I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
Yeah it mostly seems reactionary nonsense.
Like you ca. swim at the top of a pool in a tractor coolant tank. Water is very cool at diffusing radioactivity (if that’s the right term, it’s probably not).
Heck we have legit crashed nuclear subs at the bottom of the ocean, and places we have just straight dumped waste much more potent than this water.
I would agree.
Also a certain US general has larger war ambitions that created a clusterfuck. They had easily repelled the offensive and pushed the north basicallly to the Yalu river. But then the general straight defied orders and started a full scale invasion and wanted to push further, into china.
That attarmpt triggered china to actually respond and push everything back got the 38th.
Had MacArthur not been such an ego driven maniac Korea may look quite different today.
was likely announced prematurely,
It was announced 5 years ago and there’s still no release date. You can drop the “was likely”, it’s a definitive. It was.
The product was announced 5 years ago. 5.
They the. Said nothing for half a decade. Now starfield is coming out and is shipped from their perspective so he’s on to his next sale. Simple as that. See you in another 5+ years
Honestly the only thing I can think of is the competition recently to hack a satellite, maybe has drawn the ire of some script kids, or rather interest. [1][2][3] I LOT of educational and research stuff is quite open, and often very resistant to change as they value access/transmissibility over security in many cases where theres no real grounds (ie: its not national secrets etc). Some of these datasets are quite large.
Even still basic things like firewalls, key based access etc should be setupo. Heck if its a multi-million dollar instrument airgapping is probably worth its time. But i dunno. Just conjecture on my part.
The competition definately brought some attention [4]
FWIW he says this in the beginning of the video.
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
MS goes out of their way to make shit harder than it needs to be.
For example. The store, they have a store for business where you can simply whitelist known apps buts it’s a PITA to setup AND they have been threatening to decom it for ages
https://learn.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview
Want to add safety/security features like secuirty keys. Well if you do it on a non domain joined machine you can just sign into a m365 account to enable a passkey or yuibijey as a second factor.
Want to do that in a business environment. Congrats now you have to deploy a windows CA and issue user certificates to tie to this. Even if you are signing the machine into m365 with ADAL.
They go out of their way to add complexity and failure points.
Tthe problem is now if you have the store disabled basic shit, like the ability to open .heic files is broken or use stuff people want like sticky notes is broken.
We turn off most of what we can’t but having the store enabled causes all sorts of stuff.
Also windows 11 has ads baked in even with the store disabled. Plug in a Logitech mouse, get a pop up for their software. Open the picture viewer and get an ad to install some video editor that isn’t clear whether it’s a Ms product or not.
No to mention basic things like copy paste and edit are now weird icons because I guess they think most users are illiterate.
Most of the 11 UI changes are not for the better. Having to beta test it for work is frustrating and I run an IT shop.
Not as uncommon as you would think. What normally do then is use the 6 month releases until the next LTS
I have been using this hub. Works fine in Linux and windows.
https://www.amazon.com/gp/aw/d/B0871ZHCKK?psc=1&ref=ppx_pop_mob_b_asin_title
I also use this usb dongle for my Xbox controller. It works fine in Linux. I really should try playing a few games on Linux.
https://www.amazon.com/gp/aw/d/B0785SFKYF?psc=1&ref=ppx_pop_mob_b_asin_title
Beeper does want you to proxy your iCloud account through a Mac on their network for iMessage. You are logging into your iCloud account through their site. They are in effect using Mac minis in a farm to provide the service based on what I looked into (including self hosting it, but then you can’t use a beeper app, you need your own)
https://help.beeper.com/chat-networks/imessage?from_search=125277302
Some games you dont even need a crack or anything, just access to the files.
For example with KSP, you can just clone the game directory anywhere and run it from there. Doesnt even need steam. Heck i copied it over to an M1 macbook once just to test the Macbooks performance…
Thats also how the mod managers like CKAN work with the game.
Any company that I have to give my username and password for a third party service (and especially one as important as icloud/imessage) ill take a hard pass.
Yep. They just pull things you monitor as they show up in your feeds (in my case Usenet newsgroup indexes)
For example. My wife like Billions, new episode/season came out and it jus popped up in my plex server the other day
I can see arch or others being great for learning the inner workings of a distro or even more advanced inner workings or something great for tinkererers. But for those that see the OS as a tool to do things, yeah, I don’t see a value in it. But not everyone has the same priorities.
It’s Ubuntu, but includes proprietary drivers by default if detected. Also the menu is very similar to windows.
It’s got a slightly different store and update app, which also allows you select automatic updates or not etc. it’s a bit friendlier than Ubuntu tbh.
At the same time it can be wonky in its own right. For example I put it on my kids laptop. And rfkill kept disabling the wifi based on a bios setting allowing the wifi to be disabled if a nic was connected and during wake-up from s3 sleep the system would briefly falsely detect a nic and kill wifi.
Disabling the setting in bios was all that was needed. But searching the issue, even for me, led to a LOT of bad advice and threads on their forums.
The arch wiki is pretty on point for general information about specifics and can often translate across distros.
But like one of the OPs said, a lot of the folks tend to be a bit gate keepy/defensive or very much fanboys of specific distros.
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.