• 0 Posts
  • 34 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • They don’t own it, the individual posters own the content of their own posts, however, from the reddit terms of service:

    When Your Content is created with or submitted to the Services, you grant us a worldwide, royalty-free, perpetual, irrevocable, non-exclusive, transferable, and sublicensable license to use, copy, modify, adapt, prepare derivative works of, distribute, store, perform, and display Your Content and any name, username, voice, or likeness provided in connection with Your Content in all media formats and channels now known or later developed anywhere in the world. This license includes the right for us to make Your Content available for syndication, broadcast, distribution, or publication by other companies, organizations, or individuals who partner with Reddit.

    And with each of those rights granted, Reddit’s lawyers can defend those rights. So no, they don’t own it “just because they ran the servers” - they own specific rights to copy granted to them by each poster.

    (I don’t like this arrangement, but ignorance of the terms of service isn’t going to help someone who uploaded a full copy of the works they have extensive rights to) On this subject I think there needs to be an extensive overhaul to narrow what terms you can extend to the general public. The problem is I straight up don’t trust anyone currently in power to make such a change to have our interests in mind.




  • For a reliable and useful remote control solution, you’re looking for an IPKVM with ATX power control. To setup the power control, you effectively set up a parallel circuit where your power switch connects to the motherboard, letting the KVM effectively press the power button ‘normally’. As a bonus, you can connect to the video and data of the KVM for even more remote control options, like be able to troubleshoot boot issues or load a virtual CD/DVD to upgrade the OS.

    For tinkerers, I recommend the PiKVM, either DIY or Preassembled. It’s important to know that a RaspberryPi is energy efficient compared to an x86. This guy crunched the numbers

    If you’re looking for a product instead of a project, I’d recommend JetKVM.






  • Right‽ Who decided there gets to be a Rickroll of grievance? Sometimes I worry it gets used as mental bandaid to objectify mourning and perform alchemy to putting a label on it and transmute it into ‘a funny feeling’. The lines are a magic rune to turn the sad nuance of actual loss into meme loss.








  • Shhhhhhhhhhhhh. I want the newbs to feel accomplished when it only takes them 2 hours to figure it out. 😉

    But seriously, you and I have it on reflex, but there’s merit to the notion that we also have our mise en place - we’ve read the manual, we’ve saved or memorized the script, already know our local equipment passwords, etc - all things we took the time to do before and now have at the ready.


  • Setting up ddns takes 15 minutes for a professional (mostly setting a 1-line script to reload a simple url every ten minutes)

    and poking a hole in the firewall takes maybe half an hour (since every router puts the relevant page in a different spot)

    And for this you think it’s reasonable to pay ~$25/year for the rest of your life? You’re not wrong in the sense that you’re welcome to choose your own values, but I … disagree with you on the value position.



  • If you want DDoS protection you’re gonna need to work with someone who can swallow and filter a whole botnet’s worth of traffic and keep running. That takes some serious infrastructure.

    I recommend Cloudflare for small businesses because their terms of service are actually decent, and blending their traffic into that stream makes their website indistinguishable from larger competition.

    The next closest things are Pangolin (https://digpangolin.com/) and WireGuard. You’ll need to rent a server somewhere with a public-facing IP to run the server-side software (and DDoS protection is based on the services provided by your datacenter host). Pangolin has a UI similar to Cloudflare, but under the hood, it’s just Wireguard, so if you prefer more direct control, you can just set up a Wireguard tunnel by hand.

    For myself, and my own needs, I don’t need all that. I just use DDNS* to point my DNS records to my home’s public ip address & use port forwarding to connect ports 80 & 443 to Nginx Proxy Manager. (When I add Anubis, I’ll port forward to Anubis and then have Anubis redirect valid traffic to Nginx Proxy Manager) This setup offers no protection against DDoS, but for what I use it for, I think it’s an acceptable risk (I’d either have to get someone’s attention and ire or just be cosmically unlucky)

    *the server has a cron job to curl the DDNS refresh URL every hour.


  • You’re not wrong. And the line between evil and laziness here is too messy for me to sort out. We got into this mess because the internet was originally designed as a communication tool between business, university, and government. Specifically, Bell Labs connecting universities as part of the military project DARPA. Since they were connecting dozens of sites, the 4 billion addresses (2^32) seemed like plenty.

    Skipping over dialup and forward to early broadband, the issue of the number of addresses problem was ‘solved’ by a clever firewall technique network address translation (NAT). It was adversited as a security feature, but it allowed ISPs to give one public IP per customer. This standardized things for them - they give you one IP and you multiplex it as you wish. However, since the average customer wanted a turnkey solution, the ISPs would then toss in the modem as a rental. (Also, as enshitification hit this rental modem started getting more user hostile.)

    But at this point ISPs are engorged and lazy and redoing everything is a chore, so they got one IPv6 space for everyone, and set up their IPv6 servers to assign chucks of that space based on your assigned IPv4 address. Easy-peasy! Now none of their other management or billing systems have to change! Of course, now your v6 space moves anytime your v4 space does but -they always have those business accounts to sell you …

    A diamond in the rough: When I was younger, working at a data center and IPv6 was new, I found this gem coupled with IPv6 world day (via Reddit): https://tunnelbroker.net/

    Hurricane Electric was/is happy to give you a free static IPv6 /48 prefix, and you could tunnel your home connection directly to this (like a site to site VPN). Their catch is if you start pushing significant traffic you’ll have to pay market rates. But if your goal is to add a free static IPv6 frontend to your home network, this has been here the whole time.

    Similarly, I’ve read Cloudflare’s Terms of Service [privacy policy, et al.] and they’re fairly tame compared to many. I’m also partial to their WARP technology. The idea is the end user’s traffic is encrypted and sent to any of Cloudflare’s servers and from there they can then bounce to anywhere in the world (a handy trick if you need to get around a great firewall or other tools of censorship). If your home lab uses Cloudflare’s tunnel, and your phones use WARP, the only thing a third party can see it that you’re using the largest CDN in the world - which is sorta a ‘well, duh’ statement. Cloudflare’s schtick is they don’t need limits - they can flood you home connection and it wouldn’t be a blip on their radar. However, they need to run variations of these technologies to operate their primary business. So making a copy for you to use is almost trivial. (And if you go viral and suddenly need a CDN, I’m sure they can sell you some)

    Tl;dr: you’re not wrong, but the desert has water in it, if you know where to look.