1
> be me
> ex-tech support wagie living in the frozen wastes of Canada
> watch news, see surveillance state literally killing people
> get radicalized.mkv
> decide to write a passionate call to arms for the self-hosted community
> "guys, it's not a hobby anymore, it's resistance infrastructure"
> type it out with proper grammar and formatting because I'm not a savage
> post to Lemmy, expect maybe 12 upvotes from fellow nerds

> wake up next day
> 1000+ score
> notifications.exe has crashed
> open comments to see the revolution beginning
> half the thread: "WE RIDE AT DAWN"
> other half: "OP IS A FED TRYING TO HONEYPOT US"
> apparently using bullet points and spellcheck makes you a CIA psyop in 2026
> if it's anyone's psyop it's MY psyop god damnit
> mfw my "evil honeypot" is literally just telling people to use end-to-end encryption that I can't access
> logic 100

> meanwhile, the "privacy absolutists" screech about purity
> I don't have time to argue about command lines vs GUIs
> just want to give normal people parallel tools that actually work for THEM
> realize this is my life now
> the revolution isn't guy fawkes masks and hacking mainframes
> the revolution is breaking down "infrastructure" into tools grandma can actually use

> is this resistance?
> refresh page
> guess I've got my work cut out for me
> maybe.jpeg
177
submitted 6 days ago by h333d@lemmy.world to c/privacy@lemmy.ml

cross-posted from: https://lemmy.world/post/41387733

I used to self-host because I liked tinkering. I worked tech support for a municipal fiber network, I ran Arch, I enjoyed the control. The privacy stuff was a nice bonus but honestly it was mostly about having my own playground. That changed this week when I watched ICE murder a woman sitting in her car. Before you roll your eyes about this getting political - stay with me, because this is directly about the infrastructure we're all running in our homelabs. Here's what happened: A woman was reduced to a data point in a database - threat assessment score, deportation priority level, case number - and then she was killed. Not by some rogue actor, but by a system functioning exactly as designed. And that system? Built on infrastructure provided by the same tech companies most of us used to rely on before we started self-hosting. Every service you don't self-host is a data point feeding the machine. Google knows your location history, your contacts, your communications. Microsoft has your documents and your calendar. Apple has your photos and your biometrics. And when the government comes knocking - and they are knocking, right now, today - these companies will hand it over. They have to. It's baked into the infrastructure. Individual privacy is a losing game. You can't opt-out of surveillance when participation in society requires using their platforms. But here's what you can do: build parallel infrastructure that doesn't feed their systems at all. When you run Nextcloud, you're not just protecting your files from Google - you're creating a node in a network they can't access. When you run Vaultwarden, your passwords aren't sitting in a database that can be subpoenaed. When you run Jellyfin, your viewing habits aren't being sold to data brokers who sell to ICE. I watched my local municipal fiber network get acquired by TELUS. I watched a piece of community infrastructure get absorbed into the corporate extraction machine. That's when I realized: we can't rely on existing institutions to protect us. We have to build our own. This isn't about being a prepper or going off-grid. This is about building infrastructure that operates on fundamentally different principles:

Communication that can't be shut down: Matrix, Mastodon, email servers you control File storage that can't be subpoenaed: Nextcloud, Syncthing Passwords that aren't in corporate databases: Vaultwarden, KeePass Media that doesn't feed recommendation algorithms: Jellyfin, Navidrome Code repositories not owned by Microsoft: Forgejo, Gitea

Every service you self-host is one less data point they have. But more importantly: every service you self-host is infrastructure that can be shared, that can support others, that makes the parallel network stronger. Where to start if you're new:

Passwords first - Vaultwarden. This is your foundation. Files second - Nextcloud. Get your documents out of Google/Microsoft. Communication third - Matrix server, or join an existing instance you trust. Media fourth - Jellyfin for your music/movies, Navidrome for music.

If you're already self-hosting:

Document your setup. Write guides. Make it easier for the next person. Run services for friends and family, not just yourself. Contribute to projects that build this infrastructure. Support municipal and community network alternatives.

The goal isn't purity. You're probably still going to use some corporate services. That's fine. The goal is building enough parallel infrastructure that people have actual choices, and that there's a network that can't be dismantled by a single executive order. I'm working on consulting services to help small businesses and community organizations migrate to self-hosted alternatives. Not because I think it'll be profitable, but because I've realized this is the actual material work of resistance in 2025. Infrastructure is how you fight infrastructure. We're not just hobbyists anymore. Whether we wanted to be or not, we're building the resistance network. Every Raspberry Pi running services, every old laptop turned into a home server, every person who learns to self-host and teaches someone else - that's a node in a system they can't control. They want us to be data points. Let's refuse.

What are you running? What do you wish more people would self-host? What's stopping people you know from taking this step?

1
submitted 6 days ago* (last edited 4 days ago) by h333d@lemmy.world to c/selfhosted@lemmy.world

I used to self-host because I liked tinkering. I worked tech support for a municipal fiber network, I ran Arch, I enjoyed the control. The privacy stuff was a nice bonus but honestly it was mostly about having my own playground. That changed this week when I watched ICE murder a woman sitting in her car. Before you roll your eyes about this getting political - stay with me, because this is directly about the infrastructure we're all running in our homelabs. Here's what happened: A woman was reduced to a data point in a database - threat assessment score, deportation priority level, case number - and then she was killed. Not by some rogue actor, but by a system functioning exactly as designed. And that system? Built on infrastructure provided by the same tech companies most of us used to rely on before we started self-hosting. Every service you don't self-host is a data point feeding the machine. Google knows your location history, your contacts, your communications. Microsoft has your documents and your calendar. Apple has your photos and your biometrics. And when the government comes knocking - and they are knocking, right now, today - these companies will hand it over. They have to. It's baked into the infrastructure. Individual privacy is a losing game. You can't opt-out of surveillance when participation in society requires using their platforms. But here's what you can do: build parallel infrastructure that doesn't feed their systems at all. When you run Nextcloud, you're not just protecting your files from Google - you're creating a node in a network they can't access. When you run Vaultwarden, your passwords aren't sitting in a database that can be subpoenaed. When you run Jellyfin, your viewing habits aren't being sold to data brokers who sell to ICE. I watched my local municipal fiber network get acquired by TELUS. I watched a piece of community infrastructure get absorbed into the corporate extraction machine. That's when I realized: we can't rely on existing institutions to protect us. We have to build our own. This isn't about being a prepper or going off-grid. This is about building infrastructure that operates on fundamentally different principles:

Communication that can't be shut down: Matrix, Mastodon, email servers you control

File storage that can't be subpoenaed: Nextcloud, Syncthing

Passwords that aren't in corporate databases: Vaultwarden, KeePass

Media that doesn't feed recommendation algorithms: Jellyfin, Navidrome

Code repositories not owned by Microsoft: Forgejo, Gitea

Every service you self-host is one less data point they have. But more importantly: every service you self-host is infrastructure that can be shared, that can support others, that makes the parallel network stronger. Where to start if you're new:

Passwords first - Vaultwarden. This is your foundation. Files second - Nextcloud. Get your documents out of Google/Microsoft. Communication third - Matrix server, or join an existing instance you trust. Media fourth - Jellyfin for your music/movies, Navidrome for music.

If you're already self-hosting:

Document your setup. Write guides. Make it easier for the next person. Run services for friends and family, not just yourself. Contribute to projects that build this infrastructure. Support municipal and community network alternatives.

The goal isn't purity. You're probably still going to use some corporate services. That's fine. The goal is building enough parallel infrastructure that people have actual choices, and that there's a network that can't be dismantled by a single executive order. I'm working on consulting services to help small businesses and community organizations migrate to self-hosted alternatives. Not because I think it'll be profitable, but because I've realized this is the actual material work of resistance in 2025. Infrastructure is how you fight infrastructure. We're not just hobbyists anymore. Whether we wanted to be or not, we're building the resistance network. Every Raspberry Pi running services, every old laptop turned into a home server, every person who learns to self-host and teaches someone else - that's a node in a system they can't control. They want us to be data points. Let's refuse.

What are you running? What do you wish more people would self-host? What's stopping people you know from taking this step?

EDIT: Appreciate the massive response here. To the folks in the comments debating whether I’m an AI: I’m flattered by the grammar check, but I'm just a guy in his moms basement with too much coffee and a background in municipal networking. If you think "rule of three" sentences are exclusive to LLMs, wait until you hear a tech support vet explain why your DNS is broken for the fourth time today.

More importantly, a few people asked about a "0 to 100" guide - or even just "0 to 50" for those who don't want to become full time sysadmins. After reading the suggestions, I want to update my "Where to start" list. If you want the absolute fastest, most user-friendly path to getting your data off the cloud this weekend, do this:

The Core: Install CasaOS, or the newly released (to me) ZimaOS. It gives you a smartphone style dashboard for your server. It’s the single best tool I’ve found for bridging the technical gap. It's appstore ecosystem is lovely to use and you can import docker compose files really easily.

The Photos: Use Immich. Syncthing is great for raw sync, but Immich is the first thing I’ve seen that actually feels like a near 1:1 replacement for Google Photos (AI tagging, map view, etc.) without the privacy nightmare.

The Connection: Use Tailscale. It’s a zero-config VPN that lets you access your stuff on the go without poking holes in your firewall.

I’m working on a Privacy Stack type repo that curates these one click style tools specifically to help people move fast. Infrastructure is only useful if people can actually use it. Stay safe out there.

[-] h333d@lemmy.world 2 points 1 week ago

The Charybde en Scylla analogy hits home. It is a classic mistake to think we can patch a logic flaw in society by just upgrading the hardware or switching to a new instance.

You are right about the marketplace mindset. When platforms treat humans as inventory, we start acting like products. We optimize our profiles like we are trying to rank on a search engine instead of just existing. It is exhausting and the only people winning are the ones running the servers and collecting the data. It is a full time job that pays nothing and costs us our sanity.

Living in a place where the local scene is thin makes the digital world feel like the only air available. It is easy to get stuck in the loop of looking for a perfect match online because the local options feel non-existent. But your point about being different together is interesting. Maybe the goal should not be finding a mirror image of my interests, but just finding someone who is system compatible even if they do not know their way around a config file.

I am still going to tinker with my home lab and keep my privacy stack tight, but I need to remember those are tools and not the actual life. The real exploit is figuring out how to be human in a world that wants us to be data points. Thanks for the perspective. It is a good reminder that even on the fediverse, the most important connections are the ones that happen when you actually step away from the keyboard.

[-] h333d@lemmy.world 15 points 1 week ago

Lmao yeah there's a beautiful irony - the slop machine is eating itself. Models trained on synthetic data degrade over time, what researchers call "model collapse" or "Habsburg AI." Each generation loses fidelity like photocopies of photocopies. Kirkification specifically floods datasets with corrupted representations. When the model can't distinguish real images from AI-generated variations, its accuracy breaks down. You're injecting noise at scale. This is accidentally accelerationist - the error becomes the virus. The machine chokes on its own output. Tech companies are terrified, desperately trying to watermark and detect synthetic content, but it's too late. How much of Reddit's "authentic conversation" sold to Google is actually ChatGPT from 2023? It won't stop slop generation, but it might render the whole system useless enough that people abandon it. Strategic failure at scale. Kind of poetic honestly.

[-] h333d@lemmy.world 1 points 1 week ago

I hadn't seriously considered it but you're right that there's a gap here. The people who understand this stuff either don't have time to teach or they're charging enterprise consulting rates. Meanwhile the folks who actually need these skills - community organizers, small nonprofits, people trying to escape surveillance - can't afford that. I've got the technical background from O-Net and I'm already doing informal tech support for friends anyway. The difference between "helping my friend set up Matrix" and "running a workshop on self-hosted communication" is mostly just structure and confidence. The barrier is partly income - I'm unemployed and need to eat - but also credentials. I don't have teaching experience or certifications. Who's going to take a workshop from a 24-year-old dropout? But maybe that's the wrong framing. The communities that actually need this knowledge don't care about credentials, they care about results. There are models for this. My town does digital literacy workshops. Even just making YouTube tutorials or writing guides would be a start. The knowledge doesn't help anyone if it stays locked in my head or scattered across Lemmy threads.

[-] h333d@lemmy.world 3 points 1 week ago

This hits hard because Ring is the perfect example of how convenience gets weaponized into a panopticon. People think they're buying a doorbell but they're actually building Amazon's privatized surveillance state, block by block. And yeah, you didn't consent to being filmed every time you walk past a neighbor's house - that's the insidious part. The "I feel like I'm losing against the tide" sentiment is real but you're already ahead by even asking the question. Most people never consider the trade-off. Building your own infrastructure is how you refuse to be legible to their system. It's more work, but that friction is the point - it means you're outside their automated extraction pipeline. Worth it? Absolutely. You get security without becoming part of the problem.

[-] h333d@lemmy.world 3 points 1 week ago

You're right - you've successfully built an infrastructure that keeps you outside the slop machine. Kagi, Whoogle, fediverse, HackerNews - that's strategic refusal working as intended. The slop is concentrated on mainstream platforms where people haven't opted out. Instagram, TikTok, Facebook, YouTube - my friends still using those are drowning in AI-generated engagement bait, fake historical photos, GPT-written content. It's not subtle anymore for people still plugged in. The kirkification angle is trickier though - it's not just what you see, it's how you're represented in spaces you're not in. Someone can generate deepfakes of you and you'd never know. Your digital body gets remixed without consent. Your "maybe I can't recognize it anymore" point is real. The aesthetic tells are getting harder to spot. Five years ago it was obvious, now it takes active effort. Platform rules banning it would help but verification at scale is nearly impossible. The only reliable defense is what you're doing - removing yourself from spaces where slop is profitable. But that's also a technical barrier. I can set up Whoogle and fediverse accounts, but my friends on Instagram? That's where their community actually is. Opting out means losing access for most people. This is why municipal-scale infrastructure matters - if a town runs its own services, suddenly opting out isn't a technical hurdle, it's just where the community is. You asking "where is the slop?" while others drown in it proves we're already living in parallel internets. The bifurcation is real.

[-] h333d@lemmy.world 2 points 1 week ago

You're absolutely right about the ageism - that was lazy framing on my part. The vulnerability is psychological and universal, not demographic. I've watched my technically-savvy friends fall for the same engagement manipulation as anyone else. I respect the hell out of the radical position you're taking, and you're correct that it solves the problem for you personally. But for a lot of us here, the threat model isn't "can I individually opt out" - it's "how do I minimize harm while participating in systems I can't fully escape." I'm 24, unemployed, job searching in tech. Most employers require LinkedIn, GitHub, email. My actual community - the people I game with, the friends who get me - are scattered across the continent. The meatspace-only option isn't realistic for someone in my position. Alberta doesn't exactly have the densest scene for the communities I'm part of. So I'm attempting harm reduction: self-hosted Matrix instead of Discord. Jellyfin instead of Spotify. Soju IRC bouncer instead of Slack. My own Proxmox homelab instead of cloud services. It's not as pure as full disconnection, but it means I'm not feeding OpenAI's training datasets or Meta's engagement algorithms with every interaction. Your point about treating followers as "avatars of the same algorithm" is exactly what I'm trying to escape by moving communication to federated and self-hosted protocols. When I'm on my own IRC server or Matrix instance, I'm talking to people, not to a feed curated by an engagement-maximizing black box. The municipal infrastructure angle matters because it scales the individual solution. I worked at a municipal fiber network - we have the infrastructure to host community services. If a small municipality can run Mastodon, Matrix, and Nextcloud for residents, that's hundreds of people removed from surveillance capitalism. It's not everyone going full hermit, it's building parallel infrastructure that respects privacy by default. Your cross-referencing and source verification advice is solid, but it requires people to first recognize they're in an algorithmic environment. That's why I think local-first infrastructure matters - it makes the choice explicit rather than defaulted. I hear you on offline community being the real answer. But for those of us who can't or won't fully disconnect, reducing the attack surface and building privacy-respecting alternatives feels like the next best thing.

62
submitted 1 week ago by h333d@lemmy.world to c/privacy@lemmy.ml

I have been thinking a lot about digital sovereignty lately and how quickly the internet is turning into a weird blend of surreal slop and centralized control. It feels like we are losing the ability to tell what is real because of how easy it is for trillionaire tech companies to flood our feeds with whatever they want.

Specifically I am curious about what I call "kirkification" which is the way these tools make it trivial to warp a person's digital identity into a caricature. It starts with a joke or a face swap but it ends with people losing control over how they are perceived online.

If we want to protect ourselves and our local communities from being manipulated by these black box models how do we actually do it?

I want to know if anyone here has tried moving away from the cloud toward sovereign compute. Is hosting our own communication and media solutions actually a viable way to starve these massive models of our data? Can a small town actually manage its own digital utility instead of just being a data farm for big tech?

Also how do we even explain this to normal people who are not extremely online? How can we help neighbors or the elderly recognize when they are being nudged by an algorithm or seeing a digital caricature?

It seems like we should be aiming for a world of a million millionaires rather than just a room full of trillionaires but the technical hurdles like isp throttling and protocol issues make that bridge hard to build.

Has anyone here successfully implemented local first solutions that reduced their reliance on big tech ai? I am looking for ways to foster cognitive immunity and keep our data grounded in meatspace.

h333d

joined 1 week ago