jlh

joined 2 years ago
[–] jlh@lemmy.jlh.name 25 points 1 month ago (1 children)

Yes, it's a loan so big that normal personal finance "savings and loans" rules don't really apply. This loan is 3X EA's entire revenue, 2X Nintendo's entire revenue. Basically an entire new game-publisher's worth of money flowed into the gaming industry to exert dictatorial control over EA. JPMorgan Chase just have to make sure that they get their money back from the EA employees they just helped the Saudis buy.

[–] jlh@lemmy.jlh.name 51 points 1 month ago (4 children)

The $20B was printed by JPMorgan Chase bankers so that Jared Kushner and the Saudis could buy EA at 45% off. In return, the saudis promise that they can siphon $20B from fired workers back to the bankers over the next ~10 years.

[–] jlh@lemmy.jlh.name 10 points 3 months ago (3 children)

I would probably remove python 2 support, it was end of life when the project was started.

[–] jlh@lemmy.jlh.name 1 points 3 months ago

I dont think Immich supports turning a normal account into an sso account, though it may be possible with manual database editing.

[–] jlh@lemmy.jlh.name 0 points 3 months ago

Kubernetes is great for single nodes! It definitely is more advanced than docker compose, but it's actually not hard at all if you read through the documentation. It definitely makes running containers easier in the long run.

Here is my git repo for my big Kubernetes cluster at home: https://codeberg.org/jlh/h5b/src/branch/main/argo/custom_applications

It started out as just a NFS server and a Kubernetes server running on Proxmox in 2021.

[–] jlh@lemmy.jlh.name 0 points 3 months ago (3 children)

It's not going to make a meaningful difference in your threat model and it will cause a lot of hassle for extra configuration and broken docker images, so I wouldn't bother.

There is some nice tooling for transparent user name spaces coming down the pipeline in Kubernetes which will be a nice 0-effort security upgrade, but if you don't have the tooling, I would say it's not worth it.

https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/

[–] jlh@lemmy.jlh.name 2 points 3 months ago

SSDs are getting crazy cheap.

If you need 10tb of storage, you could get 2x used 10tb hdds in raid 1 for $200, but 6x used 2tb nvme in raid 5 is only $600 and 100x faster. Both take up the same amount of space.

[–] jlh@lemmy.jlh.name 7 points 3 months ago

SMR is designed for enterprise raid that is SMR-aware.

I'm not aware of any open-source zoned storage raid but I think Ceph is planning to add support next month.

https://zonedstorage.io/docs/getting-started/smr-disk

[–] jlh@lemmy.jlh.name 10 points 3 months ago

Hetzner Storage box is $20/month for 10tb.

[–] jlh@lemmy.jlh.name 6 points 3 months ago* (last edited 3 months ago)

Probably not that hard to build a simple flask frontend around it.

Automatically processing files in an S3/WebDAV directory would also be useful.

[–] jlh@lemmy.jlh.name 1 points 3 months ago

https://docs.k3s.io/installation/uninstall

There is also a k3s option for Nixos, which removes the security and side-affect risks of running a random bash script installer.

 

https://web.archive.org/web/20240719155854/https://www.wired.com/story/crowdstrike-outage-update-windows/

"CrowdStrike is far from the only security firm to trigger Windows crashes with a driver update. Updates to Kaspersky and even Windows’ own built-in antivirus software Windows Defender have caused similar Blue Screen of Death crashes in years past."

"'People may now demand changes in this operating model,' says Jake Williams, vice president of research and development at the cybersecurity consultancy Hunter Strategy. 'For better or worse, CrowdStrike has just shown why pushing updates without IT intervention is unsustainable.'"

 

Seems like a really serious vulnerability, any container attack or malicious image could take over a container host if there's no hardening on the containers.

view more: next ›