Sooo, are the tech bros just oozing over from the AI bubble (not enough empty promises available anymore?) or is that a symptom for their realization, that the current scam might get busted in the foreseeable future and they want to get in on the next Blockchain / AI / metaverse schmutz, to keep leeching in VC / tax money?

I will get some popcorn…

To be honest, I think you are the one lying to yourself here. From the linked report:

Productivity and Business Processes $37,847 14%

Intelligent Cloud $39,306 32%

More Personal Computing $12,854 (4)%

“(4)” equals “-4”.

Even MS isn’t using windows exclusively. And they don’t care, as the long term scenario they are aiming for, is, that everybody only uses a minimal system and rents compute in the cloud. That’s, where the money is for them. I am quite sure, they don’t give a single eff, what those devices are using as an OS. It won’t be win 11 for sure.

So everything Windows as we know it, is what’s consumer GPUs are to Nvidia.

What are you trying to tell us?

True, it gets mushed into HDR10, afair.
We both might have found the same ancient GH issue. :)

If I remember correctly, I’ve tried different client options as well, but had other issues with them, like missing audio after pause/resume, not switching to selected audio track and so on.

Also, none of them were able to play DoVi FEL and fell back to MEL.
Might be my player / Android TV restriction with my specific player, but with CoreELEC on the same box, FEL is fully supported and is a significant improvement, IMHO.

Same here with DoVi profile 7. I installed CoreELEC on a USB stick and boot my player (Xiaomi TV box 3) from that if I need DoVi 7. My guess: Anyone setting up and maintaining a JF instance should be comfortable doing the same.

What kind of client? In browsers usually CTRL + F5 solves those kinds of problems for me. In other cases (apps?) force quitting and restarting the client might help.

Meanwhile, I use -site:reddit.com more and more.
We are not the same. ;)

It’s unsafe for their profits.

Yepp. Both of them on the counter all the time. As it’s a Mokkamaster and a Gaggia Classic, their foot print isn’t that large and I don’t have the room to put them away anyway.
Also, no spouse’s opinion I have to consider. :)

If I were in your situation and had the room, I would most likely store the device and set a goal for myself to the tune of “If I’m not using it in 2/3/5 years, I’m selling that thing.”

Enjoy your nice machine.

Hi, i think there’s nothing wrong with having two different tools, that produce similar results in completely different ways and with differences in quality achieved.
I have an espresso machine mainly for my own enjoyment and a drip machine for guests. Sometimes I’ll drink a cup from the drip machine when a guest is around I’m feeling like it.

Kids will grow up faster than you expect and with that comes a little bit alone time for the parents here and there. You may enjoy the fancier option than a lot. If not, you could sell it then?

Ich rippe alle gekauften Scheiben mit MakeMKV unter Windows oder Linux (Manjaro).
Funktioniert problemlos. Laufwerke sind relativ einfach zu unterscheiden:

• Alles bis 1080p mit vielen Geräten oob möglich. Wenn einer:m das reicht, braucht man sich mit dem Thema LibreDrive nicht auseinandersetzen
• LD geeignete und geflashte Laufwerke muss man haben, wenn man 4k rippen möchte. Das ist mit ein bisschen Recherche und 15 Minuten Arbeit getan, nach meiner Erfahrung.

Will man nicht selbst basteln, gibt es online “UHD friendly” Laufwerke zu kaufen. Werden nicht hinterher geworfen, aber das Angebot ist da.

Will man sich mit dem ganzen Geraffel nicht auseinandersetzen, gibt’s auch andere Quellen:

• mediathekviewweb.de Hat die meisten Sendungen und Filme des ÖPNV in einer durchsuchbaren Oberfläche zum direkten Konsum oder Download verfügbar. Teilweise auch OV.
• BR in der Bibliothek ausleihen und rippen.
• filmfreunde.de Streaming Service der öffentlichen Bibliotheken. Habe ich selbst nicht nicht genutzt, bietet afaik keinen Download.

Ich schließe mich dir grundsätzlich an, so wie es aktuell ist, ist es für die Meisten eine Qual. Da ich nicht sehe, dass es auf absehbare Zeit besser wird, gehe ich mit der Situation so um.

Oh, true. I’ve read so many infos about different services lately, that I must have confused that with something else.

Thank you.

Thank you for the very comprehensive write up.

Authentication will be my very next project after I solved another minor problem I’ve become aware of just yesterday.

It’s at least the second time, someone mentioned Anubis in this thread.
I’ve checked the site but have to do further digging about the concept. Mostly because “AI” isn’t something I adore that much, but that’s a me problem. :)

I was too late for that, unfortunately and got <lastname>.<town> which also some people don’t comprehend.
Although it’s the capitol and there are sites from public services which use that TLD as well.

What genuinely pisses me off: Prior to that I got <lastname>.name, and there are sites, which refuse to accept it as a valid TLD when I try to register with them.

Edit: I got <lastname[with umlauts]>.<countrycode>, tho as this was available, but those don’t work that well. Or didn’t, when I last checked.

Thanks for the suggestion, I will take a look at Anubis.

There are no SSH ports open to external, as everything I run is locally in my LAN, I do not have use for externals SSH access and don’t want to open that vector.

The services that I (want to) offer to the family, are the common selfhosters finest:

• immich
• Stirling PDF
• Jellyfin

As I do not have a authentication provider yet, the services which require an authentication by user/password are prone to brute force attacks, I want to mitigate that first and foremost.
In the mid to long run, I plan to also deploy an authentication provider for those services like Authelia, TinyAuth, PocketID, Authentik or <you name it>.
As there are so many of them and the opinion of which is best differ wildly, I have not yet decided and am in kind of a analysis paralysis. :)

Thank you for bringing that up, I was wondering that too. As in: “This one has something to hide. Let’s poke harder.”

Did you try CrowdSec as someone else suggested? Could that be a mitigation as those IPs could be filtered out in the long run, if I understand the concept of CS correct?

Thank you for suggesting the region block on Unifi, that’s a good tip.

I have that previously set in place globally under settings -> security -> protection -> region blocking.
So on a less sophisticated level and not as granular as you.
Yours seems to be much better and I will take a look at it later. At the moment I have way too many ideas and projects boiling, to add yet another one… ;)

Thanks for bringing it up.

Before I dove into that project, I was checking logs on npm and the service I am already exposing. It seems to me, both only get http GET requests which on npm all get a 404 response.
I don’t remember what the service does with those, but I will investigate later. As I didn’t panicked, I guess it wasn’t that bad.

There are basically no brute force attacks on the service yet and the admin account is only allowed to login from internal IPs.

One initial aspect to further harden the exposed systems were the logs in the UDM which show frequent blocked attempts of varying severity.
This may be security theater and I am not able to assess whether the UDM is a “good enough” protection of the most common attacks.

As I see it, at the moment the UDM already blocks most of the (more sophisticated) attacks and leaves only common requests for the services to handle.

Long story short, as I see it, the UDM has the role of ingress server in my setup.

Thank you very much for your input. I will look into the third option.
Thought of it, but did forget it over tinkering the last few days. :)

Angefangen habe ich mit no-ip oder so, dann duckduckdns, jetzt bei dynv6.com. Sind alle kostenlos. Der große Vorteil bei dyn6 ist, dass man nur dass Präfix (2003:1:2:3::) per Script übergeben und für Subdomains nur den Interface Identifier (::4:5:6:7) angeben muss. Daraus wird dann die ganze ipv6 gebaut (2003:1:2:3:4:5:6:7) womit sich Dienste gezielt ansprechen lassen. IPv4 geht natürlich auch.

Die Wechsel habe seinerzeit durchgeführt, weil ich immer wieder Probleme hatte, interne Dienste zu erreichen. Ursache war natürlich eigene Dummheit (Portweiterleitungen falsch).