• 0 Posts
  • 19 Comments
Joined 3 years ago
cake
Cake day: July 5th, 2023

help-circle

  • Someone already told you this, but I want to elaborate

    Dwarf Fortress was essentially what Rimworld was cloned from. I’ve been downvoted into oblivion by rimworld fans for such heresy, but it’s true.

    For the longest time DF has been free, disgustingly ugly, and getting updates for like 20 years (think you can still download freeware version, but there’s a steam version now you can pay for. I bought it because it’s been a gem for YEARS and devs more than deserve my $20 or whatever it was).

    Rimworld took the DF game, made it sci fi, and made it not absolute dogshit to look at.

    You could always mod DF with icon packs that made it look a lot better but it was still pretty ugly.

    The steam version of DF looks much, much better but it’s not quite as pretty as Rimworld still, I think.

    Either way, if you got any time out of Rimworld and want something similar, Dwarf Fortress is your best choice. They’re both great and are IMO the best in class of whatever genre you’d call it.


  • Minced always means very very finely chopped. That’s a mince; it’s a preparation technique, not necessarily just for garlic.

    Crushing, at least in the context of garlic, generally means using a garlic press (most common in western cooking) or using a mortar and pestle. You can also crush with the side of a knife, bottom of a glass, etc but that’s a pretty rare method because you’ll usually end up with large globs or chunks and it’s very likely that people will get big ass mouthfuls of garlic, which most people don’t like (I do like, but most don’t)

    I can’t think of a time when I’ve seen a serious recipe call for crushing garlic in an uncontrolled manner like with the side of a knife. If you find a recipe that does so, just assume they mean to squeeze it in a press, unless in your judgement the recipe benefits from big clumps of garlic (mashed potatoes is a good example imo).

    But yeah, it’s either mince or press, if the recipe is unclear. I usually just press no matter what because I love garlic flavor and it’s easier than a mince - not because the cutting is hard necessarily, but because it’s extra cleaning of the knife, your hands, and cutting board takes more time. Easier to just rinse the press and toss it in the dishwasher.

    Slicing is different, as is roasting the cloves.



  • There’s no reason to try and salvage a ring camera. Their business model is subscriptions and data collection; I’m not aware of any projects to flash them with custom firmware, and my guess is they’re locked down hard to prevent it because that’s their entire revenue model, you’re free to keep looking but I’d bet it’s a dead end or at the very least much more than an afternoon project.

    Get a Wi-Fi reolink and connect it to an ONVIF capable NVR. You can use a paid solution like blue iris on a Windows machine or there’s plenty of free options for any OS of your choice. You can probably directly access the feed by navigating to the camera IP but I’m not sure, I don’t use mine that way. Without some kind of NVR software you won’t get a lot of the features people like such as notifications and two way talk, object/person recognition, etc.



  • Don’t take it personally. You think your neighbor wants to record you and your dog specifically? I mean, it’s possible, but it’s likely they just want to be able to see who comes to their door, or have a general idea of what’s going on around their house. I have my locally hosted reolink doorbell set to trigger on zones if things enter my driveway or approach my door, because that’s what I care about. I get a bunch of crap with kids playing in the street running onto my property, people’s dogs straying off the sidewalk, and the occasional vehicle turning around. But I also figured out what kids were doing dong dashing, and have record of what deliveries were suplexed WWE style onto my doormat so I can more easily handle stuff damaged in shipping.

    If you hear some crazy shit outside you probably get up and look out the window, don’t you? Well, a camera means you can go back and see what happened all the time. It’s a no brainer why people want them now that they’re cheap and accessible.

    Most people don’t have any idea how bad cloud cameras are for overall society, and they’ll probably roll their eyes and think you’re crazy if you try to dive into that conversation with them out the gate.

    They’re legally within their rights to do what they’re doing, so you can dislike it all you want but there’s not much you can do about it without some pretty diplomatic conversations. And a passive aggressive note left about them watching you and your dog isn’t going to help your case, at ALL. First you’ll have to become friends with them so they trust you, then find a way to educate them and change their minds.


  • Best option is to recommend people self host their camera feeds. People aren’t going to give cameras up, myself included, but keeping it all out of the ring/nest/netvue or any other cloud system is the way to go.

    People can record in public, and that includes the area around their houses. Having 100s of thousands or millions of cameras sharing feeds with law enforcement for warrantless surveillance or corporate data hounds for more people tracking is the issue.


  • Seriously. I’m getting really sick of OPs take, it is a fundamentally flawed and ignorant understanding of what privacy and anonymity are.

    If I’m at work and I need to speak to someone in private, we can go in a room and close the door. That’s a PRIVATE conversation. It doesn’t mean that nobody heard me say “hey Bob, can I talk to you for a minute?” It doesn’t mean nobody saw us go in there and shut the door. The conversation is still private.

    It’s NOT private if someone is listening up against the door, or if there’s a recording device in the room (in our analogy most messenger services and protocols fit here).

    Signal IS PRIVATE CONVERSATION. But there’s metadata about who is talking to whom, and it’s NOT anonymous for the reasons OP pointed out, even if OP is a rabble rousing idiot.

    Signal is private, free, accessible, and has a good feature set. Their foundation is a nonprofit with ethical motives, and it’s widely adopted worldwide because it fills a very real, very necessary niche.

    Signal is NOT anonymous. If you want to be anonymous online you’ve got a lot, possibly an insurmountable amount, of work to do. Signal should not be a part of that because it’s NOT anonymous.

    Quit strawmanning a good thing because it’s not what you’re looking for.


  • I disagree with you about the degree, actually. A degree in compsci is a baseline in the tech industry, like certs. Not really on the security side, more on development. It depends on what they want to do and where they’re willing to move to, luck, etc for them to be successful. Overall bachelor’s degrees have gotten less valuable in general and compsci is not what it used to be, but it’s still a good foundation. Pair it with some CompTIA or CCNA certs and they’re off to the races if they want to be versatile, or they can go deeper into some code/architecture based stuff if they want to stay in development.

    The domain of AI isn’t cybersecurity, it’s data collection and data analysis. AI in its current form is laid on the foundation of massive quantities of data. Collecting, sorting, and cataloguing all of that in useful/indexable ways is the cornerstone of machine learning (AI).

    It’s hard to say where AI is going to take us in the next 10 years, but if your kids stay AI literate they should be pretty good. I hate Google but they have some of the best AI training on the market right now, so as much as I hate to recommend them as a source I have to be pragmatic and mention it if you’re going to recommend something to your kids for their success.

    I don’t really agree with your assessment of where AI currently is at. It sounds like you’re probably underestimating the current capabilities. The problem right now is we don’t know how to control it, not that it’s not capable enough. On top of that the pace of acceleration is insane so even if you’re on the mark and I’m not, the field will have shifted so far in 2-3 years that your position will no longer be correct and mine will be then. But, I do agree that cybersecurity isn’t really “the next domain” of AI, even if it’s integral to it like it is with all computer stuff.

    I don’t think they’d go wrong getting into security, it’s not going anywhere any time soon. If anything it’s going to continually grow with technical advancements and expansion of application.


  • I think everything you learn will for the most part apply everywhere, there’s just no singular definitive source for everything. It’s like saying you want to learn politics, or you want to learn construction, or you want to learn math. The field is so wide that you can’t just get a single book about everything.

    You definitely can specialize in sub fields though. My favorite areas are network architecture/security and social engineering. My primary skills lie in disaster planning and recovery though, because I migrated from a different industry where I applied pretty much the exact same thought methodology.


  • You can find plenty of free sec+ study materials to get you started. It is basic, yes, but real cyber security comes from understanding systems, protocols, and best practices and honestly I’m not sure there’s a good book that can give you that. I could be wrong, we’ll see other posts if they show up, but starting with sec+ material and then reading deeper on things would be my recommendation.

    Understanding active directory, Linux permissions and file structure, VPNs, firewalls, different security appliances, hashing, crypto methods/algorithms, handshakes, transmission protocols, VMs, cloud architectures, backup strategies, social engineering, etc - it all plays a part. You could find a number of books and resources about any of those things.

    Certs like LPI Linux essentials is pretty good if you’re unfamiliar with Linux basics, that’s another one to look into where you can find free study material.

    I guess what I’m saying is that cyber security is REALLY complicated and will always be tailored to the threats, the assets you’re trying to protect, available budget, and systems used. It’s why certs are the industry standard of recognition, because there’s really not a good way to gauge competency unless you’re assessed by another competent person in the field. And you may be AWESOME with an active directory setup but be lost in Linux, or need to work with embedded systems, but be weak in other areas because you’ve never worked with it, so certs kind of level the field so you can be at least aware of stuff if you’ve never worked with it.

    I would not consider myself an expert in the field but this is my perspective. You can learn for the next 10 years for free and by just experimenting on old hardware and with VMs and a robust LAN.

    The cyber landscape is so, so complex. There’s an endless number of options and potential vulnerabilities. Defense in depth can’t really be taught from a single book, but by identifying areas you’d like to learn more about can take you as far down the rabbit hole as you like.


  • If you don’t mind eating the same food as a main meal for a bit this method works:

    Make a big entree of something on an off day. Chili, lasagna, slow cooked food, whatever.

    Have some stuff ready to go as sides that require very minimal effort (sides like rice, frozen bagged veggies or fresh - fresh is best but if apathy takes hold then frozen is fine

    In the evenings microwave some leftovers from your big entree and supplement it with a quick and easy side. It helps break up the monotony if that matters to you, and it’s easy


  • Maintaining geosynchronous orbit does require maintenance because there’s still a non-trivial amount of air resistance that will slowly decrease speed and de-orbit the satellite.

    With a bit more detail: there is a specific altitude and speed that an object must maintain in order to stay in orbit above a fixed point above the earth. Earth’s mass, and thus its gravitational pull, dictate this speed and altitude through physics. There are other speeds and attitudes that can achieve the same effect (geosynchronous orbit) but they require propulsion to maintain. With the Earth, that “sweet spot” where you can achieve the correct orbital velocity to keep a geosynchronous orbit is still within the atmosphere, albeit very thin, so friction with the air slowly makes satellites lose speed. An orbit is based on speed (speed up and you get farther away from the planet, slow down and you draw closer to the planet) so as the satellites slow down they have to periodically “boost up” or eventually their orbit will decay and they’ll re-enter and burn up.

    Self destruct? Not a good idea. Controlled re-entry is essentially self destruct.

    More space junk from just a random explosion is really bad. Space junk is really bad. If it gets bad enough it can potentially have a cascading effect where space junk collides with other stuff and causes more space junk and explosions, starting a chain reaction that creates a scatter field of junk that traps us on the planet. The concept is known as Kessler Syndrome.

    https://en.m.wikipedia.org/wiki/Kessler_syndrome


  • Lists of real passwords are very useful for helping attackers crack passwords. Lists can be hashed with various algorithms and then the hashes compared against exposed password hashes. If a hash matches then you know the password, without having to actually brute force the password in order to try and match the hash.

    Unique, strong passwords are the most safe. Reused passwords are for sure weaker if you use the same login/email along with them, but even if you use the same password with unique usernames, it’s still less secure than unique passwords.

    I can use pishadoot everywhere on the internet (bad for other reasons, but as an example) and if I use unique passwords everywhere, my accounts aren’t any less secure, they’re just all easily tied together. If I use unique usernames everywhere but reuse the same password, in theory ALL of my logins are now more vulnerable to attack.




  • You’re not wrong about reolinks, amcrest, hikvision, etc but their price:quality can’t be beat and they work well with many different NVR software suites, which makes them popular.

    If you’re concerned about how they call home (they do, I’ve sniffed packets on my network to test the rumors and seen it on every one of them), you need to isolate the cameras off of the internet so they are blocked from the outside connection. This can end up being mildly tricky to very complicated depending on your network equipment, the way your LAN is set up at home, whether you want to view your cameras remotely, etc, but it’s the most cost effective long term option that is not subscription/cloud based.

    I use blue iris on an old computer. It works great. I have unifi network gear, and I tried some of their cameras out but they’re not really ONVIF compliant and they’re extremely expensive for an equivalent Chinese brand. That’s the made in USA price, and tbh Unifi cameras aren’t even that expensive, they’re more “prosumer” for small business deployments or nerds at home. They have a walled garden ecosystem that I dipped my toe into and didn’t care for some of it, but I still use their access points, routers, and switches because they’re great quality and really easy to config.

    But, if you have never done any of that, you might just want to go with an off the shelf solution or be willing to spend a lot of time reading. You DON’T want to mess up your network security trying to install local cameras if you’re not sure what you’re doing.

    One thing that hasn’t been mentioned yet is an RF/analogue camera kit. It’s not as easy to set up as POE (two cords to each camera and they’re way bigger so running them through walls will do more damage that you have to patch later) you can get an all-in-one NVR+4/8/12/16 etc camera kit with as many bells and whistles as you want. It will be cheaper as well and you don’t have to worry about network bandwidth issues because it’s analog. The feeds are super nice.