I work at a top 50 credit union in the USA, total opposite around here. We just added multiple CyberSec analysts and Cyber fraud analysts in the last 12 months and we are still looking for more.

Everybody I know at other community banks and credit unions is doing the same, infosec is booming.

Do what you want cuz’ a pirate is free, you are a pirate!

Ahh so it’s not just me! Glad a fix is on the way, I’ve been having a bunch of performance issues since the last update.

When you joined the CIA, you probably thought you’d be doing real spy stuff, huh?

Go sit on a Flock camera and make it disappear.

There are different reasons to run different things. Some apps are not able to be run as containers, or don’t make sense to run containerized.

VMs offer better isolation between systems, which is important for high-security applications.

Traditional Hypervisors also allow you to easily run fleets of completely different OSes on the same hardware, which you can’t do with containers.

On the other hand, if you want/need high scalability, extremely efficient resource usage, and you don’t need to run radically different OS environments simultaneously, containers, especially Docker containers or Podman containers are a great choice.

Incus containers are a great middle ground that I’m a fan of more than Docker/podman containers or traditional VMs. They are system containers, vs application containers like Docker/Podman.

That means they are actually full-fledged Linux distros by default, but are still much smaller than a traditional VM.

Also, for any of these solutions, if you’re constantly doing admin tasks manually, you’re doing it wrong. All modern platforms have APIs or other ways to interact with them via code.

For my own setup, I have everything. My main server runs XCP-ng for the hypervisor, and I have several traditional VMs on it, including my primary NAS. I also run a virtual Incus host that I have my Minecraft server running in, and some random other system containers. I have a Docker host VM, but I don’t really use it.

I also have my home media server which is a standalone system running TrueNAS on bare metal with Tailscale and Jellyfin running as Docker containers within TrueNAS.

My setup is messy because it has been built slowly over several years, and I don’t have enough time or energy to rip it all down and put it back together in a more optimal way.

Oh yeah, great, sounds awesome. Can I get in line now to not use it?

If you’ve already got Qubes and Xen Hypervisor running, your technical level is high enough for sure. And honestly, your security is already probably good enough.

Qubes has very secure defaults, I don’t think you need to do anything else, honestly what you have already might be overkill, but idk your use case.

Make sure you can’t see your torrent/download machine VM from any other devices on your network. Use Nmap as long as it’s your network. Don’t use it on a corporate or university network, it will likely get your device totally locked out and you in big trouble.

Let’s step back actually.

• What is your current PC running for an OS?
• What VM software are you using?
• What is your level of technical experience? (1 through 10)
• What are you the most worried about happening to your computer and home network?

Idk what software you’re using, but most VM software has an easy way to take a snapshot of the VM state. If you’re about to download something risky, take a quick VM snapshot, so if it ends up being some kind of malware, you can just roll the VM back to its earlier state without issue, takes like 2 minutes.

If you’re worried about malware spreading through your network, you need to isolate your devices. The most common way to do this is with VLANs, but I don’t know what your home network looks like, and if you just have a typical home setup with your ISP’s modem/router and all your devices plugged into it or on the default wireless network, you won’t be able to do that.

You could also use something like UFW on Linux to only allow internet traffic and block any traffic inbound or outbound to your LAN network, isolating your PC from all other devices on your LAN. This isn’t great, because if your host is compromised, then your host-based firewall could also be compromised and the malware could then get out to the rest of your network.

You could invert this and have all your other devices on LAN set to block all traffic from your specific PC, which would be more secure, but also a pain to configure, plus it assumes all the other devices are able to be configured in that way on your LAN.

There are a bunch of other solutions, but it depends on your setup, your technical skill level, and your threat profile. If you’re just torrenting cracked games and random software, that’s somewhat risky, but not really that crazy if you are running it in a VM with rollback snapshots.

My understanding is that this is just a sort of open forum/presentation on this as an idea. That being said, it’s a stupid-ass idea.

I don’t want my computer to “love me back” it’s a fucking machine that I built to do my work on and play my games on. I am the only form of agency I want having access to it.

If I ever want an AI agent running all the time in the background doing shit for me, I’ll fucking install and configure one myself! I want my OS to be an OS, not some “smart”, interactive fake person that will hallucinate random Bash commands, fuck my partitions up randomly, and bork my system.

I alone am the only thing that I want destroying my system, if that’s going to happen, it will happen by my own hands, my own shitty commands, my own piss-poor scripts.

This AI delusion and hype cycle is more infuriating than the NFT craze, and that’s really saying something.

1. Get an MMA kick pad or build one yourself, attach it to a horizontal bar.
2. Spend the next 3-4 months practicing kicking it precisely in the center as hard as you can. Do flutter kicks and squats as well to add strength.
3. Wear steel-toe boots/pointy high heels at all times when the Cats in the Hats are afoot.
4. When chased, face the attacker, assume kicking stance from your training, await the assailant until their crotch is within optimal striking distance.
5. Follow your training. Don’t kick the crotch, kick through it, as if you’re going to kick the inside of that cat’s top hat.
6. Yell, “Ughh! That top hat is tight! Now run that shit, bi*ch! Ynawmean!!”

Man, I really hate this economy. This AI bubble cannot pop fast enough, but I fear we have at least till the end of this year, possible Q2 of next year to see it happen. Even then, it’s not like it will be instant, and capacity won’t just instantly switch over to normal consumer components. Assuming even more tech idiocy doesn’t happen, we’re still years away from a ramp up to “normal” capacity.

I’m even more scared that the era of personal computing is in it’s last days. The combination of drastic cost increases, and the dominance of corpo-tech working 24/7 to destroy ownership completely, might be too much to overcome.

We’ll see a return to the era of computing similar to the 80’s and early 90’s. Building your own PC will require lots of money and technical skills. Pre-builts will be a distant memory. PC builders will be spoken of in similar terms as HAM radio people are now, hermitic nerds who are hardcore into their ancient, dark, tech wizardry.

I’m curious, are you this stupid professionally, or is it just a hobby?

1. No it doesn’t require a login to view, I literally just clicked and watched it.
2. I never said or implied that anybody “owes” me a content warning. It was merely a suggestion out of care & concern for other people who might be sensitive to this sort of content.

Brutal video, probably should have a warning for graphic content on this post. The soldier in the turret got destroyed by that blast, terrible.

I wouldn’t fight in any military anyways, but I especially could never be a tanker, I get claustrophobic pretty easily.

Thanks!

Whatever their rebrand is these days lol.

If that many evil people/corpos are involved, run as fast as you can the other direction.

Give me community-based distros like Debian, Arch, Mint, etc. I like my Linux democratic, anti-corpo, and inclusive.

Check out Linode, it’s easy to use, reasonably priced, and as far as I know, hasn’t done anything disgusting.

Only downside is that they were acquired a little while ago by a publicly traded company, so the likwlyhood of enshitification is higher.

I don’t know the details, and honestly I don’t really care for the drama, but if you’re not happy with the current options for servers and governance, just host your own?

You seem to have a pretty clear idea of what you want to operate like, and you said in another response, that you have experience building servers.

It’s not hard to get a server built that has enough compute and storage to support the kind of capacity you’re talking about. Any used, corporate desktop from the last 7-10 years has more than enough compute to handle hundreds of active users. Storage is the main issue, but that’s not unattainable either. As of a week ago, Server Monkey was selling certified refurbished Dell enterprise 6TB HDDs for $175 each. $700 gets you around 18TB with one disk for redundancy using ZFS. 18TB will hold quite a bit of dank memes, especially if you limit the max resolution to something reasonable.

1,500 new pictures per day, all 50 megapixel JPEGs is roughly 670GB per month, so even at that pretty crazy rate (by Lemmy standards) your 18TB server would last two years before getting totally full.

Backblaze archival storage is $1,500 per year for 18TB if you want long term secure cloud backups for your entire server, that’s just $125 a month that you’d need to fund yourself or get donations for. Not nothing, but hardly unattainable for a small instance. I used to play on a tiny Minecraft server that had maybe 15 active players, and they made more than $125 per month on donations.

I mean, again, all of this code is FOSS. If you really feel that your approach would be significantly more successful, dive in and build out your own instance. Get some friends involved, split up the costs, market yourselves, get some nice branding, build alliances and partnerships with other instances, etc. There is literally nothing stopping you.