zeluko

Indeed, not classically, but there are HSTS preload lists you can put your domain into which will be downloaded by supported browsers.
And via HSTS you can include all your subdomains, which would then force proper TLS connections for those you havent visited before too.

With the new TLS1.3 version we are getting the HTTPS / “SVCB” Record which not only allows ECH but also indicates to the client similar protection policies like HSTS. (RFC 9460)
ECH will then make such attacks impossible on TLS-level, assuming DNSSEC is used and client can make an integrity-checked lookup e.g. via DoH/DoT or validating DnsSec themselves.
The strength of this depends on the security-chain you want to follow of course. You dont need DNSSEC, but then the only integrity-check is between DNS-Service and Client if they use DoH/DoT (which is usually enough to defeat local attackers)

Your own servers probably also dont have HSTS enabled, or clicking continue will be disabled (if not overwritten in your browser-config)

Thats why we now have certificate transparency reports and CA-records.
Sure not perfect, but at least with a compliant CA it wont just happen in the dark.
At some point you have to trust someone.

Thats why we have HSTS and HSTS preloading, so the browser refuses to allow this (and disabling it is usually alot deeper to find than a simple button to “continue anyways”)

That was an example for things that can be engineered…

afaik sustainable, but expensive… Italy and Greece arent really known to have fat stacks of cash for such projects

umm… isnt the government or rather the judikative already deciding what extremist is?
How would specifically this be different?

I can understand the problems thos causes for the platforms, but the government injecting decisions is something you focus on?
Not to forget the many other places they inject themselves… one could say your daily lifes because… careful now… you live in the country with a government, whaaat?

I mean EndeavorOS can install the same gui package manager as Manjaro has, pamac.
Game support usually comes from using packages you need and those packages being up to date to support latest changes like fixes.

Am a long time EndeavourOs user, quite happy, it allows everything i need and pacman never broke on me… cant say the same about apt, when using non-standard repositories (for some up to date packages)
And the AUR is awesome. Has many packages not found in the normal repositories, just some have to be compiled which can take a bit of time, but i dont have to fiddle with it.

Yeah, it needs those rules for e.g. port-forwarding into the containers.
But it doesnt really ‘nuke’ existing ones.

I have simply placed my rules at higher priority than normal. Very simple in nftables and good to not have rules mixed between nftables and iptables in unexpected ways.
You should filter as early as possible anyways to reduce ressource usage on e.g. connection tracking.

Which can include programs which do this.

With this many, is he becoming the Terminator?

I can change my screens too on desktop, pretty neat.
Unfortunately its a super simple implementation which doesnt take into account the brightness between different screens.

Ideally there should be a master slider and one per screen. The master slider should then use theother sliders current value as scaling factor to change them.
A more complex option could then also allow setting the brightness of each screen which would allow for better setting via the master slider. (not sure if this information is already available)

Or you use TPM, which you can get the key out of

I dont understand why this wasnt already a rule?
Why is the US so retroactive? Something goes bad and only then you start thinking about it and how to stop it in the future, when it becomes a big problem.

So i understood you just want some local storage system with some fault tolerance.
ZFS will do that. Nothing fancy, just volumes as either blockdevice or ZFS filesystem.

If you want something more fancy, maybe even distributed, check out storage cluster systems with erasure coding, less storage wasted than with pure replication, though comes at reconstruction cost if something goes wrong.

MinIO comes to mind, tough i never used it… my requirements seem to be so rare, these tools only get close :/
afaik you can add more disks and nodes more or less dynamically with it.

To be fair, they are talking about the OpenAI end user version, not the models themselves.
Its still sketchy to send your data willingly to them and hope because you pay per request, its not getting tracked and saved.
My company is deep into microsoft, so we all get Bing Chat Enterprise.
Microsoft says it doesnt store anything and runs on separate systems… i guess with a company-offer they are more likely to put more protections in place because a breach would mean real consequences.
(opposed to a breach with end-users, most of which dont care or would ever go through the legal trouble)

Went from debian to arch and oh boy i like it.
Bleeding edge for the latest features (most of them stable), Arch Wiki is awesome and the AUR is really nice to have for managing and installing software from external sources.

The business offers are pretty good. Its like 15€/M for real Unlimited and full Speed. And even has 2 Sim cards included.
But the reception and speed you get are not very good overall once you leave cities, the best provider is only a bit better than the worst…
thanks CDU, having to spend lots of money for frequency rights really helped get better service.

These banners mostly arent asking for 3rd party cookies, but cookies which arent necessary for the usage of the website like analytics.
And to be fair, even if you decline, you only declide storing of the identifier, they can also do fingerprinting without needing cookies.

Thats why you need Licenses to stop that… well jf you can afford to fight them at all, haha.
Money always wins…