Evidence shows Trump admin caused Reflecting Pool damage it blamed on sabotage: ex-insider

spaghettiwestern@sh.itjust.works · 20 hours

An ex-GOP lawmaker has heard enough about phantom left-wing saboteurs at the Lincoln Memorial Reflecting Pool, and he is pointing at the only suspects who fit the evidence: the people Trump hired to clean it.

In a series of posts and a new video, former Republican congressman Adam Kinzinger dismantled the administration’s vandalism narrative by accepting one piece of it. Yes, he conceded, chemicals were used on the pool. The catch is who used them and why. “Just for those who are saying there was chemical sabotage to peel the paint in the reflective pool, you’re right,” Kinzinger wrote. “It’s just, you guys did it to kill the algae.”

spaghettiwestern@sh.itjust.works · 3 months

Battery charge limit will allow you to set it to stop charging at partial charge. Doing so greatly increases the battery lifespan and can reduce possible fire risk even further while still leaving far more backup time than a UPS would provide.

spaghettiwestern@sh.itjust.works · 3 months

See if that laptop model allows you to limit the battery charge. If the battery’s still holding a charge, isn’t swollen, and is kept at room temperature you have about a 1 in a million chance of a battery fire.

Parking your car in your garage has hundreds of times more fire risk.

spaghettiwestern@sh.itjust.works · 3 months

Try testing TLP in battery mode even if you’re not using a laptop. You can configure all kinds of things to your liking with it.

I tried it out a few years ago and none of my server apps showed any noticeable decrease in performance with it running, but my power monitoring plug did show a reduction in power consumption. I ended up leaving it enabled all the time.

spaghettiwestern@sh.itjust.works · 3 months

I set up KeepassKC with Syncthing temporarily years ago while looking for other options. To my surprise it’s worked so well there’s been no reason to change to anything else.

The database file is always backed up to multiple devices. With Syncthing file versioning turned on older backups are available if that file gets corrupted, but in 8+ years I’ve never had to use one of those older backups.

Initially I was using Syncthing discovery servers which allowed syncing from anywhere, but I’ve since moved away from that. Now everything is run locally and I use Wireguard to connect to my home network when I’m away.

I’d get that old Pi running with a cheap SSD, set up Wireguard (or just use the Syncthing discovery servers), put it on a shelf and forget about it. It’ll probably run for years with minimal attention.

spaghettiwestern@sh.itjust.works · 3 months

Many of the prominent https VPN protocols are for evading the great firewall of China. OP had that as a requirement

OP said exactly the opposite. Where the fuck do you get this stuff?

spaghettiwestern@sh.itjust.works · 3 months

Thanks for the link. Will take a look.

spaghettiwestern@sh.itjust.works · 3 months

Who said anything about China?

OP: “I don’t need strong censorship resistance; it just has to work in offices and hotel WiFis.”

spaghettiwestern@sh.itjust.works · 3 months

I’ve run Wireguard on 443 (on my router) for exactly that purpose and never had a problem, even when my standard WG port was blocked by some businesses. I’ve since had to move to port 587 due to router conflicts and it’s worked fine so far too.

The battery drain on Android is negligible (at least for my uses) and WG is activated by Tasker whenever my home wifi is out of range. From what I can see WG is configurable via Docker compose.

spaghettiwestern@sh.itjust.works · 4 months

There are ~50,000-60,000+ available IP ports. If you had Wireguard configured correctly and running on every single one of them a port scanner would get exactly the same result as if every port was closed. Wireguard is completely silent unless the correct key is provided.

The “script kiddies” could scan every port for months and they’d get the same result. There is no known way to even know there’s an open port much less know that Wireguard is running on it AND have the correct key for access.

I understand being gun shy after your experience (I would be too), but that experience has nothing to do with what happens when you open a port for Wireguard.

spaghettiwestern@sh.itjust.works · 4 months

When I looked into this configuration a few years ago the security improvements seemed minimal. Adding yet another provider to the mix plus the additional risk of a server misconfiguration didn’t seem to be worth the trouble unless I was dealing with CGNAT.

Besides hiding endpoints from your ISP and exposing them to the VPS, how much security does this really add?

spaghettiwestern@sh.itjust.works · 4 months

DDNS (Dynamic DNS), one 3rd party service I do use.

My network is reached by URL, not IP (although IP still works). When my IP changes the router updates the DDNS service in minutes. Lots of providers out there and it’s easy to switch if needed. I like DuckDNS. It’s free or you can choose to donate a bit to cover their expenses.

spaghettiwestern@sh.itjust.works · 4 months

I think you’re overthinking it. Wireguard is considered the “gold standard” and an excellent solution for what you’re trying to do. Open ports can be a concern, but an open Wireguard port is completely silent when not in use and does not respond unless it receives the correct access keys. That makes it invisible to port scanners.

Wireguard on my OpenWRT router works flawlessly. If the router is working the WG endpoint is too, and there are no 3rd parties involved. Tailscale provides much the same thing, but as I understand it requires the involvement of multiple 3rd party services. I’ve been burned too many times by terms of service changes and security breaches so I wanted to avoid relying on any corporate entities wherever possible.

Tasker brings up the tunnel on my phone automatically whenever I’m not connected to my home wifi and drops it when I get back home, so my home servers are always available. My biggest problem when not at home is Verizon’s crappy mobile network.

IMO it’s worth the effort to properly configure Wireguard and get your servers working. Once you get it set up you probably won’t have to touch it for years.

spaghettiwestern@sh.itjust.works · 4 months

Pretty sure a decent amount of them are bots.

Could be, but those bots must be programmed to simulate actual Maggots. They don’t know how to spell, capitalize or use punctuation, much less write more than a single barely comprehensible sentence.

spaghettiwestern@sh.itjust.works · 4 months

I found it useful for some things. We have a pack of coyotes in town that preys on dogs and occasionally is spotted in the neighborhood. It was also useful for business & contractor recommendations, but have to otherwise agree with you.

spaghettiwestern@sh.itjust.works · 4 months

It goes deeper with Nextdoor. During Covid someone living next to a local evangelical church posted pictures of a packed event where no one was wearing a mask. Some of those pictures included the backs of a few kid’s heads.

The “Good Christian” church members complained that he was a pedophile and Nextdoor deleted his account! This could not be done by moderators and required Nextdoor executive approval.

Nextdoor is a Maggot haven from top to bottom.

spaghettiwestern@sh.itjust.works · 4 months

Even in my relatively liberal U.S. city, Next Door is overrun by Magats who are cheered on and protected by right-wing Magat moderators. It needs to die and this looks like a great replacement.

spaghettiwestern@sh.itjust.works · 4 months

Your assumptions are no longer accurate.

For one thing Lithium-ion batteries are starting to become common in consumer UPS models including those from Cyberpower, Eaton, and APC.

There is no memory effect and they don’t need to be discharged and recharged regularly.

Similar to a mechanical device that wears out faster with heavy use, the depth of discharge (DoD) determines the cycle count of the battery. The smaller the discharge (low DoD), the longer the battery will last. If at all possible, avoid full discharges and charge the battery more often between uses. Partial discharge on Li-ion is fine. There is no memory and the battery does not need periodic full discharge cycles to prolong life. - https://www.batteryuniversity.com/article/bu-808-how-to-prolong-lithium-based-batteries/

The risk of fire is extremely low. For a high quality charge limited lithium ion battery in a controlled environment it is about the same as a UPS with lead acid batteries.

Your chance of being struck by lightning in the course of a lifetime is about 1 in 13,000. Lithium-ion batteries have a failure rate that is less than one in a million. The failure rate of a quality Li-ion cell is better than 1 in 10 million. https://www.batteryuniversity.com/article/bu-304a-safety-concerns-with-li-ion/

Battery swelling (not caused by manufacturing defects) is primarily caused by overcharging, deep-discharge, physical damage, and heat, none of which are problems for my server installation.

The risk of fire from parking your car in your garage is hundreds of times higher than using a laptop as a server.

spaghettiwestern@sh.itjust.works · 4 months

After having my server fail to recover after a power failure while I was out of town for an extended period, I moved all important server apps to an relatively inexpensive (<$200) laptop.

The battery is firmware limited to a 70% charge which means it will last for years with no significant safety concerns. Even at a partial charge, Debian indicates 7 hours of run time when the power fails (I’ve had none longer than 4), and it’s unaffected by power blinks. It saves a bit of electricity too and costs $150 less per year to run than my old UPS alone.

It’s been running for nearly 2 years without a hitch.