talkingpumpkin

What differences will exist between the two parallel versions?

Some future components will be published under the commercial license and will exist only in that build. Newly developed features will be evaluated on a case-by-case basis for which license applies to them.

source: the page linked by OP, community.bitwarden.com/t/…/4

Yep, that’s what I described and any CA accepted by the client can do it

They don’t have your private key

What risk are you trying to mitigate, specifically?

If it’s the CA taking over your site, control over your CA specifically doesn’t really give any advantage to an attacker (they would have to hijack traffic and provide a new certificate - nobody will notice if the certificate is from a different CA).

Note that your CA cannot decrypt the exchanges between your server and its clients.

I hope this is not against rules 4 and 6 (but I fear it might be?).

If you want me to remove the post just tell me (or report it to the mods, of course) - I’m only sharing this because I found it very funny :)

It’s great to see more and more project leaving github!

PS: “Live Demo” on www.pdfding.com is a dead link

Wow. Do they block VPNs inside your country too?

Anyway, there’s openvpn and there’s nebula (I think nebula doesn’t use wireguard… do double-check), or you look into things built specifically to hide traffic (keyword: “vpn obfuscation”).

No idea if VPN protocols other than wireguard may be blocked too (probably?).
No idea if trying too hard to circumvent government policies may get you added to some list you’d rather not be in.

If it’s a server for self hosting you definitely don’t want anything that requires interaction at boot.

There’s a project that allows unlocking LUKS with a decryption key retrieved from another machine in your network. I don’t recall the name but someone hopefully will.

The idea is that put the key on, say, a raspberry pi zero w that you hide somewhere in your house so that if someone steals your server they don’t have the key.

Does this have anything to do with self hosting?

My NAS is in a node 304 case from fractal design and I can recommend it.

The 304 is mini-ITX/DTX with space for 6 drives.

There is a bigger version for bigger motherboards and more drives, which I would assume is just as good as mine.

where SyncThing is overkill

I just have a dedicated shared folder between my phone and desktop and drop oneoff stuff there (it’s also easier to script this way)

For files I use syncthing (also for music/photos/notes/etc… syncing files is IMHO the way to go wherever applicable).

For sending links to my PC (eg. articles linked from podcasts’ notes) I used to rely on firefox sync, but I’m starting to distance myself from Mozilla so I am gonna experiment with wallabang.

For sending small notes to myself (stuff that I want to sort or act upon when I get to my PC), I’m using signal’s “note to self” but I’m investigating alternatives because signal doesn’t mark such messages as unread and so sometimes I forget I’ve sent some.

IDK where I’ve read that… should have double checked before posting, my bad.

Quick fact checking:

US police kills some 1,281 people last year (wikipedia).

1,281/340,110,988*100,000 gives around 0.38 police killings/100,000 people, which is below homicide rate in EU.

I couldn’t (be bothered to) find out what the overall European homicide rate actually is (it also depends on what you count as “Europe”), but Germany is at around 0.8, France at 1.8, Italy at 0.57, Spain at 0.9 and Poland at 0.8 (these are the five most populous countries). So… let’s guesstimate it at around 1? (numbers are from this random source).

So US policemen are only 38% as deadly as European criminals

TLDR: Protesting or resisting privately inside your house does not lead to social change and is not the most rational way of protecting yourself if you feel threatened by your government.

Self-hosting is not “resistance”: at most, it’s prepping for nerds, with computers instead of guns.

Self-hosting is not even a rational/efficient way of making a statement. If that’s what you want, it’s far more efficient to follow the established tradition of declaring you are moving to Canada and not following up with actual actions.

Don’t get me wrong: I can relate to the nerdy way to cope with the ugliness around us (I say “us”, but thankfully I don’t live in the US), but the way I see it your society that needs change and self hosting won’t help in that.

Frankly, the shit you US people are putting up with is unreal.

It has always been (US police forces kill far more people than the overall homicide rate in Europe) and it’s just getting worse.

If you feel threatened you can essentially respond by fighting, fleeing, or cowering.

If you wanna FIGHT (this is what “resistance” is about), try to use whatever power you have and apply your energies to bring actual change. If you don’t feel comfortable acting outdoors, this could include lending your nerd skills to protesters or resistance groups. (Heck, even being a keyboard warrior is more useful to changing society than being a hobbyist sysadmin).

If you wanna FLEE, just leave the country. Honestly, there are better places to live than the US.

If you wanna COWER, then be a prepper or a self-hoster or whatever, but be aware that, while misrepresenting your reaction as “resistance” may make you feel more heroic than you are, spreading the misrepresentation can also lead others to cowering instead of fighting. Is that what you want?