I feel for people wanting to be security researchers with a conscience. They used to get thrown in jail or hit with lawsuits. Things progressed to where they could get a tiny fraction of the black market value as a bug bounty, and possibly even make a basic living doing that, but we are probably headed back in the other direction.

Meanwhile, black hats are sitting in a resort pool somewhere spending the half million some authoritarian regime paid them for a simmilar exploit, trying to drink enough all-inclusive booze to avoid thinking of the people getting their fingernails pried off in some goulag after getting exposed via said exploit.

The fact that American trucks and SUVs don’t have forward facing cameras that activate at slow speeds to prevent driving over kids hidden in their insane blind spots while navigating parking lots and driveways should be criminal. The headlight situation as well (Europe is actually doing something, fwiw). We also had external airbag tech to prevent pedestrian deaths decades ago and with modern vision systems they could be incredibly cheap and highly reliable today, but its not criminal to ignore that tech.

They even fought seatbelt requirements for gods sake. The auto industry are depraved. Let’s not give any of them a pass.

Edit: I can’t help but add that everything above is so damned cheap it would be a rounding error on a vehicles manufacturing cost and wouldn’t impact their shitty “design goals and styling” one iota. I’m not even suggesting changing the shape or size of them here.

Yes, radar was found to be useless at highway speeds for stationary objects because if it responded to such events, you get sudden, emergency “ghost braking.” Radar is so low resolution, it cannot tell the difference between the back of a tractor trailer and a large sign or overpass.

I don’t like this either as it seems to lead people to overestimate the capability of lidar and radar systems (and radar is worse than useless. False positives are dangerous too).

There is NO automated system on the road that is proven. Waymos and shit will also end up killing people. Please, people, don’t do their marketing for them. The road system and cars are a lethal system with dangerous tradeoffs by design.

They still have ultrasound sensors for slow speeds like parking. Either they failed or he was at roadway speed when he entered the driveway.

Yeah, its just the new version of “my gas peddal got stuck” or the more general “my car accelerated out of nowhere”

FYI, neither actually happen, despite thousands of claims going back decades, and if they did, brakes easily overpower engines. People confuse their pedals and don’t believe it.

I use lane assist and traffic aware cruise to keep my shoulders and (bad) knee physically relaxed on long highway stretches. That said, I would probably choose to tolerate the inevitable day of neck and/or knee pain if it meant no one was using this stuff. Automation bias is scary.

FSD is not capable of dodging a deer - it just brakes.

I run head scale on a Vps and it has been 100% reliable and provides an exit node for me via that VPS. But you are going to have the exact same issue, I think with your VPN.

You want your default route from the exit node to go over mullivard’s interface, but you need wireguard or tailscale to talk to the other clients directly, via their clearnet IP. You can tell the exit nodes tailscale/wireguard client to bind the clearnet interface, but that may or may not help. Mullivard probably takes the default gateway, which will likely cut off the clients. You could set dedicated routes to the IP addresses of the clients, but they can change if those clients are mobile. You will need to maintain a routing table somehow or keep the pre-existing connection active (fragile).

I am sure its well trodden ground, just be aware that head scale probably won’t solve your problem automatically. Its a routing and or firewall config issue.

Head scale is actually a simpler implementation rather than the heart of what tailscale uses directly. It is perfectly complete for a single persons homelab application IMHO. Would be easy for the community to maintain a fork, but its also good to see other approaches that solve the same problem.

I use the 3-2-1 rule.

If you have several, it really is convenient to set up an internal reverse proxy for all your internal-only services. One place to set up let’s encrypt and set up subdomains or different paths for the different services. No need for URLs with different port numbers or IP addresses.

None of the above effects vaultwarden (how could it?), buy it does raise concerns about long term FLOSS-friendlyness. I got bit by the sudden price increase earlier this year and decided that is the 1 year warning to migrate to either self hosted vaultwarden or something else. I move slow, so need some time anyway.

Thats like nix packager, right? Looks interesting to layer on top. Says they are all reproducible builds which is nice.

Clickwrap should have been made illegal when they started doing it a quarter century ago. If I put a tracker on your car, I’m a criminal, but if every automaker drops a clause into the “user terms” on their vehicle sales, then every car you buy gets tracked forever, perfectly legally.

We need more developed language for this. In my head “vibe coding” is when you write entirely in natural language prompts and don’t actually read, edit, or review the code. Everyone seems to have a different idea.

I can’t recall the name, but there was at least one project that had a kind of static web proxy of shared immich albums, so you can expose that to the internet for sharing and keep Immich its self internal network only.

I may by too cynical now, but I doubt the authors give a shit that kids will work around it. They are scratching the back of someone and they are getting what they want.

There are very good explanations out there but the short of it is: every major internet service is now going to be connected to either your official piece of government ID, or a high resolution, well lit image of your face. Kids work around it but its a mass surveillance wet dream.

I am not convinced there is actually any real plan to use them for anything other than training more AI. Its either market manipulation to boost their stock values even higher or they are shooting for the mythical AGI.