just_another_person
@just_another_person@lemmy.world
- Comment on My Unifi Dream Machine Pro's ad-blocking was doing more than I expected 5 hours ago:
dig, learn it, love it- Use a phone or other device outside your network to compare results from #1
- Comment on Where are you running your wireguard endpoint? 6 hours ago:
They do no such thing.
The first link explains the protocol.
The second explains WHY one would refer to client and server with regards to Wireguard.
My point ties both together to explain why people would use client and server with regards to the protocol itself, and a common configuration where this would be the necessary for clarification. Ties both of them together, and makes my point from my original comment, which also refers to OP’s comment.
I’m not digging you, just illustrating a correction so you’re not running around misinformed.
- Comment on Hackers threaten to leak massive 'Wired' customer database 6 hours ago:
Honestly, I know a lot of people that do, but delivery address is less of a problem than other personal information.
I always make fake derivative versions of my names for anywhere I but from so I can tell who is selling my information and not buy from them anymore. The address matters less. I’m not avoiding the government and “hiding out” fo fuck’s sake, I’m just avoiding having my data leaked like this. Any number of fake names that like up on the same address also dilutes these data sets the shady dealers try and ship around. The more names at any single address reduce the confidence of its accuracy, and therefore price.
- Comment on Where are you running your wireguard endpoint? 6 hours ago:
Uhhh, nooooo. Why are all these new kids all in these threads saying this crazy uninformed stuff lately? 🤣
www.wireguard.com/protocol/ docs.redhat.com/en/…/setting-up-a-wireguard-vpn
And, in fact, for those of us that have been doing this a long time, anything with a control point or protocol always refers to said control point as the server in a PTP connection sense.
- Comment on Where are you running your wireguard endpoint? 8 hours ago:
Uhhhh…that is…not how you do that. Especially if you’re describing routing out from a container to an edge device and back into your host machine instead of using bridged network or another virtual router on the host.
Like if you absolutely had to have a segmented network between hosts a la datacenter/cloud, you’d still create a virtual fabric or SDLAN/WAN to connect them, and that’s like going WAY out of your way.
Wireguard for this purpose makes even less sense.
- Comment on Where are you running your wireguard endpoint? 8 hours ago:
Why would you run a WG Client and WG Server on the same host? Am I reading that second mark wrong?
- Comment on Hackers threaten to leak massive 'Wired' customer database 10 hours ago:
Never.Give.Companies.Real.Info.
- Comment on reverse proxy over vpn without docker? 17 hours ago:
Nginx, Traefik, Caddy, HAProxy…lots of options.
Nginx and Traefik are probably the most complex if you’re not familiar with either.
HAProxy is dead simple if you solely intend to just use it as a reverse proxy.
Caddy is fairly simple as well, but slightly more complex than HAP.
If you’re not familiar with routing and VPNs in general, you may want to have a look at Tailscale or ZeroTier which use Wireguard under the hood, but making the routing dead simple, especially if you’re behind a NAT and don’t want to have to mess with ports forwarding.
- Comment on 🏳️(TrueNAS) Is my drive dying and should be replaced?🏳️ 1 day ago:
Just RMA it now. If it has SMART failures, you can provide the codes and they’ll replace it no problem.
- Comment on OpenVPN hosting practices [Question] 1 day ago:
This guide seems pretty dated. I wouldn’t recommend most things in here anymore, honestly.
- Comment on OpenVPN hosting practices [Question] 1 day ago:
No idea what you mean with the port assignment. You can run either on whatever port you want. Most residential ISPs block incoming on 80/443 anyway.
- Comment on OpenVPN hosting practices [Question] 1 day ago:
I’d use something more modern. Wireguard at the very least, but Tailscale’s implementation of Wireguard makes things extremely flexible and simple to manage. Tailscale or ZeroTier, there’s a few of them now.
- Comment on Expert: EU Commission wants an "unlimited special legal zone" for AI 2 days ago:
Cool. So I can get one for my massive Clit as well then? I want everyone to pay respect and marvel at it.
- Comment on [deleted] 2 days ago:
Ah, okay. So this is either your device, or the entertainment system getting confused, most likely.
Some clarifications:
- Car Play features work over wired or Bluetooth, but not WiFi.
- Connecting over WiFi should give you data to your phone, so if that works, it’s doing its job.
- Your phone will use either Bluetooth for audio, or a wired connection for deeper integrations like Maps and such. Car Play doesn’t do data exchange over Bluetooth in that way on either Android or iOS. Some may do contacts or phone control, but not sending streams of data over the WiFi.
So if you want the audio to work AND you want to connect to the hotspot, you’d use either wired USB or BT for the audio portion, and then the Hotspot just gives your phone data.
- Comment on [deleted] 2 days ago:
Would be helpful to know which car model. You may just search for the model and keywords that describe your issue and see if others are complaining as well.
What I think you might be saying is you’re connecting over Wi-Fi to your car’s hotspot, and then you’re losing all data? If that’s the case, I’m guessing your car is broadcasting a WiFi SSID, but there’s a feature unlock to use it as a client. Meaning your car itself will use it to send/receive data, but WiFi clients is another thing they want you to pay for.
- Comment on Why Are Cars Getting Rid Of Android Auto? 2 days ago:
Way to make people hate your cars even more.
- Comment on Raspberry Pi Gets Desktop Form Factor 2 days ago:
This…seems completely insane. Like buying a pickup truck to drive a motorcycle around because you don’t want to bother getting your M-class license.
That PSU is insane for a board that can run off 5V.
- Comment on [deleted] 4 days ago:
I feel like even a Nurse’s Assistant should know this. Oooof.
- Comment on SODIMM-to-DIMM adapters offer a workaround for DDR5 price hikes 5 days ago:
Horrible idea
- Comment on In what way am I the product when using CloudFlare's free tier? 1 week ago:
You’re using a service that is proxying your data. They can read all of it.
If you don’t care, then good for you. You’re still the product as being a user because whatever you happen to be serving my eventually become interesting. If not I harm done. It costs pennies to host a 24/7 load balanced reverse proxy. You just can’t do it yourself.
- Comment on Offline TTS in 2026? 1 week ago:
Not sure what you’re asking here, but are you talking about the voice part, the TTS pat, or the interaction?
- Comment on What is the best trategie to refresh ssh keys? 1 week ago:
This generally referred to as Key Rotation. It applies to everything from SSH keys, to API keys in running apps.
There are automated ways to do this with ease, but it’s very simple to do with a single script, and some sort of secure key/value store (bitwarden, Vault, etcd…whatever).
The process is basically something like:
- Create a script that runs on cron to check for a key at your k/v store at an expected location, like
/ssh_keys/host1-private-12.1.25and/ssh_keys/host1-public-12.1.25 - Deploy this script to all machines you wish to regularly rotate keys on and ensure running properly
- Generate new keys and put them in your k/v store at some versioned location/path like
/ssh_keys/host1-private-12.21.25and/ssh_keys/host1-pub-12.21.25 - Update your local script that regularly grabs these updated keys to point to the new version uploaded, bonus if your store can symlinkto some other locations like
/ssh_keys/host1-private-current - Wait X period of time to ensure all hosts get whatever key they need
Your script can clear the old keys if needed but simply validating them in the access change serves the same effect. Up to you.
- Create a script that runs on cron to check for a key at your k/v store at an expected location, like
- Comment on A self-hosted approach to long-term file storage and control 1 week ago:
100%
- Comment on US Energy Department signs AI collaboration deals with Big Tech for Genesis Mission 1 week ago:
Idiots. Now our government is being grifted by these asshats. They had to do it NOW of course, before anyone competent could reject it.
- Comment on Recommendation for Android File Manager 1 week ago:
CX File Explorer has always worked well for me.
- Comment on Home wifi router 1 week ago:
Unifi is fine, but pricey. It will definitely be above and beyond an ASUS as far as performance and features go.
- Comment on TikTok Deal Done And It’s Somehow The Shittiest Possible Outcome, Making Everything Worse 1 week ago:
So true
- Comment on What is the moral jurisdiction behind not wishing who're rich and in executive positions to die? 1 week ago:
You don’t what?
- Comment on What is the moral jurisdiction behind not wishing who're rich and in executive positions to die? 1 week ago:
I think it’s more the line of “If this person dies, who will take their place?”
It’s kind of a Hydra situation from the MCU. Killing one person won’t do much. Everyone expects the next in line to keep doing the same thing.
- Comment on No AI* Here - A Response to Mozilla's Next Chapter - Waterfox Blog 1 week ago:
If you’ve not been paying attention to their other random products, it would seem this is unlikely.
They just jump from random thing to random thing and collect money along the way, draining the coffers with their C-level titles. Absolutely bullshit.