• 0 Posts
  • 305 Comments
Joined 4 months ago
cake
Cake day: May 7th, 2026

help-circle
  • They use networking software that’s optimized for speed and low resource use (you’d rather be spending those arm/esp cycles handling video, right?) with a slow patch cycle and little chance the user (you!) will actually get up on a ladder and install the damn patches.

    Some of them will dial out and try to get their patches, but did it work? Are they still running right after the patch? You don’t know that because you don’t even know they got a patch notification, dialed out, downloaded and installed it, silently changed a default or removed a resolution you relied on and aren’t sending video anymore! Do you even want them doing that?

    Even if they weren’t doing all that, there are hundreds of vulnerabilities that allow a user on the local network to silently bypass auth and view them, change settings etc.

    The above isn’t because they’re crappy (they are crappy.) but because they’re using some weird .005$ cheaper esp32 variant that needs a modified binary which isnt on anyone’s radar and had support dropped 2 years ago.

    I have even run into modern ip cameras that would try to proxy their feed on a public facing ip that used to be owned by the (now defunct) manufacturer but is now some weirdo just slurping up what gets sent to them.

    The simple solution is to put them on a derek zoolander vlan for network devices that can’t network good, cut em off from the outside world and check for updates manually.



  • YOU SHOULD NOT RUN YOUR CAMERA SERVER ON YOUR DOCKERPILE HOMELAB BOX THATS HOSTING 69 DIFFERENT THINGS!

    If you have the time to set it up, learn the different use cases of cameras and monitor it for failure somehow then frigate is good.

    If you’re using ip cameras you 100% no foolin without question have to put them on a vlan at the very least. They are an insane liability when it comes to network security.

    If I had it all to do over again I’d have done power over ethernet, put them all on their own switch that does poe injection and done vlan by the one phy going from the poe switch to the router.

    People will fight me about this, but ip cameras are all pretty much the same. They make available some video stream at a preset bitrate and resolution, use built in infrared or visible lighting and offer pan, tilt and zoom (ptz) controls to authorized users. Some have motion detection and object recognition on device which may or may not be surfaced to the camera server.

    I always offload object detection and classification to the server even if the camera has it on board because even on cpu image inference is “okay” and with an old gt750 nvidia card you can do much faster object detection and classification. The reason for doing it all on server is in order to get consistent results.

    If you are a computer savvy person: congratulations, you picked a project that uses memory, gpu and disk space at a time when they’re all at a premium! Hell yeah!

    YOU SHOULD NOT RUN YOUR CAMERA SERVER ON YOUR DOCKERPILE HOMELAB BOX THATS HOSTING 69 DIFFERENT THINGS!

    Fortunately you don’t need ddr5 for this so any old server is fine. Scale your ram needs up or down depending on the cameras you’re looking for.

    Consider buying one of those ten year old servers with redundant power supplies. Even if they’re both connected to the same ups (and you need the camera server on it’s own ups) you can keep going when one dies.

    There are two minds regarding disks in surveillance servers. The first is “fuck it, kill the disks, who cares, they’re a wear part!” The second is “no, careful management of our disks will ensure trouble free use for years to come.” I’m of the second variety and run a zpool of small (<2tb) disks with an optane cache. The cache saves the disks from some of the drive killing random writes and reads and lets me keep running at speed when reviewing things.

    When you go to put in an old gpu, make sure the plastic cowling shaped like an anime titty isn’t too big otherwise the pcie standard sized spaces in most servers won’t be able to take it.

    YOU SHOULD NOT RUN YOUR CAMERA SERVER ON YOUR DOCKERPILE HOMELAB BOX THATS HOSTING 69 DIFFERENT THINGS!

    I have been robbed and had to hand camera data over to the cops and can offer you some more practical advice if you’re open to it.




  • You asked for it:

    Next is Ecuador in ‘05 when they sent guiterrez to Brazil.

    But here’s the third sentence in the intro paragraph of the Wikipedia article about that event:

    What started as nonviolent anti-government protests in March mushroomed into violent rioting and spread countywide. Protesters demanded the fall of the government and an end to corruption.

    Maybe the next one will prove your point…

    South Korea! The June Struggle? Here’s the Wikipedia article on its background:

    Chun and Roh were unwilling to use violence as the 1988 Olympic Games in Seoul were approaching. They believed that doing so would draw further criticism, with the regime already under international pressure after the Gwangju Uprising and its massacre a few years earlier.

    Almost like the nonviolent resolution was made possible by violence before it…

    How about the next one:

    Oh, the white lily student movement! Surely there’s a good solid Wikipedia article about that!

    Barely past a stub? No mention of the boat people massacre three years before, changs successors recognizing the need to get international support after decades of martial law and the clear message from foreign influence in the Tiananmen protests the year before?

    Must have been the wind.

    Dateline - Philippines edsa 2, nonviolent government handover as long as you don’t count the precipitated edsa 3 just a few months later.

    Oh, now we’re talking about Sudan, never mind that after the protest wave (not entirely nonviolent but I’ll leave that by the wayside for now) the military took over the transitional government.

    Now I know I took a pretty let’s call it conversational tone in the above and that breakdown is for two reasons, one, I don’t want to legitimize that dogshit Wikipedia article by talking about it in neutral language and two, I’m tired.

    The point isn’t to argue over specifics about some shitty wiki article but to recognize that things are only called “nonviolent” when arbitrary lines around them in time, place and even people that exclude the violent component of their existence are drawn.


  • That section of the Wikipedia page is pretty weird looking right off the bat. The first two are the cedar in Lebanon and the Mirabal sisters which are circumstances that are hard to call nonviolent.

    The cedar revolution can only be called nonviolent if you disregard the 01 protest wave that preceded it and established with violence that everyone was actually on the side of ending syrian occupation and not having car bomb attacks all the god damned time.

    And el jefe was fucking assassinated by the military at international urging. That’s not nonviolent!

    I didn’t look any further but it really seems like a bad list that’s written with incredibly rose-colored glasses.


  • I’m not gonna pretend to be a lawyer or expert in Swedish law. My understanding is that the framework for what amounts to free speech for corporations in Sweden is much more restrictive than in the us.

    So what amounts to an easy win by simply saying “we’re against it” in the us may have consequences elsewhere.







  • Reach out to the Arbor Day foundation and see what kind of resources they can send you. There’s also a group called tree city USA that will give your municipality a gold star and a special sign and put them on a list if they have some number of trees. After you win trees you can fight for native wildflowers and reeds and become a bee city USA member too.

    Getting shit done in local government is all about greasing your turd up so it flies out and lands with a triumphal plop. Almost all of that is planning and preparation because it’s not like you can reach up in there with both hands and rub castor oil on that stuck fucker.

    So start by talking to people around you. Don’t tell them you’re planning on submitting some thing, just hear out what they have to say. Write it down afterwards so you can come back to it later. One thing people always bring up with trees is the cost and the damaged sidewalks and roads. It’s easy to figure out the cost, just call the municipal maintenance office and ask how much it would cost for them to take care of 200 more trees than they have to deal with now. Same thing for the sidewalks. Often times they’ll say something to the effect of “we’d have to replace em one year earlier than we were already planning on doing”.

    Anyway figure out what you actually want to do, what it’s gonna cost, who’s gonna do it, what the effects will be, who’s it gonna piss off, how they’re gonna be ameliorated etc.

    Once you have the effects of what you’re proposing all together you wanna bring it up to the right committee or board. For you the reason to do this as opposed to taking the tom goes to the mayor route is that the committee will have a bunch of people who can ask the right questions and get your turd perfectly shaped and lubricated. Once they like it they’ll do an up/down vote on a motion to move it to the governing body of the municipality.

    The whole point of going through the committee is to take that path instead of having to be a person who gets on the nightly news yelling in meetings. It means your proposal will be part of the consent agenda, which is a bigass packet of “stuff we all agree on and have already decided to do” that gets a big up/down vote. People who have their stuff in the consent agenda might speak in support of their particular thing, but it’s usually more of a “we should all be proud that with the adoption of this proposal we’re increasing walkability, property values, safety, natural beauty and improving the lives of our community members” as opposed to “here’s my removedamamie scheme to plant trees!”.

    Anyway that’s how you do it. Once the consent agenda you’re on gets passed you just gotta do what you said you were gonna in the way you said you were gonna using the resources you said it would take.





  • I think there’s a real problem with that line of thinking.

    Without understanding a persons politics are just vibes.

    Also condensing the bloodthirsty futurists who imagine totalizing war of all against all and honestly quaint ethnonationalists who want to have the third reich but without all those pesky wars is pretty clearly a stumble even if you were to recognize that they’re both the enemy of global communism. It’s worth it to recognize that praline ice cream and pickles are wildly different things even if you don’t like either and they both start with the letter “p”.

    And that’s what the op asked about. “It seems like it’s this thing, is that correct?” “No, it’s not that thing”. Which would, to your point, make it neither unnecessary nor hair splitting.


  • Condemning the funding could (I’m not an expert or lawyer) open the company up to a different type of law intended for “terrorism” or “extremism”. I do not know what actually drove the publishing of such a fence riding post on their part but that’s a possible explanation that takes into account the conditions and foresight the company has exercised in the past.

    Also as an airvpn user do not use it for security or privacy. It’s a really good piracy vpn just use it for that. If you’re concerned for your safety please consider carefully the consequences of your choices when you register for proton (don’t make a services account, don’t use a recovery email that can be tied to you or at all, pay cash). A lot of the services people hold up as alternatives have ways for the unaware user to accidentally screw it up and end up in a bad situation.


  • They suggested nym which uses a technology called a mixnet that’s almost self explanatory: you have a network that mixes up the path communication takes so that it’s harder to determine the sender.

    Unfortunately that’s got a bunch of problems that basically boil down to it’s more complicated and therefore easier to screw up and the more compromised nodes an attacker has in the mixnet the easier it becomes for someone to screw up.

    It’s cool tech but not trustworthy yet compared to the simple alternatives.

    Also nym will let you log in with google credentials. Theres some very careful scrutiny a user would want to apply to that.

    I do not think nym is a bad vpn like service thing, just that its not comparable to mullvad.