• 10 Posts
  • 572 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle
  • I would go with Aurora or Fedora Kinoite. Atomic + KDE is unbreakable and easy for Windows casuals.

    The only thing I dislike about Aurora is the illustrations baked into the distro. SDDM & Bazaar have them and can’t be changed. But it’s a freaking awesome distro.

    I use it daily on my work laptop through an external USBC M2 NVME caddy. Today I had to move to a new work laptop and I just plugged it to the new one and that was it, my OS and all my stuff on my new work laptop in just a few seconds. No downtime. No drivers to update. Nothing.

    The laptops have their factory Windows untouched. No warranty is void. IT is happy and I get to use Linux at work.

    Plus, I can plug the drive to my home desktop PC running Bazzite and open files as if it was a regular thumbdrive.

    This setup makes me so happy.



















  • 
    STUN/TURN is literally designed to bypass network boundaries. Its necessity comes from the evil of NAT and allowing RFC1918 IP addresses behind firewalls to poke holes so that direct P2P connections can be established for VOIP.
    
    By virtue of being technology designed to step around boundaries, you should be weary of controls around this. STUN can be used to relay from the external STUN record to other servers within the same broadcast domain. We’ll add some controls here to limit this, but it would behoove you to place this server in an isolated DMZ without connectivity to other, potentially privileged, internal hosts. Never forget network segmentation.```
    
    
    
    Would a VLAN be enough?