They should not be worried, they should be educated.

If you worry a new user enough they'll go back to Windows or Apple because there's less scary warnings there.

We need to make the transition as pain free as possible. Learning about the joys of kernel compilation and SELinux can come later.
The first step is "Hey, this is as usable as Windows, without stupid ads in the start menu.

IF you already have an email domain you control.

Calling "acquiring and setting up an email domain and configuring the mail server for wildcards" "basically no extra effort" is a bit disingenuous compared to "solve a captcha for a Gmail account"

Ah, you "work" in "marketing"?

That's the equivalent of leaving the door open and hanging a sign "Internet over there" pointing at a wall.

Programs don't need to respect those registry keys. If you're worried about internet access, set up a firewall.

Also, if you're worried about malware, the damage is probably done before anything connects to the internet.

B stands for Billion (Parameters) IIRC

Embedding ads into the stream would be hard to counter, but it's far away. That would invalidate caches along the way and need extra performance to reencode the stream with the ads inserted.

That's extra costs that are hopefully orders of magnitude above the lost ad revenue from ad blockers

Well I doubt this can match the supersports acceleration ;) but I get what you mean.

It's actually interesting from a design standpoint. How do you handle a lead vehicle that has much better acceleration. Do you artificially slow down the lead vehicle so it can't abandon the "towed" trailer? What does the follower do when it loses the leader. This basically needs nearly fully autonomous driving.

The good thing is that you don't need to know which ports to block. You just set your firewall up to deny by default and then start whitelisting the things you want to allow.

Even easier if you put your "smart" devices in a separate network, then it's just:

• Allow traffic from home net to Internet
• allow traffic from home net to iot-net
• drop the rest

Now you can surf the internet, control your devices and they can't phone home

I'm hopeful that reencoding on the fly or even merging preencoded files into a single stream is too expensive because it needs a lot of compute power and invalidates caches .

The problem is that android auto is restricted to apps installed from the play store.

The F-Droid Version supports Android Auto, but it's blocked by Google.

I managed to enable it by spoofing the installer-package during installation.

For me, the navigation is near unusable. Location tends to lag behind by a few seconds when running on Android Auto. On my phone it's fine.

I run a 2 node k3s cluster. There are a few small advantages over docker swarm, built-in network policies to lock down my VPN/Torrent pod being the main one.

Other than that writing kubernetes yaml files is a lot more verbose than docker-compose. Helm does make it bearable, though.

Due to real-life my migration to the cluster is real slow, but the goal is to move all my services over.

It's not "better" than compose but I like it and it's nice to have worked with it.

You dynamically request "a port" from the vpn gateway and it returns your port number.
As long as your nat-pmp-client keeps refreshing the port, it should stay the same. The timeout is rather low (60s afaik) so it probably wouldn't survive restarts.

There's a docker image that automates this for qbittorrent, but it shouldn't be overly complicated to adapt the script to other clients, if they can be configured via an API.