Just some Internet guy

He/him/them 🏳️‍🌈

  • 1 Post
  • 481 Comments
Joined 2 years ago
cake
Cake day: June 25th, 2023

help-circle
  • Is it directly exposed over the Internet? If you only port forward the VPN on your router, I wouldn’t worry about it unless you’re worried about someone else already on your LAN.

    And even then, it’s really more like an extra layer of security against accidentally running something exposed publicly that you didn’t intend to, or maybe you want some services to only be accessible via a particular private interface. You don’t need a firewall if you have nothing to filter in the first place.

    A machine without a firewall that doesn’t have any open port behave practically the same from a security standpoint: nothing’s gonna happen. The only difference is the port showing as closed vs filtered in nmap, and the server refusing to send any response not even a rejection, but that’s it.



  • I was totally above 13 or had parental consent when I went to forums in the early 2000s. I totally wasn’t actually 9.

    It’s wild to me this concept disappeared? It’s literally never been a good idea to reveal you’re a minor online. The laws are against you. Companies don’t want to deal with a curated minor experience, even less so in the current times. If they do, you get the crappier version of things.

    The worst thing to happen to the Internet is when Facebook normalized using your real name and real info online.


  • It’s still not ideal but you can at least set a charge limit and set it really low like 50% which is about where those batteries degrade the least.

    But yeah using a lithium ion battery as a capacitor ain’t great. BMS is just gonna charge it some, let it drain, charge it some, let it drain, repeat over and over again. There’s a reason store phones tend to become spicy pillows so much after a while of being on display always on always running some animation.

    This is already what happens when you leave it plugged in to charge overnight, except it uses very little power so the battery only gets topped off a handful of times.

    The heat caused by the busy CPU would also be a rather big problem for the battery.


  • It’s not impossible, been running my own email server for about 10 years and I inbox pretty much everywhere. I even emailed my work address and straight to inbox. I do have the full SPF, DKIM and DMARC stuff set up, for which I get notices from several email provides of failed spoof attempts.

    Takes a while and effort to gain that reputation, but it’s doable. And OVH’s IPs don’t exactly have a great reputation either. Once you’re delisted from most spam databases / old spam reputation is expired, it’s not that bad.

    Although I do agree it’s possibly one of the hardest services to self host. The software to run email servers is ancient and weird, and takes a lot to set up right. If you get it wrong you relay spam and start over, it’s rough.



  • As a starting point. Are there any hardware recommendations for a toy home server?

    Whatever you already have. Old desktop, even old laptop (those come with a built-in battery backup!). Failing what, Raspberry Pis are pretty popular and cheap and low power consumption, which makes it great if you’re not sure how much you want to spend.

    Otherwise, ideally enough to run everything you need based on rough napkin math. Literally the only requirement is that the stuff you intend to run fits on it. For reference, my primary server which hosts my Lemmy instance (and emails and NextCloud and IRC and Matrix and Minecraft) is an old Xeon processor close to a third gen Intel i7 with 32GB of DDR3 memory, there’s 5 virtual machines on it (one of which is the Lemmy one), and it feels perfectly sufficient for my needs. I could make it work with half of that no problem. My home lab machine is my wife’s old Dell OptiPlex.

    Speaking of virtual machines, you can test the waters on your regular PC by just loading whatever OS you choose in a virtual machine (libvirt if you’re on Linux, VirtualBox or VMware otherwise). Then play with it. When it works makes a snapshot. Continue playing with it, break it, revert to the last good snapshot. A real home server will basically be the same but as a real machine that’s on 24/7. It’s also useful to test things out as a practice run before putting them on your real server machine. It’s also give you a rough idea how much resources it uses, and you can always grow your VM until it fits and then know how much you need for the real thing.

    Don’t worry too much about getting it right (except the backups, get those right, verify and test those regularly). You will get it wrong and eventually tear it down and rebuild it better what what you learn (or want to learn). Once you gain more experience it’ll start looking more and more like a real server setup, out of your own desire and needs.


  • Max-P@lemmy.max-p.metoSelfhosted@lemmy.worldStarting to self host
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    18 days ago

    I feel like a lot of the answers in this thread are throwing a lot of things with a lot of moving parts: Unraid, Docker, YunoHost, all that stuff. Those all still require generally knowing what the hell a Docker container is, how to use them and such.

    I wouldn’t worry about any of that and start much simpler than that: just grab any old computer you want to be your home server or rent a VPS and start messing with it. Just pick something you think would be cool to run at home. Anything you run on your personal computer you wish was up 24/7? Start with that.

    Ultimately there’s no right or wrong way to do things. It’s all about that learning experience and building up that experience over time. You get good by trying out things, failing and learning. Don’t want to learn Linux? Put Windows on it. You’ll get a lot of flack for it maybe, but at the very least over time you’ll probably learn why people don’t use Windows for server stuff generally. Or maybe you’ll like it, that happens too.

    Just pick a project and see it to completion. Although if you start with NextCloud and expose it publicly, maybe wait to be more comfortable with the security aspect before you start putting copies of your taxes and personal documents on it just in case.

    What would you like to self host to get started?




  • Nope. The protocol is way too public for shadowbanning.

    You can be banned by other instances than your home instance, when that happens no new post/comment from you will federate to that instance in particular but the others still sees it as normal.

    For example, I could ban you on my instance, and I wouldn’t see anything from you ever again, but my instance would be the only instance to see that ban.

    If you get banned from LW or lemmy.ml then a lot of people won’t see you so that could definitely feel like a shadow ban, but there’s nothing shadow about it you can see it in the mod log.


  • Because phones are a mess of out of tree patches specific to that phone model with zero hope of being upstreamed into the Linux kernel without a cleaner rewrite because it’s not good, it’s made to work and nothing more. They do stuff like just copy pasting the drivers into the project for the next chip, make some changes, and now you have several versions of the same driver for a whole bunch of slighly different chips. The community can’t keep up with that or make it generic enough.

    It’s improved but companies like Qualcomm also used to basically drop the code to the manufacturers when the chip launches and then move on with little maintenance for the code and stop maintaining the code once the chip is not produced anymore. Manufacturers don’t have the expertise to maintain that forever nor the will, so you end up with a kernel that keeps aging and isn’t keeping up with Android and the community hasn’t been successful in integrating it all either.

    Google’s been pushing hard for this to improve but they’re the only ones to even care. Samsung and others would much rather sell you a new phone.

    There’s also the problem that phones don’t really have a BIOS, the kernel is expected to just know where the devices are via the device tree. So each phone needs a specially built kernel for it too.

    Projects like LineageOS often manage to push those phones a couple versions longer but eventually interest dies as well because of kernel pains.


  • Yeah the best campaigns I’ve seen for the Fediverse were reactionary to something happening on big socials: Lemmy when the API fiasco happened, Mastodon when Elon bought Twitter, recently Pixelfed to replace Instagram, and Loops the last 2 weeks before TikTok was about to get banned.

    People don’t change because it’s better, they change because they’re pissed off at their current platform.


  • Good luck with “exhaustive” because people have different unique reasons to come to the fediverse. It would be a very long list.

    For the average user I’d approach it with points that affects everyone:

    • We can’t have a Twitter-style take over
    • We can’t have a Reddit API disaster
    • It’s distributed so while parts of the fediverse come and go, you’ll never lose the platform as a whole.
    • It’s distributed geographically so one hostile country can’t silence information from other countries like Facebook and Twitter are doing.
    • No algorithms designed to keep you scrolling forever
    • No ads or commercial content being pushed by the algorithm
    • Loads of choices for instances and moderation style for everyone’s taste.
    • Users get to choose how they want to browse and with which apps: you’re not stuck with the latest crappy redesign you hate. You’ll never be forced to have reels and stories in your feed if you don’t want that.
    • Not controlled by big corporations like Meta and Google, but rather the community for the community.
    • If you have sensitive communities you can own the servers to ensure it’s survival in situations where Facebook would immediately ban that page/group.
    • No bullshit AI products shoved in your face like Grok or Reddit Answers.
    • You as a user are in control of what you see and don’t see.
    • No advertiser friendly content policies forcing you to use stupid words like “unalive”, “pewpew”, “corn” or algorithmic downprioritization because you swore.
    • If you prefer to browse Instagram-like, you still get to see Twitter-like post, and you friends can see your photos from a Twitter-like interface. Or you can have a Twitter-like interface and interact with Reddit-like posts on Lemmy.

    It’s harder to onboard and figure out by the common people but it would be the final platform switch. You may move instances over time but you will never be left looking for a new platform because the old one enshittified. You just move to an instance that hasn’t, done.


  • Max-P@lemmy.max-p.metoLinux Gaming@lemmy.worldPewDiePie has switched to Linux
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    4
    ·
    1 month ago

    There hasn’t been a history of behaviour resembling that of the ideals of Nazis from Felix, especially not enough to say that he partakes in those ideologies. Thankfully his "dark humour " phase ended years ago and he isn’t doing these things anymore, so completely estranging him from anything for it is quite extreme, especially when I have seem some of this sentiment on Lemmy myself. Nor do I think he’s a horrible person for edgy comments and actions that most of us have definitely done one way or another on the Internet.

    That. He would have started YouTube at 20 and the guy is now 35. That would have happened when he was 28.

    People change, people learn. That one in particular hit him hard and probably led to a lot of self reflection and all that stuff.

    We have actual nazis to deal with that actually think it’s a good idea. There’s a huge difference between a bad dark joke and actually supporting facism. How one responds after such an incident matters a lot.

    Meanwhile Elon did a literal nazi salute and isn’t even denying it nor apologizing and doubling down on it.

    I had my share of hitler jokes, but they were told on a context when it was seen as poking fun at a solved issue of the past in a very progressive area, when nobody thought we’d be dumb enough to witness facism ever again. Context and meaning are both very important before labeling someone for life.


  • It works so well, if you stretch a window across more than one monitors of different refresh rates, it’ll be able to vsync to all of them at once. I’m not sure if it’ll VRR across multiple monitors at once, but it’s definitely possible. Fullscreen on a single monitor definitely VRRs properly.

    With my 60+144+60 setup and glxgears stretched across all of them, the framerate locks to something between like 215-235 as the monitors go in and out of sync with eachother, and none of them have any skips or tears. Some games get a little bit confused if the timing logic is tied to frame rate, but triple monitor Minecraft works great apart from the lack of FOV correction for the side monitors.

    This is compositor dependent but I think most of the big compositors these days have it figured out. I’m on the latest KDE release with KWin.




  • but I’m curious if it’s hitting the server, then going the router, only to be routed back to the same machine again. 10.0.0.3 is the same machine as 192.168.1.14

    No, when you talk to yourself you talk to yourself it doesn’t go out over the network. But you can always check using utilities like tracepath, traceroute and mtr. It’ll show you the exact path taken.

    Technically you could make the 172.18.0.0/16 subnet accessible directly to the VPS over WireGuard and skip the double DNAT on the game server’s side but that’s about it. The extra DNAT really won’t matter at that scale though.

    It’s possible to do without any connection tracking or NAT, but at the expense of significantly more complicated routing for the containers. I would do that on a busy 10Gbit router or if somehow I really need to public IP of the connecting client to not get mangled. The biggest downside of your setup is, the game server will see every player as coming from 192.168.1.14 or 172.18.0.1. With the subnet routed over WireGuard it would appear to come from VPN IP of the VPS (guessing 10.0.0.2). It’s possible to get the real IP forwarded but then the routing needs to be adjusted so that it doesn’t go Client -> VPS -> VPN -> Game Server -> Home router -> Client.