I don’t know how the others set theirs up, but I use “views” in bind 9 https://kb.isc.org/docs/aa-00851

Essentially, the DNS I run on a router-like box much like you describe uses a different database depending on whether you query from an internal IP address or a public address. For me, the advantages are that I can let devices on my local network declare their own names to DHCP and enter them in DNS without worrying about the outside world. Mu internal network doesn’t crash if my ISP changes my address, Certbot happily requests certs for any site with a public address, and that cert works seamlessly on the corresponding internal address, no wildcards or DNS challenge required.

So, I have to admit, if there’s a crazy guy on one street corner yelling “2 + 2 = 4,” and another down the street yelling “2 + 2 = elephant,” I will be more interested in elephant dude. More curious to figure our what’s wrong with him, how he’s managed to stay alive for so long, etc. More curious to know his opinion of 2 * 2 and 2 + 3. Definitely not going argue or push back much on the elephant claim, though.

I can imagine that political reporters, inundated with the same bland, boilerplate statements over the past two decades, would be fascinated by people spouting obvious sociopathic garbage. It does seem irresponsible to entertain that fascination, when you know that a certain part of the population can’t recognize it as obvious sociopathic garbage.

I’ve always used heat-only, cool-only, and off modes on the thermostat, but I set them manually. Actually, I think it’s only a relatively recent firmware update that the thermostat even got dual-mode. In my climate, there’s probably not much risk of triggering both heating and cooling on the same day, anyway.

My comfort range is 68-78°F/20-26°C, though, and in I’m generally in heat mode Oct-Mar & cool mode Jun-Sep. The transition months I generally manage by manually opening windows at the appropriate time. It’d be nice to get some window servos, because sometimes it’s not cool enough to open the windows until well after I’m asleep. Or I just forget. Window program would definitely need an outdoor humidity condition - don’t want to open summer windows, even if the temp is down to 72, when the dewpoint is also 72.

I mean, I think we all recognize that these are gambling sites trying to skirt gambling regulations, so all of their arguments are going to seem ridiculous. “We’re a prediction market, and individuals with specialized knowledge improve our accuracy.” “We allow people to hedge against adverse events, like Elon Musk tweeting over 300 times this week.” “These are financial contracts, not wagers.”

The interviews I’ve seen with “prediction market” CEOs, they’re openly begging for people to trade on confidential, privileged, or classified information, because that’s the source of their markets’ supposed predictive power.

Don’t even get me started on the 1990s. Every new processor generation actually felt faster. Web pages had blinking banners because the creator thought it looked cool, not to advertise a personal information vacuum. There was no better introduction to the public’s absolutely awful sense of style. But I went from talking to international friends for $0.50/minute to free, and it was amazing.

Those companies have extremely well developed propaganda machines. They have to sell their technology and products as benefits to governments (i.e. society) and solutions to chaos (i.e. crime and terrorism), and they have extremely well refined language to describe themselves in positive term. If you don’t look past the company line, it’s easy to believe that the skeptics and warnings are all just FUD from haters, especially when the propaganda pays your mortgage.

Then Palantir goes and publishes an actual fascist manifesto…

To me, that’s the ‘fancy search engine’ mode of AI where it works well and basically focuses the human effort. A needle-in-haystack problem. It might still be missing things, but they’re things you’ve already missed yourself, so no loss.

It’s different from asking Claude, for example, to create a new guest VLAN with limited internet access and access to only a specific service on the private network. For that, you have to 1) trust Claude because you lack the expertise to review, 2) spend time learning the config system well enough to review, or 3) already know the system well enough to check it. 1) just sounds bad. 2) sounds like Claude isn’t saving much time, but maybe helps focus the human where to study, and 3) seems like the human might have been able to just do the job in similar or less time than writing the prompt + reviewing the result.

I feel like the big mistake they continue to propagate is failing to distinguish among the uses of AI.

A lot of hype seems to be the generative uses, where AI creates code, images, text, or whatever, or the agentic uses where it supposedly automates some process. Safe uses in that way should involve human review and approval, and if the human spends as much time reviewing as they would creating it in the first place, then there’s a productivity loss.

All the positive cases I’ve heard of use AI like a fancy search engine - look for specific issues in a large code base, look for internal consistency in large document or document sets. That form lets the human shift from reading hundreds or thousands of pages to reading whatever snippets the AI returns. Even if that’s a lot of false positives, it’s still a big savings over full review. And as long as the AI’s false-negative rate is better than the human, it’s a net improvement in review.

And, of course, there’s the possibility that AI facilitated review allows companies to do review of documents that they would otherwise have ignored as intractable, which would also show up as reduced productivity.

Not familiar with opnSense, but on your PC, you can check the address it assigns - if it’s /128, it’s a single address.

My ISP does not assign a prefix for delegation unless you specifically ask for it. I had to add “request_prefix 1” to my dhclient.conf file to get a /64 I assume opnSense has a friendly setting somewhere for that. For me, the key phrase was ‘prefix delegation.’ After I got that, I could search around and get my solution.

Pretty sure that reflects its stage in the legislative process, not support/opposition. i.e.: out of 100 bills that get introduced, only 1 becomes law.

It’s almost like being embedded in a profit-motivated information bubble makes you look crazy to outsiders.

Eh. Sounds like the queer version of a “the only moral abortion is my abortion” pro-lifer. It’s kind of a thing over there.

Because US businesses will only compete and innovate if you force them. Leave them safe behind ramparts of protective trade policies, and they’ll keep coasting on 1990s technology, as the country as a whole slowly becomes a backwater.

Logging power use by my server was one of the motivators to add homeassistant. That also showed me that specific containers use a (relative) ton of background power. Immich and authentik each raised power consumption by 2-3 watts, so I leave them down unless I have specific need.

I’m going to go with: foot/toof or feet/teef. Good anadromes that also stand at opposite ends of the body. Except for the scientific units (eg, ohm/mho), they seem to generally be unrelated words more by chance than intent.

fud: Fear, Uncertainty and Doubt. A tactic for denigrating a thing, usually by implication of hypothetical or exaggerated harms, often in vague language that is either tautological or not falsifiable.

Shelly makes miniature switches and power monitors that are small enough to fit inside a 1-gang electrical box beside a manual switch or outlet. It’s tight, but it’s a fair way to convert existing hardware. Zigbee/bluetooth/wifi https://us.shelly.com/products/shelly-1-mini-gen4

That’s just systemd adding a birthdate field to their userdb. Doesn’t require that it be filled out or accurate, and especially doesn’t require it to be validated against a government database. I don’t see it as fundamentally any different from adding a userdb field for favorite color, phone number, or blood type.

Without 3rd party validation, I really don’t see the privacy issue with an age field. Without verification, it is, at worst, one more byte available to hash into a unique identifier, but you can feed that field from /dev/random at every query and poison even that hypothetical.

If you only need it to be accessible inside your home, then you just need to run your own DNS. Have your dhcp point at your DNS and your DNS declare itself the master for your domain.

To get full functionality, you’ll probably want to have your registrar point to the public IP you get from your ISP as the domain’s authoritative name server.You should be able to script it to update the registrar when your ISP changes your IP, but that usually happens infrequently enough to do manually. Obviously can’t do that if you’re behind CGNAT.

To get Lets Encrypt certificates, you can do the DNS challenge. If your ISP gives you a (even inconsistent) public IP, you can do fancy ‘views’ with your selfhosted DNS, where it responds with private IPs inside your network and your ISP-given IP outside your network. I have certbot set up to expose my DNS & web server just before it starts its renewal process, then close the firewall after. Once you have the certificate, you can move it to where ever it will actually be used.