HumanPerson

@[email protected]

This profile is from a federated server and may be incomplete. View on remote instance

Anyone using a BananaPi r2 /r3 for your router?

My family needs a new router to replace the old (though not old enough that it should be dying) netgear router that is slowly dying. I want to do something with good foss firmware like opnsense or openwrt. I was thinking that the BananaPi options look good, but had some concerns. I would like to install the firmware myself,...

HumanPerson OP ,

Did you have to use a display to flash? Some of them don't seem to have a display output and I don't know if that will be an issue. The apple thing concerns me. There are a few macs and iPhones on the network, but the macs are m1, and the oldest iphone would be a 12. Do you think that would be an issue? Also, which R3 router are you using specifically?

HumanPerson OP ,

Cool, thanks.

HumanPerson ,

For hardware, I would go with sata ssds for storage. I also would recommend a separate boot drive as it makes re installing without loosing data a breeze. You could go with a new processor from intel or amd, and make sure it has onboard graphics. You should also go into the BIOS, enable xmp (always do that. It's free performance), and look for power saving settings. You could go for arm, but most arm computers lack expansion options and that can mean you use USB for drives which is unreliable. I think dc atx power supplies are a thing, but I know nothing about them. I would recommend doing ext4 and a raid, ideally 6 or 10. That will give you stability (from filesystem issues) and good reliability. I know RAID is not a backup, but in this case it may be what you want. RAID is for uptime, and it would be able to usually buy you enough time to finish your trip, or you could even have spare drives onboard and fix it while you're out in like 10 minutes. Also, I would highly recommend researching how to power it well. Starting an engine can mess with the power and could fry a computer. I don't know if a dc ups is a thing, but if it is, get it.

For software, use whatever you want, mostly. I always use debian for servers, but proxmox would probably be fine. You can use powertop to make sure it runs efficiently.

HumanPerson ,

They said they want a local backup so they don't have to redownload because bandwidth is expensive. I think a RAID makes more sense. I also don't think btrfs is a great idea for a boat. Power failures will probably be somewhat common, and btrfs is not the most stable, so I don't think I would trust it in weird conditions. Documentation is definitely a great idea though.

Is it practically impossible for a newcomer selfhost without using centralised services, and get DDOSed or hacked?

I understand that people enter the world of self hosting for various reasons. I am trying to dip my toes in this ocean to try and get away from privacy-offending centralised services such as Google, Cloudflare, AWS, etc....

HumanPerson ,

You can. I am lucky enough to not have been hacked after about a year of this, and I use a server in the living room. There are plenty of guides online for securing a server. Use common sense, and also look up threat modeling. You can also start hosting things locally and only host to the interwebs once you learn a little more. Basically, the idea that you need cloudflare and aws to not get hacked is because of misleading marketing.

HumanPerson ,

You can use I2p and upload to postman (tracker).

HumanPerson ,

I know i2p is a bit hard, but if you can figure out how to torrent you should be able to. I would recommend i2p+, which is a fork of i2p that is compatible with regular i2p but is easier to setup. Get the installer here: https://i2pplus.github.io/. If you are on linux, don't worry about it being an exe, it is java and you can run it with "java -jar file.exe." After that, you can open a browser and type localhost:7657. Set your proxy in your browser to localhost:4444, for the http and https settings. It may be different if you use chrome. Now you should be able to access tracker2.postman.i2p/. Don't forget a slash at the end. Your browser won't recognize it as a website without it. You will need the torrent client, i2psnark, which can be accessed on localhost:7657/i2psnark.

This may sound complicated, but the steps to install i2p boil down to:

  1. Download installer
  2. Run installer
  3. Access i2p dashboard through browser
  4. Configure your browser to use i2p
HumanPerson ,

Yeah. I just forward SSH with keys only on a nonstandard port + fail2ban. Plus you can access local only services with an SSH port forward.

That's also why I don't use cockpit. It looks cool, but opens up vulnerabilities for very little benefit.

HumanPerson ,

Not very true. Plenty of gen z still torrent. This seems more like a shitpost.

HumanPerson ,

Gen Z here. Totally agree, though I personally am a bad example for this one. There was someone in my CS class once who I was put into a group with for a project. I needed some code that they had, so I asked them to put it on my flash drive. It was taking a while and eventually I asked why. They didn't know where their IDE saved their code, and were using Windows search to try and find it. They were pretty good at actual programming, logic, etc. though.

HumanPerson ,

I think the teacher specified that we use eclipse, and most who didn't were using vscode. If I recall correctly, they did use eclipse. I don't remember how it handles saves, but I don't think it does that.

HumanPerson ,

It sounds like you're on the right track. As long as you aren't hosting anything too important, just go for it. The only thing to keep in mind is security, which in your case should be fairly simple.

  1. Use common sense: if you never have to enter a password or have a security key to access something, neither does a hacker. You would be amazed how many people host their openhab instances to the internet with no passwords.
  2. Use ssh keys and disable passwords. Ssh keys are sort of like giant passwords that sit in a file and you never have to type in. It is counter intuitive, but it is more secure. A giant key is harder to guess than a password. You can also encrypt your key so you need the key and a password, this is useful for laptops which could be stolen.

For how to learn simple html and css, w3schools is your friend. You can learn all the random stuff people become extremely opinionated on eventually, but don't get overwhelmed by all of it and just do what works for you.

HumanPerson , (edited )

Openhab is a project like HomeAssistant. Both are basically websites that offer pre made smart home functionaility and can run on your own server. Openhab doesn't set a password by default (iirc), and when people expose it to the internet they end up with random bored people in another country somewhere flipping their lights on and off or adjusting their thermostat, though they could also get hacked. The openhab example was one of what not to do. I could have been more clear about that.

Security is an issue that people in this community are fairly opinionated on. Try to build up a practical knowledge of every tool you use (like tools for remotely managing your server). Think about how much access that tool gives you, and how easy it is to get. Ssh gets you basically full access to the system, except for bios level settings and things, but it is generally quite secure, and you can use keys instead of passwords. Cockpit, a remote management tool you can access from your browser, offers you a full terminal, so functionally the same access as ssh. However, hackers nearly got a back door into openssh (ssh is the protocol, openssh is the software on linux that implements that protocol), and cockpit is much less thoroughly looked at. Also cockpit doesn't let you use keys.

You're website will be static, which decreases the complexity and makes it easier to make it secure, so don't worry too much. Here are some links that might be useful:
https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server

https://www.cyberciti.biz/tips/linux-security.html (this one seems to be geared more towards enterprise stuff, so not all of it is relevant, but a decent amount is.)

Edit: This one is good too. I recommend at least skimming it before the one above this. It will help you figure out which of the points in the link above are worth paying much attention to.
https://owasp.org/www-community/Threat_Modeling

HumanPerson ,

Wow, that must have had like 12 shows.

HumanPerson ,

To be fair, most of Netflix is crap that no one watches.

HumanPerson ,

To be fair, Netflix and the others all had to pay licensing fees and whatnot. I think governments should simply ban exclusivity deals so that competition can exist.

Never buy .xyz

I just wanted to post this here because I want to help you all and hurt gen.xyz as much as possible. I had a .xyz domain through njal.la which I used to host jellyfin, homeassistant, and other basic things for friends and family. My domain recently became inaccessible without any notice. After a while of troubleshooting, I found...

HumanPerson OP ,

I bought from njal.la. they were almost entirely unhelpful but pointed me to the site for the tld. It appeared through their wording that gen.xyz who owns the xyz tld was responsible for taking the domain down. I bought my new domain through porkbun tho.

HumanPerson OP ,

No, I'm in that category too lol.

HumanPerson OP ,

I kept it up for more than a year. By friends I mean like 3 people I know in real fucking life, and I made them all set secure passwords. Way to assume the worst about people, it is a very healthy attitude to have.

HumanPerson OP ,

It typically is, and I won't comment on whether mine is, but that isn't enough reason to take it down. I was quite careful about who I gave access to, as well as making sure people had secure passwords. It is highly unlikely that anyone got in and saw any copyright violation before reporting it.

HumanPerson OP ,

I'm on a new domain now anyway. I will be more careful on this one, but I suspect they just didn't look into it. I do really appreciate that you seem to be both knowledgeable and not an asshole. That seems to be a rare combination to find in this thread.

HumanPerson OP ,

Sorry to see you got downvoted for saying something that Reddit did better than Lemmy. I think a lot (though probably not the majority) of lemmings as well as people invoiced in open source can't take criticism, especially of an open source project they care about. It is unfortunate as it negates a lot of the benefits of open source / free software.

HumanPerson ,
  1. The worst that can happen is nintendo sues you for ten times what you have to make an example out of you. More likely is angry isp letters and eventually a fine.
  2. Generally no, but they're better than nothing.
  3. Not that I know of. You can kind of set one up yourself on a vps, but that would probably cost more.
  4. I would recommend airvpn. They are fairly cheap, accept standard credit/debit cards, as well as crypto or even cash (like actual mailed cash, it's kinda crazy).
HumanPerson ,

Haven't heard of private, but I would highly recommend airvpn. You could do qbittorrent nox on an old computer for good seeding. If you want I could elaborate on how, but I can't right now.

I wrote what's before this before looking at private. It looks okay but they definitely make some false claims in their marketing that make me skeptical. They say their VPN can make connection faster than non-VPN, that is only true if being throttled or smthn weird. They say it hides your IP from your ISP, which is impossible. Your ISP loans you an IP, of course they know it. I know they mean it allows you to use an IP that your ISP doesn't know, but they still said it wrong so.. idk im rambling and tired but... yeah. Response.

HumanPerson ,

How much does all that cost? Or rather, does all that cost? I currently torrent but could see getting into Usenet if I don't have to provide payment info.

Tdarr AMD GPU transcoding...how?

I've been trying to setup Tdarr to transcode using my AMD integrated GPU instead of my CPU, but all I'm finding online is people using nvidia cards...well, I don't have one of those, but I have an AMD CPU with integrated gpu, so I wanted to use that, but apparently that's extremely uncommon and I can't find any working...

addressing misconceptions about the recent TunnelVision vulnerability

I've been seeing a lot of confusion around the TunnelVision vulnerability. While I'm no expert, I've done a fair share of research and I'll edit this post with corrections if needed. The goal of this post is to answer the question: does this affect me?...

HumanPerson ,

To add to that, (or maybe you said this, forgive me if so I am sick RN and my brain is not working optimally), there's no such thing as a trusted network, and many ways to trick devices into connecting. Evil twins are clones of nearby networks that you will connect to instead. There's also an attack where your device is actively sending out requests to connect to saved networks, and an attacker can simply respond to that request to get you to connect, and authenticate regardless of what password you send.

HumanPerson ,

Yeah. The school I go to uses MAC based blocking on their network, and it is otherwise an open network.

HumanPerson ,

It's done as a whitelist and they issue devices.

HumanPerson ,

If it is a newer Mac (Apple silicon), asahi is your only option that I know of. It is good but idle and sleep power management leave something to be desired. If not, I would recommend debian. It is stable, so you don't have to worry about an update breaking it right before a class or anything like that.

HumanPerson ,

You don't need a specific distro to compile your code. Just install gcc or javac or whatever you need.

HumanPerson ,

If you are made out of matter stay away from manjaro. Other than that I agree, and would recommend debian slightly over fedora but that is just personal preference. Also I feel like opensuse deserves an honorable mention. Maybe not tumbleweed, but leap could be suitable for a new user and yast rocks.

Edit:
Also vscodium can be good alternative to vscode. It is vscode without Microsoft's tracking, but an exact copy otherwise.

HumanPerson ,

I don't have this problem exactly, but what I would recommend is putting it in a specific separate library. You could even set it up so only your mother's account can access it, and you never have to see it, or you could have it visible but never go to it.

HumanPerson ,

Well it isn't really CPU vs GPU. It is integrated vs dedicated GPU. A CPU certainly can transcode, but not well. A lot of CPUs have integrated graphics which can handle transcoding quite well. I went with an Intel arc a380 because I know quite a lot of people could hit it under some circumstances. For most people though, I would recommend an Intel CPU with quicksync. What you really should spend your budget on IMO is as much storage as you can.

HumanPerson ,

Wow, activitypub got multiverse federation working?

HumanPerson ,

Slow, limited options, but great anonymity and free.

Where can I find obscure cnn video?

The video is an old one about Katrina. I need it for homework. I have tried accessing it from CNN's website but CNN in their infinite wisdom put DRM on the video that is publicly available, and I assume that is why it doesn't work on mull, librewolf, or chromium (all show same error about neon request failed). I looked on the...

HumanPerson OP ,

https://www.cnn.com/videos/tv/2017/11/09/cnngo-soundtracks-episode-103-hurricane-katrina.original-series
It is not playing back on any browser or device, but this is it. I think it could be downloaded from some streaming services but I don't know which.

HumanPerson OP ,

It is on a streaming service. They played it in class but I didn't hear enough.

HumanPerson OP ,

You must be better at searching. I will take a look. Thank you very much.

HumanPerson ,

Damn, what do you need that much RAM for?

HumanPerson ,

I know there are valid use cases for that much, I just always like to check that they didn't just see an LTT video and think they need way more than they do.

HumanPerson ,

I would give them full on Linux, just put parental controls on the router.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • kbinchat
  • All magazines