dogs0n
@dogs0n@sh.itjust.works
- Comment on PLEASE 5 days ago:
YOU FORGOT ABOUT CONTRAST AND NOW I HAVE CRASHED
- Comment on It will trickle down any second now 1 week ago:
You’d think that, but go research or watch a video and get informed on how these bimbos use their networth (stocks) as collateral for bank loans of still more money than we will ever see in our life times (that they never really pay back btw).
- Comment on What's the security situation when opening a jellyfin server up for casting? 1 week ago:
Hehe yep, that’s a good takeaway and the same as what I think.
Thank you too, i enjoyed this discussion.
- Comment on What's the security situation when opening a jellyfin server up for casting? 1 week ago:
No problemo.
Thanks for pointing out the reverse proxy comment. I think I was wrong to say simply putting jellyfin behind a reverse proxy will increase your security.
The benefits may only be minute or non-existent if you don’t use the reverse proxy for handling other stuff like HTTPS (and redirects to https, etc), restricting access or adding extra authentication requirements (mainly https).
It may also be good to note that Jellyfins docs explicitly do not recommend directly exposing jellyfin ports to the internet (a reverse proxy or using a vpn are recommended instead).
Still I will continue to feel safer always using a reverse proxy when I expose to the internet (maybe my misconceptions).
- Comment on What's the security situation when opening a jellyfin server up for casting? 1 week ago:
Your SSH setup is good.
ssh is a very resilient piece of software so I doubt with your setup you would encounter any issues.
Enforcing use of a VPN to get into your network before being able to ssh into a machine is mostly just an extra layer of defense, though using a non-standard port, only allowing key logins and disabling root user login are all layers of defense you have already added.
I thinj you’ll be fine, but if you are worried, you could setup a VPN or alternatively something like Fail2Ban if you notice any brute-force attacks (which may be unlikely with the use of a non-standard port).
What I meant with the Jellyfin question was kind of, how is having it exposed via a reverse proxy different from exposing its port right away? Is it because the only allowed connection would be HTTPS/encrypted etc, maybe?
It’s down to how secure the software is really.
Jellyfins (and other software) don’t use really secure web servers for getting themselves accessible via the network.
Caddy (a reverse proxy, for example) is made to be exposed to the internet and so it is more resilient and safe to use.
So putting the resilient software (a good reverse proxy) infront of Jellyfin (or most other software) simply increases your security by having the more safe web server be the one interfacing with end users.
Have fun on your journey!
- Comment on It will be great, they said... 1 week ago:
Hm, I’m gonna remain skeptical.
Using the random ip you get from mobile data or using dynamic dns feels risky. Maybe that’s because I’m not smart, but the whole trust level is mail thing seems very heuristical and the risk of damaging my domains trust factor doesn’t seem worth it.
I’m not skeptical about having two ip addresses, but rather using ones that I don’t have control over (i don’t have the only right to use).
I might be wrong on the PTR record thing, seems it might be possible with DDNS providers but not 100% sure.
- Comment on It will be great, they said... 1 week ago:
For mail this won’t work.
For one, you have to now think about dynamic dns because you have your one static ip and then whatever ip your data backup will rollover onto. This isn’t ideal. Probably going to ruin any trust your domain will have.
Second, there is no way you’re getting a reverse PTR record setup to work in this config.
So, no, it’s not gonna work.
It may work fine if you have random services, but tbh I don’t ever want to use or deal with a ddns service myself.
- Comment on What's the security situation when opening a jellyfin server up for casting? 1 week ago:
If you don’t want to worry too much, you can setup a vpn (like wireguard) on your server for ssh access.
Using a non standard port is a good idea, but not entirely foolproof because bots might still port scan (even if unlikely that they do that for ssh I’m not sure). At a mininum, you probably want to use keys for login like the other commenter on the main comment said.
Personally, using a vpn for when I want access to SSH when I’m out is worth the couple hours setting it up the one time (very simple setup with wireguard-easy for example). Maintenence time spent on upgrading is very low.
(Tl;dr I’d use a vpn to access ssh specifically rather than exposing it to the internet)
Same thing for Jellyfin?
Not 100% sure what you mean, but to clarify: Don’t accidentally expose jellyfins port to the internet (eg the default port 8096). Make sure it is only accessible from outside your network through your reverse proxy.
- Comment on What's the security situation when opening a jellyfin server up for casting? 1 week ago:
I agree, there is a lot of paranoia, but honestly that’s probably a good thing, because the people who are paranoid might not know that much, so a good amount of paranoia is healthy there.
The chance of being exploited is very low for me to care too too much. Why spend countless days locking up my entire infra when there’s a very low low chance anyone could exploit me in the first place (obviously get your setup to a good standard, I don’t recommend not reading up on anything and exposing server, etc. Just for me, I don’t need to over do it).
That being said, personally I have ssh behind a vpn because that’s a very important service that only I am accessing anyways, so it makes sense for me to disable that attack vector.
- Comment on It will be great, they said... 1 week ago:
Oh okay, so it doesn’t work then is what I’m gathering (for email).
- Comment on RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components 1 week ago:
Cool, thank you for the knowledge!
- Comment on It will be great, they said... 2 weeks ago:
If you have a regular data plan that you use if your internet goes down, you’re server would technically have an internet connection, but your services (like email) still wouldn’t work would it?
Do you have some type of setup that keeps that working on data?
I don’t know how buying the ISPs data addon works, but I’ve been skeptical that that swap over would keep anything online either (but getting a generic data plan surely cant work at all right?).
- Comment on RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components 2 weeks ago:
If your app interfaces with the OS, like most apps would (reading a file, managing the window, etc), then you would be writing rust, no?
- Comment on RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components 2 weeks ago:
Doubt it
- Comment on It will be great, they said... 2 weeks ago:
Lol the commenter you replied to didnt expect a one of a kind person to reply.
Normal people don’t have a ginormous battery and a generator for when the power goes out.
Every ISP is dogshit too. If it doesn’t go down from incompetence, it’s their physicial infra being broken from weather or some other “natural event”.
Even then, I can’t justify paying their crazy rates for 5g backup year round just for it to kick in once or twice a year or a couple nights where I’m not awake anyways.
Every email server that sends mail should have a rety mechanism if it fails to deliver too, so you shouldn’t miss any mail as long as your server isn’t offline for too long.
Ofc you are allowed to need 99.99% uptime for your home server, just disagreeing that it’s a need for most of us (including me).
- Comment on What's the security situation when opening a jellyfin server up for casting? 2 weeks ago:
The default configuration for Jellyfin is good. I mostly mean as long as you follow best practices in general you should be fine (keep your system and jellyfin updated, have some type of firewall in place, make sure you aren’t accidentally exposing jellyfins port directly to the internet).
- Comment on What's the security situation when opening a jellyfin server up for casting? 2 weeks ago:
As long as your jellyfin server is properly configured behind a reverse proxy, letting it be accessible publicly on the internet is fine.
Obviously everyone has their own threat model, but it’s not that big of a threat in this case (personally I don’t care).
- Comment on Mozilla’s Betrayal of Open Source: Google’s Gemini AI is Overwriting Volunteer Work on Support Mozilla 2 weeks ago:
The money from Google was surely what killed their browser. I’m not saying their was a behind the scenes deal. They just got lazy and spent Google’s money is stupid ways instead of improving their product so that they could gain a real userbase.
Imagine if they spent that money towards just the browser (not possible, but imagine anyways), we could be in a very different place where Chrome doesn’t have 99% (or whatever it is) market share.
Firefox is a good browser, but where could they have been today if it was prioritised over paying the CEO millions for nothing? They have recently been sorta catching up, i’ve seen a lot of updates that actually include features I use, but I think it’s too late.
Time for one of the new built from the ground up browsers to shine when complete. I still stand by Firefox and recommend it, but as soon as their is an open competitor that is production ready, I’m outta here.
They have undoubtly done amazing things for the web, but their idiocy is astounding sometimes and I don’t wanna stay on a sinking ship. I’d rather use a new browser that helps keep the web secure, safe a pleasant for us all without annoyances or dumb beurocracy.
- Comment on Scheduling is hard 2 weeks ago:
Project style homework would be so much better, it’s more creative and enjoyable and if you use AI it’s not like you had zero input yourself like what’d happen with a worksheet for example.
Takes more time to plan this type of homework tho and idk how it’d work generally and it’d probs need to be done in small chunks idk wait am i dumb
- Comment on Scheduling is hard 2 weeks ago:
The busier it is the more likely there’s this one idiota who thinks their time is worth more than yours so they forget every rule in the book and almost run people over to get somewhere “faster”.
Faster is in quotes because YOU ARE RACING TO THE NEXT RED LIGHT PAL every car you jumped over is gonna meet you there…
- Comment on Eurovision members debate call to boycott Israel 2 weeks ago:
Always Germany over-compensating… (for hitler, still)
This comment sounds bad but it’s true
- Comment on Introducing Proton Sheets 2 weeks ago:
100% agree with your take.
Why scare people looking to ditch google with stupid stuff like “but they complied with the government”, bruh google complies with anyone who has their wallet in-hand.
ProtonMail is a free inbox and is privacy friendly. Yes there are other options, but this isn’t a bad one by any means.
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 2 weeks ago:
I think it’s more of the hassle side of things, added complexity (even if small) and it makes the product feel less refined/premium/sleek in my opinion (not something I care about personally, but the masses do and it adds some friction, even if little).
I may be wrong, maybe adapters have no issue with hdmi to DP, but in the past I have only heard of trouble with adapters just not working for some devices.
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 2 weeks ago:
I don’t think it’s the best user experience when you get a new product neither do I think they are foolproof.
- Comment on Why won’t Steam Machine support HDMI 2.1? Digging in on the display standard drama. 2 weeks ago:
I think the reason you mention is a pretty good one… who wants to solely rely on adapters?
- Comment on Getting too expensive 2 weeks ago:
Selling my cat for expedited shipping!?!?! Yess
- Comment on Decreasing Certificate Lifetimes to 45 Days 2 weeks ago:
Yeah, I think Letsencrypt (and others) are one of the best things to happen for the internet.
You used to have to cough up a good chunk of monies for a certificate.
Now it’s easily accessible and you (i) never have to think about it after the first setup because a robot automatically renews expiring certificates for me.
Generally this is one of the best improvements: a more secure web that is easier to achieve.
- Comment on My review on the AYN Odin 3 3 weeks ago:
That banana feels like its cheating on the banana for scale scale
- Comment on same shit every day, on god 3 weeks ago:
Don’t worry, once we set it up we’ll have a consistent supply.
- Comment on 4 weeks ago:
Oh wow, I didn’t know they had teardowns yet, that’s kinda funny hehe