Yeah this doesn’t make sense. Docked bars have worked fine since Windows 95. You could have the task bar on any side, and apps would handle it. You could have multiple docked bars too, as some third-party apps used to be dockable. For example, Winamp had a view that was a short bar stretching the entire width of the screen, stuck to the top of the screen. The windowing system handled it with no issues.

Yes! I’m not sure about it changing when you connect monitors (since I’m usually using desktop PCs), but you can have a different setup per monitor.

I have three monitors at work. My main monitor is configured to show all open apps in the taskbar, while the secondary monitors only show the apps opened on those monitors. You can totally change any of the configuration though… the layout, the position, the settings, or even just not have a taskbar on some monitors.

It’s what I’ve experienced at FAANG companies. MitM isn’t used and would break certificate pinning on sites (including internal tools) that use both certificate pinning and HSTS. The Chromium source code has a list of domains that are hard-coded to only accept particular root certificates.

Larger companies that monitor for corporate passwords being entered on third-party sites usually use a browser extension that’s force-installed using Chrome Enterprise. That’s especially the case if they mandate the usage of Chrome.

Hong Kong to Los Angeles is around 70ms latency (140ms round trip) so I’m not too surprised.

It’s not uncommon on sites where a high proportion of the userbase uses an adblocker, as making ads look like and render using the same code as organic content (same CSS classes, etc) makes them harder to block.

Wow, this is very useful!!

a program that runs as root

Does it have to run as root? It’s common to run Docker in rootless mode in production environments.

You might be interested in StirlingPDF too.

Keen is crap since moving production to china

A lot of people have an outdated view of the quality of stuff made in China. They think that everything is bad quality just because their $2 Aliexpress item doesn’t last forever.

Most iPhones are made in China for example. Like anywhere, there’s both good quality and bad quality products, depending on how much the company is willing to pay. Sometimes the quality is actually higher - for example, Tesla Model 3s manufactured in China have far fewer issues with road noise, panel alignment, and overall fit and finish compared to the ones manufactured in the USA. These days, China has far more experience with manufacturing, and a lot of the raw components (especially for electronics) come from China anyways.

Some companies that outsource manufacturing to China also lower their standards at the same time. It’s not the manufacturing in China that’s the problem; it’s the company’s decision to cheapen their product.

you can override this by setting an IP on the port exposed so thet a local only server is only accessable on 127.0.0.1

Also, if the Docker container only has to be accessed from another Docker container, you don’t need to expose a port at all. Docker containers can reach other Docker containers in the same compose stack by hostname.

If you are good at manipulating iptables there is a way around this

Modern systems shouldn’t be using iptables any more.

Yeah, a Black Friday sale.

They do have some deals always available, but the specs aren’t as good as the Black Friday ones: https://greencloudvps.com/billing/store/budget-kvm-sale

RackNerd also have some deals that are always available on their site. .

I’m running mine on a ~$33/year VPS at GreenCloudVPS. It’s a small instance (just me) but it federates with all the major instances which means it still does a bunch of work (since it has to handle incoming posts and comments from federated servers). It’s a decently powerful VPS with an AMD EPYC Milan CPU, 10GB RAM, and 100GB NVMe storage.

For a medium-sized instance, I imagine you could get pretty far with a single <$100/month dedicated server from Hetzner or a similar provider.

Some servers have ECC. If you get a cheap one (like a Hetzner auction server), it’s less likely to have ECC. ECC protects against bitflips, but it won’t help if the RAM is starting to die. ECC isn’t magic - it just has an extra 8 bits of parity data per 64 bits of data. It still uses the same type of RAM chips.

If you want to try alternate UIs, you might be interested in trying Photon and Alexandrite.

It is encrypted at their end - they say the data is encrypted both in transit and at rest.

However, it’s not end-to-end encrypted, in the usual meaning of the term. E2EE usually means that only the sender and intended recipients of the data can decrypt the it, not the company running the service, their affiliates, or any intermediaries.

Their deep investigations are so good. I liked their documentary about GPU smuggling in China.

Just because something’s written in the terms of service, doesn’t mean it’s legal.

Still up here in the San Francisco Bay Area. Maybe only some regions are affected.