• 0 Posts
  • 135 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle
rss
  • Tailscale is just a bunch of extra fancy stuff on top of Wireguard. If you don’t need the fancy stuff, using raw Wireguard can be more lightweight, but might require more networking knowledge.

    The biggest thing Tailscale brings you the table is NAT traversal. On top of that it uses direct Wireguard tunnels as necessary instead of creating a mesh like you usually would if you were using raw Wireguard. It also offers convenient bits of sugar like internal DNS, and it handles key exchanges for you so it’s just generally easier to configure. When you do raw Wireguard you’re doing all the config yourself, which could be a pro or a con depending on your needs—and you’ll be editing config files, unlike Tailscale which has a GUI for most things. It also supports some more detailed security options like ACLs and I think SSO, while Wireguard is reliant on your existing firewall for that.

    Here’s what Tailscale has to say about it: https://tailscale.com/compare/wireguard

    I’ve messed around with Tailscale myself, but ultimately settled on running Wireguard. The reason I do that though is because I trust my LAN, and I only run Wireguard at the edge. Tailscale really wants to be run on every node, which in turn is something that raw Wireguard theoretically can do but would be onerous to maintain. If I didn’t trust my LAN, I’d probably switch to Tailscale.


  • A lot of people have suggested Tailscale and it’s basically the perfect solution to all your requirements.

    You keep saying you need ProtonVPN which means you can’t use Tailscale, but Tailscale actually supports setting up an exit node which is what you need. Put Protonvpn on the Raspberry Pi, then set it up as an exit node for your tailnet. There’s a lot of people talking about how they did this online. It looks like they even have native support for bypassing the manual setup if you use Mullvad.

    As long as every client has the ability to use Tailscale (I.e. no weird TVs or anything) this seems like it checks all your boxes. And since everything is E2EE from Tailscale, TLS is redundant and you can just use HTTP.



  • MelmitoLinux@lemmy.mlssh reverse tunnel
    link
    fedilink
    English
    38 days ago

    One use for wireguard in a container is that if you’re using other containers on the same host you can use container magic to route the traffic of specific containers through the wireguard tunnel, while other containers bypass the tunnel.



  • I prefer to stick to uncontroversial works made by politically conscious creators, like H.P. Lovecraft!

    But no, I get it. I like art made by people who are or weren’t great. And that’s before considering my participation in the vast system of capitalism which necessarily involves systemic evils far beyond what JKR personally is capable of.

    It just hurts to have a person who is loudly transphobic like JKR, who uses all support of her IP as support of her views, and then all the majority of society has to say is “I love HP tho”. It hurts especially when society is increasingly hostile towards trans people right now.


  • There’s no ethical consumption under capitalism. And it’s not like HL was handmade by JKR herself, there were plenty of people working on it who I’m sure aren’t transphobic and whose livelihoods are connected to the franchise as a result, some of whom are probably trans themselves.

    The “separate the art from the artist” argument just always rings a little hollow to me. I tend to be put off when people cling to a franchise that is owned by a person who profits off hateful rhetoric and contributing to an unsafe environment for us. It feels like continuing to enjoy her art continues to platform her hate and shows people that being transphobic not only isn’t a deal breaker, it’s acceptable and profitable.








  • MelmitoProgrammer Humor@lemmy.mlOff by one solitude
    link
    fedilink
    English
    1
    edit-2
    7 months ago

    Yeah, fair enough. To my mind I guess I don’t think of array indexes as an example of actual zero based numbering, simply a quirk of how pointers work. I don’t see why one starting from zero has anything to do with the other starting from zero. They’re separate things in my head. Interestingly, the article you linked does mention this argument:

    Referencing memory by an address and an offset is represented directly in computer hardware on virtually all computer architectures, so this design detail in C makes compilation easier, at the cost of some human factors. In this context using “zeroth” as an ordinal is not strictly correct, but a widespread habit in this profession.

    That said, I suppose I still use normal one-based numbering because that’s how I’m used to everything else working.


  • Indexes start from zero because they’re memory offsets, but array[0] is still the first element because it’s an ordinal number, not an offset. It’s literally counting each element of the array. It lines up with the cardinality—you wouldn’t say ['A', 'B', 'C'] has two elements, despite array[2] being the last element.



  • MelmitoSelfhosted@lemmy.worldZeroTrust Your Home
    link
    fedilink
    English
    67 months ago

    When done correctly, the banner is actually a consent banner. It’s a legal thing, not necessarily trying to discourage criminals. It’s informing users that all use will be monitored and it implies their consent to the technology policies of the organization. It’s more for regular users than criminals.

    When it’s just “unauthorized access is prohibited”, though, especially on a single-user server? Not really any point. But since this article was based on compliance guidelines that aren’t all relevant to the homelab, I can see how it got warped into the empty “you no hack” banner.


  • I can kind of see where he’s coming from, but only if you’re weighing it against an assumed future where we’re going to die out tomorrow. That’s a low bar for hopeful, and certainly not “100% positive”.

    I have a hard time seeing I Have No Mouth and I Must Scream or even worse, All Tomorrows, as “hopeful”. I’d honestly rather just die.

    Plus, not all sci-fi involves humans, and not all sci-fi is in the future. There’s scifi with no humans in it, there’s scifi set in the past or in an alternate present, and none of those qualify as “hopeful by default” in the way he defines it any more than any other fiction does.


  • But how will you get a “universal” view of the fediverse? No single authoritative view exists.

    You yourself acknowledge that this is complicated, but I honestly don’t understand what appeal a hacked together fake centralized system would have for people if they don’t care about decentralization in the first place. Any such solution is almost inevitably gonna end up being janky and hacked together just to present a façade of worse Reddit.

    Lemmy’s strength is its decentralization and federation. It’s not a problem to be solved, it’s a feature that’s attractive in its own right. It doesn’t need mass appeal, it’s a niche project and probably always will be. I don’t think papering over the fundamental design of the software will make it meaningfully more attractive to the non-technically minded.


  • I don’t think the relevance of the TLD matters. It’s worth being aware of whether you’re using a ccTLD, especially in the case of countries like Afghanistan, but you also used .io as an example which is overwhelmingly used by non-British Indian Ocean Territory sites and is proven reliable. It’s even managed by an American company.

    Then .app isn’t a part of the original TLDs, but actually a part of the new wave of modern gTLDs. And if you’re considering .app, there’s no reason not to consider the thousands of other generic TLDs out there.

    Like with the ccTLDs, the only thing you have to consider is the trustworthiness of the managing org.