kristoff

@kristoff@infosec.pub

• ⁨Comment⁩ on ⁨Server access from China⁩ ⁨⁨2⁩ ⁨days⁩ ago⁩:

  You mean "copy the photos you have taken but you not want in your device if you would get checked on your way back out to a server in a hostile country " ?

  99.99% if the normal tourists do not have a personal server to store their photos. They use a commercial cloud. By using your personal server, you behave differently from 99.99% of the tourists.

  " Why do you keep your images to your personal server and not the cloud? What do you have to hide? "

• ⁨Comment⁩ on ⁨Matrix to XMPP migration⁩ ⁨⁨3⁩ ⁨days⁩ ago⁩:

  HI, Thanks for the info (and also thanks to PoVog).

  My experience with mqtt is limited. I once set up a ejabberd server to try it out. It works but -as I mainly interested in federated chat- it was not that interesting. There was a lot less traffic and the rooms that exist that had traffic had a big issue with moderation (i.e. spam content). The S/N ratio of the discussions was a lot less then on matrix or other platforms.

  I also notice it was missing some features that are do are present in matrix, like the ability to edit messages. From how I understand it, the modulator nature of XMPP is a nice idea but as there is a large diversity on clients and the features they support, it does seems to come down to only the lowest common domininator to really work well.

  As I have just set up a pi5 as my new selfhosting-server, I might give it a try again, and see how well the transports (like slidge as mention by PoVog) work.

  Concerning the URL issue, as explained, it kind-of looks like a normal side-effect of the principle of server authentication. Alsom your use-case (one server, one client) it not the normal goal why chat-servers are build. Even in a non-federated use, you have multiple clients connecting to it. Cchanging the server hostname will impact all clients, so is probably a very rare scenario. I did see you use synapse. I do not know if you dendrite or conduit have the same behaviour.

• ⁨Comment⁩ on ⁨Matrix to XMPP migration⁩ ⁨⁨4⁩ ⁨days⁩ ago⁩:

  perhaps a stupid question, but are there bridges for XMPP ? My impression is that XMPP is as good as empty (I do use it mainly as a federated service). Is there still a lot of development on the XMPP side of things?

  I do not understand your point with ‘you cannot change the URL’. If you use matrix as non-federated and just the only user, what is the problem that you need to change the URL when you need to set up a new server on a new URL? Not being able to change the server at the same URL seems like a logical concequence of authentication, be it for server-to-server communication as for client-to-server communication.

• ⁨Comment⁩ on ⁨signald on a pi ?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I think I read something about that but I do not know the details.

  It fhat is true, that would be good news. Thanks for the info. 👍

• signald on a pi ?
  Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ to ⁨selfhosted@lemmy.world⁩ | ⁨3⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨What are the ramifications of letting an old domain that was used for email go back into the market?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  There was an example of an ethical hacker that bought up old email-domain names of police offices, city councils (name of city changed due to Mercer) and so on. He received quit a few mails with quite sensitive data.

• ⁨Comment⁩ on ⁨What else should I self-host?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I run a small setup on a seperate server segment (2nd router behind my main router) so it is on the internet. I run nextcloud, an dendrite and conduit instance (matrix chat-server servers), a mastodon and go-to-social instance (fediverse), bitwarden (password manager), and others.

  If there is a service that you do not want to be publically accessable by everybody but you do want to access from everywhere on the internet yourself, check out client-side TLS (https) certificates. The server does is accessable from the internet put only people who have a TLS certificate on their client signed by you can access it. For services that do not require incoming connections from other machines (so no federated services like matrix or the fediverse) that is an option to protect your servers.