• 3 Posts
  • 340 Comments
Joined 10 months ago
cake
Cake day: November 22nd, 2025

help-circle


  • Honestly, for the money, the Wegman’s store brand Colombian beans are some of the best I’ve ever had. They’re so rich without being overly bitter, and with the right amount of cream and sugar they have a flavor I can only describe as “chocolate, but coffee flavored.” It’s a shame Wegman’s only seems to cover a few states because all of their store brand stuff is like that.


  • Having worked at an email provider before, I can assure you that hosting your own email is not, as you put it, “trivially simple.” The number of spam filters that sit between every server is insane, and they’re all controlled by third parties that, almost universally, deem any server hosted on a residential IP address block to be spam. Even medium-sized commercial providers get blacklisted every so often and have to appeal to the filter providers to get back in business. Hosting it yourself is almost guaranteed to mean that nobody ever gets your emails.










  • I would say that finding that balance is up to the individual admin and application, really, which is where the defense in depth comes in. Yeah, it’s rare, and if those exploits are being used it means you’ve got the attention of someone you probably can’t really stop, but it’s something to take into consideration. Bad configs can cause data leakage across container boundaries, too, so without knowing the admin’s skill level, I tend to recommend against sharing that hardware with something that might have something valuable on it. AI has made it easier for script kiddies to find zero-days and exploit APT-level vulnerabilities, too.






  • I would NOT host a Lemmy instance at home unless you’re going to obfuscate your IP address. If you make it public, you’re inviting any whackjob that sees your username to find your physical location. Additionally, I wouldn’t host it on a PC that you actually intend to use for day to day stuff, just in case the instance gets hacked and someone manages to escape the container it’s in. If you wanted to do this, I would put it on its own box with Cloudflare in front of it, otherwise you’re inviting trouble where there doesn’t need to be any.