possiblylinux127

300 EUR is a lot of money depending on who you are

True but if you look online Chrome OS devices are dirt cheap. The major trade off is that storage is limited

I would instead look into old Chromeboxes. They have about the same compute but don’t have a battery and can typically run mainline Linux (assuming they are supported by mrchromebox)

The transparency logs would mean that any rouge certificates created would leave a paper trail not to mention there is nothing stopping them from issuing a certificate for any domain of there choosing

You go to a different CA

You do make a good point. However, Let’s encrypt is run by the IRSG which is a non profit focused on improving internet security. They are the ones who are pushing for shorter certificate lifetimes among other things.

ZeroSSL is probably what OP is looking for

The private key isn’t used for encryption

The certificate is only used for authentication. The actual data is encrypted with a temporary symmetric key that is generated via a diffie-hellman exchange

Maybe I’m mistaken but aren’t the logs cryptography verifiable? (As in you can’t create a rouge cert without it creating a trace)

Let’s encrypt is very transparent and has been designed to be auditable. What are you worried about exactly?

Lost Lemmings?

Are they Broadcom based?

If they aren’t you might be able to get the Linux kernel running on them. Openwrt would be much better.

Just use mediawiki

It is what powers Wikipedia

Have you considered putting your kids up for adoption?

OpenWRT now uses DSA so that article is dated

Thanks for the clarification

I’m not sure what you mean by “driver level.” Configuring vlans in openwrt will configure the hardware. (It is really the Linux kernel that does the heavy lifting)

Are you familiar with the OSI model? I would learn layer 2 vs layer 3 before getting to far in the weeds

This is a bit more complex that it needs to be

Why didn’t you just use the openwrt Firewall? You could’ve just allowed your server to talk to the camera

Not web based but you could always use Samba

You absolutely shouldn’t be exposing service on your computer to the internet

Firewalls (not NAT) exist for a reason

It’ll be abandoned in 6 months

Why did you use Claude to write this comment

You really should disclose this as AI slop

You can use Tor snowflakes or bridges to bypass restrictions

Not being impacted by security issues like these for one

China uses deep packet inspection so that makes sense

I think the the great Firewall is less restrictive with QUIC traffic. It might be worth trying fragmented QUIC as from what I’ve read the GFW struggles to reconstruct the traffic

Changing the port doesn’t actually accomplish much

Best practice is to just harden SSH so that not traffic gets nowhere

Nebula might actually work as it doesn’t use Wireguard