[-] bear@slrpnk.net 8 points 2 weeks ago

Something you might want to look into is using mTLS, or client certificate authentication, on any external facing services that aren't intended for anybody but yourself or close friends/family. Basically, it means nobody can even connect to your server without having a certificate that was pre-generated by you. On the server end, you just create the certificate, and on the client end, you install it to the device and select it when asked.

The viability of this depends on what applications you use, as support for it must be implemented by its developers. For anything only accessed via web browser, it's perfect. All web browsers (except Firefox on mobile...) can handle mTLS certs. Lots of Android apps also support it. I use it for Nextcloud on Android (so Files, Tasks, Notes, Photos, RSS, and DAVx5 apps all work) and support works across the board there. It also works for Home Assistant and Gotify apps. It looks like Immich does indeed support it too. In my configuration, I only require it on external connections by having 443 on the router be forwarded to 444 on the server, so I can apply different settings easily without having to do any filtering.

As far as security and privacy goes, mTLS is virtually impenetrable so long as you protect the certificate and configure the proxy correctly, and similar in concept to using Wireguard. Nearly everything I publicly expose is protected via mTLS, with very rare exceptions like Navidrome due to lack of support in subsonic clients, and a couple other things that I actually want to be universally reachable.

[-] bear@slrpnk.net 8 points 6 months ago

RETURN OF THE KING

[-] bear@slrpnk.net 8 points 10 months ago

The games will still be designed by humans. Generative AI will only be used as a tool in the workflow for creating certain assets faster, or for creating certain kinds of interactivity on the fly. It's not good enough to wholesale create large sets of matching assets, and despite what folks may think, it won't be for a long time, if ever. Not to mention, people just don't want that. People want art to have intentional meaning, not computer generated slop.

[-] bear@slrpnk.net 8 points 10 months ago

One of those two will be president no matter what you do. They will then be in a position capable of inflicting great damage. Trump will use that position to hurt more people than Biden. The math here isn't complicated, and it continually astounds me how many people on the left cannot actually solve the trolly problem when faced with it for real. It really shows which people are engaged in politics as a means to an end rather than as personal expression or a hobby.

[-] bear@slrpnk.net 7 points 1 year ago

THIS IS A RED CUBE HOUSEHOLD

[-] bear@slrpnk.net 8 points 1 year ago

Arch very rarely breaks on its own. But if the manually driven style of Arch is not what you're looking for, try OpenSUSE Tumbleweed or Slowroll.

[-] bear@slrpnk.net 9 points 1 year ago

Inter for GUI, Iosevka for terminal. Dejavu is my fallback option for some systems.

[-] bear@slrpnk.net 7 points 1 year ago

Anti-user features which are enabled by games and programs that were already anti-user before this. Hardly worth getting upset about, nothing has really changed. You already should have been avoiding them, because they were already anti-user.

[-] bear@slrpnk.net 8 points 1 year ago

There's no downside to having it. There's many downsides to not having it. This seems pretty cut and dry to me.

[-] bear@slrpnk.net 8 points 1 year ago

This is a completely valid option and one that more people should consider. You don't have to selfhosted everything, even if you can. I actually prefer to support existing instances of stuff in a lot of cases.

I use https://disroot.org for email and cloud, and I'm more than happy to kick them a hundred bucks a year to help support a community. Same with https://fosstodon.org for Mastodon. I'm fully capable of self-hosting these things, but instead I actively choose to support them instead so that their services can be extended to more than just myself. I chose those two because they send excess funds upstream to FOSS projects. I'm proud to rep those domains.

[-] bear@slrpnk.net 7 points 1 year ago

"We have to defederate or else they'll run incompatible code that won't let us federate with them"

This seems like a self-solving problem to me, I still don't understand what the hyperventilation is about.

[-] bear@slrpnk.net 8 points 1 year ago

How the fuck is Reddit closing their API behind a ridiculous paywall only the SECOND stupidest social media move of the day

view more: ‹ prev next ›

bear

joined 1 year ago