Comments by "eDoc2020" (@eDoc2020) on "Lawrence Systems" channel.

  1.  @yifeiren8004  It's a neat feature and shows attention to detail but the lack of an auto-rotating display does not translate to a lack of respect to customers. Other factors, such as the presence or absence of necessary features are much more important.
    3
  2. If you have enough access to steal a session token you probably have enough access to steal any identifier like that. I think the only full defense against session token theft is a secure module which cryptographically verifies the session.
    2
  3. AFAIK most L3 switches are stateless. This makes it hard or impossible to allow TCP connections from subnet A to subnet B without also allowing subnet B to initiate connections to subnet A.
    1
  4. Their switches aren't made to be cheap, they're made to be polished.
    1
  5. Malware running as a non-administrator can access stored browser data of the same user. No admin rights needed for session stealing.
    1
  6.  @joshw2929  For several generations the UEFI firmware has been cryptographically verified by the PCH hardware so it's not easy to alter. Plus the trojan would have needed admin rights which it probably didn't have.
    1
  7. That's definitely a plus for a home build but is much less important for business. With Unifi you can (unless I'm mistaken) quickly switch to another piece of Uniquiti hardware.
    1
  8. Some devices (especially obscure ones) require custom DHCP flags in order to autoconfigure themselves.
    1
  9.  @ArchaeanDragon  If you switch from mobile data to Wi-Fi (or move a laptop between work and home networks) your public IP will definitely change.
    1
  10. What happens when both VMs are set to use the max number of cores but each is only only running a single-threaded application? Does each VM need to wait for all cores to be clear (meaning only 1 host CPU is used) or is a hypervisor able to "split" the VMs to let both run simultaneously and properly utilize 2 host cores? I haven't been able to find an answer to this question but it seems like it could be very important when provisioning cores.
    1
  11.  @jason7i2  You can of course have a mix of systems, like using UniFi for a router and then run unbound and HAProxy on another system.
    1
  12. I would imagine "slow" is mostly related to latency, throughput will be fine if the hardware is fast enough. If it's fast enough to handle routing at a certain throughput it can certainly handle switching at at least the same throughput.
    1
  13.  @chaosfenix  I have no idea really. Assuming the soft switch is only lightly loaded it would probably be something like going from .1us to .5us but the downside is it would be less consistent. The more it's loaded the more it will increase and there's also other software tasks to worry about. As well as power-saving modes (if used) will take time to transition.
    1
  14. I'm a homelab user who is about to play with XCP-ng for the first time. From what I've heard PCIe passthrough requires manually changing kernel boot options which may be reset with some updates as well as complicated command line operations using UUIDs. Is this the case, and if it is, are there plans to introduce a more user-friendly interface?
    1
  15. This video is perfect timing for me. I had been using an old version of Microsoft Authenticator but then I updated it last week and it stopped working. I uninstalled and reinstalled an older version but of course that lost all my stored keys so I'm looking to start over. I'd much rather use something FOSS and from a separate company.
    1
  16. Does UniFi support hostnames in firewall rules? That was part of the reason I went with OPNSense for my setup. I wanted the ability for certain hosts to only have access to specific hosts on the public Internet. Since they're public servers I can't use IP addresses.
    1
  17. The big rackmount ones definitely. But they also have small offerings with many of the same features.
    1