• 1 Post
  • 52 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle
  • In my opinion NAT is a hack that makes lot of things harder than they should be. STUN and TURN are services that are created because there is no easy way to connect two hosts between different NATs. UPnP for port forwarding is another. CG-NAT is even worse. I have heard of so many people having problems with it.

    Breadcast is messy. It is like screaming into a room and waiting for an answer. Multicast lets the computer decide if it wants and needs to listen to a specific group message.

    IPv4 didn’t have cidr from the beginning. They only had classes. IPv6 was designed with complex routing and sub routing in mind.







  • There is a whole field, that looks a bit like religion to me, about how to test right.

    I can tell you from experience that testing is a tool that can give confidence. There are a few new tools that can help. Mutation testing is one I know that can find bad tests.

    Integration tests can help find the most egregious errors that make your application crash.

    Not every getter needs a test but using unit tests while developing a feature can even save time because you don’t have to start the app and get to the point where the change happens and test by hand.

    A review can find some errors but human brains are not compilers it is hard to miss errors and the more you add to a review the easier it can get lost. The reviews can mostly help make sure that the code is more in line with the times style and that more than one person knows about the changes.

    You can’t find all mistakes all the time. That’s why it is very important to have a strategy to avert the worse and revert errors. If you develop a web app: backups, rolling deployments, revert procedures. And make sure everyone know how and try it at least once. These procedures can fail. Refine them trough failure.

    That is my experience from working in the field for a while. No tests is bad. Too many tests is a hassle. There will always be errors. Be prepared.



  • Windows Defender is the default anti virus solution on Windows by now and it is good. But no anti virus is perfect. It is a good idea to have a backup strategy if you plan on having any important data on your PC. In case of encryption malware and hardware problems.

    Phishing is also very problematic practice that the anti virus can’t protect you from and even experts can fall into the traps. So you have to be careful with your account credentials.

    Don’t disable Windows updates or postpone them indefinitely (though windows makes that harder to do anyways). Also be aware that your PC might need firmware updates too to stay secure. It depends on the manufacturer of your hardware how and if these are provided and how you install them.

    Lastly I can recommend using Firefox with uBlock Origin. Using an ad blocker can help you stay safer and Firefox has very good support for them.



  • There have been a few bugs in the past years that let you take over a phone without user interaction. There was one where you only need to receive an SMS (it was invisible even) and your phone is infected. Another one was a vulnerability in wifi calling and voice over lte.

    A phone is not a passive device that only gets something when you request it. You take also it with you to public places, use it in open wifi networks and you get calls. All that while being used for security critical stuff like 2FA, banking and payment.

    You shouldn’t use a phone without current security updates for much more than calling. It is a time bomb. If you want to educate yourself further you should look at “zero click vulnerabilities”.



  • Yes and no. For apple you can use their phones for quite a long time securely. For Android that is a very different story. As far as I know only Google with their new pixel phones and Samsung have offered more than 2 years of updates. After that time your phone becomes a security risk. So make sure your devices receives updates or can be used with a custom ROM (though that can be insecure as well).






  • If you have budget constraints why not go for a used computer. I recently picked up a really nice used Dell XPS 15 for under 400€. Going cutting edge with budget constraints is rarely a good idea. Good hardware from a few years ago might outperform current budget hardware. What you should look into though is of it has recent bios support (I know Dell XPS are very good in that regard).



  • I host my own Lemmy and Mastodon instances. It’s hard to say what I actually pay because I use the server for a lot of things but I guess the monthly price per user is about 1$ or less. The bigger instances are of course more expensive. That is why it is important to spread out communities across instances.