[-] tburkhol@lemmy.world 2 points 15 hours ago

This is an old post about ipv6, but it inspired me to go looking, and I wanted to share my findings.

  1. for globally routeable IPv6 addresses, probably do let it happen automatically, either direct from the ISP, through the router by prefix delegation, or your own implementation of prefix delegation.

  2. for devices you want to access, internally, create a ULA within the fd00::/8 space, and assign numbers (and names) however you like. Translate all your 192.168.x.y IPv4 addresses to fd00::x:y and go. Only limitation is you won't be able to access those devices, using the ULA, from outside your network.

  3. you can do both of these on the same subnet, and devices pick up both addresses then use the global address for internet and the ULA for intranet.

That means you can do dhcp, dynamic DNS, private domains, and all the stuff you know about IPv4 for IPv6, and still do all the stateless autoconfig that "they" want. Some devices, like my android phone, never played well with dhcpd6, but immediately preferred IPv6 as soon as I let them SLAAC.

If the prefix assigned by the ISP doesn't change, then device SLAAC address shouldn't change, either, because they're calculated from MAC, so if you need to access some internal devices from the internet, you have to mark that address, but (IMO) marking the full address is not that much worse than marking the prefix and remembering the device number.

[-] tburkhol@lemmy.world 20 points 17 hours ago

I gotta say, I recognized both of those debate performances. One of them's the angry grandfather who's always complaining that his foreign neighbor is stealing his trash; the other's the nice grandpa who calls you by your cousin's name, then gives you $5 to go to a movie.

I wouldn't want either to babysit my kids - Trump because he'd steal my TV and throw out my avocados; Biden because he'd fall down the stairs and let the kids stay up to midnight eating ice cream.

But a President's job isn't really to be a subject matter expert on every policy. He's there to assemble a good team of policy matter experts and balance the needs of normal people against the power of megacorporations. And we have the rare opportunity to judge both grandpas on their past performance: Jared Kushner, Secretary of Everything; Janet Yellen vs Steve Mnuchin; Rick Perry vs Jennifer Granholm; Jeff Sessions & William Barr vs Merrick Garland.

[-] tburkhol@lemmy.world 5 points 1 day ago

Look, only a chump pays in advance. The TV news tells me all the time about contractors, but it's pretty obvious anyway: once they've got your money, why do they need to finish the job?

[-] tburkhol@lemmy.world 1 points 4 days ago

I do ssh because I'm more comfortable with it: it's ubiquitous and as close to bulletproof as any security. Put it on a nonstandard port, restrict authentication to public keys, and I have no qualms.

[-] tburkhol@lemmy.world 6 points 4 days ago

Heh. House I rented was built before ubiquitous electricity. At some point, someone slapped a fuse box on the outside of the back wall and drilled a bunch of 1" holes in said wall to pass wiring. House was built on piers, so they just dragged wires around to places where they wanted outlets, which were mostly planted in the floor. Not a ground wire on site. I have no idea how they got away with renting that out, but it's not like I called code enforcement, either.

[-] tburkhol@lemmy.world 2 points 4 days ago

Yeah, I think it really depends on use case. Like, I'm trying to imagine what aspect of my home lab could go so wrong, while I'm out of the house, that it would need fixed right away, and there's nothing. I only leave my house for work or maybe a week of vacation, though, and I can imagine someone who's occasionally away from home/house for 6-month deployments, or has a vacation home they only visit four weekends a year, might want more extensive remote maintenance. I'd still want to do that via ssh or vpn, but that's me.

[-] tburkhol@lemmy.world 35 points 4 days ago

fd00:: is the new 192.168

[-] tburkhol@lemmy.world 36 points 5 days ago

If those guys aren't already printing posters to mail to every school in Louisiana, I'll send them a check.

[-] tburkhol@lemmy.world 19 points 6 days ago

Foreign students pay full tuition, with no state contribution. Lots of universities have increased foreign admissions specifically to address declining state allocations. Science grad schools, where grants pay the student's tuition & stipend are a different question, but a lot of funding mechanisms, including some US gov't, bar foreign nationals.

The whole pool of foreign students are great, though: top students in their home country, generally from families wealthy in their home country, highly motivated & ambitious. Many/most of them seek college in the US hoping it will be a stepping stone to employment and permanent residence. I can understand why even a xenophobe like Trump would make an exception for students.

8
submitted 4 months ago* (last edited 4 months ago) by tburkhol@lemmy.world to c/selfhosted@lemmy.world

[update, solved] It was apparmor, which was lying about being inactive. Ubuntu's default profile denies bind write access to its config directory. Needed to add /etc/bind/dnskeys/** rw, reload apparmor, and it's all good.

Trying to switch my internal domain from auto-dnssec maintain to dnssec-policy default. Zone is signed but not secure and logs are full of

zone_rekey:dns_dnssec_keymgr failed: error occurred writing key to disk

key-directory is /etc/bind/dnskeys, owned bind:bind, and named runs as bind

I've set every directory I could think of to 777: /etc/bind, /etc/bind/dnskeys, /var/lib/bind, /var/cache/bind, /var/log/bind. I disabled apparmor, in case it was blocking.

A signed zone file appears, but I can't dig any DNSKEYs or RRSIGs. named-checkzone says there's nsec records in the signed file, so something is happening, but I'm guessing it all stops when keymgr fails to write the key.

I tried manually generating a key and sticking it in dnskeys, but this doesn't appear to be used.

19

Looking for a brokerage with functional, individual API access to, at least, account positions, balances, and equity/fund/bond prices. Used to be happy with TDA, but they got bought by Scwab, whose API has been "pending" for six months.

[-] tburkhol@lemmy.world 77 points 6 months ago

No, that's the way the fediverse is supposed to work. It would be sockpuppeting for both of your accounts, say A@A.social and B@b.social, to have a conversation with each other on a third instance, say !politics@c.social, with which both a & b are federated.

[-] tburkhol@lemmy.world 70 points 9 months ago

Asking some anonymous neighbor to remove their peanut tree was pretty funny.

But maybe more, blaming the barking dogs - complainer's own dogs - on a mysterious peanut feeder, as though squirrels wouldn't be running around the neighborhood, playing on the fences and trees anyway, is like the poster has never experienced squirrels before.

[-] tburkhol@lemmy.world 84 points 9 months ago

One national election every four years is enough for me. I can't even imagine what the campaigns for judges with the power to rewrite the Constitution through creative interpretation would look like, but if they can put Trump in the White House, they could put him on the Supreme Court.

Term limits. Active oversight. Maybe go back to requiring 60+ votes to confirm so the GOP can't shove the Federalist Society hack-of-the-day through with a simple majority.

view more: next ›

tburkhol

joined 1 year ago