• 0 Posts
  • 22 Comments
Joined 2 years ago
cake
Cake day: July 23rd, 2023

help-circle
  • So when I ask Let’s Encrypt for a cert, I ask for *.int.teuto.icu instead of specifically jellyfin.int.teuto.icu, that way I can use the same cert for any internally running service. Mostly I use SSL on everything to make browsers complain less. There isn’t much security benefit on a local network. I suppose it makes harder to spoof on an external network, but I don’t think that’s a serious threat for a home net. I used to use home.lan for all of my services, but that has the drawback of redirecting to a search by default on most browsers. I have my tailscale exit node running on my router and it just works with SSL like anything else.


  • I use a central nginx container to redirect to all my other services using a wildcard let’s encrypt cert for my internal domain from acme.sh and I access it all externally using a tailscale exit node. The only publicly accessible service that I run is my Lemmy instance. That uses a cloudflare tunnel and is isolated in it’s own vlan.

    TBH I’m still not really happy having any externally accessible service at all. I know enough about security to know that I don’t know enough to secure against much anything. I’ve been thinking about moving the Lemmy instance to a vps so it can be someone else’s problem if something bad leaks out.



  • I have the opposite. Unlimited phone data, but it throttles above some high number that I’ve never hit. Capped home internet from crapcast, 1.3 TB, I haven’t hit it but I’ve come within a couple gigabytes.

    They offer unlimited data if I use their modem/router for an extra $10/mo. Of course their modem comes with the wonderful feature of a public hotspot for any other Comcast customers in the area. I’ve been thinking about getting their modem, putting it in a metal box and just using pass through with my opnsense box.











  • The problem isn’t the manufacturer or the operator, it’s the middleman looking to make a profit on the the difference. In any case $800 is an absolutely ridiculous price point regardless of liability. I don’t know where the fair price point is but not even close to that. Liability isn’t the primary driver for the cost anyway, it’s difficulty of certification. Getting any part certified runs from high 5 figures to many millions of dollars and these are all extremely low volume parts. Boeing has only made around 11,000 737s since 1967. The plane I’m working with now only has around ~250 built since 2015 and is quite successful. For comparison Toyota produces about 20 cars per minute. When you need to pay back certification costs and turn even a modest profit on such low volume you need to charge a ton for each part.

    To be clear I am absolutely not in support of non certified parts, it’s just a big problem in the industry and for rather obvious reasons.


  • The paperwork cost isn’t negligible at all. For example a company I used to work for had to replace a simple O-ring that failed. It’s an old part and quite rare these days and cost $800 to replace. You could buy a functionally equivalent (likely better) uncertified part for about 5 cents. That is why uncertified parts are such a problem, because certified ones are so incredibly expensive. Plenty of companies would love to step in and buy a few thousand O rings and sell them for $400 and a few are willing to forge a paper trail to make it happen. It’s a problem that I don’t really think will be ever totally solved without making certification too easy and potentially sacrificing safety by having bad certified parts.