redfox

joined 1 year ago
[–] [email protected] 2 points 2 days ago* (last edited 2 days ago) (1 children)

I would like for some of the prominent church leaders to speak about that. Even if they don't publicly contest it, though that should be considered, they could at least speak to congregations about it.

Coincidentally, one of, or the (I don't know) paster for the North view church gave a somewhat similar message along with the typical hope in Jesus Easter message.

He played that news caster who was ranting about "I don't care about your Christian religion". Maybe I can edit with a link, but my favorite part was the paster expression agreement with her. She was loud and angry, but there must be a reason or a very bad experience with people claiming the name, but I agree with her.

All this seems too similar to the religious freedom act that felt more like bigotry than freedom. I'm a pretty garbage or luke warm follower, but I detest bigotry under the banner of the church. I still believe that the two are not the same thing when done correctly.

Also, thanks for the actual references and apparent understanding, rather than just unbridled hate.

Edit, video was Ana Kasparian. I think it was largely about abortion, but still relevant.

[–] [email protected] 2 points 5 days ago* (last edited 5 days ago) (3 children)

I actually appreciate these verses regardless of intentions, because I agree completely with the implied point.

In the new testament, God was only hard on the religious elite, who always missed the point. He cut everyone else a lot of slack.

The idea that government should hold citizens to the same standards as a religion they don't believe in seems insane, and also runs contrary to Jesus teaching or actual Christianity.

[–] [email protected] 1 points 2 weeks ago

Knowledge primarily, since I'm not running a business.

At this point, like they say in Chips, TLS inspection is standard...

If your enterprise isn't doing TLS inspection on everything other than banks, medical, gov, they're doing it wrong.

Some times people think the hard part is getting the CA trust setup, but I find it's far more tedious to deal with certain sites and mobile apps especially that do certificate pinning.

[–] [email protected] 1 points 3 weeks ago (2 children)

I like OPN also. I've always appreciated the stability of the BSDs.

My only personal complaint with OPN/PF was the TLS inspection.

I've read about adding the modules to *Sense, but I haven't figured out the configuration pieces.

It just works with Sophos UTM and XG firewall, and the configuration was super easy.

You always use what you like though.

[–] [email protected] 1 points 3 weeks ago

This is true, the 6 GB RAM limit and four cores.

I run a pretty enterprise home lab, and I haven't ever seen the devices hit the resource limit.

I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you'd not want or need to inspect.

For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.

 

Public Service Announcement:

Have you checked out Sophos XG Firewall for home use lately?

It's basically an enterprise firewall fully licensed for personal use.

  • All the firewall stuff
  • Normal IPS
  • Built-In easy transparent SSL/TLS proxy
  • Web Application Firewall

I like it better than PF/Open Sense right now.

https://youtu.be/Ui8UC8-MeJU

[–] [email protected] 1 points 1 month ago

Chris Rock said this best during a bit from the 90s talking about OJ Simpson:

"I'm not saying he should have done it....but I understand"

[–] [email protected] 18 points 1 month ago* (last edited 1 month ago) (3 children)

hates him and sabotages him at every step

Isn't that also describing his children?

[–] [email protected] 2 points 1 month ago

Lol, funny because true. We are all so angry about the exploitation.

[–] [email protected] 29 points 1 month ago (6 children)

I did low effort gpt 😉

The claim that medieval peasants worked only 150 days a year and had many holidays off is partially true but oversimplified. The reality is more complex and depends on time period, location, and economic conditions. Here's a breakdown of the historical evidence:

  1. Medieval Work Schedules & Holidays

Church Holidays: The Catholic Church mandated numerous feast days (e.g., Christmas, Easter, saints’ days) when labor was restricted. Estimates suggest 80–100 holidays per year in some places, but enforcement varied.

Sunday Rest: Work was generally prohibited on Sundays, adding about 52 non-working days.

Seasonal Workload: Agricultural work was highly seasonal. Planting and harvest times were extremely labor-intensive, while winter months involved less fieldwork but still required tasks like repairing tools, feeding animals, and processing food.

  1. The 150-Day Work Year Claim

Some economic historians estimate that medieval peasants worked fewer days annually than modern industrial workers. However, 150 days seems too low, as it assumes every feast day and Sunday was fully work-free, which was not always the case.

Many peasants supplemented their farming with additional work (e.g., weaving, milling, carpentry) during "off" periods.

  1. Hardships & Work Conditions

While feast days provided breaks, peasant life was physically demanding. Workdays could be long (often from sunrise to sunset).

Hunger, disease, and social obligations (such as corvée labor—unpaid work for the lord) made life challenging.

Despite rest periods, subsistence farming meant that food shortages and unpredictable weather could quickly lead to hardship.

Conclusion

The idea that medieval peasants had an easy work schedule with extensive holidays is partly true in the sense that they had more frequent breaks than modern 9-to-5 workers. However, their work was far more physically demanding, they faced food insecurity, and their "off days" didn't always mean leisure. The claim of a 150-day work year is likely exaggerated but does reflect the fact that medieval societies structured work differently from modern capitalism.

[–] [email protected] 1 points 1 month ago

I would be nice if we would fund our own program like this locally.

We shouldn't need federal government to make our city nice, but I know there's the obvious problem of finding how to pay for it without raising taxes or cutting someone else's budget.

I don't know enough about the state or city budget.

I like the efforts to increase bike and walking trails.

Maybe we could get city officials to sneak this stuff into other projects.

But not too much because trees and mental health are indeed woke.

13
submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/[email protected]
 

If I understand this article correctly, instead of working out of the Governor's mansion, which is already maintained by our tax money, and is close to the offices Braun is forcing everyone back into, let's put a pin in that, and it already has quarters for state police details...

he's spending more of our tax money on his private residence, planning to work from home, and wants to get flown in a fucking helicopter?

Couple things:

  • helicopters cost 2-4 thousand dollars per flight hour depending on aircraft

  • He made everyone return to offices

  • Some offices or rented floors in the downtown Sheridan cost about a million per year to rent (I need to fact check this, I just heard from an insider)

Am I misunderstanding wats going and I'm at fault for thinking he's a huge fucking douche bag and hypocrite?

I know this place is a bit of an echo chamber not favoring republican politics, but this seems more bipartisan and plainly fucking stupid?

[–] [email protected] 2 points 1 month ago

I'm sorry. I am one of those people driving 75.

Sing "I can't drive 55..."

But seriously, 55 is nuts.

I know everyone considers 75 too fast, but I am not weaving through traffic, always using a signal, and not doing that during snow/ice/etc, nor am I using my damn phone texting and posting on Facebook.

If everyone would actually pay attention, I'd prefer we all go 70.

[–] [email protected] 25 points 2 months ago (3 children)

Quick reminder, everyone struggles with wanting to be validated and downvotes by random Lemmy users around the world don't matter.

Take a breather, touch grass/snow and remember no ones opinion on here matters, especially mine 😉

 

I consider myself slightly in a conservative, Christian viewpoint camp. I say slightly because as I get past middle age, all those views or opinions have shifted.

I'm not a huge fan of abortion, but my opinion is slightly more nuanced and that's not a topic I think will be fruitfully discussed online.

Button line, seeing things like this however make me slightly lose my fucking mind.

Insert huge rant here about hypocrisy and unreasonable people, laced with outrage and much profanity.

I know others in my circle who also feel similarly. My hope is that people might know even church going conservative people think this is fucking bullshit and that piece of shit attorney general need to go. Fuck him.

28
submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]
 

After reading this article, I had a few dissenting thoughts, maybe someone will provide their perspective?

The article suggests not running critical workloads virtually based on a failure scenario of the hosting environment (such as ransomware on hypervisor).

That does allow using the 'all your eggs in one basket' phrase, so I agree that running at least one instance of a service physically could be justified, but threat actors will be trying to time execution of attacks against both if possible. Adding complexity works both ways here.

I don't really agree with the comments about not patching however. The premise that the physical workload or instance would be patched or updated more than the virtual one seems unrelated. A hesitance to patch systems is more about up time vs downtime vs breaking vs risk in my opinion.

Is your organization running critical workloads virtual like anything else, combination physical and virtual, or combination of all previous plus cloud solutions (off prem)?

3
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
 

This is a network defense design scheme question.

In a scenario where your organization is designing multi-layered firewall deployment and management, how granular  do you create rules at each of these three layers?

Example site is a main/HQ site that also houses your data center (basic 3 tier model).

  1. Site has your main internet gateway and VPN termination point. As am example, it's a Cisco or other ZBF. It has four zones: (1) Internet, (2) VPNs from other sites/clients, (3) your corporate LAN including data center, (4) Guest/untrusted/Iot.

  2. Between your gateway and the rest of your corporate network/datacenter, you have transparent proxy firewall/IPS/monitor. It's bridging traffic between gateway and data center.

  3. Within data center, hosts have software host based firewalls, all centrally managed by management product.

Questions:

  • How granular do you make ZBF policies at gateway? Limit it to broad zones, subnets, etc? Get granular by source/destination? Further granular by source/destination/port?

  • How granular do you make rules for transparent proxies between segments? Src/dst? Src/dst/port?

  • How granular do you make rules for host based firewalls? Src/dst? Src/dst/port? Src/dst/port/application/executable?

  • How have organizations you've worked for implemented these strategies?

  • Were they manageable vs effective?

  • Did the organization detect/prevent lateral movement if any unauthorized access happened?

  • What would you change about your organization's firewall related designs?

 

What sources of technical controls does your organization use?

Do you base device/operating system configurations on:

  • CIS workbench?
  • NIST/STIG?
  • Microsoft best practice?
  • Google searches and 'that looks good'?

How closely rigorously does your organization enforce change management for policies or settings?

  • Can you change GPOs/Linux/Network device settings as needed?
  • During maintenance window?
  • After a group meeting with code/change review and some sort of approval authority?
 

Does anyone fully implement workstation and server logon restrictions, and priviledged access workstations (PAW) as prescribed by NIST/STIG/CIS?

The URL is Microsoft's long description of the same concepts.

Specifically from the above, there's a few things like:

  • Establishing asset/systems tiers (domain controllers or entire org compromise tier 0, moving towards less consequence in the event of system compromise)
  • Accounts with the Active Directory Domain Admins or equivalent are supposed to be blocked from logging into lower tier assets
  • Workstations that have access to log into these super sensitive assets like Domain controllers for management are considered PAWs, and are blocked from internet access, highly locked down, might have extra hoops or management plane assets are air gapped?

Question:

Does anyone actually do any of this at their organization?

If so, to what degree?

People hated red forest because it was a whole other set of infrastructure to baby sit.

People hate air gapped systems because no remote access or work from home.

The above doesn't work well with cloud, and as a result Microsoft (just as an example) pushed for the new hybrid PIM models replacing their old red forest concept.

I'm just curious.

 

I don't even know where to begin with some of the quotes in this article, good or bad.

The topic of politics can be aggausting, but I wonder if there isn't merit to this idea?

If we'll have republican local reps regardless based on trends, should people jump party and vote for more moderate candidates, if any exist?

Even if you know your candidate isn't likely to win, do you vote them on principle to vote metrics and data, or do you vote for the lesser evil opponent, even if you feel dirty for it?

I'm not taking or endorsing a side or suggesting anyone should, just curious. Pretend it's the opposite parties than Indiana if it helps thinking through it.

6
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
 

This is not an ad.

Does anyone have experience with Tenable products?

I'm interested in real world experience regarding:

  • cost
  • effectiveness
  • ease of use

I'm playing with Tenable Security Center and Nessus Scanner. I'm early in the deployment, just looking for pointers and whether anyone has used it?

What alternatives is your org using if not?

Can you compare?

Edit, if anyone is interested, I can post results and opinions here also.

 

INDIANAPOLIS – Angry reaction from community leaders continue to pour in after a controversial punishment was handed down to the man who was convicted of killing Indianapolis Metropolitan Police Department officer Breann Leath.

Dorsey was sentenced on Thursday to 25 years in prison after he was found guilty but mentally ill on the following charges:

One count of reckless homicide Three counts of criminal recklessness committed with a deadly weapon One count of attempted murder One count of criminal confinement Dorsey was not convicted of murder by the jury. That charge was reduced to the lesser reckless homicide charge.

...

Snyder, who is the president of the Indianapolis FOP, said during a Friday afternoon news conference that residents of Indianapolis, as well as Indiana residents and those throughout the country, saw a “miscarriage of justice” through Stoner’s sentencing.

In response, Snyder said the maximum sentence of 63 years should have been implemented for Dorsey in this case, which Snyder called an attempt of “cold blooded murder.”

...

“As mayor and as a father, I’m shocked and disappointed in the decision that was handed down yesterday,” said Indianapolis Mayor Joe Hogsett.

 

INDIANAPOLIS — A traffic stop ended up leading investigators to a restaurant on Indy’s east side where police uncovered cocaine, methamphetamine, marijuana, fentanyl and enough firepower for a shootout.

William Collins, 45, was arrested by the Indianapolis Metropolitan Police Department on Monday for his role in the alleged drug trafficking. Collins also isn’t permitted to own a firearm due to being a convicted felon.

Police said Collins was arrested during a traffic stop after detectives witnessed a “hand-to-hand drug transaction” in a parking lot in the 3200 block of N. Emerson. During the traffic stop, police found a handgun in Collins’ possession.

The investigation eventually led police to 1313 Eatery, a chicken wing shop located at 5299 E. 38th Street. Detectives searched the business and seized approximately 600 grams of cocaine, five pounds of meth, one pound of marijuana and 70 grams of fentanyl pills.

Also found in the restaurant were three firearms, two of which were reported stolen, and nearly 900 rounds of live ammunition.

 

INDIANAPOLIS — Indiana State Police troopers made 120 traffic stops and cited a majority of those drivers for speeding during a two-hour ticket-writing blitz on the west side of Indianapolis Wednesday.

More than a dozen troopers, warned by lawmen with handheld laser speed detectors, pulled over drivers exceeding the 55-mile-per-hour limits on I-465 between 56th and 38th streets for two hours in the afternoon.

Sgt. John Perrine said troopers were stopping only drivers topping out at 75 MPH and above.

”We’re certainly not out here looking for the people who are minor speeding. We’re looking for the most egregious, most aggressive drivers who are really causing problems,” he said. ”We would like to lower that threshold but it’s really hard to go out and stop the people doing 10 over when we know a few seconds later there is somebody coming who is doing thirty over.”

Perrine said excessive speed is often to blame for road rage incidents.

”We have a group of drivers who want to drive slow in the left lane and say, ‘Hey, you’re not passing me. If I’m gonna drive the speed limit, you’re gonna drive the speed limit.’ And the other side of the selfish driver is, ‘I don’t care about anybody else. I’m gonna drive the way I want as fast as I want.’ We really need to get a handle on both of those.”

Perrine said troopers from across the state will be patrolling Indianapolis area interstates through the rest of this year engaging in occasional blitzes. ...

Why can't we go faster?

Why cant the speed limit of Indiana's 465 beltway be increased over 55 mph?

Copilot

The speed limit on I-465, despite most drivers exceeding it, remains at 55 mph due to Indiana state law. Specifically, because I-465 is considered to be within an urban area, its speed limit cannot exceed 55 mph. The Indiana Department of Transportation (INDOT) has the authority to lower the speed limit if an engineering study demonstrates that a lower speed is necessary for safety or traffic reasons1. So, even though many drivers find the current limit too low, it remains in place due to legal constraints.

Interestingly, the real-world data supports the notion that drivers consistently exceed the speed limit on I-465. For instance:

96.3% of vehicles recorded at one spot on the northwest side of I-465 were going over the speed limit. More than half of the vehicles were recorded at speeds exceeding 65 mph, which is more than 10 mph over the limit1. While there have been discussions about implementing variable speed limits on parts of I-465, the existing legal framework keeps the maximum speed at 55 mph2. So, despite the bustling traffic and the urge to go faster, the beltway remains a place where the Racing Capital of the World meets the 55 mph speed limit1! 🏎️🚗

southbendtribune.com indystar.com aaroads.com

view more: next ›