Cloudflare usually blocks 'unknown' bots, which are basically bots that aren't search crawlers. Also I've got Cloudflare setup to challenge requests for .zip, .tar.gz, or .bundle files, so that it doesn't affect anyone unless they download from their browser.

There's also probably a way to configure something similar in Anubis, if you don't like a middleman snooping your requests.

I have no idea how CoW interacts with NTFS

With btrfs you can disable COW for specific files, that might give you a little performance boost.

Cloudflare tunnels uses a QUIC connection between the cloudflared on the server and Cloudflare itself, which is encrypted similarly to HTTPS.

Whatever protocol cloudflared uses to talk to your webserver locally is configurable through the Cloudflare access web UI (just change http to https). I've actually got it configured to use unix sockets, which lets me treat it differently in my nginx config.

I think some people also use power_save=0 which would, but my understanding is 11n_disable=8 enables aggregating transmit packets together, which impacts latency but improves upload speed.

The HTTPS certs are designed to prevent MITMing, but if it's still a worry or the domain is blocked by DNS, you can manually find the IP and add it to your hosts file instead.

A reverse proxy by itself doesn't do much security wise. You could possibly setup some sort of authentication, attempt blocking, and rate limiting (in the reverse proxy, don't trust the DVR), but it'll probably also break the DVR even more.

There's bots that port scan and specifically target all sorts of stuff, and DVRs are a very common target. With a VPN in the way, there's no way of knowing what's there. A VPN also shouldn't break the web UI.

I don't remember if it's the same error, but I also get an error with etcher. If you have to use it, version 1.7.9 works for me.

Oh cool, I believe only 4bit colours are possible, you can use this table from Wikipedia and the escape sequence \e[<FG>m replacing<FG> with your chosen foreground colour. Also \e[0m to reset everything.

funny how we use the same font XD

Haha yeah! I noticed that too!

I think I just used regex look aheads and look behinds to insert the colours easily.

Edit: Oh you can change that actual TTY font to a bigger one, if the text is too small too.

There's a third one I've heard:

• Intel VPro (the thing that privacy people disable because runs at a lower level than the OS and does mysterious stuff), is being used to remove the broken file while the OS is booting/crashed.

IIRC the RTL chip inside them was originally designed for TV, so it works great! I'm actually using very cheap AliExpress clones for the TV ones, because they otherwise don't work very well.

I'm also using the outdoor TV antenna on my roof (common in Australia, idk elsewhere), and a splitter and adaptors. And with that I get every channel with no artifacts, at 30% strength, but that'll probably be higher with not awful SDRs.

You might be able to flash the retail BIOS to remove the OEM stuff, but often if it's running a specific OEM BIOS it'll block you from flashing a retail version.

I don't think I've ever seen an AMD powered laptop unless it used an APU.

There's at least 4 on AMD's website, so they do exist but they don't seem very common.

Also Intel has laptop chips, but I'm not sure if it's actually discrete or just another die on the CPU.