• 0 Posts
  • 78 Comments
Joined 3 months ago
cake
Cake day: July 17th, 2025

help-circle



  • Apparently it was supposed to be. They have the core functions in a “can’t OTA” container, with less important functions like AV/etc in a “can OTA” model.

    This update was pushed to the “can update” side and fucked the “can’t update” side, which is its own can of worms. Another can? Jeep pushed a silent, emergency update “to all Jeeps even those who have automatic updates disabled.”

    So the issue is not that they have no security model, it’s that it clearly doesn’t work and they can and will push secret updates even when you decline all updates.



  • Some companies do “internet only” wifi where there is no routing to internal services for anyone, radius or not. A VPN is required, even when at work, to access anything internal wirelessly. Its a perfectly reasonable config that lowers the risk of breach of your internal network by exposing less of it over the air.

    This is also the nominal config for most zero trust networks, but that’s more a consequence of the “always on” nature of those VPN connections since you never have unencryted traffic anywhere, regardless of origin point.





  • The vm/container side is less important than the “cant run a RAID parity check regularly because it makes the NAS useless” part. Thats my qnap experience. It might have gotten better, but it was shit heel for me, and the NAS was in the 1k range.

    I’d argue that a NAS should be able to run containers at this point. NAS hardware does not need to be utterly gutless just because it can be. A versatile NAS is actually a great first choice for a homelab setup before you start to expand.


  • I’d recommend against it. It works “fine” but everything is in a thin, but walled, garden. Every app is some “Qsomebullshit.” They really, really want you in their ecosystem.

    Id say the systems are underspec’ed as well. The model I bought years ago pitched itself as VM/container ready, but the chipset was so weak it couldn’t run anything worth a damn. It couldn’t even run a scrub on lowest priority without choking all other filesystem access. When a scrub takes 3 days or more, it wasn’t exactly a usable experience.

    If you have the funds, i’d recommend 45drives. They make very good hardware and sell 4/8/15 disc form factors for homelabs.










  • The founders comments in the hacker new thread, plus some other errant ones from hack club users.

    Here is there “we are staying on slack” comment:

    Hi, update here (this is Christina, Hack Club cofounder): looks like Hack Club is staying on Slack.

    Thanks to all of you for the appreciation and support for Hack Club, and for listening to what we were going through. The support has been amazing. Hack Club has so many cool teenagers coding awesome projects, making friends and solving problems together, and it’s great to see so many people championing them. We are glad to stay on Slack and want to do so much more with them together going forward.

    Thanks to Denise and the Slack leadership team for reaching out here on hn, and in a call directly with me and Zach today. And thank you for restoring Hack Club’s terms with improvements. We really appreciate it, and we’re glad to be able to stay on Slack.

    I just want to add that it was great to get to know Mattermost and the team- and the hack club engineers were actually pretty excited to move there. It’s an amazing product and for it to be open source is awesome.

    She doesn’t mention the “new rate” but it was apparently confirmed internally, and there is a comment in that above thread that lists it.