on your system. They even make a great target for malware by themself. Just recently ClamAV had a bug in it's file scanner, which let to an rce: CVE-2023-20032

> This is sad :( hetzner charges extra for ipv4 address, and this means I couldn't run `git clone` without paying extra

Well, they added the Option, so you can get your server for less then normal. The Servers are cheaper, if you Opt-Out of IPv4. I really liked that move.

It's not 100% renewable in the Mix. Thats not what he said. It just means, that he picked a supplier, which exclusively buys renewable energy on the energy market. Obviously it's still the same energy mix, which arrives on your house. But your money won't support Coal Power Plants.

We have a selfhosted Forum based on WoltLab for our Community. It's a (one time) Paid Forum-Software (110$), which is based on PHP and easy extendable. Right now we're having 141k Members and 120k Posts in 5 Years, so i would say our Forum is quite active. There is no App, but the Design is really good, fully responsible and can be used on a Phone without a problem.

It's not possible to see any comment on YouTube at the moment

I'm talking about steam accounts. There are many cheaters our there, who just dont care if they lose an account. They will cheat on an alternative Account and when they get banned, they will buy a new one. They dont even care spending some bucks on the Game again. Edit: Take Rust as an example. A year ago, the Developers made some stats public: 12 Million copies sold, 600.000 Banned Accounts. Thats 5% of all sold Accounts. There is even a Twitter Feed, showing all the Bans:https://twitter.com/rusthackreport Most of the Accounts will show a Playtime of under 30 hours in the Game, mostly no Friends or other games, indicating they were only made for cheating.

> Kernel level anti-cheat is meaningless

Anti-Cheat on the Account-Level is meaningless. You ban a cheater? Who cares. He will back with a new Account some Minutes later. Hardware Bans are useless aswell, as they can easily be spoofed. The only effective strategy for Anti-Cheat is a Universal Identity Provider, which can proof you are a real Human with no Cheat Record.

Currently it's even worse in France. At the moment, there are 17 of 56 reactors turned off, due to safety concerns. There is even the possibility of major outages when a cold wave hits the country.

I'am a Developer of an larger custom modded GTA Server (Roleplay Server), with 500-700 online users in peak hours. The community is very toxic. In the beginning, we received several DDoS Attacks daily, so we decided to build our own protection. We are working with IPtables and IPSets, as you are. But we dont bother ispecting the contents of a packet: Our users are logging in to the Server over HTTPS to a dedicated Server, which is protected by Cloudflare. Once they verified their identify, the Server sends a Request to the Main Game-Server, which then adds the User's IP (from which the Login Request came) to an IPSet. We setup IPTables to only accept packets from IP Adresses in this IPSet. When the IPSet is updated, the Login requests finishes and the User is connecting to the Main Gameserver. Also we are unsing UDP only for Game related traffic, so we completly blocked SYN and TCP related packets in our Hardware Firewall on the Gameserver Port (its a Hetzner Feature). Since then, we had no more major outage, besides sometimes some clients are dropping, because an attacker clogs our 10GB line. Of corse, this can't hold against every attack, but so far this is enought to protect us.

You can disable the Paywall by disabling JavaScript.

(You can spot it, because the site initially loaded and then paywalled itself)