well star trek isnt exacrly apolitical

I mean this is sound advice that can go wrong if you hace the emotional intelligence of a doorknob (whicgmh is a lot of people, mostly men). Don’t just ask “is something botheribg you” so dryly and regularly you becomw whafs bothering her, but open lines of communication where you make it clear that you’re trying to improve your communication and then genuinely check in on her. Dont just ask if something is bothwring her, but find out how shes been and what may be adding stress into her life. Don’t immediately seek to fix it, but try to understand if she just needs to vent stress or if there are issues you can tsckle together. If an issue is identified, remember it is you and her vs the issue, not you vs her.

Thank you, it’s a lot of work and I could get by with a lot less but I’d like to essentially have enterprise level everything for me to just fuck around with and provide to friends as i see fit. It’s a bit if a hodgepodge of well implemented stuff stuck together with duct tape and bubblegum but im refining it slowly all the time.

I fr hate using AI to troubleshoot because I can feel how it makes me lazy, but sometimes using AI is better than banging my head against a wall for 10 hours. And usually i stop once I find a productive line of research or investigation to follow.

I care about displaced people in general and stand in solidarity with all of the oppressed of the world. That includes many varieties of Americans including the indigenous people of North America who have been displaced and genocided by Euro-American colonialism and also rural and suburban Americans who are being run out of their communities for the sake of capital and profit. And my heart extends to those outside of the US from Palestine to Sudan to the Congo to every other corner of the Earth.

but AI is increasing the rate at whoch data centers are being built which is putting enormous strain on a lot of communities with aging or inadequate public infrastructure and utilities like water and electricity. Some people have seen water and/or electricity prices double or have even lost access to their public utilities because everything is being routed to a nearby datacenter thats younger than their kids. And in many instances politicians are ignoring the communities they’re displacing because theres significant money involved.

For local DNS i run FreeIPA since everything in my network is domain controlled. I’m gonna look into adding filtering through that, but we’ll have to see how it goes.

Theres so much I end up handling manually with my UDM that at this point i might rather just install open source routing software on it atp. I don’t even use the web UI for wireguard because I can’t even specify the allowed IPs for a connection.

I just turned off ad blocking. I can set up network wide filtering without relying on proprietary incompetence.

I’m not entirely sure how I want to run my ad blocking yet. I left adblocking on for the wifi subnet because I don’t mind it there, and I have ublock origin on my PC. I might use PiHole but my DNS on my network is actually managed by FreeIPA so making sure everything works properly there is paramount. I’m pretty sure I can do that easily but I need to test it to make sure my forward zones work as expected and nothing breaks.

Yeah I found some documentation from Ubiquiti afterwards that said all DNS requests would get proxied, although it didn’t mention it wouldn’t forward dynamic updates.

I did use dig, but I didn’t do a trace which probably would’ve been helpful. I just didnt anticipate that id be getting MITM by my own infra.

you’re forgetting the super special anti-armor piercing paint they made just for john wick duh

at least with john wick it’s a little more believable that the majority of assassins for a super secretive and exclusive international crime syndicate would have armor in their vehicles.

you’re asking the refugee who just immigrated, is learning the local language, and may not have had as much exposure to web banking systems and MFA and many aspects of cybersecurity to figure out how to set this up and manage it well without accidentally losing access.

you’re asking the old retiree who has no family left to help them and doesn’t understand technology very well but understands how to open the shortcut to the banks website and check their texts to suddenly understand a much more complex system than they’re used to.

you’re asking the young adult whose school didn’t teach them about technology and they were too poor to have much of their own to instantly learn about even more tools and apps on top of trying to adjust to using technology in general.

I’m not saying that improving security or moving towards a more secure baseline is bad, but for some critical public services security absolutely does not always trump accessibility. cybersecurity and technology education is more necessary at all levels and must equitably taught, but that will take time, resources, and effort. there are ways to improve security without compromising accessibility.

you underestimate how bad a lot of people are at using technology. something like banking can be a necessity and must be accessible to all. many banks should encourage more secure MFA but i understand why they can’t require it.

Bitwarden as Vaultwarden enables TOTP.

I actually have a hybrid setup. My public DNS and my mail server are in the cloud as those are too important to risk going down. I also have a FreeIPA replica in the cloud to help manage them. Then I set basically everything else up in my homelab because I don’t care if roundcube goes down so long as IMAP and SMTP still work.

that’s because that was classical warfare with well established rules. You had bright uniforms because the enemy should be easily identifiable so you don’t mix them up with civilians. music is one of the easiest ways to communicate important information and keep people together where shouting may be drowned out or miscommunicated.

Go in grace