I’m sorry this happened, but it seems rather reckless of the author to be running “Malicious PoCs” on their “daily driver” (re: the PC they use for everything).

If I was in the habit of running “Malicious PoCs”, you can be certain it would be isolated from the rest of my system. This could be in a sandbox or a vm. Heck, just created a dedicated (one time use) “new user” would have been better than "Hey, let me just download and run some random shell script. Oh, it needs root? No problem!

I don’t know if you tried it or not, but I’d suggest that you install the latest release from their Download Page, as opposed to other sources.

I’ve noticed on Android, that the F-Droid Version is not “quickly” updated and frequently breaks due to breaking changes from Google.

(I’ve also just upgraded to v4.0 on my android phone and it’s working - good luck!)

Spotube: It’s not the greatest UX, but will read your Spotify Playlists and supports offline mode.

… now in VR! ;)

That’s a very clever solution. But it’s really convient to create a login in your phone and immediate switch to your laptop and login.

I’d used KeepassXC + Nextcloud to sync for ~4 years.

Then I switched to Bitwarden client + self-hosted Bitwarden Server/Vaultwarden for ~2 years and I haven’t looked back.

The problem you’ll face with KeepassXC + any syncing mechanism is that conflicts will happen. Meaning, you’ll make a change on your cellphone, your internet has a hiccup or stops working. Then you make a different change on you desktop. When everything is synced, you’ll be left with a KeePass conflict file that you need to fix. This might be fine if you immediately notice it, but if you stumble upon a conflict file from a month ago - good luck merging the differences.

Bitwarden client + Vaultwarden has improved my password experience radically. I have phones, laptops, browsers, etc all talking to Vaultwarden. Any conflicts are handled automagically by the clients. Everything “just works” in offline mode (meaning I can add/update credentials while offline and it’ll update the server whenever it can - without needing to do any mental gymnastics).

I can share passwords with friends and family without needing to share everything. Plus, as my instance is self-hosted, my family can get “emergency access” (would be a “premium feature”) to my passwords if something unfortunate happens to me. Plus, requesting emergency access is pretty easy to do, for non-tech people.

edit: a word

+1 for this.

Just be transparent and honest with your Team.

Explain to them how the actual budget is out of your direct control. However, also explain what knobs you and your IC can influence (for example being more visible with your Team/IC’s accomplishments at an organizational level).

Also many companies have a “flight risk” box, when calculating raises. Explain to your IC’s that you can hit this checkbox (if the IC wants), but it’s pretty much a onetime use button.

Don’t be afraid to rock the organizational boat. They won’t hold it against you, as you’re just doing your job. Your goal, first and foremost, is to get the most you can out of your Team and money is a good motivator.

If you need other “cheap” motivators:

• have the Team take some time off (paid or unpaid) and watch/stream a movie, with the mic on. Encourage people to trash talk the movie. If you’re in I.T. Office Space is a classic.
• for ~$40 / year, you can get a subscription to Boardgame Arena. Only one person needs a paid account (so they can create games and invite people). It’s all online and they have quiet a selection of games to choose from. King of Tokyo is one of our favorites.
• Introduce “Fantastic Friday”: this is a bit controversial with upper management, but works great with my Teams in the past. Basically, reserve a Friday (bi-weekly/monthly) where your Team can explore whatever topics they want as long as they’ve already finished their current workload. Usually, that disclaimer isn’t necessary, as people will usually want to get their normal work done. The pitch for upper management (if they ask) is that Fantastic Friday is a tool (ie: a canary in the coalmine) to help the Team create accurate estimates and deliver with more reliability. If they over commit, then that Fantastic Friday can be repurposed as a day to “catch-up” (while the Team can understand/refocus on why they didn’t get a Fantastic Friday and pivot accordingly). Furthermore, Fantastic Friday was often used to explore more “outside the box” ideas that actually boosted the Team/companies productivity, but we would not have normally persuded because it was outside our current task’s scope.

edit: added more about Fantastic Friday and fix grammar.

Whatever they’ve been doing the last decade hasn’t been right.

That depends on which side of the wealth gap you’re on, right?

The old guard has to die off or step aside first.

I don’t think “dieing off” or “stepping aside” is going to be the catalyst for change.

What will happen is that the old guards will groom the next generation in the playbook’s they’ve been (successfully) using and refining for the last decade. Those groomed players will then be their successors.

The only way we’ll get the “change and improvement” is if we (as a society) say “this is enough, you’ve gone too far”. However, given the levels of apathy and the recent election outcome, I’d say the American People will need to suffer more, before they’re shaken out of their apathetic stupor.

If you do opt for OpenVPN, I believe UDP is generally better for performance. TCP support is mainly there for scenarios where UDP is blocked, or on dodgy connections where TCP’s more proactive handling of dropped packets can reduce the time before a lost packet gets retransmitted.

It’s great that you brought up TCP vs UDP. And you are totally right about TCP being a bit slower, higher overhead, but it’s there for situations where UDP is blocked.

I’ve used my VPN at all sorts of hotels, coffeeshops, etc. I’d say 1 in 10 places block UDP (or more likely don’t properly route UDP). If you’re using a SIM card, you won’t have any issues.

However, it’s worth mentioning that WireGuard is UDP only. There are some hacks/workarounds to have it work over TCP, but then you’re going to need to find WireGuard clients that also supports these hacks (which is possible on computers, but harder on cellphones/tablets).

If you want something that “just works” under all conditions, then you’re looking at OpenVPN. Bonus, if you want to marginally improve the chance that everything just works, even in the most restrictive places (like hotel wifi), have your VPN used port 443 for TCP and 53 for UDP. These are the most heavily used ports for web and DNS. Meaning you VPN traffic will just “blend in” with normal internet noise (disclaimer: yes, deep packet inspection exists, but rustic hotel wifi’s aren’t going to be using it ;)

Lemm.ee: It’s the Switzerland of the fediverse. ;)

The Operations Team are a stand-up group. Their focus is on delivering stability.

You’ll basically get access to all content (and all “features”, like up-vote and down-vote - I’m looking at you beehaw).

What I’ve heard from other people is that they want automagic curated content… so you won’t find that a lemm.ee, but for me - I’m happy to find the content that’s meaningful to me.

I’ve got a similar set up and everything works. So, I can confirm that your assumptions are sound.

My solution is kubernetes based, so I use cert-Manager to issue/create the Let’s Encrypt (using DNS as the verification mechanism), when gets fed into a Traefik Reverse Proxy. Traefik is running on a non-standard port, which I can access from the outside world.

I’d suggest tearing your current system down and verify everything is configured correctly.

For example :

• Take a look at the SSL cert. Is it generated properly?
• Look at the reverse proxy. Is it using the proper SSL cert and is it properly formatted? (I’ve found curl - -verbose - - insecure https://... to be helpful)
• Maybe add a static file (ie: robots.txt) to nginx. This would allow you to see if the problem is between the outside world and nginx or between nginx and your service.
• You can also use the “snake oil” cert, in a pinch. It’s an insecure SSL cert, but it would allow you to confirm that your nginx is properly configured and it would confirm that the issue is with the Lets Encrypt cert (or that process/payload).

… and not to rob you of this experience, but you might want to look into Cloudflare Tunnels. It allows you to run services within your network, but are exposed/accessible directly from Cloudflare. It’s entirely secure (actually more so than your proposed system) and you don’t need to mess around with SSL.

Vampire Survivor: It’s fun, easy to pickup, the sessions are short (less than 20 minutes), and lots to unlock.

… Plus, (if you’ve been living in a cave and didn’t know) it’s free on Epic Games for the next few hours.

This is loosely related to “online experience” (as you’ve covered most of the “tech tips”) :

When choosing a movie don’t watch the trailers, instead (blindly) watch what’s popular. (obviously, if you’re into niche genres - this won’t work.)

I’ve found Trackt is a good place to understand recent trends (and it just shows film posters). Then I’ll go to IMDB, maybe read the summary, but I always read the first/popular user review and decide if it’s worth my time and money.

The first/popular user review usually doesn’t contain spoilers.

Since I’ve actively avoided trailers and spoilers, my enjoyment for films has nearly doubled - even for “bad movies” (I probably wouldn’t have watched otherwise). It’s such a shame that a 2 minute trailer often shows many/most of the highlights of the film.

Welp, I guess this means something bad is gonna happen and Spez is trying to get in front of the inevitable protests.

I wonder what it could be…

There has to be a better way to keep the strengths of federating without partitioning the community smaller and smaller until there is no community left.

Can you imagine Lemmy with a similar amount of Reddit users? Anytime you’d post, you’d have to replicate it between X number of instances (for visibility). Conversations would be fragemented and duplicated, votes would be duplicated. To me this almost sounds like “work”…

There has to be something better.

For example, instead of “every instance is an island”. Meaning the current hierarchy is “instance” - > “community” - > “post” - > “threads”. We could instead have “community (ie: asklemmy)” - > “post (ie: this post)” - > “instance (Lemmy.ml, Lemmy.world, etc)” - > “threads (this comment)”.

From a technical perspective, it would mean that each instance would replicate the community names and posts. Which is already beginning done (this post is a perfect example), but as long as each instance would share a unique identifier to associate the two communities/posts as “the same thing” (and this could simply be the hash of the community /post name). Everything else would be UX. Each instance would take ownership of the copy of the community and post, which means they could moderate it according to their standards.

I fixed the link. For some reason the Lemmy Client (Voyager) keeps generating ‘.ml’ links (even though I’m on Lemm.ee)

This whole identical thread really confused Voyager, I thought I was seeing double.

Off-topic: Lemmy really needs better crosspost functionality.

Lemmy is a small group of people, let’s not divide it further by having the exact same conversation in two (or more) places.

edit: Fixed the link.

I don’t have anything meaningful to add, other than my sincere gratitude to you for posting this.

I haven’t laughed so hard in a good while.

The “downvote to disagree” thing isn’t just an attitude problem, it’s a structural issue. No amount of asking people nicely to obey site etiquette will change the fact that the downvote button is a disagree button. If you don’t want a hive mind, you necessarily need to be able to allow for things you don’t like to be amplified.

Actually, with enough interactions from different people (ie: enough data points) Lemmy should be able to determine if a comment brings value to the conversation (either positive or negative) or if it’s noise that should be ignored (and prioritized lower).

If you have 4 comments:

1. Has 100 upvotes (in total)
2. Another has 100 downvote (in total)
3. Another has 50 upvotes and 50 downvote (100 in total with a 0 sum)
4. The last was a new comment with 0 votes.

It’s obvious that 1 and 3 are providing more to the conversation than 2. 4 is a bit of an outlier, but probably provides more value than 2.

Regarding 3: The challenge would be that there’s a low chance that there will be such a wide margin of upvotes/downvotes. Due to the hive mind, the voting will probably look like 30 upvotes and 130 downvotes. So, there would need to be a weight accordingly, so those fewer upvotes had a greater impact (in terms of sorting and scoring comments)

Reddit has a “sort by controversial” algorithm that seems to be missing from Lemmy (or maybe it’s hidden in the “what’s hot" - I haven’t looked at the code).

It would be awesome (and resource intensive) if Lemmy could provide the federated instances with custom sorting algorithms. It would allow federated instances to be unique, provide some playful competition, and given the open source nature of Lemmy - I’m sure these algorithms would be open sourced, which would improve the entire Lemmy ecosystem as a whole.

Herbie?