I agree with all of this but I’ll add that email and SMS-based 2FA needs to disappear. It’s not secure, it’s time-consuming and we should be using Passkeys by now.
I’m a web developer that blocks Google and I push for this at work a lot — let’s serve our assets from our own server! — can’t stand the bullshit either.
FIDO2, Passkeys or whatever you want to call Webauthn.
Seriously I’m so burned out on glitchy forms that can’t even get the most basic username, password fields right and want to fight autocomplete all day, and I don’t want SMS-based 2FA or the absolute worst, “mAgIC LiNKs.” 🥴
There’s always some awesome banking startups that have incredible features but then they get bought out after a few years.
At this point I almost want to work on an “open bank” concept and release it into the world for free so that new banks actually start off with great features. 😆
I kind of very much dislike this line of thinking. Debian and Ubuntu are full of shit and cause an astronomical amount of bloat when containerized or running in production on a server.
I switched to Alpine quite a long time ago and run it on servers, in containers and on my own networking equipment. I don’t miss Debian’s slow as hell updates nor Ubuntu’s Microsoft-style bloat.
I have to deal with all this cruft a lot at work and I always ask myself “why?” It’s super frustrating, it slows everything down and after sprinkling in more “we don’t care about efficiency” attitudes you suddenly find yourself trying to deploy 15GB containers.
I use Home Assistant as my “main” smart home server then have HomeKit on iOS, macOS connect to it.
You don’t need Amazon, Apple, Google, Microsoft involved at all if you don’t want to. In fact, with Matter it’s easier than ever to get away from Big Tech.
It helps to VPN into a jurisdiction that requires the “decline all” button if you’re not already in one. But also it helps to have an insane amount of DNS blocklists and/or a strong ad blocker.
At this point I just hide the cookie banners whenever possible.
Seeing this from the US scares me. I already have an elaborate system for tunneling my traffic out of the country without it appearing I’m doing so from my end devices.
But seeing this happening in the UK and knowing there’s a chance of it happening here, I really feel the need to get into China-style circumvention with shadowsocks and what have you, and I need to figure this out sooner rather than later.
I recently wrote a Caddyfile for a Dockerized Ruby on Rails application in a Kubernetes cluster using Traefik. Traefik connects to Caddy via h2c and Caddy talks to Puma in Ruby on Rails via HTTP/1.1 over UNIX socket.
I bring this all up because I think h2c is very underutilized and this led to a huge increase in performance.
I used to love Dairy Queen until I went vegan. Now they can go fuck themselves for supporting an industry that rapes and abuses animals.