I still drive a '97 4runner that I bought for 5k around 2020. I've probably put 5k into repairs. I've spent less on it than anything I could buy new, and it will probably outlast us all. Nearing 300k miles on it now.

Very smart to go with a Toyota! I did the opposite and learned the hard way that the 'discount' for buying American will be paid for in $3k increments whenever it wants over the next few years until your finally give up and just buy the Toyota you should have bought to begin with.

Nowadays Toyotas are more expensive than fords and every Toyota hybrid has a year long waitlist. Everything is priced in today.

The easiest way to deal with the usual suspects is to just block the entire countries network range(s). There really is no reason they should be connecting to your home router anyway, and you lose nothing from blocking them.

Sure their packets will still hit your router, but if they are dropped immediately at least you're not wasting a syn-ack on them.

> The easiest way to deal with the usual suspects is to just block the entire countries network range(s).

Keep in mind that this should be paired with an ASN blacklist - MaxMind also has an ASN mmdb for convenience - because IP address to country maps are almost entirely self-declared[0].

For example, Tencent (AS132203), which you almost certainly want to block, has ranges in 73 different countries per [1].

[0]: https://datatracker.ietf.org/doc/html/rfc8805

[1]: https://bgp.tools/as/132203#prefixes

I, temporarly, banned some ip range. I didn't find a source for pinpointing countries; though I am interested. Could you point me to some sources which, deterministically, resolve to some countries? To my knowledge you can not reliably identify countries by ip since this would be dependent on DNS servers. Though I am just a application programmer!

Thanks in advance.

Your router doesn't care about their DNS settings. IP addresses are very easy to tie back to countries. The reason they say it's not reliable is because it's trivial to spoof the country, but even so, a lot of attackers don't even bother. It's sort of like the Nigerian prince scam calls: if you're wise enough to block Russia, you're not worth their time.

Your firewall vendor should supply you with country lists, just select the known bad ones and drop their traffic. If you have a consumer grade router, you will probably have to configure the blocklists manually.

> The reason they say it's not reliable is because it's trivial to spoof the country

ISPs sometimes do trade IPv4 blocks and countries to which it belongs do change occasionally. That can become a problem if you were like literally Netflix and someone few nation states over started an ISP.

I wonder if adding the US is now sensible.

Unless you're serving something, you should probably drop all incoming requests. If you are serving something, the US is a pretty big market to lock yourself out of.

FWIW, I blocked the US for a while.

Eventually, my lets encrypt cert expired and it turns out certbot is run from USA, so the auto renewal failed me.

Almost all spam traffic comes from the US, it's not even close. But for many people so does much of their human traffic.

Getting it directly from IANA is always the best approach.

Here is a "simplified" version in various formats.

https://github.com/HotCakeX/Official-IANA-IP-blocks

Gross - you're going to block countries just because the US government doesn't like those countries?

I'm happy to unblock China from accessing my website, once China does something about the millions of daily hack attempts originating from that country.

But you pointed to a list of OFAC sanctioned countries, not China.

Do you think you get excluded from mass scans for disagreeing with your government?

Routers got such a thing build in nowadays, just gotta enable it (not the ones from your ISP of course)

Have you ever read it? It was published in _1970_ and the content isn't really about stealing books, but about fighting against the government and corporations. Its more political commentary than anything else.

Yes, bookstores should stock it, and libraries should shelve it. Its something everybody should read at least once, for some perspective at least.

Some programmers import a sarcasm library while others could write their own.

Ahhh jerkcity. A classic.

.NET is still installable as a standalone thing. In fact I probably have several versions installed on my current Windows PC. No reason Windows Lite couldn't also have .NET installed _when you need it_.

I still don't know if I am sold with that. .NET is also a runtime so how do you handle the user story? If your users are also on Windows Lite then they have to manage .NET version or you have to package .NET with whatever you build. If your users are on full Windows, wouldn't it just make sense for you to build in same environment as your Users? Especially since IT would have to manage two separate operating systems if devs went Windows Lite and say Sales using the target app was on Windows.

This whole thing makes sense for indie devs or build VMs but breaks down for Enterprise pretty quick, and Microsoft is much more friendly to Enterprise customers than indie devs.

They already have this problem, Windows includes .NET Framework 4.x but not any modern version of .NET

I wondered if it was the same but he says he built this car in 2008 which would have been three years after that video.

This happens with any TV or Movie that has music, and its incredibly frustrating. Always best to download to not confuse yourself as to why the media is somehow different than you remember.

Ironically, tho, sometimes I wish there was a parallel collection without the music videos because I kind of enjoy their actual real-world misadventures and them being "on the road" out in public (menace) more than the hilarious music video critique sessions

syspatch and sysupgrade have made things substantially easier these days.

At that point you've re-invented emacs.

Greenspun’s Tenth Rule of Programming states that any sufficiently complicated C or Fortran program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp.

I like rtm's corollary: "... including Common Lisp"

https://en.wikipedia.org/wiki/Greenspun%27s_tenth_rule

well, almost. if emacs offers a graphical file manager i'll consider using it. this seems to be a start: https://github.com/emacs-eaf/eaf-file-manager. the file manager needs to also integrate with a terminal though so i can run unix commands in the same directory. and it needs to support mouse-based operations too. finally, and that's the real kicker, i'd like a better integration of the terminal output and the graphical display by supporting the passing of structured data that the display knows how to handle without terminal escape codes. those need to go away. (which is why sixels are not a solution either)

I’m so sorry to say this but what you want is vscode

That, or eshell and emacs-ipython-notebook

you got a point with the notebook, except both it and vscode are for programmers. i want the same for non-programmers for the unix commandline. i looked at jupyter-qtnotebook. it can display graphics inline. now instead of a repl for programming code i want to enter unix commands and display their output with graphics.