Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)N
Posts
1
Comments
144
Joined
2 yr. ago

  • people are still on windows?

  • If the client was open source, it could be verified by inspecting this source alone. To my understanding, the clients do real end to end encryption. This is the good part. They also have some functionality to re-encrypt the data or export the secret key to let new peers take part, or so i guess. This is how your web browser can also read them after you peer it up. Now there might or might not be a function in the client, where meta can request the private key or re-encryption. This is really hard to figure out without having the source code.

  • Why not both?

  • Once the dump was complete, we transferred it to the new server using rsync over SSH. With 248 GB of compressed chunks, this was significantly faster than any other transfer method:

    rsync -avz --progress /root/mydumper_backup/ root@NEW_SERVER:/root/mydumper_backup/

    that's a bit weird. rsync -z is compression, but they did compress in the mydumper export already, so this is a slow down (or neutral at best). also in my experience rsync is as fast as scp is as fast as piping anything to the tcp port on the destination etc. rsync does not win for speed but for enabling resume so to say...

    besides this: nice read!

  • Good luck trying to make money then. Sure, people will by-pass using crypto, tor, ... But this still captures 98% of the population.

  • and less than two arms!

  • IPv6

    Jump
  • GUA?

  • I just use some dnsbl. Spam tagging seems pointless to me, as i would sift through the spam anyways to .make sure not to miss anything.

  • Its never transmitted, can be stored in HSMs. Anything that's handled wrong is unsafe

  • dont think so. what i gatherd passkeys is a public/private key scheme, much like pubkey auth in ssh logins.

  • Deleted

    Permanently Deleted

    Jump
  • Deleted

    Permanently Deleted

    Jump
  • There's nothing wrong with rainbow tables. Printing them sounds a bit excessive, though.

  • Deleted

    Permanently Deleted

    Jump
  • I feel unable to judge without seeing the actual table.

  • I love it, have serial (rj45), no more need for monitor/keyboard setup in my "server room". I have some raspberry-pi in my "family"-vlan, so i can always ssh/serial on to my proxmox. considering my secret superpower is "locking myself out from my firewall" this is really comfortable.

    I'm just running debian trixie. I really don't like openwrt and pfsense. I deal a bit with openwrt from time to time on embedded devices, APs or the like... just incredibly complicated to configure the firewall, which comes with like 28 default policy I would not know why I need those :D

    I like the many ports. Internally I have everything over one port with plenty of VLANs, but I like my ISPs directly connected to cut out the switch and leaves my firewall as sole single point of failure. at least for internet reachability of my services.

    my current project is integrating the multi homed wan and vpn choices into my home assistant. sadly it seems to be complicated to to route specific traffic (like .*bbci?.co.uk) via specific tunnels. sni detection is broken thanks to ech. Not sure if ech is even employed by bbc (akamai/amazon/fastly), but if i try to policy-route this traffic i cant watch :-( have to set the whole device to the VPN and it works fine.

  • I believe a recent raspberry pi would do easily. But it all depends on your requirements regarding diskspace, disk-io, network interfaces, cpu.

    i personally run some china box for this: https://de.aliexpress.com/item/1005006970782594.html 5x2.5GBE and dual-disk support. so i have proxmox on zfs"raid" there, one container is my firewall that does more or less what i described above, but runs a ton of services.

    I had an Intel NUC before for that, but it broke.

  • He can keep it. Just degrade the original, obviously crap router to a modem. If it lacks this functionality then create a transfer net between it and your server. Connect your internal networks to your box, run your own dhcpd if you need. Get in control of your network. Have you box do the routing, masquerading, translations.

    If you need the WiFi of your router, this gets harder, but can still be made to work by defining a 2nd network on the link between isp-router and user controlled router. If not supported by router then via manual IP config of clients.this does usually not work in modem setups but with the transfer network only. Port forwarding on ISP router needs to be possible in all scenarios with transfer net.

    Sounds like a fun project and possibly a deeper dive into selfhosting territory:)

  • if you can't enforce copyright, how do you stop others from giving it away for free and editing it, making it foss..?

  • As I read it, you can't use it as modifier as it does not ever release. So bringing up a menu directly works, but copilot+x is troublesome to map

  • The way you compare the two groups initially gave me the impression you try to give an objective comparison :D