“Someone once told me that time was a predator that stalked us all our lives. I rather believe that time is a companion who goes with us on the journey and reminds us to cherish every moment, because it will never come again. What we leave behind is not as important as how we’ve lived.”

And what companions they were. 🫶

I had no idea "single use certificates" were a thing. It makes sense, although from my personal perspective I have always worked with managed identities and privilege escalation.

I have almost no internet facing services, although the two I have I might swap for the short lived variants. As you said, risk of misuse due to compromise goes down so that makes sense.

For my other services, they are all running on HTTPS, but only available internally over LAN or VPN, all with isolated VLANs sort of like a Hub Spoke model. The two certs that are internet facing are basically for getting access to my VPN. Might swap the internal services to short lived anyway if the automation works well, as I said before, it's fully automated anyway.

Thank you for sharing. I had missed the announcement, so pleased to know the option is available.

I have fully automated the creation and renewal of my certs and have just short of 50 certs that I manage in total. Every single one automated using NixOS / ACME / lego.

Technically I could easily implement this, just have to switch my config.

Honest question, are there any particular security benefits to this (especially for a home lab)?

I can understand the short lived time span further reduces risk of compromise, yet the existing time span is already "much shorter than traditional certificates". Does it have a substantial impact on our security posture?

Is this disgusting hype over already? There are far more serious matters to look up.

Such as bold new frontiers for soap:

This is not just an issue in the Games industry.

I am always reminded of Steve Jobs' "The Lost Interview". In it he details how John Sculley took Apple's visionary tech innovation driven product culture and made "sales & marketing" the primary driver behind Apple. Almost leading to its total collapse. (Steve Jobs got re-hired to Apple shortly after that interview and turned it around.)

Any "manager" that believes they can effectively drive a technology driven company/department/team, without being an (active) engineer in heart and mind, will drive it into the ground.

And none of that, "I used to be a COBOL programmer for 2 years at the start of my career 40 years ago" malarkey. You lose the skills, you lose the mindset, you lose the ability to innovate in technology and will inevitably kill what you're selling with your "KPI's".

Kanidm

It has a modest UI for end-users to handle self-service scenarios, and an app portal for OpenID Connect configured applications.

The backend is fully CLI based.

It is very robust and performant, built on Rust.

Yet very much in active development, so do not expect full parity with commercial alternatives at a feature level.

I run it to provision users for my home Linux devices and it supports offline login, my Homelab servers, and my self-hosted web applications through OIDC.

A nice 'one stop shop' for my purposes.

EDIT: Actually their comparison page might be a worthwhile read considering your question OP.

So in essence it is the same as Gameyfin?

Thank you for sharing. I will certainly give it a try.

To oversimplify the answer, if you put a strong enough 'garden hose' beneath the floating sphere, you would still get that 'spraying effect' like you do with a garden hose. However, the sphere would no longer 'float' in place in thst case.

Keep in mind that the floating sphere 'uses the energy of the spray to stay aloft', balanced against the weight of the sphere. As a result, there is not enough energy left to make the water spray outward like the garden hose does.

There are many different factors at work to keep the sphere afloat, such as the curved base below it, matching the sphere's curvature. Again this is an oversimplified explanation, to help explaon the basic concept.

The Handmaid's Tale is a history book. Atwood just wrote it 40 years ahead of time.

The article lists Celcius first in the body of the text, with a Fahrenheit translation in parenthesis. The title then uses only Fahrenheit.

I assume the comment was meant to indicate, pick a unit of measure and stick to it. As opposed to Fahrenheit at the top, and Celcius in the body. Not to antagonize the use of Fahrenheit in general.

Also, stating that the use of Celcius is Euro-centric is a little awkward:

After a shower (which I already dread because it is overstimulating) I take very long to dry off because I need all water to be gone off of my skin.

If I do not I can feel a single drop of water rolling down my skin. Somehow this is even more overstimulating than the shower itself, so I hate it even more.

"Got any questions about propane?"

"Or... propane accessories?"