syncthing also relies on a web server for device discovery, it’s just that you’re probably using someone else’s server instead of hosting your own.
Correct me if I’m wrong, but I also think that Vaultwarden itself doesn’t have access to the unencrypted password database. In that sense it’s E2EE similar to KeePass, the only difference being that KeePass is a desktop app and Vaultwarden a web app.
Nothing, this is not about that.
This change gives you the guarantee that .internal domains will never be registered officially, so you can use them without the risk of your stuff breaking should ICANN ever decide to make whatever TLD you’re using an official TLD.
That scenario has happened in the past, for example for users of FR!TZBox routers which use fritz.box. .box became available for purchase and someone bought fritz.box, which broke browser UIs. This could’ve even been used maliciously, but thankfully it wasn’t.
Being in alpha and having breaking changes is fine, the question is how many. My impression is that Immich seems to introduce breaking changes far more frequently than what people might be used to from other projects.
And that does go back to professionalism: The better you plan ahead, the fewer breaking changes you have to impose on your users.
Minio now describes itself as “S3 & Kubernetes Native Object Storage for AI” - lol
Guess it’s time to look for alternatives if you’re not doing ML stuff
I wouldn’t call criticism of their strategic focus “shitting on” Nextcloud. It obviously still does a lot of things right or at least right enough to be useful and relevant to many people, or else we wouldn’t be discussing it. But it has its issues and many of them have been unadressed for a long time, so why shouldn’t people voice their displeasure with that?
The link doesn’t explain what Taler is, you then also have to click through to the home page. How hard can it be to add literally a single sentence like
Taler is a payment system that makes privacy-friendly online transactions fast and easy.
There are quite a few mature projects in 0.x that would cause a LOT of pain if they actually applied semver
Depending on how one defines the “initial development” phase, those projects are actually conforming to semver spec:
Major version zero (0.y.z) is for initial development. Anything MAY change at any time. The public API SHOULD NOT be considered stable.
After looking at the site and trying to determine what to download to get Debian with non-free (I’m unfortunately working with an NVIDIA card)
FWIW, Debian 12 now includes non-free firmware in the installation media by default and will install whatever is necessary.
I agree that the Debian website has its weaknesses, but beyond finding the right installer (usually netinst ISO a.k.a small installation image on https://www.debian.org/distrib/) there isn’t much of a learning curve. I started out with Ubuntu too, but finally decided that enough was enough when snap started breaking my stuff on desktop.
Thanks, didn’t know about those deals!
+1 for own domain and some email hosting service. That also makes it pretty easy to switch providers because you can simply point your MX records etc. somewhere else - no need to change the actual email address.
I can also recommend mailbox.org as an alternative to mxroute, they’re even a little cheaper at $3/month (mxroute is $49/year at minimum).
it lacks features left and right
That’s a bummer. IMO, one of Nextcloud’s biggest advantages is that it bundles so much functionality into a single application.
Oh, I think we’re talking different orders of magnitude here. I’m in the <1TB range, probably around 100GB. At that size, the cost is negligible.
I do an automated nightly backup via restic to Backblaze B2. Every month, I manually run a script to copy the latest backup from B2 to two local HDDs that I keep offline. Every half a year I recover the latest backup on my PC to make sure everything works in case I need it. For peace of mind, my automated backup includes a health check through healthchecks.io, so if anything goes wrong, I get a notification.
It’s pretty low-maintenance and gives a high degree of resilience:
restic has been very solid, includes encryption out of the box, and I like the simplicity of it. Easily automated with cron etc. Backblaze B2 is one of the cheapest cloud storage providers I could find, an alternative might be Wasabi if you have >1TB of data.
drive failure
Perhaps unintended but very much relevant singular. Unless you’re doing RAID 6 or the like, a simultaneous failure of two drives still means data loss. It’s also worth noting that drives of the same model and batch tend to fail after similar amounts of time.
Once again, you’re going off on an unrelated tangent. If you don’t want to listen, I can’t help you. We’re done here.
Funny how you claim to know so much about security but can’t even seem to comprehend my comment. I know root shell exploits exist, that’s why I wrote that it takes additional time to get root access, not that it’s impossible. And that’s still a security improvement because it’s an additional hurdle for the adversary.
I think you’re interpreting too much. Security is about layers and making it harder for attackers, and that’s exactly what using a non-root user does.
In that scenario, the attacker needs to find and exploit another vulnerability to gain root access, which takes time - time which the attacker might not be willing to spend and time which you can use to respond.
What you’re describing is business source, not open source. Hashicorp chose to use open source and thus allow other companies to compete. Nobody forced them to, they could’ve just kept Terraform as closed or business source from the beginning. There’s nothing wrong with doing so, only if you pull a bait and switch like Hashicorp did does it become a problem.
Funny to be reading this in an open source community. For one, the fork’s license is open source while Terraform’s is not. The impact is mostly on businesses, but open source has always been for everyone - including business.
Furthermore, Terraform’s new license is subject to interpretation and dynamic. It’s so hazy and unclear that they created an FAQ website which is essentially a binding addendum to the license that can be updated anytime as Hashicorp pleases. Is your business competing with Hashicorp? Who knows, only Hashicorp can decide that.
Edit: Clarified phrasing
There is your answer. draw.io can be used by everyone and for almost every purpose, so the situations aren’t even remotely the same.