• 18 Posts
  • 139 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • I’ll also throw out: aging infrastructure, build systems, coding practices, etc.

    I looked into contributing to the kernel - it’s already an uphill battle to understand such a large, complex piece of software written almost entirely in C - but then you also need to subscribe to busy mailing lists and contribute code via email, something I’ve never done at 30 and I’m betting most of the younger generation doesn’t even know is possible. I know it “works” but I’m really doubting it’s the most efficient way to be doing things in 2024 - there’s a reason so many infrastructure tools have been developed over the years.

    The barriers to entry for a lot of projects is way too high, and IMO a lot of existing “grey” maintainers, somewhat understandably, have no interest in changing their processes after so much time. But if you make it too hard to contribute, no one will bother.






  • Maybe I am not thinking of the access control capability of VLANs correctly (I am thinking in terms of port based iptables: port X has only incoming+established and no outgoing for example).

    I think of it like this: grouping several physical switch ports together into a private network, effectively like each group of ports is it’s own isolated switch. I assume there are routers which allows you to assign vlans to different Wi-Fi access points as well, so it doesn’t need to be literally physical.

    Obviously the benefits of vlans over something actually physical is that you can have as many as you like, and there are ways to trunk the data if one client needs access to multiple vlans at once.

    In your setup, you may or may not benefit, organizationally. Obviously other commenters have pointed out some of the security benefits. If you were using vlans I think you’d have at a minimum a private and public vlan, separating out the items that don’t need Internet access from the Internet at all. Your server would probably need access to both vlans in that scenario. But certainly as you say, you can probably accomplish a lot of this without vlans, if you can aggressively setup your firewall rules. The benefit of vlans is you would only really need to setup firewall rules on whatever vlan(s) have Internet access.












  • I got a bunch of board games for Christmas, and so far I’ve gotten to play:

    • Jaipur - Nice little 2 player game about becoming the richest trader in the market - this one had very simple rules, and felt competitive without feeling too “mean” - both games we played were close. The “camel” system definitely keeps things interesting.
    • Hues and Cues - A very simple game - you are simply trying to give word clues to get people to guess the exact color on the board - my family definitely had some fun, but we also unanimously agreed to play it only to 25 points - the board goes to 100 which would absolutely overstay its welcome. There were also issues with indoor lighting / shadows causing colors to appear different to different people.
    • Coup - This one is a classic and I was so excited to play it - basically a bluffing / assassination game. My family didn’t have too much trouble learning it, though we definitely did not play optimally. It’ll be interesting to see how I feel about different player sizes - we played with the maximum player count (6), which for better and worse meant that in time you could pretty confidently learn what was in the entire draw pile. I’m definitely interested in picking up the “Reformation” expansion - I think the new card is really interesting, and the entire faction system could really shake things up for experienced groups - and it’s cool that you can add one or the other or neither, and the game still works.