pfBlockerNG at the network edge and ublockorigin on devices.

Chuck Berry: hold my guitar.

Jerry Lee Lewis: hang onto this piano for me.

The list is as long as musicians are famous.

Pijul is a very exciting project. I’ve wanted to try it for months buy haven’t found the time.

Fluoridation is part of a communist conspiracy to sap and impurity all our bodily fluids.

Powerful men have been worried about it since the Cold War.

Great, if dramatic, video on the subject: https://piped.video/watch?v=J67wKhddWu4

Hard to tell from first glance but my guess would be this is fallout from the ongoing xz drama. Here: https://www.openwall.com/lists/oss-security/2024/03/29/4

Also: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

I’m on iOS and do the same thing.

The WireGuard app has a setting to “connect on demand”. It’s in the individual connections/configurations.

You can then set either included or excluded SSIDs. There’s also an option to always connect when you’re on mobile/cellular data.

I imagine the Android app is similar.

Great podcast called The Gun Machine covers how the ATF has to work with both hands tied behind their backs (just one of many great episodes about Guns and American society).

https://www.npr.org/podcasts/1108749261/the-gun-machine

Neat, I’ll have to look it up. Thanks for sharing!

Nextcloud isn’t exposed, only a WireGuard connection allows for remote access to Nextcloud on my network.

The whole family has WireGuard on their laptops and phones.

They love it, because using WireGuard also means they get a by-default ad-free/tracker-free browsing experience.

Yes, this means I can’t share files securely with outsiders. It’s not a huge problem.

I wake up every day living the dream of delivering more value to the shareholders.

You’re conferring a level of agency where none exists.

It appears to “understand.” It appears to be “knowledgeable. “

But LLMs do neither of those things.

Take this note from an OpenAI dev:

It’s that these models have leveraged so much data they’ve been able to map out relationships between words (or images) in way as to be able to generate what seem like new versions of those things.

I grant you that an LLM has more base level knowledge than any one human, but again this is thanks to terrifyingly large dataset and a design that means it can access this data reasonably reliably.

But it is still a prediction model. It just has more context, better design and (most importantly) data to make predictions at a level never before seen.

If you’ve ever had a chance to play with a model at level where you can control some of its basic parameters it offers a glimpse into just how much of a prediction machine it can be.

My favourite game for a while was to give midjourney a wildly vague prompt but crank the chaos up to 100 (literally the chaos flag at the highest level) to see what kind of wild connections exist but are being filtered out during “normal” use.

The same with the GPT-3.5 API in the “early days” - you could return multiple versions of the response and see the sausage being made to a very small degree.

It doesn’t take away from the sense of magic using these tools. It just helps frame what’s going on under the hood.

We really can vote with our dollars. The issue is that we don’t (I’m point right at myself here).

Don’t buy the things, we probably don’t need em.

SMB : https://en.m.wikipedia.org/wiki/Server_Message_Block

In short it’s a way to share network access to storage across MacOS/Linux/Windows.

MacOS switched from AFS to SMB (as the default file sharing / network storage protocol) a few years ago as it was clear that was how everything was headed - though iOS and MacOS also have native support for NFS.

On linux, you can use samba to create SMB shares that will be available to your iOS device.

It’s a lot of configuration though - so maybe not the best choice.

As for Nextcloud - indeed you can use it in your local network without making it available on your WAN connection. That’s how we use it here.

When we need it remotely - we VPN into our home network. But no exposed ports. :)

Neat solution!

I use Nextcloud. But that also means setting up and managing Nextcloud. By the same token you could use google drive.

For notes and photos you can export them within the app. Notes specifically requires that you print and then hit the share on the print dialogue to save the notes to the file system as a pdf.

Notes also has another option: if you have a non-Apple mail account on your phone - you can enable notes for that email account and simply move (or copy) your notes from one account to the other. The notes will then become available within that email account mailbox structure on any device or machine where that email account is enabled.

For voice recordings you can save any voice recording directly to the iOS filesystem.

The iOS files app also allows you to connect to any other server/desktop via SMB.

There are lots of options here. None are awesome, but they work.

Perhaps it’s time for titles that match the article headlines as a matter of policy here?

deleted by creator

Update: I went and had a look and there's a Terraform provider for OPNSense under active development - it covers firewall rules, some unbound configuration options and Wireguard, which is definitely more than enough to get started.

I also found a guide on how to replicate pfBlocker's functionality on OPNSense that isn't terribly complicated.

So much of my original comment below is less-than-accurate.

OPNSense is for some, like me, not a viable alternative. pfBlockerNG in particular is the killer feature for me that has no equivalent on OPNSense. If it did I'd switch in a heartbeat.

If I have to go without pfBlockerNG, then I'd likely turn to something that had more "configuration as code" options like VyOS.

Still, it's nice to know that a fork of a fork of m0n0wall can keep the lights on, and do right by users.

If you backup your config now, you'd be able to apply the config to CE 2.7.x.

While this would limit you to an x86 type device, you wouldn't be out of options.

I am an owner of an SG-3100 as well (we don't use it anymore), but that device was what soured me on Netgate after using pfSense on a DIY router at our office for years…

I continued to use pfSense because of the sunk costs involved (time, experience, knowledge). This is likely the turning point.

Under his eye.