hietsu
@hietsu@sopuli.xyz
- Comment on New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises 6 hours ago:
Yeah but at least they are nice enough to announce that with the silent ”e” in their name Arse Technica.
- Comment on Microsoft is withdrawing support for older printers' drivers 1 week ago:
But CUPS is doing the same thing, someone somewhere told me. Using old drivers with it is going to need jumping some extra hoops.
- Comment on Nearly all of Spotify has been scraped and is available via torrents 1 month ago:
Nope, I would not call 160kbps Vorbis low bitrate, it’s roughy the quality level of 192kbps MP3. Only the ”popularity=0” stuff (so stuff with so little listens that Spotify does not keep record of) were re-encoded to 75kbps Opus, which as a modern codec is much better than it sounds like but of course re-encode is not great for already lossless stuff.
For purists there are those Tidal downloader sites available everywhere for free lossless music, even 24-bit hires FLAC.
- Comment on Microsoft “Improved” Notepad. I Un-Improved It. - Dave's Garage 2 months ago:
This needs to be pointed out more in all posts related to the guy, and in YouTube too. Scummy shit like his programs were quite common back then but the way he acts around that topic now deserves all the hate imo.
- Comment on Microsoft “Improved” Notepad. I Un-Improved It. - Dave's Garage 2 months ago:
Haven’t watched any of his videos since I learned what he was but what I’ve heard they’re all AI slop now too, like this one appears to be as well based on the description. I wish nothing but shit for this guy.
- Comment on Microsoft “Improved” Notepad. I Un-Improved It. - Dave's Garage 2 months ago:
This is ALSO a guy behind many of those ”your PC is at risk” scams back in the day, selling useless optimization tools that extorted money from victims. He specifically quit Microsoft to pursue that and was even convicted later. Still chooses to downplay and try to hide what he did.
- Comment on Internal domain and reverse proxy 3 months ago:
Good to know! *-cert is definitely something I’d need to setup in my self host setup, though a little complex as my (free) domain provider does not let me edit TXT records for DNS-01.
- Comment on Microsoft Word documents will be saved to the cloud automatically on Windows going forward 5 months ago:
They’re prepared to do anything to get real user data for AI training. This little change gives them easily millions of files per day accidentally saved to cloud.
- Comment on Windows seemingly lost 400 million users in the past three years — official Microsoft statements show hints of a shrinking user base 7 months ago:
What is free though is LibreOffice, or some Nextcloud document addons (to a degree) if ”cloud” is the thing.
- Comment on Jellyfin over the internet 8 months ago:
Nice, but the bots may not understand the joke.
And not only that but they will tag the domain with ”there is something here”, and maybe some day someone will take a closer look and see if you are all up-to-date or would there maybe be a way in. So better to just drop everything and maybe also ban the IP if they happen to try poke some commonly scanned things (like /wp-admin, /git, port 22 etc.) GoAccess is a pretty nice tool to show you what they are after.
- Comment on Jellyfin over the internet 8 months ago:
Not at hand no, but I’m sure any of the LLMs can guide you through the setup if googling does not give anything good.
Nothing very special about all this, well maybe the subdir does require some extra spells to reverse proxy config.
- Comment on Do you remember Windows 95? How about Windows 96? 8 months ago:
UTM is the way to go on modern Macs, and even iOS/iPadOS too! Built on QEMU and super easy to spin up virtual machines with any architecture.
- Comment on ELI5: How to put several servers on one external IP? 8 months ago:
Could be indeed. Looking at the nginx logs, setting a permaban on trying to access /git and a couple of others might catch 99% of bots too. And ssh port ban trigger (using knockd for example) is also pretty powerful yet safe.
- Comment on ELI5: How to put several servers on one external IP? 8 months ago:
I have wrestled with the same thing as you and I think nginx reverse proxy and subdomains are reasonably good solution:
- nothing answers from www.mydomain.com or mydomain.com or ip:port.
- I have subdomains like service.mydomain.com and letsencrypt gives them certs.
- some services even use a dir, so only service.mydomain.com/something will get you there but nothing else.
- keep the services updated and using good passwords & non-default usernames.
- Planned: instant IP ban to anything that touches port 80/443 without using proper subdomain (whitelisting letsencrypt ofc), same with ssh port and other commonly scanner ones. Using fail2ban reading nginx logs for example.
- Planned: geofencing some ip ranges, auto-updating from public botnet lists.
- Planned: wildcard TLS cert (*.mydomain.com) so that the subdomains are not listed anywhere maybe even Cloudflare tunnel with this.
Only fault I’ve discovered are some public ledgers of TLS certs, where the certs given by letsencrypt spill out those semi-secret subdomains to the world. I seem to get very little to no bots knocking my services though so maybe those are not being scraped that much.
- Comment on Jeff Geerling: Self-hosting your own media considered harmful (updated). Youtube removed his content, saying that self hosting content is "dangerous or harmful content" 8 months ago:
Saw the video… It mentions ”ripping” and even shows clips of some blockbuster movies. No wonder any copyright-sensitive automation gets triggered pretty fast. This will only get worse.