spaghettiwestern
@spaghettiwestern@sh.itjust.works
- Comment on HELP: Wireguard for home network with remote exit node 1 week ago:
I have this set up on an OpenWRT router with multiple remote endpoints used for different devices. Our phones go to a hosted Wireguard server in one city, PCs to an OpenWRT router in a different location, and IOT devices that aren’t blocked and guest devices exit access the Internet locally.
Policy Based Routing on OpenWRT makes this possible. As long as the remote server is set up to allow your WG devices to access the Internet you should be able to achieve what you want to do without further control of that server.
- Comment on Router suggestions for a complete noob 1 week ago:
As others have said, get something that works with OpenWRT. It’s unbelievably flexible and the OpenWRT forum can be really helpful, both for finding ways to implement things and solving problems.
- Comment on 'This Verdict Is a Wake-Up Call:' Jury Trial Finds Meta Breached State Privacy Law in Class Action Against Fertility App | Law.com 1 week ago:
And Maga will cheer for a 3rd term.
- Comment on 'This Verdict Is a Wake-Up Call:' Jury Trial Finds Meta Breached State Privacy Law in Class Action Against Fertility App | Law.com 1 week ago:
They’ve done worse: hipaajournal.com/meta-facing-scrutiny-over-use-of…
Meta Pixel is a snippet of JavaScript code that can be used by website owners for tracking user activity through the use of cookies.
The problem is the data collected via this code snippet may be sent to Meta, and may include patients’ protected health information. Meta is not a business associate of HIPAA-covered entities, and under HIPAA compliance rules, any data transmitted to Meta would require patient consent to be a HIPAA compliant website.
Criminal and civil judgements are dwarfed by the huge profits generated by the violation of privacy laws. Shareholders and C-Suites don’t care where the money comes from as long as it keeps coming.
- 'This Verdict Is a Wake-Up Call:' Jury Trial Finds Meta Breached State Privacy Law in Class Action Against Fertility App | Law.comwww.law.com ↗Submitted 1 week ago to technology@lemmy.world | 9 comments
- Comment on Establishing an ideal home drive using raspberry pi 4 model B(xfce)with help of nextcloud 1 week ago:
Debian 12, Mint, Pi OS, Windows 11, Android. Works perfectly on all of them.
- Comment on Establishing an ideal home drive using raspberry pi 4 model B(xfce)with help of nextcloud 1 week ago:
Also check out Syncthing. I have it running on my Pi5, PCs and my Android phone. The phone’s photos directory and lots of other files are automatically synced to my server and computers. No open firewall port is needed, everything is encrypted in transit and it supports trusted and untrusted hosts
- Comment on What are your VPN recommendations for accessing self-hosted applications from the outside? 3 weeks ago:
I have everything route through the tunnel and my router. Along with allowing instant access to everything I self-host and my home server through VNC, it allows me to use Adguard Home for phone DNS lookups no matter where I am. Theoretically my cell carrier should no longer be able to see any of my Internet traffic which I consider an added bonus. I’ve found no downside so far except some weirdness from Google if I’m out of the country for an extended period.
- Comment on What are your VPN recommendations for accessing self-hosted applications from the outside? 3 weeks ago:
I self-host various applications and have been really happy with Wireguard. After watching just how hard my firewall gets hammered when I have any detectable open ports, I finally shut down everything else. The WG protocol is designed to be as silent as possible and doesn’t respond to remote traffic unless it receives the correct key. The open WG port is difficult to detect when the firewall is configured correctly.
If I want to connect to a device using SSH, HTTP, VNC or any other protocol it must first go through my WG tunnel. Running it on an OpenWRT router instead of a server means if the router is working, WG is working. It’s been rock solid. Using Tasker on Android I’ve set it up to automatically connect whenever I leave my house. It makes everything in my home instantly accessible no matter what I’m doing.
Another thing to consider is there’s no corporation involved with WG. So many companies have suddenly decided to start charging for “free for personal use” products and services it has IMO made anything involving an account worth avoiding…
- Comment on Adblockers stop publishers serving ads to (or even seeing) 1bn web users - Press Gazette 3 weeks ago:
Besides the miserable experience unchecked advertisements cause, it is simply not safe to allow those advertisements to load these days.
A few years ago (before SSDs were common) there was unusual PC hard disk activity when loading a popular link aggregation site. A bit of investigation turned up a Trojan on my system. After removing it and reloading that site, my PC was immediately reinfected. The site owner denied any responsibility and said it was the advertising company’s fault.
The way the Internet operates now means no one is responsible for the content their site provides or the damage they cause. Imagine if restaurant owners were able to deny responsibility for the atmosphere in their establishments or food poisoning episodes they caused? IMO it’s the same thing.
Advertisers and websites have created the “dark traffic” mentioned here by repeatedly poisoning the public and they deserve the massive loss of revenue their behavior has caused.
- Comment on Amazon Ring Cashes in on Techno-Authoritarianism and Mass Surveillance 4 weeks ago:
2nd this configuration. My firewall rules block all camera external access and Frigate (once configured) is superb at detecting people without false alerts. It is disturbing just how much traffic smart devices try to send to China and Amazon even when not subscribed to cloud services. The open Wireguard ports appear closed to scanners so I’m also reasonably comfortable with network security.
- Comment on $440 Charge For A Wheel Scuff Raises Questions About Hertz's AI Rental Car Damage Scanner 1 month ago:
Returned a multi-week Hertz rental a couple of days ago and had to fight with the staff to get to get a written acknowledgement of no damage.
Customers are supposed to just trust Hertz employees will self-report damaging the car after it has been turned in? Absolutely laughable considering how many times rental companies try to screw over their customers.
This is great info and I won’t be renting from Hertz again.
- Comment on Plex has paywalled my server! 1 month ago:
Holy shit! Please take your pill.
- Comment on Plex has paywalled my server! 1 month ago:
That’s not going to scale…
How many mothers do you have?
- Comment on Plex has paywalled my server! 1 month ago:
It’s possible. I’ve done it for a friend who can barely turn on his PC.
The OpenWRT router was fully configured before shipping it to him and the existing router’s needed Wireguard port was opened by me using the Comcast Android app. All he had to do was connect his TV to a new wifi network. That was difficult, but he ultimately succeeded.
- Comment on Plex has paywalled my server! 1 month ago:
#3 - An OpenWRT router with Wireguard connecting to another router 1000 miles away will do the trick.
- Comment on 109 children rescued, 244 arrested in Operation Soteria Shield, exposing widespread child exploitation in North Texas 2 months ago:
I’d give you 10 to 1 odds that 100% of these criminals are strident Maga Trump supporters.
- Comment on AOSP isn't dead, but Google just landed a huge blow to custom ROM developers 2 months ago:
Have a couple OP 9pros and they’ll be the last OP devices I buy.
There are severe bugs that OP never fixes and make using the phone for something like navigation unreliable. Battery life can be great one day and terrible the next when not even using the phone. Also OP sells carrier specific hardware. My TMO phones can’t be used at AT&T or Verizon, severely limiting our options. My understanding is unlocked Pixel phones can be used on any carrier.
I really wanted to load Graphene, but even without it I’ll consider a Pixel device.
- Comment on ICE Taps into Nationwide AI-Enabled Camera Network, Data Shows 2 months ago:
It is surprising how difficult most camera companies have made it to avoid their subscription services.
Multiple companies that used to offer local rstp streaming have summarily removed support in firmware upgrades without notifying their customers. Even companies that support it (like Foscam) demand developer agreements be signed to get basic camera command information. Tp-link supports rstp but requires an phone app and Internet connection to configure their cameras.
Like you, I will never connect my cameras to the Internet, but we are slowly approaching a time when that by itself will be a cause for police investigation.
- Comment on Is Washington state falling out of love with Tesla? 2 months ago:
Musk did the equivalent of full on grabbing and squeezing the boob and now he’s claiming it was just a gesture of respect.
- Comment on Is Washington state falling out of love with Tesla? 2 months ago:
But many of the signs target Elon Musk specifically, and his most famous brand, Tesla, calling the vehicles “Swasticars” and comparing Musk to a Nazi.
- Comment on The technology to end traffic deaths exists. Why aren’t we using it? 2 months ago:
Impaired driving is also solvable. On-demand breathalyzers, smartphone saliva tests, and eye-tracking sensors are all tools that already exist to stop drunk and high drivers before they even start the ignition. Uber is already testing real-time driver sobriety verification. Why aren’t carmakers racing to put similar tech in every new vehicle?
There’s no fucking way people will buy those cars is why. I will never buy a car that required a saliva test or blowing into a tube before starting. IMO any car that includes that requirement would be a flop before it even hit the showroom floors.
- Comment on “How you design the beep is important.” Behind the movement for calmer gadgets. 2 months ago:
Bad design goes both ways. I have a couple of small kitchen appliances (coffee machine & toaster oven) and their beeps are impossible to hear if there’s the slightest bit of background noise. It makes using them a PITA.
- Comment on When will all the folks complaining about loss of Snap and health insurance realize the GOP wants us to die and has ZERO empathy for fellow Americans? 2 months ago:
The lack of empathy is a conservative hallmark.
Elon Musk , “The fundamental weakness of Western civilization is empathy,”
- Comment on We Study Fascism at Yale. We’re Leaving the U.S. 2 months ago:
- Comment on Selfhosting Sunday - What's up? 4 months ago:
Power loss protection on SSDs is an interesting addition I hadn’t come across before.
We live in a very windy area and power blinks are common. A high endurance MicroSD was in use the first time the Pi wouldn’t boot, but I was in town and it was just annoying. It was a big issue when the Pi wouldn’t boot from the SSD while I was out of the country.
We don’t have high bandwidth demands so any decent OpenWRT router works fine and supports both Adguard Home and Wireguard. What I really like about putting WG in particular on the router is that if the router is up, WG is working, and the routers come back up without fail after every power outage. A 2nd Wireguard instance still runs on my Pi but since switching to WG on the router a year ago there hasn’t been a reason to even connect to it.
My problems with the Pi had me looking for other solutions and I ended up with a mini Dell laptop running Debian. (Can’t easily run WG on it due to some software conflicts.) It alleviates the need for a UPS and runs for 6+ hours if the power goes out, rather the minutes provided by my small UPS.
One of these days I’ll find a bogus reason to talk myself into upgrading the router with more powerful hardware. Mikrotik looks like a great option and I’ll take a look at RouterOS. Thanks for the info.
- Comment on Selfhosting Sunday - What's up? 4 months ago:
In my experience mini computers don’t handle power failures nearly as well as purpose-built hardware.
After several power failures the SSD on my Raspberry Pi became so corrupted it wouldn’t boot, and I was 250 miles away at the time. Overlay file systems work but are a PITA to maintain. By contrast my routers have never had a problem even with repeated power failures, so instead of relying on the Pi I’ve moved my DNS and Wireguard servers to my router.
Besides adding a UPS, how do you deal with power failures? Are you somewhere where they’re not much of a problem?
- Comment on Selfhosting Sunday - What's up? 4 months ago:
I’ve been using DuckDNS on a multiple platforms for a couple of years and it works great. Never had a problem.
- Comment on Elon Musk pressured Reddit’s CEO on content moderation 4 months ago:
So Musk wants the content he, personally finds objectionable to be moderated. Racist Nazi shit and hateful GQP posts are perfectly fine, just like on Twitter.
- Comment on Sergey Brin: We need you working 60 hours a week so we can replace you as soon as possible 4 months ago:
Have had espresso machines for years and can confirm it can be very difficult to find shops that do repairs and have replacement parts. Good luck with the startup.
