Is this a genuine question or a rhetorical one?

Not to be an asshole but maybe this is the wrong question then.

Maybe the real question is “should we endorse this in the FOSS community” or “how do we handle things like this”.

Which absolutely is a fair question.

Interesting, I might check that out.

Leslie Nielsen is an absolute legend as well.

Does netbird run on wg on on ovpn as well? Maybe that’s an option…

Sethbling comes to mind

Man I would love a Linux OS as an alternative to android that’s workable day-to-day on my phone.

Not only this, I am increasingly under the impression the abrupt change of direction under trump has a paralyzing effect on all branches of government. And it’s good when they use this time to isolate his policies from most of the country. But it’s bad when our legal branch stops doing lots of normal law things.

Truly as far as I know there is no case law for this to date.

I thought about this for a while but I have no clue what the current direction is.

Essentially stealing data and putting them in datasets is illegal. AI models might be illegal, if the court considers them legally functionally the same. But if they don’t, they could meet any number of new legal definitions and that gets us back to “idk”. What is funny is because you would technically do the same copyright infringement that the AI companies do (if it gets ruled that way), these companies are essentially arguing for you, and so you could ride on the coat tails of corpo lawyers.

But yeah, it’s complicated.

I think you are conflating the Flock cameras with other things the police do.

On a flock camera they can only see what the camera sees.

They also put up wifi sniffers (stingray, imsi catcher) that can capture everything that’s sent and / or received to mobile hotspots. Essentially an endless mitm attack. They can do that with a court order.

They can only enter your phone with a search warrant. Practically this only happens when the police are already suspicious of you. Technically this can happen to anyone and everyone should keep that in mind.

But no, they cannot look into your cellphone from a flock camera. In fact these cameras are probably quite bad for capturing anything else other than number plates.

I was gonna say, the minimum at minimum. That’s around 13€/h for my country. Now I would hope depending on the restaurant they would also be paid more, maybe 16€/h or something, because being a server can be extremely taxing. Depending on the place, people can be awful.

I mean it kinda looks like that’s by design currently. It’s an indexer for your corners of the web, not a search aggregator to find new ones.

Yeah this screams alternate service. And pretty sure at some point alternate service is also allowed over email, mail, or other means.

“is it happiness or sufferings?”

Or maybe it’s just a big cloud of gas, compacting into mass, exploding and growing into a universe. Maybe we think we are so incredibly grant but we’re just part of a historic cause and effects chain that’s still going. Maybe we want a reason but there is none and what we really want is the feeling of making a lasting impression on the world, or having something to work towards. But it’s all just happenstances and probabilities.

I’m sure you can find a thousand answers but never underestimate the power of Occam’s razor if you wanna find the most probable one.

After installing tailscale with my Headscale server, I just left it as is. Maybe people in the comments can chime in but if you expose only your VPN server or broker (Headscale), you kinda narrowed down your attack vectors and a VPN itself is really solid. From my basic knowledge, it’s the server and client which are the bottleneck at that point, but there’s only so much you can do and if you continuously update both and maybe stay on stable / ltsc branches, you kinda did everything.

I guess there’s something to say about the encryption algorithms used. What I remember from back in the day is everything elliptic curves that’s common is quite good so if you see “ECDSA” / “ECDH” you should be fine. RSA unfortunately is not that great anymore.

I forgot to mention that one because I kinda thought it belongs with radmin and hamachi, but it’s my choice as well currently.

I am using it with my own Headscale though, so add a domain to that as well.

And I finally need to switch my vaultwarden to work over tailscale & LAN finally, it’s a huge security risk to expose that one.

I added a reference to your comment

yeah I forgot that one. I had to rush the comment a bit.

That’s the whole point of a domain. Your IP changes every now and again you need people to know where to reach you. You give them a domain, and you configure the name records so that the domain always points to the right IP address.

Your options:

• dynamic IP - you keep your setup as is and just periodically tell them the new IP you’re on. Annoying and exposed
• static IP - you buy a static IP (from your ISP) and share it with your friends once. A little bit less annoying and still exposed
• you use a VPN like hamachi or radmin - your friends install the software, they look for you IP in there, you’re done - very secure but also very annoying
• you buy a domain - you have to configure an IP updater like ddclient or similar, then you jellyfin should be reachable - least annoying for your friends but also slightly less secure

Domain is the cleanest option.

I am telling you how annoying it is because that’s how likely your friends are to adopt it and how secure it is because depending on your country you are doing something illegal and you really don’t want anyone to find out and you gotta keep it updated more often if you don’t want people to exploit it. There’s an endless supply of very smart people out there who use known bugs to target public services.

Edit: I forgot DDNS, see below comments.

Duplicati is at it’s base just a fancy ui for backups as opposed to custom bash scripts.

It does support s3 storage, SFTP, ftp, and a bunch of other stuff so this might actually be on point for your off-site backup design.

Of course off-site backups are superior. If my home burns down I’m fked. I do use different hdds though, so at least there’s some security isolation in that. Also if one of them breaks, the other one doesn’t necessarily.

I have different vms which all write to an smb mount.

Then I have another VM that runs duplicati and mounts that smb share, but also another one just for the backups. And only this duplicati container has access to the backup share, which isolates my backups for security reasons. The only thing still involved and able to read and manipulate my data is the router which can see all the traffic.

Now idk if this is the best setup, but it feels secure to me and it works for me. Maybe more experienced people can chime in to agree or disagree.