• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: March 3rd, 2024

help-circle



  • That’s not what I was talking about.

    Technitium does not (necessarily) use a third-party service, but sends all queries directly to the root nodes.

    By default, any DNS server will look to the root servers for any query. The root servers only know what DNS servers are authoritative for top level domains (TLDs), and tell the client querying “Hey, go ask the “.com” (for example) server.”

    That server knows what DNS servers are authoritative for the zones under .com, and says “Hey, go ask the “querieddomain” server.”

    Then your machine asks that server for the “www” (for example) host, and that DNS server says “Here’s the IP.”

    Unless the DNS server your machine is pointing at is configured to use a forwarder, wherein queries for any records that it isn’t authoritative for or aren’t in its local cache are resent to whatever DNS server is configured as the forwarder. The recursion like above is done between your DNS server and its forwarder, finally returning you an IP address when one is identified.

    There’s a bit more to it than that, but that’s what I was talking about. Out of the box, a DNS server uses root hints, which are IP addresses of the root DNS servers. You would need to configure forwarder(s) in your DNS server if you desire them.



  • For the record, any DNS server you choose to employ should default to only using the root servers. You would need to configure your own forwarder IP(s) to point to a general purpose resolver.

    … censorship-free …

    You should also be aware that even if you use root servers, a DNS server which is authoritative for the domain you are querying may well return different results depending on where in the world you are. This can be in order to direct you to an IP that is closer to you, or because “different global locations get different content” for any reason, including censorship and malicious goals. The latter is definitely less likely than the former, but it’s just as possible.








  • LetsEncrypt is legit. A downside is that the certs expire after 90 days. However, that also carries an upside in that it limits the damage in case a certificate is compromised. There are procedures by which you can automatically renew/request (I forget whether they allow renewing an existing cert or require a brand new one) LE certs and apply them to your application, but that can be fiddly to configure.

    If you’re not comfortable with configuring automatic certificate cycling, a long-term paid cert would be more appropriate.



  • Desktop background (or other theme stuff) - easiest way is to just reset that to what you want.

    The arrow overlay on .lnk files, you could check regedit HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer for a “Shell Icons” key (“subfolder”), which should only be there if it was added manually, but I’d be interested in what it was if it was there.

    You could also try rebuilding the icon cache.

    I have to think that both of these have something to do with the system looking in the “old” place for the desktop background image and the icon cache, and not finding them there.


  • I am aware that on a Windows machine, turning on a OneDrive subscription (or at least an E5 license, is where I’m very specifically talking about), certain folders get moved from c:\users\[username] into c:\users\[username]\OneDrive. Then OneDrive syncs those locations up to 365.

    If you just open cmd (not as admin), it will put you at c:\users\[username] and then if you just cd desktop … yeah, that’s empy now. dir in c:\users\[username] and I bet you’ll find a OneDrive folder.

    Of note, the default user folder paths that get changed are \Attachments \Desktop \Documents \Pictures. \Downloads stays at c:\users\[username]\downloads