TCB13

joined 2 years ago
[–] TCB13 1 points 3 days ago

Sorry, I misread your first comment. I was thinking you said "VPS". :)

[–] TCB13 2 points 3 days ago

because you want to learn them or just think they’re neat, then please do! I suspect a lot of people with these types of home setups are doing it mostly for that reason

That's an interesting take.

[–] TCB13 1 points 3 days ago (3 children)

Are you sure? A big bank usually does... It's very common to see groups of physical machines + public cloud services that are more strictly controlled than others and serve different purposes. One group might be public apps, another internal apps and another HVDs (virtual desktops) for the employees.

[–] TCB13 1 points 3 days ago (3 children)

Kinda Scenario 1 is the standard way: firewall at the perimeter with separately isolated networks for DMZ, LAN & Wifi

What you're describing is close to scenario 1, but not purely scenario 1. It is a mix between public and private traffic on a single IP address and single firewall that a lot of people use because they can't have two separate public IP addresses running side by side on their connection.

The advantage of that setup is that it greatly reduces the attack surface by NOT exposing your home network public IP to whatever you're hosting and by not relying on the same firewall for both. Even if your entire hosting stack gets hacked there's no way the hacker can get in your home network because they're two separate networks.

The scenario one describes having 2 public IPs, a switch after the ISP ONT and one cable goes to the home firewall/router and another to the server (or another router / firewall). Much more isolated. It isn't a simple DMZ, it's literally the same as two different internet connections for each thing.

[–] TCB13 -2 points 4 days ago* (last edited 3 days ago) (2 children)

~~If you're using a VPS from Amazon, Digital Ocean or wtv you're by definition not self-hosting. Still dependent on some cloud company, so not self-hosting in a pure sense...~~ misread comment.

[–] TCB13 0 points 5 days ago* (last edited 3 days ago) (4 children)

~~Is that still... self-hosting? In that case you would be hosting in a cloud company so... ~~

misread comment.

[–] TCB13 2 points 5 days ago* (last edited 5 days ago)

I'm curious is there documented attacks that could've been prevented by this?

From my understanding CPU pinning shouldn't be used that much, the host scheduler is aware that your VM threads are linked and will schedule child threads together. If you pin cores to VM's, you block the host scheduler from making smart choices about scheduling. This is mostly only an issue if your CPU is under constraint, IE its being asked to perform more work than it can handle at once. Pinning is not dedicated, the host scheduler will schedule non-VM work to your pined cores.

I'm under the impression that CPU pinning is an old approach from a time before CPU schedulers were as sophisticated, and did not handle VM threads in a smart manner. This is not the case anymore and might there be a negative performance impact with it.

[–] TCB13 3 points 5 days ago

If there’s an exploit found that makes that setup inherently vulnerable then a lot of people would be way more screwed than I would.

Fair enough ahah

[–] TCB13 3 points 5 days ago

the more complicated it gets the more likely you are to either screw up unintentionally, or get annoyed at it, and do something dumb on purpose, even though you totally were going to fix it later. (...) Pick the one that makes sense, is easy for you to deploy and maintain

This is an interesting piece of advice.

Anyway maybe I wasn't clear enough, I'm not looking to pick a setup, I've been doing 2.B. for a very long time and I do work on tech and know my way around. Just gauging what others are doing and maybe find a few blind spots :).

Thanks.

[–] TCB13 1 points 5 days ago (2 children)

What’s your concern here?

No specific concern, I do like in scenario 2, option B. I was just listing the most common options and getting feedback on what others think about those.

I personally believe the setup 2B is more than enough if a nation state isn't after you, but who knows? :)

[–] TCB13 1 points 5 days ago (3 children)

So you do trust LXC isolation to the point of thinking that it would be close to impossible to compromise your host?

[–] TCB13 -2 points 5 days ago (7 children)

are we talking what’s good enough security for hosting an anime waifu tier list blog or good enough security for a billion dollar corporation?

You tell me. :)

What would you do/trust in both situations?

 

cross-posted from: https://lemmy.world/post/14398634

Unfortunately I was proven to be right about Riley Testut. He's yet another greedy person barely batter than Apple. After bitching to Apple to remove GBA4iOS from the App Store he's now leveraging Delta to force people into his AltStore.

Delta has finally made its way to the App Store. Additionally, the Delta developer has also published their alternative marketplace, AltStore, in the EU today.

If you're in the EU you'll only be able to get Delta on the AltStore and that requires:

This is complete bullshit he could've just launched Delta on the App Store in Europe as well but he decided not to.

Thanks Riley Testut for being a dick to the people that actually forced Apple into allowing alternative app stores in the first place.


Github issue related to this dick move: https://github.com/rileytestut/Delta/issues/292

 

Unfortunately I was proven to be right about Riley Testut. He's yet another greedy person barely batter than Apple. After bitching to Apple to remove GBA4iOS from the App Store he's now leveraging Delta to force people into his AltStore.

Delta has finally made its way to the App Store. Additionally, the Delta developer has also published their alternative marketplace, AltStore, in the EU today.

If you're in the EU you'll only be able to get Delta on the AltStore and that requires:

This is complete bullshit he could've just launched Delta on the App Store in Europe as well but he decided not to.

Thanks Riley Testut for being a dick to the people that actually forced Apple into allowing alternative app stores in the first place.


Github issue related to this dick move: https://github.com/rileytestut/Delta/issues/292

 

Boas,

Como muitos aqui sou cliente da Vodafone (móvel apenas) há muitos anos e gostava de deixar os meus comentários sobre o que tenho visto a acontecer com a operadora na última década. Este post vai ser escrito assim meio em modo "rant" e começou porque a Vodafone ainda não tem um serviço Wifi Calling.

Estamos em 2024 e a Vodafone continua a não disponibilizar um serviço bastante útil que está disponível nas outras operadoras nacionais. Este serviço não é apenas um capricho, é importante para todos os clientes que vivem em zonas com fraca cobertura até muitas vezes para situações de emergência (como eu muitas vezes).

Relembro que esta tecnologia está disponível no iPhone desde 2013 tendo sido adotada em massa na maior parte dos países a partir de 2015.

Há coisas que eu não consigo compreender no serviço da Vodafone, ou melhor, na gestão e nas prioridades da empresa, em resumo:

  • Serviço Wi-Fi Calling que continua a não existir em 2024: como já disse, um serviço essencial a quem tem fraca cobertura da rede móvel e com a vantagens clara para a Vodafone de reduzir a quantidade de chamadas a serem transportadas pela rede móvel. Claro que a primeira operadora a ter isto foi a NOS porque com a fraca rede que tinham quanto menos chamadas pela infraestrutura móvel melhor;
  • Cobrança do serviço Vodafone OneNumber (eSIM para smartwatches): para além de terem demorado anos, mais do que a NOS ainda cobram 5€/mês pelo serviço. Este serviço deve ser gratuito uma vez que é mais uma forma de incentivar os clientes de smartwatches a consumir minutos/dados;
  • "Qualidade" de áudio das chamadas: uma chamada entre dois números da Vodafone tem menor qualidade de audio do que uma chamada entre qualquer outros dois números de outra operadora nacional. Até uma chamada de WhatsApp ou Facetime é hoje bastante superior a uma chamada pela rede Vodafone, noto que estamos a falar de uma chamada VoIP com compressão, transmitida pela Internet e mesmo que seja realizada em 4G e tenha de atravessar toda a infraestrutura da Vodafone até chegar a algum datacenter e retornar para outro cliente continua a ser superior;
  • Serviço cartão Duo Multi-SIM: permite utilizar de forma alternada dois equipamentos e apenas isso. O serviço da MEO permite utilizar em simultâneo dois equipamentos e podemos definir com o envio de um SMS qual dos equipamentos receberá chamadas. Realizar chamadas ou utilizar a internet fica disponível em simultâneo em ambos. Um serviço como o da MEO era mais uma boa forma da Vodafone incentivar o consumo, mas claro que são incapazes de reconhecer isto;
  • Chamadas e mensagens no computador: a Vodafone já teve um serviço destes mas acabou por abandoná-lo, mais uma grande falha na estratégia da empresa. Durante a pandemia assistimos às PMEs a adquirirem em massa soluções como o Zoom e o MS Teams, já pensaram na quantidade de negócio que a Vodafone perdeu por não disponibilizar uma simples aplicação de chamadas e video-chamadas no computador associada aos números de telefone dos clientes? Acredito que com uma campanha de marketing muito simples, no início da pandemia, pelo menos metade dessas PMEs teriam passado a usar uma solução da Vodafone apenas por conveniência e teriam tido a oportunidade de faturar milhares de horas de chamadas;
  • Falta de IPv6 no serviço de internet fixa: sem mais comentários;
  • Falta de um serviço "bridge": todas as outras operadoras disponibilizam, enquanto isso a Vodafone continua a forçar os seus clientes a utilizar os seus routers extremamente fracos e pouco flexíveis. Podiam só fazer como a MEO/NOS e adicionar uma opção para ligar o bridge numa das portas do router e deixarem os clientes utilizarem os equipamentos que quiserem.

Na última década a Vodafone passou de uma operadora pioneira em Portugal com serviços de qualidade quase ao operador mais rudimentar que temos tudo por má gestão de prioridades. Parece ser também o mais vulnerável a ataques informáticos, afinal a Vodafone foi quem já ficou praticamente um dia sem serviços e muito possivelmente ninguém na empresa consegue garantir que os dados dos clientes não foram comprometidos.

A minha sugestão para a gestão da Vodafone é simples: uma vez que são incapazes de desenvolver internamente soluções inovadoras limitem-se a observar as tendências do mercado e a copiar. Parece-me que a Vodafone para ter um rumo / novos produtos depende muito de "consultisses" e estudos de mercado questionáveis, isto é com base em perguntas e premissas pouco fundamentadas na realidade, em vez de observarem os clientes reais.

Qual é a vossa opinião sobre o estado atual e percurso da Vodafone?

153
submitted 8 months ago by TCB13 to c/selfhosted
 

Here's my take:

The domain aftermarket has a big problem... it exists. This market shouldn't ever be allowed to exist in the first place. ICANN should've blocked this bullshit a long time ago and forced registrars to just let domains expire and free the space. Also add a few provisions about unused domain names and about selling them.

21
submitted 9 months ago* (last edited 9 months ago) by TCB13 to c/[email protected]
 

Hello,

So I have a Motorola SM56 USB Data Fax Modem (aka Apple USB Modem for some people) and according to information online this modem supports V.92, Caller ID, wake-on-ring and most importantly telephone answering (V.253).

At a place I happen to have an old telephone analog line that gets calls and unfortunately I can't get rid of. Any ideias / links / software on how can I use the modem + a low end box / ARM SBC to "digitize" the phone line into a generic SIP / VOIP that I can then connect to using MicroSIP on another computer?

Thank you.


Update on this:

I just tried the modem under Windows with a few programs such as Phone Dialer Pro and the built in dialer.exe and while the modem can detect incoming phone calls and place calls I can't pass the audio back to the operating system / phone software.

I did some research about the SM65 and it seems like it was designed to have an headset directly attached to it like on those PCI cards that also use it:

The built in COM port of the modems seems to be only usable to control the modem via AT commands and can't be used to pass audio form and to the system.

12
submitted 10 months ago* (last edited 10 months ago) by TCB13 to c/selfhosted
 

Hello,

My IoT/Home Automation needs are centered around custom built ESPHome devices and I currently have them all connected to a HA instance and things work fine.

Now, I like HA's interface and all the sugar candy, however I don't like the massive amounts of resources it requires and the fact that the storage usage keeps growing and it is essentially a huge, albeit successful, docker clusterfuck.

Is there any alternative dashboard that just does this:

  1. Specifically made for ESPHome devices - no other devices required;
  2. Single daemon or something PHP/Python/Node that you can setup manually with a few systemd units;
  3. Connects to the ESPHome devices, logs the data and shows a dashboard with it;
  4. Runs offline, doesn't go into 24234 GitHub repositories all the time and whatnot.

Obviously that I'm expecting more manual configuration, I'm okay with having to edit a config file somewhere to add a device, change the dashboard layout etc. I also don't need the ESPHome part that builds and deploys configurations to devices as I can do that locally on my computer.

Thank you.

 

cross-posted from: https://lemmy.world/post/11162262

Hey,

For all of you that are running proper setups and use nftables to protect your servers be aware that pvxe/nftables-geoip now has the ability to generate IP lists by country.

This can be used to, for instance, drop all traffic from specific countries or the opposite, drop everything except for your own country.

https://github.com/pvxe/nftables-geoip/commit/c137151ebc05f4562c56e6802761e0a93ed107a2

Here's how you can block / track traffic from certain countries:

Previously you had to load the entire geoip DB containing multiple GB and would end up using a LOT of RAM. Those guides aren't yet updated to use the country specific files but it's just about changing the include line to whatever you've generated with pvxe/nftables-geoip.

 

Hey,

For all of you that are running proper setups and use nftables to protect your servers be aware that pvxe/nftables-geoip now has the ability to generate IP lists by country.

This can be used to, for instance, drop all traffic from specific countries or the opposite, drop everything except for your own country.

https://github.com/pvxe/nftables-geoip/commit/c137151ebc05f4562c56e6802761e0a93ed107a2

Here's how you can block / track traffic from certain countries:

Previously you had to load the entire geoip DB containing multiple GB and would end up using a LOT of RAM. Those guides aren't yet updated to use the country specific files but it's just about changing the include line to whatever you've generated with pvxe/nftables-geoip.

28
searx.prvcy.eu dead? (self.privacy)
submitted 11 months ago by TCB13 to c/[email protected]
 

Hello,

searx.prvcy.eu has been dead for me for a couple of weeks now, anyone else?

I'm getting 502 Bad Gateway.

Thanks.

 

Hey,

I'm selling an HP Color LaserJet CM1312nfi MFP working perfectly fine. Can deliver in Lisbon, Portugal for free. Anything else you pay. :)

162
submitted 11 months ago* (last edited 11 months ago) by TCB13 to c/games
 

Hey,

I found this game I used to play a very long time ago and I wanted to experience it again. Unfortunately I wasn't able to run it in Windows 10 / Windows XP SP3 VM because it would lag on modern hardware.

Here is what you need to do in order to get the game running:

  1. Search for "Midtown Madness 2 (Europe) (Rerelease)" on TPB and download it
  2. Load the disk with WinCDEmu or other solution
  3. Install the game (don't launch it)
  4. Enable DirectPlay on Windows
  5. Copy Crack\midtown2.exe to the gamefolder
  6. Download dgVoodoo2 from http://dege.freeweb.hu/dgVoodoo2/dgVoodoo2/
  7. Copy dgVoodoo2.exe to the game folder
  8. Copy all files inside MS\x86 to the game folder as well
  9. Run dgVoodoo2.exe as admin and set the following:
  • Click the button .\ to create config file to MM directory
  • In "General" > "Output API" select "Direct3D 11 MS WARP (software)"
  • Go to "DirectX" tab and change the VRAM to 128MB
  • Click "Apply" > "OK" to exit.
  1. Launch the game > Options > Graphics > select from Display drop down menu, "dgVoodoo DirectX Wrapper" > "Hardware (3D video card with T&L) from the Renderer drop menu.
  2. Click "Done" and that's it!

Note that whenever you change the resolution it won't apply any changes to the game menu - you'll only see it once you start a race.

Midtown Madness 2 should now run very smoothly under Windows 10, even on Virtual Machines. Enjoy.

 

cross-posted from: https://lemmy.world/post/8834324

I'm looking for an application (windows or maybe web) that can be used to combine images vertically and horizontally. I usually go with PhotoScape (screenshot) to for this but that's not free nor updated anymore. Important features for me are to be able to combine horizontally or vertically, set the number or rows or columns and have the ability to resize the final image.

Thank you.

view more: ‹ prev next ›