So Very Secure

Please help 2 DCs no longer are opening AD users and computers!

Please help 2 DCs no longer are opening AD users and computers! : sysadmin

I am going to ignore the moronicism of whatever the OP clown did1 and focus on this comment I’ve screenshotted.

Yes, that makes the server vastly more secure, to disable the NIC. It’s perfect security, in fact: it becomes nearly impossible to hack or to exfiltrate data short of visiting the data center to do some dirty deeds on premises or to lug the machine out the door.

Flawless security.

  1. Which I could fix in 15-20 minutes.

Half Off

Misha (@drethelin) / X

If you gave me a frontier jailbroken AI model, a few million in bio-lab gear and 10 smart, trained people in a year I could build a virus that’d kill half the world. I don’t even think it’d be particularly hard.

That this is true means that someone is very likely to actually do it.

Goalposts

Teortaxesโ–ถ๏ธ (DeepSeek ๆŽจ็‰น๐Ÿ‹้“็ฒ‰ 2023 โ€“ โˆž) (@teortaxesTex) / X

Exactly. Fucking ridiculous definition. The goalposts move constantly with AI. Now that they effortlessly pass the Turing test as originally forumlated, it has become, “The AIs could not erect their own civilization de novo and build their own fabs before dying out.”

Brothers and sisters, neither could we.

The definition of AGI is not “become a god.” It is “do as well as an average human.” And in more and more areas every day, that is true of AI. We are about 20% of the way to creating a person1 and getting 10% closer every six months. We should be prepared for what happens when we succeed.

  1. Not a human. A person.

Best CPU

The 6 best CPUs of all time, ranked.

I know this is just a clickbait article that has no real meaning and was probably mostly AI-written, but still. Computers have been a whole lot of my life. I’ve spent tons of time thinking about CPUs, installing them, and overlocking them.

These days, there’s no real reason to overclock. But that time was fun while it lasted.

Anyway, I started writing this to say that I think the AMD K6-2 should have been on this list. So many of us poor but geeky people used it back in the day because it was reasonably fast and often less than half the cost of the competing Intel product while still providing about 80% of the performance.

I loved my little K6-2 in 1998. Used that one for quite a few years.

Very Res

I have no doubt that most of the power and capability of LLMs will be taken away from us because they allow people like me to do things like the below. Before, I just wouldn’t have bothered because it would’ve been a thousand hours of work.

But now, it’s 20 hours of work and four million tokens.

Do what you can while you can. Soon it’ll be very restricted, I already know.

Will and Tools

I and the LLM made an extension that will piss off devs, designers, and everyone in that space who wants to control what I can do, but that helps me enormously. And it took a lot of work and research. The LLM did all the heavy lifting, really, but I did the background research to see what was possible.

The extension restores true back button functionality even on sites that don’t allow it and even those that actively attempt to prevent it. I burned a fuckload of tokens doing this, brothers and sisters. But it works pretty well now for something that is not supposed to even be possible. It is possible, of course. Anything is with the will and the tools.

I’d made an earlier version of this extension but it was honestly pretty crap. It broke tons of sites, was slow, and just in general was not worth using. The new one actually functions correctly. Basically, it snapshots the page and stuffs that into local storage and then when you slap that back button, you get the snapshot of the page exactly as it was before, transparently. And, people, it’s so much faster than the worthless fucking redraw that every page insists on doing now.

No, I will not release it generally. It’s just for me. And my partner, if she wants it. I simply refuse to be anyone else’s tech support outside of my actual job.

This extension rules. It is a middle finger to all those who attempt to control my computer against my wishes and intentions.

Fuck you, I won’t do what you tell me.

Put Folder

I ws looking at Navidrome for personal music streaming but then saw this.

That’s a dealbreaker. This software is written by younger Millennials and Gen Z who don’t know what a fucking directory is. Despite their clownish ignorance a folder structure is the best way to handle a lot of data and probably always will be. Not all music is tagged or tagged accurately. Putting it in a damn folder is the quick and dirty way to organize it easily.

You know tons of people have asked for it if they put disclaimers all over the place about why they won’t do it. Because they are fucking idiots. I logged into GitHub to complain about it to them. I know it won’t help, but it made me feel better.

Backxactly Ackwards

Castro Podcasts โ€” Things I got wrong: Support.

Castro is an opinionated app and Iโ€™ve thought a lot about what weโ€™re building and what weโ€™re going to work on next. Itโ€™s unlikely Iโ€™m going to implement the request. If I did, by catering more to persnickety power users, we run the risk of alienating newer users who donโ€™t know how things work. But our power users probably arenโ€™t going anywhere, at least theyโ€™re a little harder to shake, and alienating new users is the death of the product.

This is exactly backwards. But I think the piece accidentally reveals a fundamental misunderstanding that is very common to people who create software. The reality is that your power users are the ones who funnel new users to to you. Firefox never would’ve taken off without its power users; I personally got hundreds of people to use Firefox, many of whom never would’ve heard of it at all without my influence.

When they decided to kick their power users in the teeth for largely made-up post-hoc manufactured bullshit reasons is when that software began its long usage decline. The Mozilla clowns blame the power users (at least in part) for this, but in reality it’s those users who told them what would happen if they made the bad decisions they did. And they were right, as I’ve pointed out before.

Dustin’s counterproductive reaction — as it almost always is — is a power and pride thing. Power users are often completely correct about what would make your product better for everyone. But that rubs many creators the wrong way because it means more work, and someone else having at least some measure of de facto control, and that someone saw something that you did not. It means the software becomes less yours if you let someone tell you what would in fact work better for them. And many people (such as the Firefox devs) just enjoy having control over others.

I have nearly no idea what Castro is or what it does. It seems to be about podcasts, which means I’d never touch it. But Dustin’s contentions really misunderstand what power users offer in a software ecosystem, and what it means to alienate them.

For instance, I can tell that I’d never use Castro at all even if I were into podcasts because any creator who makes a point to shit on power users is one whose product I’d not even consider in the first place.

Tower of Power

About 60% of the electrical power we use is due to all the compute, storage and networking gear we have in our home. That is not an exact tally; it’s possible it’s more than that since that number is a conservative estimate.

That’s what happens when you get two computer nerds together. We have more sophisticated infrastructure (and more of it) than many medium-sized businesses.

And I wouldn’t have it any other way.

Where To Strike

TrueNAS is tons faster than the Synology — partly due to that it’s just on much newer, quicker hardware — but in many ways it’s amateur hour. And I want to punch whoever thought it should be so locked down right in the chigooblies. This isn’t consumer-class infra. Gramma is not going to send her money to Nigeria if you don’t prevent me from monitoring fans. And all because I don’t have a BMC?

Yeah, fuck you, buddy.

I don’t know that there is anything better than TrueNAS, alas. But it is free, and that’s something.

The Nincompoops Who Say NIH

Containers, especially the Linux (as opposed to the FreeBSD) variant, are inherently less secure by nature than virtual machines.

Also, FYI, we sysadmin types can spin up VMs just as quickly as containers and have been able to do so for 20+ years. It’s just devs didn’t know anything about it and couldn’t control it, so they reinvented something we could already do — but poorly and very insecurely.

Veeam Fail

For the first time an LLM — Claude Opus 4.8 on High — solved a technical problem I would’ve never been able to solve. At least not in a reasonable amount of time. And I’m very, very good.

The problem manifested as I was installing Veeam Community Edition on an air-gapped Hyper-V server. The installer kept complaining it could not continue because it was unable find/validate certificates. So I researched and (get this) from the vendor’s own site I downloaded the missing certificates they claimed were needed. Installed them in the correct place in Windows Server. The Veeam install still failed after that.

As happens all too often, their own support page was incorrect and the certificate actually needed was not the one they had you download. Again, vendor’s own site, vendor’s own support pages. Totally incorrect.

Here is Claude’s summary of what was wrong and the fix:

“The certificate was in the box the whole time

Air-gapped a Windows box, then tried to install Veeam Community Edition. It refused with an Authenticode error: CERT_E_CHAINING, “a certificate chain could not be built to a trusted root authority.”

The cause is what air-gapping actually does. A connected Windows box doesn’t ship knowing every root it trusts; it fetches missing intermediates on demand and refreshes its trusted roots from Microsoft in the background. Cut the wire and both stop silently. The trust store just freezes at install-day state and starts declining signatures without telling you why.

I chased the roots first, including the ones Veeam lists on their own site. No luck: Veeam moved their code signing to an Entrust EV cert and never updated the page, so the root their installer needs isn’t on the list of roots they tell you to install.

The fix was to stop trusting the documentation and read the binary. An Authenticode signature embeds its own certificate chain, roots included โ€” two here, one for the signature (Entrust) and one for the timestamp (DigiCert), each anchored to a root the air-gapped box had never seen. Pull them out of the file, drop them in the machine’s root store, done. No internet, no vendor KB.

The machine had everything it needed to verify that installer. It just wanted to phone a friend first, and I’d taken the phone away.”

More fake bullshit-ass security causing endless problems that makes you 0% more secure. Just clownish dipshittery. Veeam used to be good.