I am an enthusiast of Tech, gaming, food, culture, and all interesting things.

  • 0 Posts
  • 25 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle
  • My advice: only forward ports 8080 and 443, then make sure that you have fail2ban or crossed properly set up on your reverse proxy. After that, you are pretty much fine as long as you keep on top of updating your containers.

    I would be careful about which apps you proxy. Idk why you need to access the admin portal for pi hole worldwide. If you really want to do that, you should set up a vpn.







  • I only read books that I have a physical copy of, or books that are on project Gutenberg. But really, we should seek to make all books free. An unencrypted epub is like 1 MB for like 300 pages usually.

    I do wish that there was an open source e-reader that ran Linux. You can already read these things on your phone or on your computer. But I like the dedicated devices for reading.

    Someone made an open source one that runs on a microprocessor, and it is a super cool project. But you really need a kernel to run arbitrary code, and gain access to open source e-reader software that gets you compatibility with publishing formats, layouts and fonts.

    Getting Linux kernels onto more open source devices is probably a good goal - its still rather hard for a hobbyist to design a devicw that supports Linux.





  • It’s a question of trust. Google will select the certificates they trust for the services they provide, and the entities that own those certificates will decide what do to with them. If they trust a certificate from Mozilla, and Mozilla agrees to make that certificate open to everyone for instance, than Google’s only choice is to stop trusting it. But if Mozilla decides that is the certificate Firefox will use, than Google has to choose kicking off Firefox as well as other third party apps. Same with Microsoft and Apple, but I think Mozilla is more likely to oppose this kind of standard rather than try to reach some kind of agreement with Google.

    The other way that this could play out every browser dev makes some kind of arrangement. Very unstable when we are talking about competitors.

    At the end of the day, it requires a level of co-operation with the browser developers and internet service providers that I don’t think a lot of people will go for, for various reasons. Especially not regulators. I guess I am just more optimistic about the open internet.




  • It can be very similar to the TLS scheme we use today, where certificates are signed by regulated CA’s. The only difference is that currently there is no regulation to ensure that Google will build chrimium to trust other authorities for browser integrity other than itself. That is definitely a major concern. Fortunately, I don’t think that it is long term viable. First, Microsoft, Mozilla and Apple would be extremely unhappy with this scheme. That’s right off the bat. So there will definitely be resistance on that front because eventually it would do something like break youtube compatibility with Firefox.

    Now, I do think that it is plausible that these organizations could come to a agreement that is still ultimately bad for web browsers. There fore, this should be considered by government regulators as something to pay attention to. I’m not too pessimistic about them doing this. There us political will to preserve the open internet, especially in the EU. It looks like the US is also set to re-adopt net neutrality rules. So, im just not as pessimistic about it.

    The only issue is that in the short-term, alot of these services that are free are going to degrade. This is what we are seeing with youtube. That is too bad, but I am hopeful and optimistic that it will lead to a more open internet. The fact that we are having this conversation on a decentralized social network is a positive sign.





  • The way I would perceive it is that mega-hjts in games are very profitable. A hit sells like 200k-300k at launch. But from time to time, a game hits the cultural zeitgeist and can 3x that. Those are you’re BOTWs and such.

    Platforms bank on having those because they are the big bang for their buck. In Microsoft case, an exclusive like that would move a lot of gp subs. I think that is the idea behind making starfield elusive, and then getting rid of the reduced price trial.

    So when people are busy playing BG3, and then ign gives starfield a 7, and people decide its not worth dropping everything to go and play, it can really mess up a company’s tire venue projections. Poor babies.



  • People are saying that it is a cloud managed reverse proxy, but I would not recommend using it like this. You should be running a reverse proxy on your own hardware, imo.

    It is still useful because you can use it as just a proxy. You can point your dns to your cloudflare tunnel endpoint and cloudflare will screen all traffic going to your server. I’ve actually stopped using it, but it is a decent way to auto feel all the random internet traffic pitfalls like portscanning bonnets. Also putting something between your server IP and your domain is nice.