I think the biggest systemic issue in most places is that most people don’t actually know how to train people, including most senior staff. Very few people are actually natural trainers/instructors, so they have to be trained in how to train, and the expectations that they do so has to be part of company culture as well as time baked into the workday to do it, because it DOES take time. It pays off huge in the long run but it can be hard to see the forest through the trees if the management themselves don’t know or understand the value.

As much as I hate corporate jobs they’re generally better than small companies about having a formalized training program. It’s a shame because there’s so much garbage in corporate culture that a lot of small businesses don’t want to implement the good with the bad.

One thing I’ve seen over the years is that a TON of businesses have NO IDEA how to be functional. It’s a person that started in their garage and managed to grow and they just do stuff, and keep just doing stuff and hiring more people to do stuff and quickly outgrow the garage but don’t introduce sound business practices that you need to run things effectively. It’s crazy how many businesses are like that.

Dang of everything you just said turning down greydwarfs sounds amaaaaazing.

Other major inconvenience is definitely metals through portals, but I’m not sure if I’d click that one off. It is really annoying to constantly be running through biomes that I have no interest in grinding just for giggles, but part of me wonders if that’s part of the charm.

It can be both. Jobs should invest in their people, but individuals should also take some ownership of their own skills.

The apprentice/journeyman dynamic was a lot better suited to a time when a) people left their hometowns a lot less, b) information was MUCH less accessible except from people who showed you how, and c) businesses put a lot more stock into their people as an asset, instead of treating labor as a liability.

A isn’t anyone’s fault.

B isn’t anyone’s fault.

C is where businesses have gone sour, but it’s not like businesses have ever been well known for taking care of their people (labor laws, unions, OSHA are all examples of this from history)

It’s not propaganda that people need to take ownership of their own skills and careers. Nobody’s responsible for you or your success but you. If you want to be good at what you do then that’s on you. You can take what your job gives you and that’s it, and you’ll probably do fine at whatever tasks you got specific OJT for, but unless you get lucky or play your cards right that’s not going to make you very successful.

I really don’t want to sound like an old person saying that kids these days want things handed to them, and I really do think that employers in general don’t invest in their entry level workers as well as they used to, but expecting an employer to take you from know-nothing to a master of your craft is naive, frankly, because the days of someone working at a place for 10-30 years are just gone, and everyone has accepted it. There’s a ton of reasons why that’s the case and a lot of that is employers not incentivising employees to stay via wage growth, promotion opportunities, and training, but there’s a lot of other factors. Either way things have changed, and it doesn’t really do much except make you sound like you need a waahmbulance if you just sit back on your haunches and complain about it.

You can still become an apprentice if you want to work a trade, and a good union will train you up if you’re a good worker, but that isn’t fast. It was never fast, and most people aren’t satisfied with the pace today, because it doesn’t get you earning six figures out the gate. You had to work hard, earn a good reputation, and stay in the area for 10-20 years. Most people don’t want to do that, and that dynamic never took a hard root in the tech sector in the first place, which is where this conversation started.

I encourage you to stick to a career that you enjoy enough to take some joy in getting better at your skills for the sake of getting better at stuff instead of just trying to earn a paycheck. Nothing wrong with a job being just a means to an end, but I say this because you’ll enjoy your jobs much better if you’re passionate about what you do, and you’ll naturally be drawn to opportunities to gain mastery in skills that will make you more successful.

None of this might change your mind, might just piss you off even, but the guy you’re replying to sounds like he enjoys the job enough that he’s trying to be better for the sake of being better. I wouldn’t knock them for that.

My guess is that it’s a loss on the hardware but their revenue stream is tied to data collection.

I mean who so lazy they order a single candy bar through Doordash?

Tell me you’ve never been baked out of your gourd without telling me you’ve never been baked out of your gourd

I think your example of SSH is actually the perfect counterpoint to your position!

SSH is versatile but there’s SO many ways to configure it in an insecure way. It’s important for SSH to be versatile because of how many different devices need it, but that also means it’s really easy to have a config that supports crappy ciphers (3DES, RC4, etc), or enabling root login, or pick any other hundred problems that are either due to user misconfigs or just inherent vulnerabilities in a cipher or key exchange method. Its versatility is the core of its weaknesses.

For ssh, there will for sure be bots hunting the internet for vulnerable ssh servers very soon after. Automating the process of getting in

This already happens right now. If you have 22 open, your firewall is getting hammered with bots trying to get in, regardless of what cipher you’re using, trying to exploit known weaknesses.

WG was never meant to be a swiss army knife, even though it is also versatile. It’s designed to be fast, secure, and as dummy proof as possible.

giving a choice of crypto, but not adding to the protocol with negotiation.

I’m not sure how you’d achieve this. If you have a mechanism to change cipher modes then there would be part of the codebase and handshake that validates settings in some way, which adds potential attack vector.

History shows that every cipher mode eventually will be vulnerable to new computing power, I don’t think that’s avoidable. Quantum computing is the next big event on the horizon, which is why quantum resistant ciphers, even old ones that never really got adopted, are getting a lot of attention if they’re deemed to be quantum resistant.

The important thing is that if, not when, it’s reported that the cipher is vulnerable that people harden their networks in other ways until a new cipher mode is implemented. That’s just how it works IMO. Edge security cannot and should not be your only security method anyways.

Overlay VPNs like tailscale and zerotier are interesting to me because you don’t have to open any ports. I’m sure they have their own inherent vulnerabilities also but they don’t make you punch holes in your firewall, which makes them less vulnerable to random attackers trying to scan your network edge.

Even if it is the “best” it gives one target to try to find a weakness in, rather than many.

It sounds as if you’re falling prey to the allure of security through obscurity.

I’d like to remind you of Kerckhoff’s Principle.

a cryptosystem should be secure, even if everything about the system, except the key, is public knowledge

What this is saying is that in a secure cryptosystem all you need to secure is the key.

Curve 25519 is, for the time being, considered a secure cryptosystem. It’s likely that in the future it will become obsolete, but we’re not there yet. When we get there WG will port to a new cipher that is more secure.

Even if you set your configs to not negotiate, just the fact that the stack COULD negotiate opens you up to downgrade attacks. Also, anybody trying to connect would get some kind of hello/response traffic that would broadcast your (non negotiable) configs, so what do you gain from being able to choose, except the ability to make mistakes?

Well I never, daggone real looking wood duck right there

The Hook Up YouTube channel has a ton of awesome non sponsored reviews of tech that you might be interested in. Projectors, sound equipment, etc. I’ve honestly never seen better consumer review content.

https://www.youtube.com/channel/UC2gyzKcHbYfqoXA5xbyGXtQ

Personally I don’t care for home theater so often I skip videos about projectors, but there’s a ton of stuff there that might help you make some decisions - at the very least you’ll walk away better educated about what makes a quality piece of kit.

I believe in reincarnation just as much as I believe any other theory of an afterlife - that is to say, I don’t.

We don’t know. Nobody knows what happens when we die. That’s ok, and I don’t feel the need to make up a story to explain away the uncertainty.

I think it’s likely that something happens when we die, but it could just as easily be nothingness, the end of existence. I only think it’s likely because I definitely believe that there is SO much that we don’t understand about the universe that it’s more probable than not that SOMETHING happens that we can’t currently fathom, perceive, or understand.

But, right now there’s no real evidence. So I don’t care, and I don’t worry about it.

To our best understanding, everything that lives will die. I don’t know what happens, it might be some form of heaven, it might be reincarnation, it might be transcendence, etc. However, I take comfort in the fact that it’s a shared experience, whatever it is. It’s natural. It’s part of the process.

The universe doesn’t owe us an explanation. Maybe we’ll figure it out, but we haven’t yet, and I’m fine with that.

BJJ is one of the most “useful” when it comes to actually fighting (along with boxing).

Karate and TKD are more of an art/discipline. A well trained karate fighter will very likely outmove an untrained assailant, but someone moderately trained in BJJ will likely be able to subdue/get away from a very well karate or TKD fighter.

Honestly, BJJ is an amazing skill to have in a pinch, and it trains you in grappling with opponents that have a size/weight disparity.

Not all gyms/dojos use belts, even in BJJ. BJJ belts follow a pretty good progression based on skill, whereas karate (can’t say for TKD, never trained in it personally) often relies on performance of kata in order to progress to the next belt. Kata is choreographed movements, it’s more like a dance that you practice than an actual measure of ability to spar/fight.

If OP wants to get their kid into a fighting sport that’s fun and relatively safe, they can pick any discipline. If they want the added bonus of their kid being much better equipped to defend themself from a real aggressor they would do best getting them into BJJ, boxing, and then wrestling once they’re in middle/high school.

I would personally avoid boxing for my own kids due to the repeated head trauma and risk of fractures, but it’s the best real world striking training you’ll get, at least in the USA. BJJ and wrestling help you immensely once you’re on the ground, which is where 90% of street fights go within the first couple seconds, but a real, dangerous, fight is often over before it starts and countering a sucker punch or landing a decisive one yourself before the opponent can react is often the most important thing.

One of the downsides of BJJ is that it’s culturally tied to MMA in the USA now, which means that if OPs kid does BJJ for a while in their youth they’ll be more inclined to get into MMA in early adulthood, which is not something I would want for my children. But it’s a great skill regardless.

My theory at this point is that it’s the equivalent of an audio editing meme. I think they just want to see how often they can get it into a final cut, for the lulz.

If pi hole is configured to use another DNS it will still forward your request, just not to your ISP DNS server. Essentially you’re providing your DNS requests to a 3rd party, for a slight boost to performance (because they’ll have tons of stuff cached and can do recursive queries faster if you’re requesting a site not in their cache.) Your web pages will load faster because you don’t have an SBC trying to manually figure out what’s the IP for bigfuckdaddyhairbrushemporium.net

The downside is you’re exposing your DNS queries to a 3rd party and it’s a bit of a privacy hit, as the upstream DNS server you select has your public IP correlated with your DNS requests. Doesn’t really matter to most, but it does for some.

Even if your ISP did have something in place to try and prevent abuse I find it unlikely it would trigger over normal traffic. Do you have a huge network/many hosts/exposed services?