• 2 Posts
  • 167 Comments
Joined 15 days ago
cake
Cake day: September 14th, 2025

help-circle

  • Is your concern compromise of your data or loss of the server?

    My guess is that most burglaries don’t wind up with people trying to make use of the data on computers.

    As to loss, I mean, do an off-site backup of stuff that you can’t handle losing and in the unlikely case that it gets stolen, be prepared to replace hardware.

    If you just want to keep the hardware out of sight and create a minimal barrier, you can get locking, ventillated racks. I don’t know how cost-effective that is; I’d think that that might cost more than the expected value of the loss from theft. If a computer costs $1000 and you have a 1% chance of it being stolen, you should not spend more than $10 on prevention in terms of reducing cost of hardware loss, even if that method is 100% effective.




  • I don’t know about number one, but a few that I miss.

    • freshmeat.net. Announcements of open source software releases and updates.

    • newegg.com — computer components retailer — is still around, but it doesn’t hold the spot it once did.

    • bash.org. Searchable list of funny, ranked quotes from IRC and similar. There are some archives, like this one.

    • A few “hosting” sites that went down with a lot of user-created content. No one thing was amazing, maybe, but it produced a lot of dangling links. Geocities: “At least 38 million pages, most written by users, were displayed by GeoCities before it was terminated.[7] The GeoCities Japan version of the service lasted until March 31, 2019.[8]”. AngelFire. Tripod. Apparently the latter two are still around in some limited form.

    • Kaleidoscope.net, a site featuring themes for the eponymous classic MacOS themeing software package. They did a good job of generating theme previews. Fun to browse through.





  • Setting aside Trump, I have no idea why people who can apparently be mostly reasonable about, say, cars subscribe to utterly batshit insane views about diet and health and buy into all kinds of snake oil.

    I’m not saying that there’s no magical thinking with cars — “my magical fuel additive” or whatever — but I have seen more utterly insane stuff regarding what someone should eat or how to treat medical conditions than in most other areas.

    It’s also not new. You can go back, and find people promoting all kinds of snake oil when it comes to health. Some of my favorites are the utterly crazy stuff that came out when public awareness of radiation was new, and it was being billed as a magic cure for everything.

    I get that not everyone is a doctor or a dietician. But you’d think that any time you see someone promoting something as a fix for a wide, unrelated range of conditions, that it should be enough to raise red flags for someone, layman or no.




  • This will increase your privacy by protecting you from ISP web traffic analysis. It does this by generating fake DNS and HTTP request.

    If you’re the kind of attacker in a position to be doing traffic analysis in the first place, I suspect that there are a number of ways to filter this sort of thing out. And it’s fundamentally only generating a small amount of noise. I suspect that most people who would be worried about traffic analysis are less worried about someone monitoring their traffic knowing that it’s really 20% of their traffic going to particular-domain.com instead of just 2% of their traffic, and more that they don’t know it to be known that they’re talking to particular-domain.com at all.

    For DNS, I think that most users are likely better-off either using a VPN to a VPN provider that they’re comfortable with, DNS-over-HTTP, or DNSSEC.

    HTTPS itself will protect a lot of information, though not the IP address being connected to (which is a significant amount of information, especially with the move to IPv6), analysis of the encrypted data being requested (which I’m sure could be fingerprinted to some degree for specific sites to get some limited idea of what a user is doing even inside an encrypted tunnel). A VPN is probably the best bet to deal with an ISP that might be monitoring traffic.

    There are also apparently some attempts at addressing the fact that TLS’s SNI exposes domain names in clear text to someone monitoring a connection — so someone may not know exactly what you’re sending, but knowing the domain you’re connecting to may itself be an issue.

    In a quick test, whatever attempts to mitigate this have actually been deployed, SNI still seems to expose the domain in plaintext for the random sites that I tried.

    $ sudo tcpdump -w packets.pcap port https  
    

    <browses to a few test websites in Chromium, since I’m typing this in Firefox, then kills off tcpdump process>

    $ tshark -r packets.pcap -2 -R ssl.handshake.extensions_server_name  
    

    I see microsoft.com, google.com, olio.cafe (my current home instance), and cloudflare.net have plaintext SNI entries show up. My guess is that if they aren’t deploying something to avoid exposure of their domain name, most sites probably aren’t either.

    In general, if you’re worried about your ISP snooping on your traffic, my suggestion is that the easiest fix is probably to choose a VPN provider that you do trust and pass your traffic through that VPN. The VPN provider will know who you’re talking to, but you aren’t constrained by geography in VPN provider choice, unlike ISP choice. If you aren’t willing to spend anything on this, maybe something like Tor, I2P, or, if you can avoid the regular Web entirely for whatever your use case is, even Hyphanet.



  • tal@olio.cafetoAsk Lemmy@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    22 hours ago

    Well, I think that the fundamental problem is that most people here are here because they do want to use the Threadiverse as an alternative to Reddit and find it to be the best alternative.

    Of the alternatives that I know of (and don’t personally think are as desirable), on checking, all seem to have a Web-based front-end. You might have a PWA, what amounts to an “app” that’s basically the web browser running on mobile and appearing to be a separate app.

    There are some vaguely-similar systems, but they tend to not be a “collection of forums” systems, things like Twitter, Bluesky, and so forth.

    I guess you could try using Usenet, though last I checked — and that was some time back — there wasn’t a lot of discussion happening any more on Usenet. A lot of the people still using it are using it to basically get commercial access to “binaries” newsgroups, to pirate stuff. A big part of the reason that the Usenet discussion crowd mostly moved to Reddit-like sites was because they dealt with spam better. You can get free (registration required) Usenet access from eternal-september.org and commercial Usenet service from someone like supernews.com. I don’t know what the state of things there is. I’m sure that someone out there has a Usenet client for Android.

    kagis

    It looks like the pickings are pretty slim, but they’re out there. Here’s someone’s list from 2023:

    https://xdaforums.com/t/a-list-of-android-usenet-newsreaders-how-to-search-reference-nntp-dejanews-google-web-archives-for-comp-mobile-android-newsgroup-topics-in-one-tap.4634973/

    Note that there are some limitations compared to something like Reddit or the Threadiverse. You can’t edit a Usenet post once sent and normally can’t delete them either (there is something called cancel messages, but I have never used them and IIRC some servers won’t honor them anyway). Unless things have changed since last I looked, there was no standard support for something like Markdown across clients.

    If you’re willing to use Usenet with a native client on a desktop machine, rather than Android, your choices become rather better. And there are clients with very good “offline” support — you can basically download a lot of content and make posts, and have them only be sent next time you have an Internet connection, which the Threadiverse and Reddit don’t really have support for. That doesn’t matter as much for most people today, where omnipresent Internet access is far more common than it was when people were using Usenet for discussion quite a bit, but it’s possible that it could be a benefit for you. You don’t benefit from a lot of the filtering and moderation that other users do, but clients do tend to have powerful tools for you to locally filter out content that you don’t want to see.

    There are things like Matrix, IRC, and Discord, but they aren’t really a direct analog to what Reddit and the Threadiverse are — they’re really aimed at more real-time, interactive chats. I don’t find that I like discussion with them nearly as much, because people tend to write shorter material with less thought put into them. But they do serve certain niches, and you might like them.


  • Specific to what theylre doing here, the problem is that analog modems are really designed around working around the limitations of past telco systems, doing data transport over systems designed to move only voice, and those mostly don’t exist any more.

    I mean, it’s theoretically possible that you have 12 analog lines available to you and no way to directly put digital data on a line, but I’d guess that it’s not very likely. I was actually looking to see if there are still any ISPs in the US that provide nationwide dial-up internet service at all, and IIRC, the answer is “yes”, but it’s down to one or two, and I suspect that they’re just doing it because they basically have all the remaining users for whom the technical barrier of switching to some form of digital transport is too much of a hurdle.

    EDIT: Also, there are various forms of wireless Internet now. IIRC, one gets about 100 ms of latency on a PPP connection running over an analog modem. I bet that even LEO satellite Internet like Starlink beats that on latency.

    kagis

    https://www.starlink.com/legal/documents/DOC-1470-99699-90

    Latency ranges between 25 and 60 ms on land, and 100+ ms in certain remote locations (e.g. Oceans, Islands, Antarctica, Alaska, Northern Canada, etc.).

    Yeah. And that’s gonna be one of the weakest points of satellite Internet service.




  • If GRUB is having problems too, not just Linux, I’d be inclined to blame hardware of some sort. Do you have another stick of NVMe that you can swap in, see if that makes the issue magically go away? Maybe run off a USB drive, see what happens?

    Maybe less likely, but that processor is a 14th gen Intel desktop processor, one of the models affected by the voltage degradation problems. I burned up both a 13th gen and 14th gen processor myself. Looked like a variety of random errors, often related to memory, eventually not even managing to get through boot unless I disabled all but one of my cores. Might look into that. I assume that there’s a potentially-affected serial number range list somewhere.

    And you can run memtest86 to bang on the memory and CPU, see if anything comes up. If it runs into errors, then it probably isn’t the NVMe at fault.