tuhriel @ tuhriel @infosec.pub

Posts

0

Comments

58

Joined

2 yr. ago

Yep just swapped over from a self hosted solution with gitlab and sublime.. But that was to restrictive and the overall experience wasnt really good...

I then found a post somewhere on lemmy a post abotu PKMS and what people are using... One was obsidian... So I tried it and I'm really happy

Edit: I saw some comments about some missing self hosting. Since the notes are saved as standard md files you easily ca sync them with whatever you want... I set it up with my synology NAS and DS Drive, but any tool which can sync two-ways should be fine

That sounds like a solvable issue for me. The upgrade health check tells you exactly what prevents you from upgrading.

My system gets flagged as not applicable as wellndue to secire boot not being active. I could resolve it by enabling it, but since I still have an old MBT Id need to switch that aswell. Which I procastinate, as I won't get nagged to upgrade to win11

I never completely reset everything in the last few years, although I upgraded some components and did some Windows reset. The MBR never was part of it...

Unfortunately, A not too small amount answered no when I aked them...

Synology NAS with DS Photo and their app on my phone... And then I activate photo backup in there And to keep Connected i use a wireguard vpn

Alternatively I justt saw, that proton drive now supports photo backup... Maybe I'll give it a spin

There are always two opinions: mine and the wrong one

Yep, got the same experience as you. Not with nvidia drivers bit my huawei laptop had a broken audio driver where only half of the speakers worked.... Unless you plugges in a headphone... Then the headphone and the other half of the speakers worked.... All in all, it took me at least a da to get that working

Also, still no fingerprint support....

You can do a lot with opensource and tailor it to your need, but you have to invest a lot of time... And that's what a lot of people don't have

It can't bypass my network DNS if only my DNS server is allowed to send out via port 53.

It's really fun to see how some devices are completely panicking. (I only have some chromecast music devices which do not need any internet) Anyway, I do hate that there are manufacturers who hardcode a dns into MY devices.

For the time I'm outside my network I do have a VPN which allows me to acces my pi-hole from outside (I never felt that the speed or latency is especially low)

There are even routers which allow you to re-route specific ports to specific devices. So, even if the device wants 8.8.8.8 the firewall would reroute it to my dns server

If you want a privacy friendly option that works from in/and outside your network without all the hassle above I can also recommend proton VPN which also procides tracker and ad blocking.

Yep that would be a good alternative...I don't have an official domain for it, so I went the self-signed way

Which enables me to provide tls/https for all my local services. And it was a fun experience to learn

Jep I hate the, "you don't own anything anymore" mentality... There are some valid reasons to actually provide a subscription, but most of the times it should just be a one time payment

I once had a valid office key... But since I reset my computer to often the amount of "free activations" was used up... There where so many hoops to jump through to re-activate it that it was easier to get a cracked key to activate my office version... That's just sick

Not the one who wrote initially, but i have the same setup (mostly).
I went with a self signed certificate. So the server is running with a certificate i have signed with my own certification authority certificate (ca-cert) .
That means I have to install the ca-cert on all devices to get vaultwarden to accept it.

The alternative is a let's encrypt cerrtificate, which are free, but you need to open port 80 (and another one if I remember correctly) for it to work (at least every 3 months)

And even better: wireguard configs as well

It still might help if you point it out to the orginsator... Especially if you makebit clear to them that their copyrighted slides, etc. will be part of that aswell

Proton VPN does have tracking and ad blocking integrated, not sure how good it workes as i usually use my pihole

Ibrun my own gitlab instance where i have a repository with all my configs, scripts etc.
As well as a wiki that contains the admin guide with (hopefully) all the relevant infos in form of text and PlantUML graphs.

The nice thing is.. You can just 'code' the diagrams and use a PlantUML instance to render the graphs live

Also, most banks (and other service provider) add additional fees for counter service, since you can do it online...

Not talking about the "opening hours"...

The problem I face currently is that you get some black liading screens from time to time if you use the microG service to login

The issue has to do something google did and now there seem to be auth issues. The authors of microG don't want to fiy it, as the ReVanced isecase is not exactly what they made their service for.

https://github.com/microg/GmsCore/issues/1870

https://github.com/inotia00/VancedMicroG/releases/tag/v0.2.27.230755

I currently live with it, but its kind of annoying. Should work fine if you don't want to login though

The problem with ads is not a few ads here and there, it's how it negatively impacts every interaction with those sites:

• ads that load in later than the rest of the page, because they first need to finish the auction of who gets to show their ads... And bam I again missklicked the link because the whole fucking page got shiftet down a notch
• needing a short guide how to do something? Yeah first look at these five (5!) ads which are longer than the guide you want to watch, except... The freaking algorithm favors long videos, so the 30 second guides get padded to over 10min...(with more ads inbetween)
• these ads we show you, yeah they might contain some java script... So you screen them, correct?... Nonono, we can't do that at this scale!
• hey google where can I download this free tool?... Here is a list with download links... Ehh, the first five are ads and lead to some crazy scam site. Don't you check what you deliver as ads.?.... Nonono we can't do that at this scale
• look at this ad for this shady mobile again for the 25ths time today... But youtube that game doesn't look at all like in this ad!.... Thanks for your report... Here's the same fucking ad again!

There was also a report recently that google also screwed their customers (those companies who pay for the ads) where google showed ads as in-stream ads in some auto-running videos in the background.

The whole industey is just broken. Present me with non-intrusive, static ads served from your own site and nobody bats an eye (also ad blockers are a non-issue then)