Darkassassin07

@Darkassassin07@lemmy.ca

• ⁨Comment⁩ on ⁨What's up with "Plex Servers"?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Well that answers that question. Thanks :)

• ⁨Comment⁩ on ⁨What's up with "Plex Servers"?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  👋

  Most of us run systems for friends, family, even a few coworkers; but there are those out there that sell access to their systems to anyone wiling to pay. This is explicitly forbidden by the TOS of Plex/Emby, and I’m pretty sure Jellyfin as well (haven’t checked that one), but it still happens.

  There’s even tools like Ombi to automatically manage and retrieve requests for users.

  !selfhosted@lemmy.world

• ⁨Comment⁩ on ⁨Pornhub, YouPorn, and Redtube and other content sharing platforms will block New users in the UK starting next week(February 2)⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Your ISP could snitch on you for tons of ‘illegal’ traffic, but they don’t because that would require deep packed inspection on an absurd amount of traffic and they gain nothing for it. Instead they pass on notices when they receive them from third parties, and take enforcement actions (like cutting off their service to you) only when they’re directed to. They want your momey after all.

  Torrenting for example; only gets flagged when copyright holders join torrent trackers, then send letters to ISPs that control the IPs found in those groups. That’s not the ISP hunting you down, they’re just passing on a legal notice they’ve been given and thus are obligated to pass it to you.

  From and ISPs perspective; a VPN connection doesn’t look any different than any other TLS connection, ie https. There’s nothing for them to snitch because a) they can’t tell the difference without significant investment to capture and perform deep analysis on traffic at an absurd scale and b) they have no desire to even look and then snitch on customers, that just costs them paying customers.

  The ONLY reason this can be enforced at all, is because comercial VPN companies want to advertise and sell their services to customers; so lawmakers can directly view and monitor those services.

  Lawmakers have no way of even knowing about, let alone inspecting an individuals private VPN that’s either running from private systems or from a foreign VPS.

  ---

  All that’s not even touching things like SSH tunneling - in a sense, creating a VPN from an SSH connection; one of the most ubiquitous protocols for controlling server infrastructure around the globe. Even if traffic was inspected to find SSH connections, you CAN’T block this or you disrupt IT infrastructure at such an alarming scale there’d be riots.

• ⁨Comment⁩ on ⁨Pornhub, YouPorn, and Redtube and other content sharing platforms will block New users in the UK starting next week(February 2)⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  So rent a VPS abroad and run your own VPN from it. Comercial VPNs have a business to maintain so they’ve got to comply to keep operating and public advertising, but a privately run VPN just for yourself is just another TLS connection in a sea of other traffic.

• ⁨Comment⁩ on ⁨YSK that no form of United States ID, no matter how valid, guarantees protection when ICE decides you look like an immigrant.⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Carrying your documents around seems like a great way to have them stolen from you during your ‘arrest’. You’d be lucky to see them again.

• ⁨Comment⁩ on ⁨Copilot could soon live inside Windows 11's File Explorer, as Microsoft tests Chat with Copilot in Explorer, not just in a separate app⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Given the way everything else is successfully disabled; something tells me they either did that and it’s just not working properly for Edge, or that flag got reset by some MS update that nobody asked for and it’s just not been noticed by IT yet.

• ⁨Comment⁩ on ⁨Copilot could soon live inside Windows 11's File Explorer, as Microsoft tests Chat with Copilot in Explorer, not just in a separate app⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Mhm. Shit people don’t want continues to be integrated into required system applications so you cannot remove/avoid it.

  Seen it comming since the integration of Edge into Windows and how it’s forcibly re-installed everytime you try to remove it. Hell; even the corporate work PCs I use, which lock you out of every non-corporate supplied application such as wordpad, calculator and even the ability to see (not even modify, just view) the desltop background: failed to disable Edge (their default is Chrome). You can right click files > open with > Edge (none of the other applications listed work in any other circumstances, just edge and chrome).

  Windows is dead.

• ⁨Comment⁩ on ⁨Being a "sleeper agent" sounds awesome. "You just want me to chill and be a normal dude... for money. Yeah put me down for 5 years, make it 10 actually.⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  I’ve been deemed expendable by companies and people have shot at me.

  That’s not the typical experience… Mind elaborating a little?

• ⁨Comment⁩ on ⁨What's it going to take to truly stop the US?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Be real nice if someone would just fucking nuke DC

• ⁨Comment⁩ on ⁨YSK that electric blankets are cheap and incredibly cozy⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  They’re also really nice, placed just under your fitted sheet on the bed… Crawl into a pre-warmed bed that keeps you warm without an overly large/heavy blanket

• ⁨Comment⁩ on ⁨Creamy Shits⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Ah, bringing out the old classics for the holidays 🎄

• ⁨Comment⁩ on ⁨TikTok is automatically taking down posts with the Epstein files⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  And you’re… Surprised?

• ⁨Comment⁩ on ⁨What are some unique Games to host server's of?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Bit old, but pretty much everything Source Engine is self-hostable isn’t it? Most of them even come with a pre-configured SRCDS (SouRCe Dedicated Server) you can download and run right from the steam launcher.

  I know I ran a GarrysMod server for quite a while; piling a shit ton of mods on it. Plus any source game you’ve got installed, Garrys Mod can and will use the resources/assets from.

• ⁨Comment⁩ on ⁨Self-Host Weekly #150: Watchtower No More⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  :/ shit.

  I’m pretty sure I saw this a few months ago and moved to the beatkind/watchtower fork, but it’s not been updated in 6mo either. (Devs only been active in private repos; so they’re still around, just not actively working on watchtower)

  Guess I’ll find another solution. Hell, I might just put my own script on crontab. Looping through folders running docker compose down/pull/up isn’t too hard really.

• ⁨Comment⁩ on ⁨North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Setting their management interfaces to be accessed via https because the VPN blocks (after snooping on) http only access would be my guess

• ⁨Comment⁩ on ⁨North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  No. I’m talking about measuring the time in-between inputs being received over the remote connection. Purely observation from the receiver side of the connection.

  Network overhead + dropped and re-sent packets, introducing unusual lag in between commands/keystrokes.

  A key being pressed and key being released are two separate events that get transmitted separately and usually happen pretty close together. That gap getting larger, due to the long-distance connection introducing lag, could be what they were looking at.

• ⁨Comment⁩ on ⁨North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Perhaps something like time between key pressed and key released being abnormally high? Or erratic mouse movement?

  I know whenever a PC I’m using is being remotely controlled, the mouse jerks around instead of moving smoothly around the screen. I’d imagine that gets even worse with ping/more layers of remote connections.

• ⁨Comment⁩ on ⁨Firefox dev clarifies there will be an AI 'kill switch'⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Perhaps Mozilla doesn’t quite fit into this category, as their software is far more optional to the average user than say, Microsoft Edge or Copilot being forcibly installed on every Windows PC; but more and more companies are forcing features on users that don’t want them, after being told over and over again:

  NO, WE DON’T WANT THIS SHIT

  Refusing to take ‘no’ for an answer, and instead doing whatever you want to people IS a rapists mentally and I will not apologize for pointing it out.

• ⁨Comment⁩ on ⁨Firefox dev clarifies there will be an AI 'kill switch'⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  ‘oh, don’t worry; you can turn it off!’

  That’s what they all say. Fucking rapists.

  Fuck you, it’s not going on my system. It’s sure as hell NEVER being installed in something like a web browser that has access to my password vault when it’s unlocked.

  I might(unlikely) have considered it, if it was op-in. But just the fact that it’s opt-out means I’ve got to make a point of turning it off, AND regularly verifying it’s stayed off because it will “accidentally” turn on again.

• ⁨Comment⁩ on ⁨What are your opinions of using Pi-hole for DNS within a homelab environment?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  My wife got very upset. Apparently she likes the ads.

  Set static IPs for her devices, then whitelist that device IP past the block lists by adding it to a group, then regex allow domain: ‘*’ for that group.

• ⁨Comment⁩ on ⁨What are your opinions of using Pi-hole for DNS within a homelab environment?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  A bit of redundancy is key.

  I have my primary DNS, pihole, running on an RPI that’s dedicated to it; as well as a second backup version running in a docker container on my main server machine.

  Nebula-Sync keeps the two synchronized with eachother, so if a change is made on one, it automatically syncs to the other. (things like local dns records or changes to blocklists).

  If either one goes down (dead sd cards, me playing with things, power surges, whatever); the other picks up the slack until I fix the broken one, which is usually little more than re-install, then manually sync them using piholes ‘teleporter’ settings. Worse case, restore a backup (That you’re definitely taking. Regularly. Right?)

  Both piholes use Cloudflared (here’s their guide) to translate ALL dns traffic into DOH traffic, encrypting it and using the provider of my choice, instead of my ISP or any other plain DNS. The router hands out both local DNS IPs with DHCP because Port 53 outbound (regular dns) is blocked at the router, so all LAN devices MUST use the local DNS or their own DOH config. Plain DNS won’t make it out.

  DNS adblocking isn’t perfect, but it’s a really nice tool to have. Then having an internal DNS to resolve names for local-only services is super handy. Most of my subdomains are only used internally, so pihole handles those DNS records, while external DNS only has the records for publicly accessible things.

• ⁨Comment⁩ on ⁨It's quite impressive that most English speakers across the world understand each other, despite variations in accents/dialects⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  There’s something about a thick Scottish accent that requires a translator for me. (West coast, Canadian)

  Luckily the few I watch on youtube add subtitles for the rest of us.

• ⁨Comment⁩ on ⁨PSA: Don't use nextcloud's auto upload on the android app as a backup⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I have the same issue with Immich on android. It pretty much never uploads files until I manually open the app; then the app refuses to acknowledge it has uploaded those new files until it’s closed and re-opened :(

  FolderSync has been the only reliable (non-root) backup solution I’ve used. It’s set to monitor my image folders for changes and upload any new files as soon as they’re created; this works ~85% of the time. Then, It’s also set with a few schedules to check for changes every 3hrs, backing up everything on the phone the app can access; this catches anything the on-change/on-creation file detection misses, while also backing up more data than just my images. I have yet to see that fail after ~3 years.

• ⁨Comment⁩ on ⁨Google's Agentic AI wipes user's entire HDD without permission in catastrophic failure⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
  • George Carlin
• ⁨Comment⁩ on ⁨Google's Agentic AI wipes user's entire HDD without permission in catastrophic failure⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Gotta cater more to windows, where the idiots that would actually run this crap reside.

• ⁨Comment⁩ on ⁨⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  (Dis)Prove any claims of misconduct/malpractice? Positioned is such a was as to see the general room, but not looking ‘right up the barrel’ so-to-speak.

  Should be CCTV to a local only DVR, not an IP cam though.

• ⁨Comment⁩ on ⁨Ya yeet!⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Hmm; so about 14Gs + a good long barrel and I should be able to launch a baby at least to Mach 2 or 3.

  Stopping might be a problem, but that’s one for whoevers gonna catch it.

• ⁨Comment⁩ on ⁨Ya yeet!⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I wonder what the maximum muzzle velocity for a child would be (without just killing it immediately).

• ⁨Comment⁩ on ⁨⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  This reminds me;

  5-6 years ago, I was scrolling through reddit and stumbled across a link to a website that was just a generic white page with hundreds of hyperlinks on it. No other formatting or images, just row after row of links on a plain white background.

  Each one was a direct link to an IP security camera somewhere in the world. Presumably these either used default logins, had no login, or the credentials were stolen somehow. There were private residences, public buildings, the interior and exterior of stores, what looked like public security cameras (like pole mounted traffic cams), some spa resort type places, even a few elevator cams. Some of them even had working PTZ controls (tho I only came across 2-3 of those in the few dozen I played with).

  I wasn’t entirely sure they were even real; until I spotted a phone number in one of them and gave it a call. Took a bit of convincing, but the lady that answered finally believed me when I told her how many fingers she was holding up.

  I wish I’d have saved it, just to see if anyone did anything about it. I really should have fired off an email to the domain registrar or something; but… naivety 🤷

• ⁨Comment⁩ on ⁨Plex’s crackdown on free remote streaming access starts this week - Ars Technica⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Plex, Emby, and Jellyfin and all legal, and each have ways to serve liveTV alongside your own locally stored content, amd DCR that liveTV if you want. You’d just have to purchase a liveTV subscription from your local provider (or go the Pirate route ofc).