Nobody is credibly suggesting that everyone should switch to IPv6 without a firewall.

OP writes:

many ISPs and institutional networks keep doing NATy stuff out of inertia and even more misguided security thinking: firewalls that refuse inbound

Every single domestic router for the past two decades has included a firewall, and that would not change in an all IPv6 world.

my ISP router does not have firewall settings, despite supporting IPv6. it has a DMZ setting, able to forward all incoming traffic to a specific internal IP, and that’s it. I have a similar experience with cheap consumer routers too.

maybe a friend has the 3d printer? also, reduce, reuse, recycle. and finally, it likely consumes less power.

it presents firewalls like some useless burden, I don’t get how can one see it like that in this age

I already considered that, and for an untrusted website I already don’t trust the content or the scripts. So it doesn’t matter if it was modified or not, it’s still untrusted.

but then why are you reading it? is it cat photos and cooking recipes only? or does it have articles about pricey things you could buy, news, life improvement tips, car and other thing repair docs/advice?

I remember reading about some kind of an alternate DNS root servers. they have some unique TLDs (sounds risky though, the possibility of future name clashes). not too popular, but it is being used. I think this is it: https://opennic.org/

but there are more: https://icannwiki.org/Alternative_Roots

though, it will not salvage the .org TLD. such a shame it got to that…

I don’t agree, I think there is a difference in likely outcomes. but even without scripts, you don’t want you article’s content (text, images, statements or names) be falsified by an attacker. Unless you are just reading the article to waste time, and magically what you read will not influence your views.

If you inspect the generated timer you see the same format in the OnCalendar line.

but without the command

What do you mean by persisted? The service and timer will both be there as long as the timer doesn’t end. Which it won’t in my example.

I mean saved to a file so that it will still be there after reboot

SSL/TLS have very specific benefits. None of which matter that much for reading random articles on the web.

it is a huge benefit if a man in the middle cannot run scripts on your computer.

So I don’t see the problem with this website doing their own thing to bring attention to the potential issues of the current system.

there is no problem with that. this could work, with the required patch to firefox, also in the repo.

then why use DANE. this is just plain old TOFU

the repo readme writes about this. Firefox does not yet support DANE, it needs a patch, included in the repo.

you are probably aware, but with DNS you are still dependent on a third party, namely the whims of the united states. check what happened with autistici.org recently

thank you. this creates it, but is there a way to view or edit its current configuration in a similar format? and this is not persisted, is it?

I’m the former, but most of that I’m not doing by hand. jellyfin transcodes when it wants, I’m not dealing with that. resources are monitored, a simple setup, so that if something happens I can look back why it happened. I also want alerts if something is predictably going to break down soon. with the latter school of thought, you wouldn’t know if a disk was throwing smart errors for half a year before completely breaking down. but I don’t have failover, I don’t have the hardware and don’t want the power bill for that. but I have reverse proxy because then every web thing is configured the same predictable way, plus I trust it more to handle the standards well. so most things I do, I do it because I think it to be valuable to me, not just for the sake of doing it.

homelabbing is the means to an end to me.

do the files get modified after uploading? some filesystems can deduplicate based on contents, maybe it wouldn’t take double space that way.

I generally like some things that syatemd gives, but is there an easier way to create timed automations with systemd timers?

with cron, its just a single line with the recurrence pattern and the command. with systemd, you have to create a timer unit file with several lines, a service unit file with several lines, put them in the right directory, reload systemd, enable the timer. timers are not difficult, but much more convoluted than the crontab. if you have to make multiple pairs, or update something in them, it gets old fast.

is systemd available for windows and mac?

it seems it has already been

OxyLabs seems to block Streaming in their TOS

but you won’t be streaming, technically you just need that for the login

they haven’t published binaries either though

vibecoding and security don’t pair well.