So it seems I was wrong about Cloudflare having seperate prefixes for WAF and workers. And these are all WAF/workers IPs (but not warp). My guess is that someone’s made themselves a http proxy worker, and are using that to proxy their bot’s requests.
What’s the IPv4? I believe Cloudflare has different prefixes for WAF, warp, and workers.
2a06:98c0:3600::103 is definitely a Cloudflare WAF IP, so my guess is someone using either warp or workers is sending requests and added that IP to X-Forwarded-For as a red herring.
This probably isn’t too useful for you as they only have 24v and 54v models, but Ubiquiti used to make EdgePower UPSes. They have a http management interface that lets you monitor the power usage or power cycle the router if a ping stops responding, and etc. I installed one recently for a POE switch of mine.
Regarding Google Coral, from the docs: https://docs.frigate.video/frigate/hardware
The Coral is no longer recommended for new Frigate installations, except in deployments with particularly low power requirements or hardware incapable of utilizing alternative AI accelerators for object detection. Instead, we suggest using one of the numerous other supported object detectors. Frigate will continue to provide support for the Coral TPU for as long as practicably possible given its still one of the most power-efficient devices for executing object detection models.
Personally, I’d recommend OpenVINO. It works on iGPUs, and if that’s not possible it’s quite performant on CPUs. I currently run a Google Coral and the Linux driver is no longer officially maintained meaning it breaks every now and then after a kernel update, next time it breaks I’m going with OpenVINO.
Also, I’d install Docker in an LXC for Frigate, it makes passing the iGPU through to it a lot easier.
Can confirm it does:
OrgAbuseHandle: ABUSE9107-ARIN
OrgAbuseName: ABUSE
OrgAbusePhone: +1-313-516-8908
OrgAbuseEmail: abuse@hostodo.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9107-ARIN
I believe OP would require an authoritative DNS server, which AFAIK Quad9 is not. desec.io would be my recommendation though.
The data included a transcript of all messenger messages.
Not to defend Facebook, but it would be weird if they didn’t, since you can use messenger on any device, and it’s obviously saved on their servers. A transcript of WhatsApp messages would’ve been different though, as they say they can’t read them.
No doubt it’s worse now.
Yeah definitely, and they’re probably hiding some the data too.
I can dig it…but surely the simple option is to have the PC wake up on power restoration, right?
After the PC shuts down, the UPS runtime will increase by a lot. So the power might come back before the UPS turns off, so as far as the PC can see, the power was never lost.
Edit: Also I assumed you meant restore on after AC loss, and not the last state.
The <noscript> messages seem to work for me with uBO.
The Immich app (at least on Android) supports mTLS client certificates, I use that for my instance.
You need the web site to use a certificate from the same root authority as your client certificate.
I’m not sure if I’ve misunderstood you, but I use Lets Encrypt for the server’s TLS, and then my own CA cert (which is only present on the webserver) for the client’s mTLS and everything works fine, since it’s the client that validates the server’s cert and the server that validates the client’s cert.
Only works with the web UI, no apps support it
Yeah that’s true.
you will get warnings when adding your root certificates to any device
It’s not a root certificate, and I’ve never seen any warnings.
Possibly mTLS, which you’d configure in your reverse proxy. You could email them the certificate and instructions on installing it. I believe for Chromium browsers on Windows you basically just double click the cert and click through the wizard. Firefox I know has a thing in the settings for importing the cert. Android you just tap on the cert and make sure it opens with ‘Certificate Installer’ if it gives you the option.
There’s some thinner m.2 to PCIe extensions that might work if there’s no space. Then you just use a normal PCIe sata card.
For me, every subnet (except internal only ones) have a global IPv6 prefix, including my Wireguard tunnels. I’ve got a mix of statically assigned and SLAAC. I think I’ve setup DHCPv6 too but it either doesn’t work or nothing uses it.
Here’s the official docs: https://docs.immich.app/guides/external-library/
They seem to use different paths.
a low cost subscription for more advanced detection
It’s not just more advanced detection, they will fine tune models for you if you upload images of true/false positives/negatives.
Most browsers will only use happy eyeballs with a IPv6 UGA, ULAs are just used as a fallback if IPv4 isn’t working. You can work around that by using an unreserved UGA as your ULA but that’s pretty dodgy.
True, but it’s only the sending emails and I don’t have to worry about getting my ISP to set PTR records just to pass spam filters. Your domain’s MX records still point to your server.
If you absolutely have to scan a face, apparently this works: nofacescan.app