Money and means always matters.

The bending of the knee is just a quest for more money.

They have sufficient money and means to get out.

I see you’ve met my moron of an uncle. Who is in his late 50’s.

Oh he is not a good author by any stretch. The sci-fi equivalent of eating sugar - technically reading, has that fun sci-fi bits, but nothing of real value underneath.

C.S. Friedman is a highly undervalued SciFi/Fantasy writer IMO, I think she played in a lot of the same themes as Hubbard but with way better writing and much more interesting stories.

Hubbard was good at churn and rock solid as a swindler, and Mission Earth IMO was just him throwing his last "screw you"s to the people he conned.

A stupid but moderately entertaining read, with insane alien sex scenes, mostly from the perspective of a (I swear I’m not joking) small dicked trickster alien who keeps screwing up his own plans. I think its Hubbard’s self insert.

I wouldn’t bother with it though.

Yeah, definitely subjective, but to me the early days of the web were before HTML 2 - so up to 1995.

And yeah, so many tables for a long time… Mostly because it was a bit messy to work with and had limitations, not to mention browser support requirements and a pretty fast moving sets of specs…

It was fun though.

Ohhh… No, not battlefield earth.

Mission Earth. 10 book series.

divs were added in the late 90’s… that is not what I’d call early internet

The sheer number of different religions and the general talk about any religion, as well as the laughter at the idea of a god other than power, would have me disagree on that.

But that’s the fun thing about books - everyone gets their own interpretation of the message!

There are parts of it where he explicitly has the aliens talking about how stupid humans are for following dumbass religions, and how easily religious leaders - of any religion - can be bribed with power, money, and sex.

Its definitely not in support of any religion

Eh, maybe early on. Scientology was founded in the 50s, the Mission Earth series that made fun of religion and the people who followed it blindly was in the 80s just before he died, so I don’t think he bought into his own bs. I think that was him saying “You schmucks will still follow this crap after I die”.

I don’t believe in the slightest he though he created a novel approach to psychology.

He has other books he’s written where, plain as day, he points out the absurdity of religion and people following it. He put out a sci-fi book as a self help book because he thought it was funny and would make more money. He then made it a religion because he knew people were easily manipulated.

I am basing this on other things i’ve read from him, such as the Mission Earth series. I don’t believe in the slightest that he believed in any of it, from the junk science on up.

Was that the file transfer allowed for remote code execution one? That’d be the one that sticks out to me. 3 or 4 years ago iirc?

Edit: CVE-2021-27649 is the one that came to mind, not sure if that’s the one you’re referring to.

I’m in hard agreement with you, EuroTrip Yoda (had to).

My in-laws definitely voted Harris, my dad passed 4 years ago (Vietnam vet - not a trump fan), and my mom went down an idiotic rabbit hole. I haven’t talked to my mom in weeks, and I’m sure she knows why.

She also doesn’t know that we are planning to leave the country. I can’t stay in a place that will reduce my daughter to a second class citizen without bodily autonomy. Yet that’s what the nitwit I called “Mom” voted for.

The comment from Maven is, as you found, accurate.

The answer is all of it.

The obsession is because that’s the news friendly way of answering with “racism”.

Just once I believe, by the kid. If I remember right the second incident the guy had a rifle, but didn’t take a shot, Secret Service shot at him.

I agree, its only partial.

I mostly agree.

What isn’t present, and should be, is the teacher addressing how they will be avoiding recreating this situation going forward. How they address for next time is more important to me than an apology.

Ymmv, but to me that’s the part that’s missing. And I get the venting.

You were responding to me, and I most definitely didn’t equate the two. Maybe you meant to respond to someone else.

In any case, you can route between vlans (and subnets), but without a route you aren’t communicating between those vlans or.between subnets.

Also, you can have multiple subnets in a vlan, but you can’t have a single subnet across vlans.

The range (x.x.10.x and x.x.20.x from your example) is only the subnet side, you could have both of those subnets in one vlan. But you could not, for example, have x.x.10.x/24 exist in vlan 10 and vlan 20.

Just to have a straightforward reply…

Let’s start with the concept piece, which you dont need to explicitly follow, but is a decent ref. You dont need to use this explicitly, this is more about how far/close to enterprise you want, whether its for fun, for practice, whatever. From an enterprise perspective, you’ll typically have:

• Management - The only things that belongs here are network devices. Router, switches, etc, but notably not servers. This also - from just a general security perspective - should not be the default network, the vlan you get an IP from ifz you randomly connect to a port. In the enterprise, this is so people dont see the vlan switches are on, at home its just… Good practice at best.
• Services - servers you trust go here. Ones that are providing local services, not accessed by the outside (except via VPN). This could be auth services, a wiki, automation tools - proxmox servers, as an example, would go here. You may also put a jump service here - a single VM with access to management and logging, so that this becomes the only logical means of access (and a physical on the router or a locked up switch for example)
• Workstations - trusted user accessible devices would go here. Your desktop, laptop, etc go here. If an ssid is associated to this network, its typically hidden.
• IoT (no internet) - IoT devices you dont fully trust (as in, pretty much any IoT device) will get put into a VLAN without internet access. Prevents them from phoning home, usually these are closed off devices. Again, not a requirement for home use, but for personal privacy not a bad choice. This became a problem more recently in the enterprise with people buying more consumer-ish stuff at the direction of someone in C Suite who wants their office to behave like their home office. Also put your TV here. Seriously, don’t give smart tvs internet access. Block them and plug in a Linux box or something.
• Guest - Where everyone else goes, a guest vlan with internet only access. Ideally they will each get NATd and can’t see each other either. If you want these guests to be able to cast/airplay/etc though, you also would want/have:
• Media Services VLAN - this is where you would have a Chromecast, AppleTV, mersive solstice pod, airparrot, crestron air media, etc. So your receiving device lives here, in the one vlan you allow some bonjour, and allow men’s forwarding from workstation and guest to both hit this network (and its devices). Security risk. Manageable, but a risk.

There are MANY variations and unique versions of this. This is more or less a typical enterprise with we home media uses mixed in.

Now for structure purposes, you basically would have:

• Management is inaccessible by anything not a switch, with the exception of that one locked down physical port and maybe that jump VM.
• Each VLAN has its own gateway, each gateway is also NTP and DNS. You then have the upstream DNS provider be your pihole (or technitium, or pihole container, etc - I have 3 that I use so something is always up. DNS is not priority ordering, diff conversation, but having multiple is a good idea. Now your devices get their DNS from the gateway IP, and that gets it from your pihole, so you dont need to expose your pihole to those devices directly
• guest has access to NOTHING. Just internet. Maybe the media services if you’re into that sort of thing.
• IoT can be accessed from other vlans, but should have access to nothing else. As in, initiated from outside (workstation, services, etc) passes, initiated.from inside (a roomba) you block.
• the rest generally doesn’t need too much security, its more device management - workstation, servers, etc.

OK so there are the generics, let’s go back to yours.

192.168.1.x - sounds like default to me. Risky to use for proxmox and network management on a vlan generic endpoints will land in. If you have a different one for default - great! Ignore this. If its management, id move Proxmox into 200 instead.

192.168.100.x - solid choice to group up your externally facing riskier stuff and funnel it all through one connection. I’d make sure when that connection goes down everything else loses connectivity - confirm that kill switch works. Bind their network interfaces to the virtual network that goes to your VPN connection (I’m assuming a docker container here).

192.168.200.x - yup, logical group, makes sense to do. I’d probably put your hypervisor here.

Now LXC vs Docker… I’d call that mostly preference. I prefer LXC. I also keep things at a stable version and upgrade when needed, not automatically. If you want automated, your best bet is docker. If you want rock stable, and d9nt mind.manual updates, LXC is great. You can automate some with ansible and the like, but that can be a lot to set up for minimal need. YMMV.

Anything I build from source (honestly, most of what I do) I put in an LXC. Anything I take someone else’s image (rare, but happens), is docker. I have a local git repo I keep synced to projects on codeberg, github, and the like, so my setups are all set to build from that local repo. Makes sure I’ve got the latest if something is taken down, but also a local spot to make changes, test, etc for anything I may push back upstream.

Hope that helps!

Edit: Forgot to talk security!

OK first off, figure out your threat model. Where would threats come from? How serious would they be? What risks are worth taking, which are not?

Security is an ogre (onion) - its got layers. For example, I have zero concern with region blocking. No one is hitting my network from China, so I’m not allowing some random to try and get in.

What I am concerned about is user credentialing for access - one login for all services, MFA is hard required, and I don’t do text/email as MFA - that’s baby town frolics levels of security, I don’t like it.

Best way to think of it is a row of bikes. A thief is going to come by and steal one. Which one will they go for?

Do you need to have 7 bike locks and encase the whole thing in concrete? Or do you need to be enough of a pain in the ass (u lock, braided steel cable or chain looped through the wheel and frame) that the other bike (with a $5 cable lock you can pop open with a bic pen).