nottelling

@nottelling@lemmy.world

This profile is from a federated server and may be incomplete. Browse more on the original instance.

nottelling,

Is the Conbee 2 coordinator the same device as the poster below’s Conbee II?

nottelling,

I think this is where I’m getting frustrated. (On top of my frustration that like 4 lights just decided to stop connecting to my Unifi for absolutely no reason again.) It’s not clear if I can just plug into the HA Zigbee or if I need MQTT or if they both have their uses or when/why, etc.

nottelling,

Perfect, this is super helpful. I ordered a Conbee per comments below, I expect it’ll work as well as your sonoff.

nottelling,

Why use the MQTT addon vs the native home assistant integration? Our am I misunderstanding the concept?

nottelling,

My plan is to stick with Hue bulbs as much as possible. More expensive, but seem to be the most solid hardware.

Each device is a repeater, right? So I should try to make every device’s potential signal overlaps multiple others?

nottelling,

My initial Conbee and two hue lights arrived today, and between the pain in the ass that I apparently need a hue hub or something to put the lights in pairing mode, plus this makes me think it’s not going to solve any of my connectivity problems.

Just in time for my Wi-Fi devices to start dropping again for no reason.

nottelling,

How are you getting your Hue bulbs into pairing mode? My new ConbeeII stick doesn’t see them. I tried connecting to them with the Bluetooth app and then doing a factory reset, no luck.

nottelling,

It was just an outstanding interface. Highly customizable, easy to navigate, and performed well. It did cool stuff like useful messages when Reddit was down. The search function worked far better than Reddit. Feed curation was easy.

Basically just a very good app.

nottelling,

I have been working on that. The frog kick bothers one of my old knee injuries, but I’ve been figuring out how to get it with less strain on the knee.

nottelling,

Not one hundred percent sure without looking, but I think it’s these or very similar. Dunno if these are jets or bad.

us.aqualung.com/…/shot-fx---dive-fins-FA166.html

I’ll look at those scuba pro ones before the next trip.

Appreciate the insight, thanks.

nottelling,

Oh cool, I thought “jet” was a style of fin, not a specific model. I’ll pick up some of those seawings before my next trip.

I will be entirely unsurprised if the fins I bought mostly at random because my OW cert shop required it turn out to be half my frustration.

Thanks for the advice.

Lemmy reminds me of the early days of youtube

Just a random thought I had. But, around 2010 I really enjoyed making how-to guides (you know the ones using hypercam to screen record, techno background songs, and using notepad to talk out steps). For some reason starting a lemmy instance and the whole process of customizing it, creating content, being on other lemmy...

nottelling,

Not just early YouTube, it feels like early 2000s Internet in general.

The biggest difference is that by around the late 90s when self hosting and learning HTML became accessible to normies, there was already a shitload of content online. Lemmy kind of has that backward, which is part of the slower growth pattern.

Google Tries to Defend Its Web Environment Integrity as Critics Slam It as Dangerous (techreport.com)

Attacks and doxing make me personally MORE likely to support stronger safety features in chromium, as such acts increase my suspicion that there is significant intimidation from criminals who are afraid this feature will disrupt their illegal and/or unethical businesses, and I don’t give in to criminals or bullies...

nottelling,

Analogies are inherently false equivalences.

It’s illustrating the problem with the argument, not equating DRM technology with puppy kicking.

On the future of free long term support for Linux distributions (utcc.utoronto.ca)

The reality is that reliable backports of security fixes is expensive (partly because backports are hard in general). The older a distribution version is, generally the more work is required. To generalize somewhat, this work does not get done for free; someone has to pay for it....

nottelling,

I could be wrong, but isn’t the entire debian stable tree maintained for years via open source contributions? Sure the redhat downstreams might be on their own, but there’s plenty of non-commercial distros that keep up to date.

nottelling,

Not even close. Cuphead is a run & gun shooter, this is a Metroidvania. Cuphead is intentional hand drawn throwback art, this is Disney’s current iteration of the mouse and friends art style.

The only similarity is that both use cartoon drawings.

Password manager of cookies?

I’m wondering if it isn’t better to just whitelist cookies for the sites I need to log into and not bother with a password manager extension (keepasxc or bitwarden). I try to keep the number of extensions in my browser to a minimum to lower the attack surface. And why involve one more entity in the password story? Are there...

nottelling, (edited )
  1. No. Your desktop password manager is encrypted with a strong passphrase that locks when you’re computer locks. (Right?) They’d have to snatch your gear mid-session. Cookies are not safe, and cookie hijacks are a pretty common exploit. Cookies are for convenience, not security. Retaining authentication cookies is a very big security hole that we all do, and it’s why banks don’t let you re-auth on a previous session cookie.
  2. “Pretty hard to break into” is the kind of phrase that keeps infosec people up at night. It’s the kind of phrase that reads to me as “full of vulnerabilities so I can easily break in.” You probably want to read up on your security practices.
  3. Yes. First party cookies can be just as nefarious in addition to the technical requirements. Cookie managers are more relaxed about first party because we assume you’re on that site for a reason, not because the cookies aren’t a risk.

3a. Never assume that something supposed to be “mostly benign” isn’t currently being exploited for bad reasons.

To your OP, It’s actually not a terrible idea to uninstall the PW manager browser extension. It’s one more layer of isolation from the browser. You just lose the convenience of autofill.

But definitely rely on the PW manager for session security and not cookies.

Edit: a couple edits.

nottelling,

You really don’t need to be that paranoid for personal stuff. Use a cookie manager extension like NoCookie, NoScript, uBlock Origin, and isolate with Firefox Containers.

The idea of an “attack surface” from extensions is valid enough, but you can improve your overall security posture with more good extensions thanv trying to manually maintain everything yourself.

nottelling, (edited )

There are no “the Lemmy servers”, since there is no central “Lemmy” organization to host and run such servers.

So yeah, you can run it on whatever you can find that has available disk space, CPU cycles, and an Internet connection. Hosted VPS, colocated hardware server, raspberry pi, your gaming rig, AWS containers, whatever.

nottelling,

The Pi4 is a pretty impressive little machine. It’ll probably host a few users, but from what I understand, it’s the federation that really starts scaling the requirements.

Bigger problem with the Pi though is that it runs off an SDcard (by default), which have limited writes, and you’ll burn that up fast.

nottelling,

Browsing around mixel for something with coconut cream, made me something called a catamaran. Mixel claims it’s a Death &Co. Recipe. https://lemmy.world/pictrs/image/399d134f-e1e9-400e-b591-947201c9e8f9.jpeg

nottelling,

Pretty solid. I’m always on the lookout for a non-rum tiki drink, and this hits all the beats. A little sweet, but enough complexity to stay interesting through the finish.

nottelling,

Others have covered why you can’t really do what you’re asking. The upshot is that there’s decades of old PC games that’ll run on the hardware you do have. Look into RetroPie for those raspberries, and hunt around Steam for games that’ll meet whatever your spec is.

It’s also not exactly what you’re asking, but a lot of older games still hold up, especially when you’re broke and bored.

nottelling,

Only one response in here for using Nginx, and there should be more. The Nginx SSL proxy works with the DuckDNS add-on to manage your IP address and and keep your LetsEncrypt certificates up to date.

If you own a domain and want to do that, you can use the Nginx Proxy Manager, which can also manage LetsEncrypt certs. It’s a bit more complex to set up.

Combined with the OTP authentication built-into Home Assistant, it’s a pretty good option. The risk is that Home Assistant itself is your edge, and it’s always possible there’s something to exploit on the front-end.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • megavids
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • provamag3
  • tester
  • Leos
  • JUstTest
  • All magazines