At best a macbook air/neo or equivalent on windows good enough to browse the average web and the gamer joe will have a gpu with ~8GB vram for most games (aka 3070 or something like that)

How is encrypted backup data worse???
Domestic providers with relevant datacenter certification receiving useless backup blobs in an encrypted format…

Our clients use S3 as an offsite storage. About 2-3TB (deduplicated is possible) in storage usually.
Client is small and medium doctor offices.

Again: It depends.

I would use it as a storage provider on which I would put an encrypted veracrypt drive (or whatevee is the good stuff).
Or as an off-site storage provider for my backup.

As a single atorage site? Nah. Too expensive for my home needs.
For a business? If you can’t afford to drop 1200€ for 3x 4TB SSDs to bring your data backups off-site? Pretty good offering.
And the immutability is a plus as well.

I have seen commits that were coauthored or something.
Maybe the official AI plugin makes github able to sign a commit by two entities?

You pay either way.
Up front or over a span of time…
What matters is what you need from your storage.

It has it’s uses.
But as any backup solution: Not a singular.
A proper backup concept has at least 3 copies on at least 2 different medias (types or amount matters only slightly) and one is not at the location of the original.

Veeam (a backup vendor) has expanded on it with 3-2-1-1-0.
1 = 1 Backup target is an immutable technology
0 = 0 errors on the backup (which expects a validation)

And I honestly like the idea.

The user can just edit the wg conf file and remove the restriction where it can and cannot connect to.
The file is not a baked immutable binary

Then you also arent allowed to use the UK flag for representing the english language.

I mean…The parts are probably easy enough to remanufacture.
IF you have the budget of an AWS or Azure.

For us? Yep. Sadly.

And if something dies, good luck on getting replacements lol.

I’d love tape but >5k for a drive is a bit outside my budget.

Cold storage on HDDs.

Also called “Amazon Glacier” and whatever other brand names corps come up with for low performance high storage needs.

Tape is not a new-old technology. Just a hidden tech only bigger companies utilize and the common citizen only comes into contct with as the IT tech of the company.
Cheapest most secure way of doing WORM backups.
S3 can do WORM as well but Tape can’t be hacked ¯\_(ツ)_/¯

Best case: Accessible technology for the common human not costing a whole r&d lab.

Tape for example is cheap but would you really want to spend >5k€ on a drive for a one-off backup?

Yes. Split-tunneling…
But if you are really hardcore about restrictions and would need to update the profiles it will be a pita…
Scheduling stuff is annoying ;-;

Agreed.
Secure it properly and you wont be pwned instantly.
My setup:
WAN -> OPNsense -> CrowdSec on FW and docker server -> Traefik -> Authelia middleware -> Jellyfin.

I also have a geoblock active on the Cloudflare domain and directly on my opnsense.
Most datacenter ASNs are also blocked. They don’t need to connect to me.

Yes, first party apps are broken but the browser works good enough and if I meed it, I have a VPN for myself.
Relatives get web browser or I’ll consider a S2S VPN setup.

Issue:
Most clients we instruct on homeoffice usage with vpns are already unable to remember the workflow: VPN -> (wait until green for connected) -> open work app -> Do work -> close work app -> disconnect vpn.

Now you also may not want to tunnel all traffic (if you don’t have a VPS with symmetric Gbit and unlimited traffic) so you’d need to set up split-tunneling and/or limit the apps allowed for the tunnel (works in android).

Honestly? It would be easier to set up a S2S split-tunnel VPN with wireguard on the relatives router.

Very cool. Thanks for the pictures!

I have bought 4x 16TB NAS drives I put in a RZ2. If I’ve known that I would have bought 20TB instead 🙄

They have even less money for new hardware.
MSPs (like my employers) will just do it while migrating for windows server in-place upgrades.
Two flies amd so on. Company is down anyway. And we have the hardware to do conversions between hypervisors temporarily.