If you are on iOS seems you need to unmute your phone.

Not the Op but I’m in the same boat. I get the latest and whoever has the oldest phone among my wife and two kids will get my 16 pro.

I have two teslas and the build quality is amazing. I never do anything to them other than change the tires. Haven’t even touched the breaks. It’s the ultimate daily driver and I’ll never buy another type of car.

Build quality is attention to detail, not reliability.

Your hydraulic brake systems need to be flushed every couple years to prevent corrosion, even if you don’t use them.

> already fully automated in SF

I don't thin it's fair to say they are fully automated. There's a large remote operations team for remote assistance to help them get out of tricky situations. The cars can be nudged to perform certain actions.

I love this product have used it for a long time now but more recently started getting worried about security. I hope the maintainers are doing their due diligence around securing their docker hub account (many of us run VW in docker) and are careful about libraries the project depends on. Some questionable coding practices were made that I'm not sure I agree with (calling a 3rd party sites in some scenarios). As more of us switch to self hosting VW it will become a juicer target for bad actors. Really hoping we don't wake up one day to find out that our database was uploaded by a BA

If you're running on kubernetes, a simple network policy and blocking the container from using DNS will stop any compromised image from performing a data exfill.

I do this for most containers.

If the container must have web access in some form, setup a squid proxy and only whitelist safe and trusted domains that can't be exfilled to.

> a simple network policy and blocking the container from using DNS

Can you please point to some resources that can help with how to do this?

Not sure about the DNS part, but NetworkPolicies should be familiar to anyone who takes Kubernetes seriously.

https://kubernetes.io/docs/concepts/services-networking/netw...

Edit: Did some research and found that Calico has a feature for some kind of DNS filtering

https://www.tigera.io/blog/how-to-secure-kubernetes-workload...

Why do you think that DNS is required? Anything malicious could (and likely should) hard-code an IP.

You ensure DNS is disabled to stop DNS exfil. You can google it, but basically they exfil data by looking up encoded subdomains.

Hardcoding an IP won't help if the network policy disallows all network access.

The web frontend could still send secrets to third parties.

For extra security, an intermediary can set Content Security Policy (CSP) headers that instruct browsers to only connect to certain domains. CSP headers aren't a total solution, but they're a good tool in the toolkit for redundancy against exfiltration.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/...

It could be a system without a web ui, like a database or database proxy. Or it could have multiple web and native UIs (that are open source), e.g. a matrix service.

I use Docker (in Unraid).

I've threat modeled this myself, and as I understand it the Bitwarden client side decrypts/encrypts everything locally. So even if backend was entirely compromised, it's never getting anything without the master password, and that's never sent across by the client. Then again, there's also the web interface.

Yeah if an attacker was able to insert javascript then it's possible.

For this particular threat vector, where the client is compromised, the backend doesn’t matter.

A compromised server can inject exfil code into the web page it serves. If you only ever use the apps then you should be fine though.

Which is only possible if logging into the web client and not when using the bitwarden desktop app or browser extensions.

Security audits have been made by German BSI for vaultwarden (and other free software):

https://www.heise.de/en/news/Password-manager-BSI-reports-cr...

Link to reports page: https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldunge...

With all respect please type out SL. I and many others don’t know what that means. For us it’s just two random letters thrown into a sentence

I assume it's Supreme Leader.

I'm pretty worried about the security of Brave and stopped using it. I'd like to be wrong. But years old patches missing in Chromium not ported over until recently makes me nervous (referring to a recently addressed long time websocket bug in Brave). What else is missing? It just seems to risky to use for me.

My son makes games in Roblox. He just turned 14 and I highly encourage it. As a result he learned how to use an IDE and how to write LUA. Fantastic way to learn to code. He even downloaded blender and watched youtube tutorials on how to create 3d models.

I enjoy hearing about how kids are doing things like this. I'm also very jealous of the resources available to them. I started learning 3D modeling when Lightwave came bundled with the Video Toaster. There was no YouTube. The internet wasn't even a thing yet. Resources were very limited to me, to the point that I got frustrated with not being able to get past very rudimentary models but I kept playing. The thing that really killed my interest was the incredibly long render times on that 8MHz CPU. If you told me back then that real time rendering would be possible, I'd have laughed in your face.

If I had access to Unreal type 3D then, you wouldn't have been able to pull me away from the computer. So probably a good thing for me it wasn't!

Kids these days have tons of resources, but I don't know if I'm too jealous of them, as it comes with other challenges.

I became a programmer because I had many, many hours with nothing to do at my grandparents' house. I did have a programmable calculator and the reference programming manual that came with it, so I'd recreate (in extremely basic form) the games I read about in magazines/that my friends told me about and that I dreamt of playing but didn't have access to, such as Diablo/Sim City/etc. Later I learned assembly to make faster games (I'd print out z80 asm reference tutorials at the library, write code by hand on paper, and then type it out, compile it, and load it on my calculator from a library computer a week or so later).

Honestly, lots of respect for the kids these days that are so self driven that they'll spend hours on their projects and not watching mindless short form videos. I don't think I'd have had that self discipline if I had had a phone with unlimited internet/YouTube/TikTok/etc access.

Same here. All I had was a C= 64, its manual and several magazines which sometimes had printed 6502 assembly bytes. Took me three years to figure out how to poke them to the correct ram address.

> Kids these days have tons of resources, but I don't know if I'm too jealous of them, as it comes with other challenges.

I'm jealous of the resources, not of the kids. No way in hell I'd want to go through being a teenager again, especially with social media existing. But that has nothing to do with the learning resources available now that were not when I was their age.

Another thing for teenagers growing up in such an environment is that the capability delta keeps expanding.

Not only are the job opportunities just starting to dry up, the competition for these openings gets ever fiercer, giving only the most dedicated people a real chance.

I'm really glad to be almost in my 40s. Going through a junior job market without having parents providing you with thousands of $$$ for the extra opportunities is not going to go well, as most will likely find out in the coming 10-15 yrs.

> I'm really glad to be almost in my 40s. Going through a junior job market without having parents providing you with thousands of $$$ for the extra opportunities is not going to go well, as most will likely find out in the coming 10-15 yrs.

Additionally, because of the scarcity of information and degree of difficulty in learning those skills 15+ years ago, you could actually get paid well enough to have very good access to the housing market wherever you'd want. Now, in some places where work actually exists, if you get a job that you can sustain long term, it might cost 100% of your paycheque to land a mortgage on much more than a tiny apartment. You realistically need to shack up with another software engineer or whatever, not just anyone you fancy which itself seems quite difficult to pin down even well into one's 30s

Go to school -> take the debt, grind for potentially years to get a job if you're lucky -> find someone who also has a high paying job -> take on an amount more debt that your grandparents can't even visualize, and are yet responsible for -> kids?

Here is the report by (the late) Hindenburg Research about dangers to kids on Roblox. Can't vouch for the contents, but I think parents should at least skim it and take precautions. https://hindenburgresearch.com/roblox

The study can't be trusted. Just look at the article: "The study is based on QuoteWizard by LendingTree insurance inquiries from Jan. 1, 2024, through Dec. 31, 2024".