From my understanding, the impetus was that F5 submitted a CVE for a vulnerability, for an optional, “beta” feature that can be enabled. Dounin did not think a CVE should be submitted, since he did not considered it to be “production” feature.

That said, the vulnerability is in shipping code, regardless of whether it is optional or not, so per industry coding practices, it should either be patched or removed entirely in order to resolve the issue.

If they are also sending a validation email, it would fail, so no issue.

At this point, it’d probably be best to consolidate and redirect to a more active community.

e.g., !cybersecurity@infosec.pub

You can always reflash it with your own if you hold that concern.

Having just researched this, I purchased the Dynalink AX3600 (DL-WRX36). While it’s not as simple as a drop in firmware reflash, it offered the best speed and performance for not significantly more effort; Wifi 6, USB 3.0 ports, and full MIMO antenna support.

I also considered the following:

• Buffalo WXR-5950AX12
• Linksys E8450 (5GHz ax only)
• Netgear WAX202
• Xiami AX9000

https://openwrt.org/toh/views/toh_available_16128_ax-wifi

The generalized approach in industry is to use API calls, and create classes to structure the data you receive as JSON or XML. At that point, it is entirely up to you how to format and display the data from your classes. Take a look at some of the Lemmy client code like Mlem, Memmy, or Voyager as examples. Though they have gotten more complicated, they all follow this client-server model for front end development.

However, due to recent shenanigans around API and RSS by companies, mostly those looking to prevent AI companies from using their data for free, the alternative, much worse method is to take the HTML output from a standard web request, and try to reverse engineer the page information into a class structure. This sucks, breaks frequently, and requires you to code around ads and other junk on pages in order to get at the content.

One frustration I have with Community listings has been that the list of “active” users includes bots, and posts with zero comments. I’m having a lot of trouble finding communities in instances that actually have active discussion, particularly with higher counts of unique users contributing content.

While I appreciate this, there were far too many questions, which were pretty technical for a layperson. And even after picking the most basic options, I was still presented with like six variants of Ubuntu, including Mint and Elementary.

How about something like:

• Do you use your computer more for games, or for work?
• How much do you care about open source?
• Do you know what a makefile is?

TrueNAS has an OpenVPN plugin available, which is typically the recommended option.

While I get the sentiment, historically, readmes have been text only, and should predominately focus on usage options, not a sales pitch. Today in GitHub, these files support markdown, but the level of effort is probably two orders of magnitude higher than a text readme alone.

Think of a readme file on GitHub/distributed with the binary more as a man page than a proper website.

You are trying to solve two different, but related problems, and there are discrete solutions for both.

One is a personal cloud. You need a secure place to store your shit from multiple users and devices, from multiple networks. You’ll need a mostly static IP and dyndns or your own domain, and certificates signed by a public CA/letsencrypt.

Then, you are looking for a backup application that supports rsync or sftp/scp over ssh or vpn, that is also cross compatible (Android and PC/Linux). Point this to the service above, and you are good to go.

This.

At some point, you need to be able to quantify the risk to your business before you can do this.

For instance, if your business earns $10 per transaction, and you perform 100 transactions per second, the difference between five and six nines (313 seconds vs 31 seconds) is $282,000; nowhere near enough to justify the added investment.

Edit: Important to note that for the first example, these are already enormously huge numbers. Such a business, assuming no holidays or weekends, would be grossing $31.5 billion per year, in the same ballpark as Oracle and Coca Cola.

So when we say the company is losing 282,000, this is a tiny, tiny fraction of revenue. Even 99.5%, which is almost two days of downtime, would “only” be a loss of 0.5% of all revenue for the year. Sure, this is $157M, but even that would probably not cover the cost of a six nines infrastructure (that said, they could save up to $120M per year by achieving 99.9%, which would be worth exploring).

Red Hat, the company that is profiting of open source software, is calling another open source developer freeloaders? Rich.

They’re specifically for enterprise, typically. You have a license server that hands out the site licenses, rather than registering each machine with Microsoft directly. These keys get you into the box, and put it into “grace” mode for 30 days. You can rearm the key a few times, to use them for dev or evaluation purposes; for example, I believe you can extend a Server machine up to 180 days.

They are literally published by Microsoft.

https://learn.microsoft.com/en-us/windows-server/get-started/kms-client-activation-keys#windows-11-and-windows-10-semi-annual-channel-versions