That seems to be what Synology is suggesting, and you’re right, this wouldn’t be the best configuration if security is the goal.

This is the best drunk comment I’ve ever read.

deleted by creator

That’s all well and good for you, but they pulled many rugs out from under free users. This is arguably bad, depending on who you ask, but they most certainly did flat out lie about, which is the core issue.

There are two ways to increase profits:

1. Charge more for the same services
2. Remove services or features from paid subscriptions

Plex has done 2 a few times now.

If you like being told you can stream remotely and then later have the feature yanked and slapped behind a paywall, then by all means use Plex.

Ente auth is not self-hosted.

Charging for certain services is one thing. That’s not what drove the last Plex exosdus.

Most people take umbrage at Plex offering features for free, saying they’ll never be paid features, and then removing them as options for free accounts and effectively paywalling them.

Openness. Most cameras for android phones are proprietary because it’s easier to save money by not having a common controller for cameras and just using a proprietary blob.

Simon Stalenhag! Nice wallpaper. I have a bunch of his images for mine as well.

Depends what version of the Surface, but I have a Surface Pro 6 and it still performs well. I use the Surface Linux kernel.

I’m also old and use iptables at server level as well.

But network perimeter here is the server perimeter, not the network (e.g. router).

Most ppl in my profession would not assume a host’s net controls as “network perimeter”, so I’m not sure what your context is there.

Just because you know how things work, doesnt mean everyone does.

Yeah, fair. But by the same token, we still have to chime in when these terms are thrown around and offered to newer homelabbers. And there is a lot of free security “advice” in these sub’s from folks who have a weak understanding of any of it.

Those are considered firmware, yes. And these can vary in their installation as being updated via the firmware interface itself or some other update mechanism.

Some firmwares like on certain IBM thinkpads, my surface pro 6 and others can be updated directly via a Linux command called fwupd, but the firmwares must live in specifics public repositories.

This news means we’ll all have a much better time using fwupd to update these on dell and lenovo machines, but the firmwares themselves will remain proprietary blobs.

Coreboot replaces the bios/firmware altogether, and it’s not an easy task to get new ones, unfortunately.

With certain devices, yes, it’s possible. My Microsoft surface pro 6 can update its various firmwares from the blobs extracted from the official exe.

Yeah, I’d love to see my idea book not require windows to update firmware.

This is talking about fwupdt firmware and patches, not uefi/bios replacement.

I can confirm that the information is relevant to anyone hosting stuff on the internet

You use ufw at your network perimeter? This is really basic stuff and a fair bit misleading naive.

MaxAuthTries is negated by having no password auth, so no point in having the option.

These are not complete or even accurate.

I’ve used both.

Pihole is fine for a standard replacement of DNS for record lookups with the ad blocking most ppl want. But pihole is just fancy dnsmasq, you can’t manage much more DNS than A records. (That was 4 years ago, though, things might have changed).

Technitium is a real DNS server with all the things DNS I supposed to be able to do. I use it for the zone transfers.

Performance is better than pihole, too, but that may also have changed.

It’s due to the inner workings of the Coral TPU being basically a black box, so even if the community wanted to, we can’t just reverse engineer a driver.

Sure, but with some key management. You can’t just send an encrpyted email unannounced.

I’m not sure what data center will allow you to hodgepodge a 1u cluster of consumer-grade hardware, but heat and power management alone will be a problem.