Yeah you got me

I used to like treyarch btw

Ngl in the last 15 years I have unfortunately been using windows the troubleshooting function never worked, not even once. And it’s not like I didn’t have issues, there were plenty; plenty stupid ones as well.

8/10 Lämp

Ah

Sauce drawer

Classic

This kind of implies that this is the social engineering equivalent of worm-like malware in Cybersecurity.

That’s curious.

Mhm doesn’t sound like it’s working

That’s one way to waste 9 million on a useless campaign

Anyone who has a family member that’s deep into conspiracy theories, you know that it’s impossible to “de-conspiracy” someone through arguments. People do not change their minds in a debate. The best you can do is show them a new perspective.

After installing tailscale with my Headscale server, I just left it as is. Maybe people in the comments can chime in but if you expose only your VPN server or broker (Headscale), you kinda narrowed down your attack vectors and a VPN itself is really solid. From my basic knowledge, it’s the server and client which are the bottleneck at that point, but there’s only so much you can do and if you continuously update both and maybe stay on stable / ltsc branches, you kinda did everything.

I guess there’s something to say about the encryption algorithms used. What I remember from back in the day is everything elliptic curves that’s common is quite good so if you see “ECDSA” / “ECDH” you should be fine. RSA unfortunately is not that great anymore.

I forgot to mention that one because I kinda thought it belongs with radmin and hamachi, but it’s my choice as well currently.

I am using it with my own Headscale though, so add a domain to that as well.

And I finally need to switch my vaultwarden to work over tailscale & LAN finally, it’s a huge security risk to expose that one.

I added a reference to your comment

yeah I forgot that one. I had to rush the comment a bit.

That’s the whole point of a domain. Your IP changes every now and again you need people to know where to reach you. You give them a domain, and you configure the name records so that the domain always points to the right IP address.

Your options:

• dynamic IP - you keep your setup as is and just periodically tell them the new IP you’re on. Annoying and exposed
• static IP - you buy a static IP (from your ISP) and share it with your friends once. A little bit less annoying and still exposed
• you use a VPN like hamachi or radmin - your friends install the software, they look for you IP in there, you’re done - very secure but also very annoying
• you buy a domain - you have to configure an IP updater like ddclient or similar, then you jellyfin should be reachable - least annoying for your friends but also slightly less secure

Domain is the cleanest option.

I am telling you how annoying it is because that’s how likely your friends are to adopt it and how secure it is because depending on your country you are doing something illegal and you really don’t want anyone to find out and you gotta keep it updated more often if you don’t want people to exploit it. There’s an endless supply of very smart people out there who use known bugs to target public services.

Edit: I forgot DDNS, see below comments.

Duplicati is at it’s base just a fancy ui for backups as opposed to custom bash scripts.

It does support s3 storage, SFTP, ftp, and a bunch of other stuff so this might actually be on point for your off-site backup design.

Of course off-site backups are superior. If my home burns down I’m fked. I do use different hdds though, so at least there’s some security isolation in that. Also if one of them breaks, the other one doesn’t necessarily.

I have different vms which all write to an smb mount.

Then I have another VM that runs duplicati and mounts that smb share, but also another one just for the backups. And only this duplicati container has access to the backup share, which isolates my backups for security reasons. The only thing still involved and able to read and manipulate my data is the router which can see all the traffic.

Now idk if this is the best setup, but it feels secure to me and it works for me. Maybe more experienced people can chime in to agree or disagree.

What a dog shit take damn

Even someone who likes AI knows games don’t write themselves.

I’m really trying to think if his comments are aimed at investors for bringing in new funding and consolidate AI games on his platform but even he should know that just makes him the AI guy people don’t wanna associate with. It’s puzzling that I don’t get the strategy here.

Yeah fuck that. Everyone out here just trying to eat. I’m scared of not having enough money to live but fuck competition mindset, I’m helping people and placing ladders behind me. If we democratize knowledge we stop assholes from hoarding it.

I checked whether I can access the data on my disk with master password and I can, so I just setup periodical disk backups. Good enough for me, idk if that’s what you mean with emergency access though.

I have vaultwarden on my home server and I usually visit it through it’s Webinterface because the bitwarden addon for my browser breaks all the time with my vaultwarden instance.

I also have tailscale and a Headscale server so access should be VPN level secure.

I’m gonna be honest, it’s quite inconvenient sometimes but it’s an ok working setup.

The addon issue gives me the most headaches because it means I have to login like 10 times into the web ui and then search through the passwords every time I am building stuff on my servers.

That’s really interesting

I hope the union representation they get will understand the very unique way wikipedia is structured so they don’t completely destroy the financing model wikipedia currently lives under.

Damn that’s one way to democratize AI.

But spore was awesome though

Nice