Readit News logoReadit News
microbass commented on Sick of smart TVs? Here are your best options   arstechnica.com/gadgets/2... · Posted by u/fleahunter
tormeh · 2 days ago
What I'd really like is a TV with DisplayPort. How is this not a thing? IIRC you cannot buy a display with DP that's larger than 45 inches, give or take - they just don't exist. I think this is really weird. Like, I'd pay an extra $100 for that port, but I'm just not allowed to have it.
microbass · 2 days ago
I saw some giant TV on LTT recently which has a DP port.
microbass commented on I built a platform for discovering and sharing Chrome extension collections   webextension.net/collecti... · Posted by u/trungpv1601
nomilk · a year ago
Was curious so just searched. Apparently Honey would try to get the best coupon codes on the web, but they started partnering with businesses to give (say) 10% off via a Honey-specific discount code (e.g. HONEY10), but Honey would ignore other (possibly greater) discounts, thus lulling users into a false sense of security that they were getting the best deal when they often weren't.
microbass · a year ago
And, they highjacked referral links, ensuring they got referral commission, not the original referrer.
microbass commented on Fabric is an open-source framework for augmenting humans using AI   github.com/danielmiessler... · Posted by u/kristianpaul
microbass · a year ago
I'm looking forward to the Go rewrite. Purely so it's less of a pain to declaratively install, and I can work it into my workflow.
microbass commented on What You Get After Running an SSH Honeypot for 30 Days   blog.sofiane.cc/ssh_honey... · Posted by u/SofianeHamlaoui
stanac · a year ago
I love TS just for this reason. All ports are locked and ssh-ing is possible only via TS. And for public facing web apps I open only 80 and 443.

Does anyone have any experience with CF tunnels on free account? Is it actually free for smaller apps with less than 1TB of traffic per month? I was wondering about switching to CF tunnel which would mean I could also close 80 and 443 ports and block China (because I read somewhere that most of DDOS attacks come from Chinese locale botnets).

microbass · a year ago
For some additional peace of mind, you could also use something like Authentik in front of your web apps, so you don't expose the apps themselves, only Authentik. You can then use the IDP of your choice within Authentik for authentication.
microbass commented on What You Get After Running an SSH Honeypot for 30 Days   blog.sofiane.cc/ssh_honey... · Posted by u/SofianeHamlaoui
microbass · a year ago
A perfect example of why one should use SSH over a mesh network like Tailscale, and don't expose over the public internet. No attack surface means no attack.
microbass commented on Stirling PDF: Self-hosted, web-based PDF manipulation tool   github.com/Stirling-Tools... · Posted by u/gitinit
nashashmi · 2 years ago
What nas system do you use that runs containers? I tried the whole container thing and have to reboot my system every week
microbass · 2 years ago
Unraid is nice, and pretty easy to maintain. You get a web interface and can set up auto updates. There a many different applications in their app store, too, or you can make your own using plain docker.
microbass commented on Awesome-Linux-Minimalism   github.com/knassar702/awe... · Posted by u/peter_d_sherman
jrm4 · 2 years ago
The quality of this list feels greatly diminished by the very first bit about "no systemd?"

It was good to question systemd, but given its performance, transparency, and general ability to mostly stay out of the way, I wouldn't bring it up re: "minimalism," in the way the rest of the list is pretty minimalist.

microbass · 2 years ago
It's particularly strange, given NixOS is recommended in the alternate (no systemd) list. NixOS does indeed use systemd.
microbass commented on Fooocus: OSS for image generation by ControlNet author   github.com/lllyasviel/Foo... · Posted by u/dvrp
boneitis · 2 years ago
To flesh out this response with a common way to do this, the free tier of ngrok will likely help someone accomplish this, by running it on the server to get a routable endpoint to your ssh port (wouldn't hurt to further lock it down with any firewalling, if that's available ngrok-side.. haven't used ngrok in a while).

For example, to run the Stable Diffusion webui (which defaults to port 7860), it would be something not too far off from:

$ ssh -p1234 -L7860:127.0.0.1:7860 assigned.dns.at.startup.ngrok.io

(IIRC ngrok free-tier will allocate you a random port on the public side every time you start the service)

Then, can just browse localhost:7860 from the remote field machine.

I got bit by the AI bug a few days ago, and I already rent some lightsail instances, one of which has a static IP reserved and one of my domain names pointing to it. So, I set up something a little more convoluted and perhaps unnecessarily complex, turning that lightsail VM into a jumpbox/bastion host. Anywho:

AutoSSH from server to my lightsail instance, with two remote port forwards (not local port forwards): SSH and SD webui. Then, connect from the field machine anywhere in the world to the jumpbox with matching local port forwards. (I set up both ports, so I can shell back into the original machine, but this isn't strictly required.)

Then, fire up localhost:7860 in the web browser. Make sure this isn't being served on 0.0.0.0 or un-firewalled.

(e: I re-read original question after posting and realized GP was merely asking for over the LAN, but hey, now they know how to do this over the 'net :)

microbass · 2 years ago
Even easier is to use Tailscale. Run tailscale on your laptop and server, and then access the web UI by using <tailnet_server_ip>:<port>
microbass commented on Canonical’s recruitment process is long and complex   old.reddit.com/r/recruiti... · Posted by u/opensourcecat
tristor · 2 years ago
Hardware companies simply don't pay as much as software companies in industry. I don't fully understand the reasons, because hardware is often more difficult to deal with than software.

That said, I have found that there has been a rash of companies / recruiters reaching out to relatively senior people making offers that wouldn't have been acceptable a decade ago, much less in 2023. I recently had one reach out to me (I'm in Colorado, so they're legally obligated to provide a salary range) about a job that required a very specialized skillset at a senior level that I happen to have (although it's nothing to do with what I do /now/), and the top of the salary range was $20k/yr less than what I was making doing that same work in 2014, almost a decade ago and more than $100k/yr less than I make now. There's a HUGE disconnect between management at most companies, especially in HR roles, and the actual market for specialized technical labor. At least in the US, I attribute this to HR roles treating Department of Labor stats like the gospel, when job categories in DoL aren't modernized and therefore cover such a broad range of subjobs that they are diluted and meaningless, while at the same time average salary is heavily skewed by the fact that largest employer in the US across almost all job categories is the federal government, which has a notoriously low payscale for skilled labor (which attracts exactly the sort of toads on a log you'd expect).

I am not currently in the market for a new job, but I switched roles at the beginning of 2022 and I made it a point of starting my conversations with recruiters by telling them rather directly "I have no concerns about my ability to do whatever is necessary within the job, my only question is are you willing to pay me what I'm worth?" The company I eventually accepted a position at had to go through a lot of internal bureaucracy to make my offer, but only put me through one round of interviewing before they did the legwork to make sure they could make it worth my while before running me through their entire process. I think it's especially rich that HR people think you're wasting /their/ time when they make you an insultingly low offer after extensive interviewing, especially considering there's a massive skills gap between tech workers and HR folks (who are a dime a dozen).

microbass · 2 years ago
I love your HR comment. It's HR's literal job to interview / hire people. It's not the job of the candidate to interview for a position. Deluded, self-important lunatics.
microbass commented on Semaphore: A Full-Body Keyboard   github.com/everythingisha... · Posted by u/kieto
pcthrowaway · 3 years ago
Missed an opportunity to do YMCA
microbass · 3 years ago
It's in the video.

u/microbass

KarmaCake day23May 26, 2020View Original