@Guadin@k.fe.derate.me avatar

Guadin

@[email protected]

Admin for mbin instance of fe.derate.me

This profile is from a federated server and may be incomplete. View on remote instance

Is it practically impossible for a newcomer selfhost without using centralised services, and get DDOSed or hacked?

I understand that people enter the world of self hosting for various reasons. I am trying to dip my toes in this ocean to try and get away from privacy-offending centralised services such as Google, Cloudflare, AWS, etc....

Guadin ,
@Guadin@k.fe.derate.me avatar

I don't get why they say that? Sure, maybe the attackers don't know that I'm on Ubuntu 21.2 but if they come across https://paperless.myproxy.com and the Paperless-NGX website opens, I'm pretty sure they know they just visited a Paperless install and can try the exploits they know.
Yes, the last part was a bit snarky, but I am truly curious how it can help? Since I've looked at proxies multiple times to use it for my selfhosted stuff but I never saw really practical examples of what to do and how to set it up to add an safety/security layer so I always fall back to my VPN and leave it at that.

Guadin ,
@Guadin@k.fe.derate.me avatar

Leaning on Google’s expertise in privacy and security

Lol. Google's expertise on privacy. Yeah, they probably know really well how to circumnavigate all those pesky privacy rules.

Guadin ,
@Guadin@k.fe.derate.me avatar

I've been on the verge of cancelling my subscription for multiple times now. But everytime I try an alternative it's missing something (for instance capture one mobile does not do masks/layers...), and so I keep shipping shitloads of money to a company which has dickass privacy rules and extorts you out of money.

Is it safe to open a forgejo git ssh port in my router?

Hello all! Yesterday I started hosting forgejo, and in order to clone repos outside my home network through ssh://, I seem to need to open a port for it in my router. Is that safe to do? I can't use a vpn because I am sharing this with a friend. Here's a sample docker compose file:...

Guadin , (edited )
@Guadin@k.fe.derate.me avatar

If your forgejo host needs to connect to the outside world, you can open the port for incomming traffic only for related and established traffic. That way when somebody wants to connect to your port as a new connection it will fail. So when somebody has bad intentions, it will not work unless you've already connected to them in the first place. You need to permit outgoing traffic from forgejo if you block outgoing traffic.

Guadin ,
@Guadin@k.fe.derate.me avatar

Blocking outgoing traffic isn't needed. But was mere a headsup if that is something you've alread setup.
What router do you have? Usually when you open a port there is a dropdown menu or checkboxes for what kind of connection the port opening is allowed.

Guadin ,
@Guadin@k.fe.derate.me avatar

What a shock, BaaS is not interesting anymore.

Hosting a writefreely.org instance ( k.fe.derate.me )

Looking through the writefreely.org instances on their website, a lot of the links are dead or closed for registration. The one that is open and working is promoting a paid version. Is hosting a writefreely instance heavy on resources, attracting the wrong people or just not "cool" enough?

Guadin OP ,
@Guadin@k.fe.derate.me avatar

Thanks, I was also doubting about Hugo but came about writefreely as well.

Guadin OP ,
@Guadin@k.fe.derate.me avatar

That's funny I just looked at your site and vacancies today. I do not qualify for any of those spots though. You've got an impressive amount of services build up. Keep up the good work!

Guadin ,
@Guadin@k.fe.derate.me avatar

Okay, treating this seriously. No: triple triple = 333 333 333. Triple triple triple = 333 333 333 333 333 333 333 333 333.

Guadin ,
@Guadin@k.fe.derate.me avatar

I had a task running which would scan all incoming calls on all SIM cards. It then checked the numbers for known contacts and if they are unknown it would check if they called multiple times.
I made it because I was bothered by a lot of spam/scam callers. This task would block all notifications, vibrations and ringtones. So it didn't bother me at all that they called.

Safest way of using WeChat

I live in Canada. My girlfriend is Chinese (also living in Canada), and while we are able to communicate via SMS, her mobile carrier isn't the best, and so there have often been issues for us with regular texting. She expressed a strong preference to use WeChat, at least as a backup option for when texting fails us. While I...

Guadin ,
@Guadin@k.fe.derate.me avatar

You can put it in a work profile and trust that Android is protective enough to keep your data safe and access limited. Otherwise buy a second phone just to put WeChat on it. Don't know how WeChat works, but if it's like Whatsapp then you don't need to bother with a secondary number.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • kbinchat
  • All magazines
    •