[-] tiller@programming.dev 9 points 11 months ago* (last edited 11 months ago)

Without talking about the resources it would require, youtube could totally only serve the ad until it has been "watched". And no amount of sponsor block or similar software would help. These software only work because youtube allow you to navigate the video. If they decide that you have to fully download a 30s ad video, and that you can't ask for the video for the first 30s, then you wouldn't be able to do anything (or at the very max, just hide the ad and wait 30s on a blank screen).

[-] tiller@programming.dev 2 points 1 year ago

WIth my previous ISP, I swapped the ISP's router with my OpenWRT's and everything worked fine. With my current ISP, it appears that it's not that simple to swap the router altogether. But I'll be honest, the biggest factors are price and number of routers/switch. As I want 2.5gbps, I'd need a router with at least dual 2.5gbps ports. The WIFI6 offering is also quite nice. And if I can't swap my ISP router, it would just add another device. In a perfect world, I'd have a single router running openwrt, with wifi6 and couple of 2.5+gbps ports (but unfortunately openwrt doesn't play nice with most wifi6 routers and these routers can get very expensive) For now, my ISP router does the job and I haven't had any issue (yet)

[-] tiller@programming.dev 1 points 1 year ago

If I ever need to update any device on the home automation vlan, I'd add an exception to the firewall for this specific host for the time of the update

[-] tiller@programming.dev 5 points 1 year ago

I heard everyone on the internet is nice and have good intentions. Did they lie to me?

[-] tiller@programming.dev 14 points 1 year ago* (last edited 1 year ago)

Well, to be honest if someone has access to my Wi-Fi, I'd consider that I've already lost. As soon as you're on my lan, you have access to a ton of things. With this setup I'm not trying to protect against local attacks, but from breaches coming from the internet

[-] tiller@programming.dev 2 points 1 year ago

Indeed, the isp router only has 1x 2.5gbps and 2x 1gbps. I wanted both my pc and my server to have 2.5gbps to wan, and I wanted 2.5gbps between them too

[-] tiller@programming.dev 7 points 1 year ago

I'm not well versed in ARP spoofing attack and I'll dig around, but assuming the attacker gets access to a "public" VM, its only network adapter is linked to the openwrt router that has 3 separated zones (home lan, home automation, dmz). So I don't think he could have any impact on the lan? No lan traffic is ever going through the openwrt router.

[-] tiller@programming.dev 13 points 1 year ago

I'm afraid I can't take your upvote sir... excalidraw.com

[-] tiller@programming.dev 4 points 1 year ago

Thanks, excalidraw.com if you're ever interested

274
My self-hosted home setup (programming.dev)

Dedicated wifi for automation allows me to have devices such as Xiaomi Vaccuum, or security camera not phoning home. OpenWRT with good firewall rules completely isolate my "public" containers/VMs from my lan.

Server was built over time, disk by disk. I'm now aiming to buy only 12TB drives, but I got to sacrifice the first two as parity...

I just love the simplicity of snapraid / mergerfs. Even if I were to loose 3 disks (my setup allows me the loss of 2 disks), I'd only loose data that's on these disks, not the whole array. I lost one drive once, recovery went well and was relatively easy.

I try to keep things separated and I may be running a bit too many containers/vms, but well, I got resources to spare :)

[-] tiller@programming.dev 10 points 1 year ago

Is there a deeper meaning than just that they are all tools to break the ground? I have a feeling there's a deeper joke but I fail to get it. (non native speaker here)

view more: next ›

tiller

joined 1 year ago