sonofearth
@sonofearth@lemmy.world
- Comment on Breaking: Google is easing up on Android's new sideloading restrictions! 23 hours ago:
… continues to make Play Integrity an integral part of Android and making all the stupid banking and govt apps requiring having it on your phone thus making it harder to de-google.
still no… fuck you.
- Comment on Passkeys Explained: The End of Passwords 1 day ago:
That’s why it’s important to avoid vendor lock-in and use actual reputable password managers to secure your passkeys such as Bitwarden, 1Password, or KeePass. On Android 14+ and iOS, you can even set your preferred password manager as the default passkey provider.
If you don’t fully trust Bitwarden servers, you can self-host a Vaultwarden instance, which is compatible with Bitwarden clients. Alternatively, using a yubikey is also a great hardware based option. Just because Google & Microsoft are heavily promoting passkeys doesn’t mean they’re inherently bad.
Passkeys work flawlessly for me across platforms:
- Android 14–15 (except on Brave with de-Googled devices)
- iOS 17–26 (and likely beyond)
- Windows 11
- Linux; while it doesn’t have OS-level integration yet, passkeys work perfectly in modern browsers
Personally, I use passkeys everywhere. I host my own Vaultwarden instance to store all my passkeys, and for redundancy, I also keep separate ones in my Keepass database, which I use for TOTPs. My self-hosted stack is secured by Authentik, running completely passwordless and uses passkeys for authentication and other apps integrate via OAuth and Proxy Auth.
I still don’t quite understand the issue you mentioned with websites. Typically, the passkey mechanism is triggered directly by the browser or OS (if you’re on mobile). You’ll be prompted to either save a new passkey or sign in with an existing one. If your password manager is correctly set up as the default credential provider, it should work seamlessly. Even without a browser extension, most Chromium-based browsers let you scan a QR code with another device that has your passkeys or you can simply insert a yubikey to authenticate.
What infuriates me is that some services like Amazon use passkeys only as second factor and asks for an OTP anyways which defeats the whole purpose. But for services that do it right, passkeys works seamless!
- Comment on Passkeys Explained: The End of Passwords 2 days ago:
What are using lol? I have never been asked to plug in my phone to a computer. I have use Bitwarden and KeepassXC for passkeys and it just worked in all the browsers flawlessly (even ungoogled chromium). I just want Linux Distros to allow setup a default password manager for the user and implement passkeys auth mechanism for the apps installed in the device.
- Comment on Passkeys Explained: The End of Passwords 2 days ago:
But what’s dystopian about passkeys. They are actually more secure than Password + TOTP. Phishing out a passkey is practically impossible.
- Comment on Passkeys Explained: The End of Passwords 2 days ago:
I am not dependent on any ecosystem for passkeys. I have a self-hosted vaultwarden instance that works with Bitwarden clients. I create and store my passkeys over there primarily and in my keepass db (which I primarily use for TOTPs) for redundancy. So if either one gets compromised, I can just delete the passkey for the accounts involved in that database.
- Comment on Gamepad for Linux Gaming? 2 days ago:
The ultimate 2 is over 100$ more expensive than the ultimate c wired and 50$ more than the official Xbox one. (All of this in rough ₹ to $ conversion) Interestingly, I just searched Amazon and I had to scroll down quite a bit to find the 2c wireless which is actually cheaper than Ultimate C wired (at 81% discount like wtf?!), so now I might go for that one. Thanks.
- Comment on Gamepad for Linux Gaming? 3 days ago:
Thanks. Unfortunately this one’s on the expensive side and I am not a hardcore gamer. I think I will go with the ultimate C wired as it is in my budget as well as seems to work with Linux (atleast via steam; got mixed reviews with Lutris from some folks in the comments).
- Comment on Gamepad for Linux Gaming? 3 days ago:
Does 8bitdo work well with Lutris? I saw a video posted 5 years ago where you had to add Lutris to Steam and launch it from there for the controllers to work.
- Comment on Gamepad for Linux Gaming? 3 days ago:
Well I have never used any controller or a console before. For almost 20 years I have been a keyboard+mouse guy. So for me, a plug and play controller would be nice. Bluetooth is not a priority for me rn. Given that as well as all the advice in the comments, I am leaning towards this one.
- Comment on Gamepad for Linux Gaming? 3 days ago:
Yeah I was looking at that as a lot of folks mentioned the brand. The wireless is super expensive, even more than the original xbox controller. But the wired one is literally half the price.
- Submitted 3 days ago to games@lemmy.world | 78 comments
- Comment on MPV: The Ultimate Self-Hosted Media Solution You're Probably Sleeping On 5 days ago:
You are technically right but as a human who just wants to watch “The Devil Wear’s Prada” after a long day at work it would be too frustrating.
You have to go through more clicks and more typing to play your media on MPV. On the other hand I can just use my remote to browse through my Jellyfin library after just opening an app.
- Comment on YSK before you buy a replacement for your cellphone that has stopped charging, buy the $10 cleaning kits and spend the time deep cleaning the phone's charging port. 1 week ago:
Genuine curious question (assuming you are from the west): Why do you guys use toilet paper to clean your butt instead of a jet spray like we do in the east?
- Comment on Mathematics disproves Matrix theory, says reality isn’t simulation 1 week ago:
The uptime is too good to be a simulation. It has an uptime of like 14 billions years! AWS has a lot of catching up to do. /s
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
It is just Donation Tiers I think. Maybe the per user thing only hides the “Buy Immich” button for only that specific user.
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
You can setup external libraries with it. So you, say, upload your photos and videos to your SMB Share, point that SMB Share as external Library in Immich and you will get the benefits of Immich while you can browse your Share normally as you would. I mean yes this is a workaround but it works.
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
Never used NC but this just works.
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
If it works then great. I find it pretty lacking compared to Immich.
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
The ML is really good. Google’s Face recognition is over-confident sometimes and is difficult to remove the tagged faces and add correct ones. Immich’s is very accurate and if it misses something I can just add them — 1 step instead of 2 with Google’s.
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
-
Short: It is a second Hardrive using borg that backs up the primary harddrive.
-
Long: My Backup strategy:-
Databases and other imp files:
For databases the backup happens every night that gets saved on the server itself. Then when my laptop connects either to the home network or to the Internet, the backup zip files on my server syncs to my laptop via syncthing. Then my laptop’s data is backed up to OneDrive (encrypted) — this includes the immich database backups. I usually keep 7 days worth of backup files just incase some get corrupted and I can just go back to the previous day.
Library
Since my Immich Library is big, daily borg backups are not possible for 200 gigs. So I have scheduled them every Sunday morning when I rarely use the server. The photos gets uploaded to the hardrive mounted to Immich’s Library directory. The hard drive is exclusively used only for Immich. That hard drive is then backed up to another hard drive using borg and also to my OneDrive using rclone. (All encrypted). So 3 copies of the data, 2 on 2 different hardives (off which 1 is primary) and one offsite.
-
- Comment on Promised myself I will support them after they go stable. They kept their promise and so did I 1 week ago:
Image Backup* solution — like Google Photos or Ente Photos but self-hosted.
*Backup in the sense of uploading your photos to a server you own. You should backup the database as well as your library with 3-2-1 method.
- Promised myself I will support them after they go stable. They kept their promise and so did Ilemmy.world ↗Submitted 1 week ago to selfhosted@lemmy.world | 175 comments
- Comment on 1 week ago:
Still no Linux support.
I will stick with FOSS stuff and when needed, Black Flag Adobe in Windows VM.
- Comment on Immich v2.2.0 adds OCR 1 week ago:
My library of 12.5k images took about 7 hours on my N100.
- Comment on She is making a GREAT point 1 week ago:
Just use condoms and don’t hookup with random people. No pills needed for any gender. They are harmful.
- Comment on Apple is reportedly getting ready to introduce ads to its Maps app 2 weeks ago:
Honestly I wouldn’t care about the stuttering and sluggishness.
As much as I hate Google, I will have to admit that Google Maps is one of the best pieces of software ever to exist. I try to use Organic Maps and OSMand but Google Maps is just much upto date, has reviews, has real time traffic updates along with road closures. OSM based maps and Apple Maps is way way way way way behind — atleast in my country.
- Comment on Apple is reportedly getting ready to introduce ads to its Maps app 2 weeks ago:
Whotf even used Apple Maps lol
- Comment on A Beginners Guide To Selfhosting Part 1 3 weeks ago:
I’ve used Ubuntu Server, without any problems
If it works for you then great. But it doesn’t stand with your goal of Corporate Independence and Willingness to Learn — Given that it is slightly easier to setup than Vanilla Debian. But at the end of the day it is just Corporate Debian with more up-to date packages but overall less stable than Vanilla Debian.
upkeep and electricity costs of having your own hardware at home
It really won’t be much unless you’re gonna go for extremely beefy hardware like for Jellyfin hosting hundreds of newer codec 4k files with HDR and shit with dozens of users or some LLM — which anyways still would be cheaper than renting a VPS. Otherwise even a Raspberry Pi can do a decent job or even a mini pc (with something like Intel N100) which draws less power than a Mobile Phone charger. It also aligns with the idea of beginner friendly setup than using a VPS which half the people will even skip reading the Terms & Conditions and Privacy Policies. So hosting something like Immich or Nextcloud, which is not encrypted at rest, is pretty much available for the VPS provider at instant.
convenience of a public IP
You don’t need a public IP to self-host. A beginner should start with private at first, learn from there and gain and grow otherwise it can lead to security risks — e.g you have mentioned to self-host Immich which doesn’t have any native 2FA. The self-hoster then will have to know about SSO based logins to secure instances like these.
use a dynamic DNS provider to get around
You also have Cloudflare Tunnel, Tailscale. Or you can use a 5$/month VPS in this instance to self-host Pangolin with Crowdsec for public access and block malicious or suspicious IPs. All of these options will mask your real public IP.
The guide was focused on being as simple and convenient as possible, with the target audience being absolute beginners
Ok but this asks for a lot of upfront investment. You don’t need to buy a domain or a VPS as a beginner (or even a mini PC as I mentioned). Just start with a PC or a Laptop you already own. Host the service and access it via private IPs instead of handholding them to copy and paste commands, configs and compose files from the internet (although you do have mentioned official documentation so kudos for that) just for the convenience of public access. A lot of people don’t know the 3-2-1 backup rule. One error might wipe off their entire Immich Library, Password Vaults or important documents in Nextcloud.
- Comment on A Beginners Guide To Selfhosting Part 1 3 weeks ago:
freeing yourself from your dependance on big corporations
Setting up a VPS with Ubuntu Server
This shouldn’t exist in the same article lol. You will just end up paying in subscriptions anyways while at the same time maintaining all the stacks — that too on Ubuntu where some articles will become useless after a few updates. Even 10$ a month will result in $120 every year — which can buy you a half decent second hand PC or a new Mini PC. You won’t even own your data when you rent a VPS.
You will end up saving a lot more by self hosting on your own hardware with vanilla Debian and be more independent at the same time. You will only need a VPS if you want to self-host your own reverse tunnel like Pangolin or FRP.
- Comment on As Microsoft Forces Users to Ditch Windows 10, It Announces That It’s Also Turning Windows 11 into an AI-Controlled Monstrosity 3 weeks ago:
Once Adobe apps and new versions of Microsoft office start working reliably on Linux, 50% of corporate PCs are out of Windows’ market share.