Cybersecurity professional with an interest in networking, and beginning to delve into binary exploitation and reverse engineering.

  • 2 Posts
  • 41 Comments
Joined 1 year ago
cake
Cake day: June 8th, 2023

help-circle





  • I’m planning to get one at a local datacenter

    Ah, never mind then, ignore everything I said.

    So my plan is to set up a VPS and configure my own private VPN

    Unless I’m misunderstanding, you don’t need a VPS for this. RouterOS supports you enabling a built-in VPN server, which you can then connect to directly, you don’t need to set up a VPS or anything. Then you can just put allow rules in the firewall for traffic from the VPN subnet in to your main subnet, your NASs subnet, your camera subnet, etc. This is how I access my homes resources remotely, the only ports open to the Internet are the VPN ports on my CCR1036.


  • Mostly privacy. My wife likes to play MP games on her PC, and I don’t want those services to know our IP. I also don’t trust websites generally, so I’d like to hide our IP for most, if not all, traffic. Our current ISP has us behind a NAT (we were assigned a 10.x.x.x static address), but our next ISP may have our IP public facing, and I still don’t want our exact city to be discoverable (we’re in a relatively small city, so easier to doxx).

    You do you, I certainly won’t judge your choices or opinions or whatever. I will say that adding a VPN into the mix will add (probably significant amounts of) latency to any connection routed through it. This has the potential to make multiplayer games borderline unplayable depending on the type and its sensitivity to latency in general.

    If you’re that worried about being doxxed stand up a site-to-site vpn between your tik and an AWS VPC. Use the right region and you probably won’t have much latency issues, although the transit fees from AWS might bite you.

    On the flip side, since the mikrotik can act as a vpn server you could always set up your whole home vpn along with the vpn server, travel overseas to somewhere like Japan, set your upstream vpn’s exit as the same country you’re visiting, VPN in to your house over your phones Japanese cellular carrier data connection, then watch local JP netflix with the knowledge that the traffic is tunneling around the globe to get to you and marvel at the interconnectedness of the modern world. ask me how i know how amazing this is.


  • MacOS is really the only one I never understood unless you’re really tied to the Apple ecosystem.

    I’d argue the “just use Linux” meme is more relevant for Mac users than Windows.

    At this point when I’m choosing a computer I’m really just choosing a hypervisor front end.

    MacOS gives me all the familiarity and transferred knowledge that I built up with Linux, but with a much more polished desktop experience. I like the Messenger sync, it helps me actually notice texts from my partner when I’m rabbit-holing hard. I like Mail better than Outlook (or Thunderbird or whatever the modern mail client on Linux is now).

    I just prefer MacOS as the glue between all my VMs that I work in each day. I’m personally on the desktop pc with Windows for gaming, MBP for all my work/hobby work (using VMs with whatever OS is necessary that day), and headless Debian on any servers train.



  • Yeah, Usenet servers all have a maximum retention time, usually around 3000 days or something like that. Any articles older than the retention time of your server won’t exist for you to grab, but stuff is usually reuploaded frequently. With torrents a super niche thing requires someone seeding the content all the time for it to be consistently accessible, while Usenet requires someone to reupload it once every 5-10 years (barring takedowns) which imo is more consistently stable, but as the other poster said having both ensures your bases are covered. I personally don’t really torrent anything beyond oddball bbc2+ documentaries at this point though.


  • iPhones have had user replaceable batteries for at least 5 years now. Alternatively you can pay about $45 for a third party repair center to do the swap, or you can pay $90 to have it done at an Apple Store. That’s extremely affordable when you’re talking about a $700+ phone. Maybe it’s much more of an issue in the Android phone space, but the only manufacturer directly named in the article was Apple.

    And besides, the main reason people value water resistance, is because if you do drop your phone in a lake, you can’t have it affordably repaired, so people pay a premium for phones that are resistant to being damaged in the first place.

    I pay a premium for phones that are resistant to being damaged because of the inconvenience of dealing with a damaged phone, regardless of repair cost. Even if I paid for AppleCare, I’m fucked if I drop my phone in the toilet while on work travel in Japan. Yeah, there are Apple stores in Tokyo, but I definitely used my phone as a crutch to navigate the Tokyo metro rail system. If it happened somewhere else, like Nagasaki or Sasebo I’d be double fucked without translation or navigation. Even if I’m just on vacation in a country where I speak the language and know where things are, now I have to stop my travel plans to get a phone fixed, even if the fix is completely free. I’d rather have a device that doesn’t lead to the loss of my personal time over an issue that could have been engineered away, but wasn’t because of some well intentioned but short-sighted legislation, especially when I can already do the thing the legislation is trying to enable me to do.


  • It’s like the only way they sell new ones now.

    If batteries didn’t fail, phones from 5 years ago would still be fine.

    I just got the battery on my iPhone XR, a 4.5 year old phone, replaced before a 3 week summer holiday. I had the option of replacing it myself, paying a third party store to replace it, or paying Apple to replace it. The part of the article that concerns me is quoted below.

    For “portable batteries” used in devices such as smartphones, tablets, and cameras, consumers must be able to “easily remove and replace them.” This will require a drastic design rethink by manufacturers, as most phone and tablet makers currently seal the battery away and require specialist tools and knowledge to access and replace them safely.

    That makes it sound like the current iPhone’s, like the XR at least and through the 14, won’t be considered “user replaceable” because they don’t have a back cover that just pops off, like they used to have on the Galaxy S12 or whatever. I’m concerned that this will result in phones either losing decent water resistance capability, or losing brand new battery capacity because manufacturers have to use a smaller battery in order to fit in a bunch of new gaskets and seals around a battery cover.

    the refusal to provide security updates.

    This is the single largest problem with phone manufacturers today. Apple devices currently get about 5-6 years of full OS updates, and up to 9-10 years of security updates. Samsung is the Android industry in this regard, and they, only just within the past year, committed to 5 years of security updates. Huawei commits to 24 months of security updates.

    I can wholeheartedly support the requirements for battery recycling and mandated percentage of recycled material in new batteries, but if the EU really wanted to address e-waste they would be prioritizing legislation to enact minimum security update timelines. This is the single biggest driver of “planned obsolescence” and e-waste in smart phones and tablets today.



  • I’m just going to add that the web ui on mobile is great. Good enough that I’ve stopped using mlem. Mlem doesn’t show you the different instances that users and communities are coming from which doesn’t really matter for users but is super annoying for communities, and the main dev said that’s intentional. It also shows you your “karma”, through what I’m assuming is just adding up the raw up/downvotes your posts/comments have accrued. Seeing that is what ultimately made me bounce, it seems like the complete antithesis of what Lemmy is trying to be about.

    Also, while they’re working on adding a NSFW blur, it doesn’t exist yet and fuck seeing all that loli ai porn on my feed. I don’t mind having to scroll past stuff I’m not interested in, but fuck me at least blur it.



  • Despite their issues I put hundreds of hours into each one and enjoyed them all. I see no reason to think this won’t be the same, and have no problem betting $70 on it.

    Really the issue here is that there are very few reasons to hand a company your money before they are prepared to deliver you a product. There are even fewer reasons when the product is most likely going to be purchased and delivered digitally, since there is zero chance the product will be sold out. When a game is being developed by Microsoft-owned Bethesda, they don’t need preorder money to finish the game.


  • I was pretty heavily involved in the competitive scene for this game, playing in the 50v50 tournaments and a few of the 18v18 seasonals. I bailed about 8 months ago or so, right before Black Matter pulled out completely. Every time I see news about HLL it just winds up reaffirming that decision. It sucks, because I had a lot of fun with the game while I was playing, but the vision that drew me in is completely gone as far as I can tell.

    Even though it’s a completely different game, playing The Finals beta earlier this year gave me the same feeling of cohesive vision from the developers.

    Edit - This is the first time since I’ve quit using Reddit that I’ve really wanted to go back to check on things, because I’d love to see the subreddit melting down.

    Edit 2 - Those feels when the opening cinematic for a 21 year old game and the opening mission cinematic for an 18 year old game both look better and get me more hyped than your trailer for a major update release in 2023. Also they shamelessly ripped off the BiA Road to Hill 30 cinematic from the second link. T17 doesn’t have an original bone in their bodies.


  • I’m not 100% sure on the answer to that.

    Twitter relies on Google Cloud to host services…

    So I’m assuming that means that Twitter is either using GCP to host cloud-based internally developed services, or SaaS deployments in the cloud, but that’s just a complete guess on my part.> n Musk’s takeover. Since “at least” March, Twitter has been pushing to renegotiate the contract

    Edit - This section was in the next paragraph lol.

    Now, Platformer has reported that a Twitter service called Smyte—an automated anti-abuse and anti-harassment tool that was previously operating on Google Cloud Platform (GCP)—will potentially shut down on June 30. This could lead to a flood of spam bots and CSAM on Twitter as bots and content could fail to be removed.

    So it sounds like it’s an internally built Twitter service that they host in GCP.