• 0 Posts
  • 250 Comments
Joined 3 years ago
cake
Cake day: June 20th, 2023

help-circle

  • Fail2ban is just another tool in your toolbox. Defense in depth, as others mentioned.

    Fail2ban is primarily a tool to prevent brute force attacks, especially useful for services that don’t do their own throttling. For example I usually put ssh in fail2ban, but if Authelia’s built-in protection is good enough, then use that.

    Outside ssh, anything that could be used to brute force credentials should be in fail2ban if they’re exposed: web sites with simple auth, mail, etc.




  • Yeah I had that in my previous job, but they didn’t call it PTO. Also we didn’t use PTO for our official holidays. It was really stupid: we would get 12 months worth of time off on January 1st and all of it expired December 31st. This naturally caused everyone to basically take December off, which meant our busiest months of December and January were super fun.

    In my current job, PTO is earned for each working hour at a rate decided by your seniority, so you gain more PTO per hour the longer you work there, and you can bank up to a certain amount and the excess is lost. It’s a pretty big bank, so I think it’s an okay-ish balance between stealing our PTO and encouraging us to use it. I guess it could be worse.

    This is different from when I lived in Norway, where I had “unlimited” sick days, all bank holidays off, and an additional 5 weeks of time off a year + vacation bonus in the summer, plus time and a half for any overtime beyond 37.5hrs/wk with double pay on Sundays and holidays.


  • Sort of. There is no legal requirement for any time off in the US. But PTO is a very common arrangement.

    It is what it sounds like: Paid Time Off. Basically you have some hours available your will be paid for but you don’t have to work. You earn PTO at a certain rate for every hour you do actual work, so you have to earn it.

    You don’t have the right to use them whenever you want; that’s up to your boss, usually. You usually have to trade any kind of time off for your PTO: vacation, holidays (even mandatory ones), sick days, etc. There is usually a minimum amount of hours you have to take at a time, so you can’t always take an hour here and there, but sometimes you can agree to make up time with you boss.

    For extended time off, like if you have surgery, you can usually work with your employer to use a reduced rate of PTO to make it last longer, like get 40% pay. When it runs out, you don’t get paid. You may still be able to keep your job, within the rules of FMLA (12 weeks), but you have no income. I am not sure what happens to insurance at that point, but I think you’re covered as long as you’re employed and pay premiums.

    Of course this is not legally required and it’s rare that it’s even offered if you’re part time or work for a small company, since those aren’t required to offer any benefits.

    I don’t work in HR, I’m not a lawyer or doctor, my experience is my own, this is not legal advice, your state laws may be different, etc, etc. YMMV.



  • My guess is that it changed from open source to a proprietary license. From Wikipedia:

    Initially, Paint.NET was released under a modified version of the MIT License, with the exclusion of the installer, text, and graphics.[9] However, citing issues with the open source code being plagiarized by others that had rebranded the software as their own and bundled user content without their permission, the availability of the source code was restricted, in December 2007 Brewster announced his intent to restrict access to components of the program (including its installer, resources, and user interface).[10] In November 2009, the software was made proprietary, restricting the sale or creation of derivative works of the software.[10][11]







  • Depends on what in using it for. There is no way to fully avoid the Internet anymore. You can’t interact with businesses or government without it. So, for that, we’re stuck with it.

    I work in IT so I’ll be stuck with it there. I already have no expectation of privacy at work, though.

    For entertainment and engaging with communities like Lemmy, I think losing anonymity through mandatory online id would be the nail in the coffin.

    I already moderate myself on social media, but I have an outlet in these communities. I would simply stop using them if I lost that.

    I would guess underground networks would rise up to replace them, but I would not want to put myself at risk. I don’t trust VPNs enough for that.


  • I think it’s fair to want a more helpful error message, but that’s not necessarily the purpose for path. There is a real cost to every entry in your $PATH. Not as much as in the world of spinning rust, but some.

    There are some completion modules for shells that will suggest misspelled or even installable packages if it can’t find the command. Those are arguably better options.

    As for traditional systems, I remember a time where running arbitrary commands, even with an --help argument could be dangerous and we had to set least try ‘man command’ first.



  • My guess is not just traditional developers, but anyone doing any amount of coding, like data scientists, business analysts, etc.

    Especially if they’re using AI, those tools work better on Linux, or as is the case most places, wsl2 inside Windows.

    I believe Windows is kept because of the Office tools. However, Windows needs 12 layers of security tools that constantly get in your way, so the path of least resistance is to just stay in your wsl2 sandbox.

    The knee jerk reaction to this from enterprise IT is often to restrict access to WSL. This solves the problem, but creates disgruntled users who will continue to try and work around it.

    What they should consider, in my opinion, is giving these people real Linux workstations that can be enrolled in group policies, SSO, and all that good stuff. Commercial vendors of Linux will support these use cases.

    Some places roll out Macs, which work almost as well, but the hardware is more expensive. Hardware and commercial software support may be better, though, I don’t know.

    I think either is a superior alternative to Windows.




  • You make some good points, but you’re making the same mistake you’re accusing your audience of making: you don’t understand why people are on the platform they are on.

    I can’t speak for everyone, so I’ll just speak for myself: I’m not on Lemmy and Mastodon because I want them to become the next Facebook–even if it were some kind of libre utopia free of commercial interests.

    I’m here because these weirdos are my weirdos and they like the same weird things I like. It’s a small enough sandbox that I can still recognize people here and there. These people have similar interests to me, and they post long, insightful rants about stuff that my family and other friends would not care about. The network effect is working in my favor.

    The fediverse community feels more like home to me than the big social platforms. This feels more like it’s my community. If Lemmy gets as big as Reddit, I’ll probably go somewhere else.

    I don’t use Linux because I want it to dominate the world. I don’t care if others use Linux or not. I use Linux because my computer finally feels like it’s mine again. I do what I want with it and I don’t have to worry about AI running or spying happening on it without my knowledge. As a bonus, it runs smoother.

    The tradeoff is there are a few rough edges, and I have to learn some new things. But I enjoy learning. Lots of people don’t enjoy having to learn new things to just veg out with IG or YouTube. I get that. So, then don’t. Veg out with Windows, if that’s your thing. We can all do our own thing at the same time.

    Choice is a good thing. Small communites are good. Decentralized is good because then big bullies can’t come in and take your community away. Small size and fragmentation are features, not bugs.

    If Taylor Swift wants to set up her own Mastodon instance, she can. If she wants to cross-post between that and X, she can. I won’t be seeking out her content and it will be trivial for me to stay in my bubble without Taylor algorithmically popping up inside of it like she is on IG, FB, and X.