Geoffrey Farrow at Raphael, a jeweller on the other side of the street, can only just bring himself to sell lab-grown diamonds. “They are synthetic,” he said. “Lab-grown sounds exotic, but it’s created – they make it by the buckets. There’s no history to it. The price is going to go down further and further.

“It makes the stone that much cheaper, and people have the illusion that being big is something special. It’s not. It’s quality that you want.”

What the actual fuck is he talking about? Is it the suffering that gives it quality? They’re impossible to tell apart without a magnifying glass.

Removed by mod

Removed by mod

Removed by mod

Removed by mod

Okay, so it’s not for cruelty but for commerce? 60 trucks worth of oil? C’mon.

You don’t think it’s a bit silly to suggest that 60 tanker trucks is going to be worth time? What’s that even worth, have you checked?

The United States military is stealing 60 trucks worth of oil because it’ll save money? The US produces 13 million barrels of crude a day, but it’s worth their time to steal 60 tanker trucks worth?

Are you suggesting the US is stealing oil for the sake of being cruel? This is some sort of strategic effort at the highest levels to take 60 tanker trucks of oil?

Isn’t that sort of an absurd claim? The USA, the largest crude oil producer, steals paltry amounts of oil from Syria, one oil tanker at a time? Same for wheat. The U.S. exports 50% of its wheat, but loots Syrian wheat?

Is there a kbin Android app?

The question was about privacy. Routing your DNS traffic through a VPN puts your unencrypted traffic out of an endpoint with all sorts of other connections. That’s a privacy gain.

Further, using DNS-over-TLS or DNS-over-Https encrypts your query end-to-end.

Using both in concert prevents the DNS servers from knowing your IP and anyone along the route from knowing your query.

Kinda. You can always route your traffic over a VPN. Further, from the unbound page:

To help increase online privacy, Unbound supports DNS-over-TLS and DNS-over-HTTPS which allows clients to encrypt their communication. In addition, it supports various modern standards that limit the amount of data exchanged with authoritative servers. These standards do not only improve privacy but also help making the DNS more robust. The most important are Query Name Minimisation, the Aggressive Use of DNSSEC-Validated Cache and support for authority zones, which can be used to load a copy of the root zone.

Edit: to be clear, I run unbound but I don’t recall how much I hardened it. The config file is fairly large and I was mostly focusing on speed and efficiency since it’s running on an already busy raspberry pi.

Authoritative name servers.

Good enough write-up about it here: https://docs.pi-hole.net/guides/dns/unbound/

Lemmy drag Deez nuts across your face?