Is enough to don't even open the link!
Everything right now seems to have an urgent need to be developed into Rust, like why???
Just like kubernetes, many companies followed the kubernetes hype even when it was not needed and added unnecessary complexity to a simple environment.
It already started, freelancer developers are making a lot of money already.
I remember watching a developer having to fix the company entire code because they went full AI and now nobody knows shit anymore.
If you are a good senior developer indeed, now is the best time for you to become millionaire.
Company after company can no longer fix things, they are bringing external developers to keep afloat.
Remember the tweet popular last year with the AI bot deleting the production database setting the company back to zero???
Google "Project Genie" which allegedly can take your input and the AI will make it rain, drove investors into panic mode.
They think that you can create GTA6 like that.
It was the perfect storm: clueless investors + the whole AI bubble already bursting if you are following non-biased news.
This, I have a friend using AI bots to do the whole "brain processing", he is just pressing buttons now.
Even some smart cooking pan they bought (couple), uses an app with AI in it.
I can see the day that all of these folks completing replacing their thinking skill with AI, unable to find job because they can no longer troubleshoot anything without AI.
I use AI as replacement for search engine, I spent 3 nights using ChatGPT to assist me in deploying a Proxmox LXC container running 4 network services and the whole traffic is routed to Proton VPN via WireGuard. If the VPN goes down, the whole container network stops without using my real IP.
Everything was done via Ansible which I use to manage my homelad, and was able to identify mistakes and fix them myself.
Dude, I have learned a ton with LXC and sort of moving away from VMs.
After their gaming stock crashing, making Windows 11 completely useless, not to mention its Copilot adoption getting nowhere, this was just a matter of time.
Windows 11 falling apart after AI adoption tells their AI, vibe coding is not going as planned.
If you saw their latest report claiming to focus on fixing the trust on Windows, it is a little too late, even newbies moved to Linux, and with AMD driver support, gaming is no longer an excuse.
Two decades ago, my former manager saved the day after a university hardware firewall went down.
Over the phone, he instructed the guy to download this floppy disk firewall, specify the ports, traffic direction, basic stuff.
Boot the computer and voila, the university network was up again giving the teams hours to get things sorted out.
I forgot its name now but many business would run this floppy disk firewall coz it just worked, once booted it would run "forever".
So instead of opening a port on my firewall for WireGuard, I must have these ports public exposed:
* tcp/80
* tcp/443
* udp/3478
* tcp/50443
I don't know about you but that seems the most insane approach.
Even if HTTP-01 challenge is not used, you are still exposing 3 ports instead of 1 random-high port like 55555 for example.
Yeah yeah, you can use rever-proxy but still, you are exposing way more ports and services to the internet than just one port for WireGuard itself.
- TCP/80 is only required to answer let’s encrypt challenges for certificate issuance
- UDP is only required to enable DERP.
These are both optional.
It’s not surprising that there are additional ports required on top of Wireguard. 443 is likely for key distribution and management. If you don’t want PKI then you don’t need headscale; you can always distribute the keys yourself and just run plain wireguard
>If you don’t want PKI then you don’t need headscale; you can always distribute the keys yourself and just run plain wireguard
It makes more sense to me, WireGuard + SPA (fkwnop aka replacement of port knocking that requires pre-shared key to even talk with, only that IP can access to it (IP Table), any scan tool seems it as closed)
Headscale/Tailscale only has value if you are behind a CGNAT, otherwise, it just adds extra management and complexities.
Well, it also lets you federate access and manages the keys for you. But yeah, if it’s a personal setup and you have good key rotation hygiene, I agree with you: it doesn’t add much value on top of wireguard. I’ll hazard a guess that you can just run your own DERP relay too for the CGNAT case.
80/443 is all that's necessary for Headscale as a control server.
UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control and data planes. DERPer is open source from Tailscale.
50443 is for GRPC. I'd not expose that, even if it is protected by authentication (and tested).
From my perspective, not everybody is busy but they are using AI to remove the load from them.
You might think: But that is great right??
I had a chat with a friend also in IT, ChatGPT and alike is the one doing all the "brain part and execution" in most cases.
Entire workflows are done by AI tools, he just presses a button in some cases.
People forget that our brain needs stimulation, if you don't use it, you forget things and it gets dumber.
Watch the next generation of engineers that are very good at using AI but are unable to do troubleshooting on their own.
Look at what happened with ChatGPT4 -> 5, companies workflows worldwide stopped working setting companies back by months.
Do you wanna a real world example???
Watch people who spent their entire lives within an university getting all sort of qualification but never really touched the real deal unable to do anything.
Sure, there are the smarter ones who would put things to the test and found awesome job, but many are jobless because all they did is "press a button", they are just like the AI enthusiasts, remove such tools and they can no longer work.
Yeah, the scary problem comes from people who are trying to abdicate their entire understand-and-decide phase to an outside entity.
What's more, that's not fundamentally a new thing, it's always been possible for someone to helplessly cling to another human as their brain... but we've typically considered that to be a sign of either mental-disorder, psychological abuse, or a fool about to be parted from their money.
It's a heavyweight and will remain so, but it's ability to influence what other countries do is in freefall. Whether that disqualifies it as a superpower is a matter of definition, I suppose.
When the USA ceases to be a superpower is different from when it ceases to be a powerful threat. Russia is a powerful threat, despite being only a mid-tier power.
IMO, the USA probably is still a superpower. But the UK and France didn't realise they'd stopped being superpowers until the Suez Crisis, and I suspect the USA will only discover the loss of superpower status in a similar way. Though not exactly the same, given what happened in Vietnam and Afghanistan, let alone TACOing out of using force to take Greenland.
Is enough to don't even open the link! Everything right now seems to have an urgent need to be developed into Rust, like why???
Just like kubernetes, many companies followed the kubernetes hype even when it was not needed and added unnecessary complexity to a simple environment.
Now it is Rust time!!
reply