Skip Navigation

Posts
3
Comments
72
Joined
11 mo. ago

  • I just had some G Skillz DDR4 3200CL16 2x8GB go bad. Sticks had caused problems before. I lowered the clocks to 2133 and then it passed when I had instabilities before, but when they came back nothing changed it. Degredation I guess? Def odd for RAM, but maybe bad batch. Mine were made 2018 Sep.

    Do clean the contacts and reseat to be sure.

    But about a month ago I did the RMA form, had to email them to remind them to send me the info, got the RMA info, sent it in, and a week or so later they sent me back newly manufactured identical RAM sticks new in box.

    There’s absolutely no info when you send it in till when you get it back, but they did send the replacement. You will be without RAM for a bit. They did not want an invoice since its lifetime babyyy

  • Do you know of how it compares to the option that’s been around for a while?https://github.com/christiaangoossens/hass-oidc-auth

    I see they say “seamless”; the extant one requires a different landing page and it doesn’t remember logged in browser well. So on the face of it, this sounds better.

    But the one linked has had many more eyes and is made by the person who made a big stink on the forums https://community.home-assistant.io/t/open-letter-for-improving-home-assistants-authentication-system-oidc-sso/494223

    For the ease teased, I’ll prob check it out though

  • F in the chat for your savings, least you’ve got the peak of home NASes. Pretty fuckin cool and I hold out hope when the drop comes in a… 6 months to 3 years…? that I’ll be able to afford full SSD NAS life. The power savings, the speed, the no worries of shock or vibrations, the silence - jealous

  • It is a gamble, fuck the AI bozos for speculating us into economic uncertainty

  • For power on and off automatically, I just rely on Linux’s spin down timer. Which I guess is built in - not sure of anything more specific!

  • Backup drive doesn’t need to be anything more than holding your (ideally daily) backup of your main drive(s). It doesn’t need to be powered up and spinning all the time, it can be in the same computer. Spinning up and down causes major wear on hard drives, but I think spinning up once a day for backups is fine and won’t stress it.

    For example, have 3 used enterprise drives in my computer case: 2 in BTRFS RAID1 (mirror) as a data drive and 1 with BTRFS as a backup drive. I use snapshotting to mirror the data drive to the backup drive. I then use restic to copy essential data from the backup drive to a remote cloud location (friend’s house with a 4th smaller hard drive - if I did not have a friend with a hard drive I would use hetzner most likely). My Linux ISO’s don’t go remote, but my photos do.

    Thus I have immediate redundancy (and bit rot protection) from the BTRFS RAID1 data drives, I have a local full backup with the BTRFS backup drive, and I have my essential stuff far away if the computer explodes or something.

    Edit: again, if I was going to save cash I would drop the RAID1 from the data drives and just get 1 data drive and 1 backup drive. RAID1 is never as good as an independent copy.

  • I got several from them and they’ve been fine for a year now - and theoretically have a 5 year warranty from them too. So worked out for me to save some cash! Buuuut if they do end up failing, it’s gonna be a hassle to get replacements for sure

  • Consumer is fine then, cheapest you can. Edit: I did see people mention SMR drives, get cheapest CMR drives. SMR is not worth the money saved for usual use cases.

    You can def wait, but do the over-under with what you can pay. External drives, even if shucked, seem to be the lowest quality drives and die earliest. May be better to get real drives now, even with inflated costs.

    Make sure you get a drive for backup. Extra layout up front but worth it. I’d recc 1 data drive + 1 backup drive over just 2 raid1 data drives any day.

  • Now is a bad time to buy hard drives price-wise. Massive price gouging going on with all storage pre-sold based on IOUs to “AI” companies.

    If you must…

    Buy used enterprise drives with a ~5 year warranty. In US there is serverpartdeals and goharddrives. I am not sure of the Europe equivalents but I am sure they exist. The enterprise drives should be cheaper than new drives and will last longer; they’ve been used out of their early failure bathtub curve but they’re young enough to be given a 5 year warranty. Make sure to get ones with SATA connectors not SAS, you’ll need a PCIe card to talk to the SAS ones, and maybe something for power idk.

    They should be cheaper - I am not sure if price uncertainty has upended that.

    Enterprise drives are louder, I have them in a quiet case with sound dampening padding (fractal define) and I do not hear them 5 feet away.

    I have heard bad things about consumer drives longevity. I used several 1 TB barracudas for years with no issues in a server setting, I used 3 TB barracudas in a server setting and one failed early. I used a 4 TB Toshiba that failed early and I used an 8 TB blue that is fine in a personal computing setting. I have bought enterprise drives and none have an issue yet.

    It seems luck of the draw, so the thing to maximize is cheapest per GB.

  • King, simply neg your collaborators into using overleaf

  • You cannot control where pictures occur within a text body in latex, it decides for you. You can give it recommendations, but it’ll figure out the final alignment when rendering to page. I’m not sure that’s a limitation you want for design-focused use cases.

    And if you want to do something seriously nice you need to code a it in latex’s reverse Polish notation code language from hell, let me tell you latex ain’t the future of ease haha

  • SSH lets you remotely control a computer It runs on port 22 If you forward port 22 to your computer, you will allow anyone on the internet to SSH to your computer

    You can do that pretty safely by disabling root login and disabling password logins - only using keys to SSH in.

    You can join the borg botnet by enabling root login, setting a simple password (maybe even password as recommended!), and waiting.

  • King, all you must do is set up root ssh access with a short password and port forward port 22 to it. Super easy, super quick!

    For extra spice, I’d recommend also hitting your hard drives with a hammer once or twice a day. They just don’t like vibrations; you’ve gotta weed out the weak ones. Only the strong data will survive.

  • The only thing that can get hacked is something that responds on the World Wide Web.

    So you limit the scope of what talks to the WWW:

    Wireguard VPN will not respond unless the magic keys are correct, it’s ideal security and obscurity. Put everything you can behind it.

    For things I want on the WWW without a VPN, I split out two options otherwise.

    1. Caddy checking mTLS certificates that basically allows a device access without extra steps - relying on Caddy to be strong and mTLS to be strong.

    2. Authentik’s proxy check, I think Authelia has this too, but to access a site you hit an Authentik login first.

    For both of those, you rely on those services not having 0-day hacks. More likely for these services to stay ahead of the game and/or fix quick than something that doesn’t exist just to do authentication. I run them in containers that are run by independent users and are read-only with capabilities limited, in a VM.

    I’d say the Caddy route is more secure than Authentik, but it needs more effort to setup the certificate stuff. Authentik route needs a web browser to log in with. Obviously the WG VPN is primo.

    Edit: also tailscale is just managed wireguard, so it has the same benefits as a wireguard vpn with the catch a company has access to your network also now. But really simplifies setup…..

  • Gotchya, so at the reverse proxy stage you have a pathway for “if they have the mTLS certificate, allow in” to let you access your stuff from outside your local network?

  • If you feel up for answering, what is your use case for wanting to manage your own mTLS?

  • There’s still no path for them to get RAM chips better than the already-established DDR5 makers. I don’t see how they’d have stronger leverage with Samsung, SK Hynix, or Micron than the regular RAM chip customers that already do business with the triopoly

  • They do not have experience manufacturing chips and I do not think they are going to make a chip fab. The timeline is too short. Idk on the RAM is easier to make than CPU claim - it feels like it’s a different goal than CPU so node size comparison is less apt - but for a company that has no experience they’re not gonna shit out a fab in Q2 2026. The fab pros take years to build them.

    They do have the manufacturing ability to make DDR5 sticks, people can make them themselves right now - just get a PCB and the chips and put the BGA chips on! So Q2 2026 is fast but doable for their expertise there.

    Buuuut we come back to, they’ll need to get RAM chips from the remaining consumer suppliers - which you can’t right now cause some AI bro future bought all the chips with his future money he will surely get in the future.

    And so they won’t get any more than someone already in the market could get (Corsair, GSKILL, etc.). Thus, no change for the supply limit. TBH stupid to get into a market while it’s high; I don’t think they’ll be able to profit in time on the scalping prices before RAM prices crash when the AI money evaporates

    TLDR: rip gamerz

  • If you live near IKEA, they have a sleek ass 8 bay charger that closes shut and attaches to a wall. And they sell eneloops (in the name of ladas) but they’re from Japan and were (and still likely are) eneloops. And eneloops are the top tier of the rechargeable batteries.

    Edit: forgot ikea ships now, usually with a minimum total, but they do ship now

    Btw thanks for asking, I’ve got many dullsters to think about

  • I am loving OIDC giving a single login for all the things I’ve got going, I see it as a near-essential for adding new services!

    Read-only is easy! You just need to confine where the writes happen. You use volumes for stuff you want to remember were written and tmpfs for stuff you don’t want to remember. Tmpfs for /tmp if needed, volume for the DB, good to go. It is super useful for security since only what is included in the container can be executed greatly reducing the attack area. No way to introduce a new excutable to the container! (you set noexec for tmpfs/volumes)

    I’ve seen difficult setups like a “work directory” where key files, executables, and temp files go. That structure can’t be secured, avoid that. Basically the temp files go in somewhere that’s not a big pile of a “work directory” - like /tmp - and then that structure once again works!

    Of course I wouldn’t say no to an LCARS theme either…

  • 196 @lemmy.blahaj.zone

    wiimote speakerule

  • 196 @lemmy.blahaj.zone

    infinite crimes rule

  • Selfhosted @lemmy.world

    IPv6 & Opnsense & Not Exposing Machine-Specific IPv6s to Corpos