This is true - it is enabled by default in win11. I disagree with you it being a terrible idea - imagine all the sentistive data people put on their hard drives - would they want to to fall in the wrong hands if they lose their computer? Or if their hard drives fails so they can do a secure wipe?

I'm not a fan of Microsoft, but they did solve the key issue in the enterprise setting by storing the key in they entrance identity. Same should be done for home consumers, since having a Microsoft account is being shoved in everyone's throat anyway...

7mo ago

What was your first Linux distribution?

Jump

krash @lemmy.ml 7mo ago

YES! That was the same distro that was my entry, it came along with the book Linux for dummies. However mine came on a single CD. Must have been the "lite" edition 😄

7mo ago

What's the best part of your life right now?

Jump

krash @lemmy.ml 7mo ago

Ha. My kids is the best AND worst part of my life 😆

7mo ago

Papra, the minimalistic document archiving platform

Jump

krash @lemmy.ml 7mo ago

I spun up version 0.3 to try it out, and it seems pretty and lean in comparison to paperless. However, it lacks a lot of functionality - I couldn't even change the name of the document.

I get it, its a very new project and I imagine it will kick ass once it matures, however it is too bare bones for me right now.

7mo ago

This Week in Self-Hosted (18 April 2025)

Jump

krash @lemmy.ml 7mo ago

Short answer: a lot 😉 its an authentication protocol to have a single identity provider take care of all your users passwords, access rights etc., like those "login with Facebook" buttons.

It's a bit of advanced topic, but a solid way to minimise authentic based alley on username and password.

8mo ago

This Week in Self-Hosted (18 April 2025)

Jump

krash @lemmy.ml 8mo ago

Just tried it, and liked it. Too bad there isn't support for OICD right now.

8mo ago

This Week in Self-Hosted (18 April 2025)

Jump

krash @lemmy.ml 8mo ago

I'm really curious about Papra, but don't see the benefits it provides over paperless. Besides, I won't migrate unless there is a tool to brings over the tags, metadata etc...

8mo ago

This Week in Self-Hosted (11 April 2025)

Jump

krash @lemmy.ml 8mo ago

It's a matter of when, not if, that happens. And in that situation there's headscale but also Netbird, among other services. And of course, there's also just plain wireguard 😏

8mo ago

NetAlertX - Network presence detection now with workflow automation 🔀

Jump

krash @lemmy.ml 8mo ago

I wanted to use this on my RPI2 buy I think the CPU is too old 🙃 I to however have a openWRT router and I suppose I can achieve similar functionality with a bit of hacking on the OS.

8mo ago

Just got my OpenWrt switch - what configurations / preparations should I do?

Jump

krash @lemmy.ml 8mo ago

Thank you for taking the time to write this! Well, first stage of my project (getting openwrt my router) has gone according to plan, and now to strive for the next objective 😏

8mo ago

Just got my OpenWrt switch - what configurations / preparations should I do?

Jump

krash @lemmy.ml 8mo ago

Thank you for taking the time to answer throughly! I noted your advice and chunked up my goals into "mini-projects", once I have all the configurations set and all devices connected to the new router. I did check what I bought is a router, not a switch (I find the naming of the device acting as the gateway between the LAN and WAN to be a bit ambigous: switch, router, gateway...).

As for the IDS capability, this is something that would be done by a raspberry pi being fed packets from the router. I don't know if I will ever undertake that task, but I keep it in mind if I'll feel adventorous 🙃

(for those wondering: Linux Magazine #279 has a guide on how to accomplish this with a Fritz!Box 7583).

8mo ago

Just got my OpenWrt switch - what configurations / preparations should I do?

Jump

krash @lemmy.ml 8mo ago

Thank you for all the questions to help me clarify my use case 🙂

At the very basic, I'd like to:

achieve better security through segmentation by isolating cloud-connected devices, guest devices from trusted devices.
Being able to "pin" a Mac address to an IP, and being able to use internal network name resolution to reach those devices.
a blocklist for known ad-domains / malicious domains.

Once the basics are in place, I'd like to elevate my netsec game and implement:

a high level monitoring capability to seen what devices are communicating with what domains / IPs
An IDS capability of some sort to be able to detect anomalies in my LAN.