• 4 Posts
  • 59 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle



  • Just yesterday I was on a news website. I wanted to support it and the author of the piece so I opened a clean session of firefox. No extensions or blocking of any kind.

    The “initial” payload (i.e. after I lost patience approximately 30s after initial page load and decided to call a number) was 14.79MB transferred. But the traffic never stopped. In the network view you could see the browser continually running ad auctions and about every 15s the ads on the page would cycle. The combination of auctions and ads on my screen kept that tab fully occupied at 25-40% of my CPU. Firefox self-reported the tab as taking over 400MB of RAM.

    This was so egregious that I had to run one simple test. I set my DNS on my desktop to my PiHole and re-ran my experiment.

    Initial payload went from almost 14.79 -> 4.00MB (much of which was fonts and oversized images to preview other articles). And the page took 1/4 the RAM and almost no CPU anymore.

    Modern web is dogshit.

    This was the website in question. https://www.thenation.com/article/politics/welcomefest-dispatch-centrism-abundance/








  • So to be perfectly clear, setting up Wireguard is about bridging two LANs (or devices) to make them virtually appear as if they belong on the same network. For every client that connects they would need to be issued a key and every device would have to be set up. But all the traffic between the two “LANs” would be encrypted and secure.

    But I don’t think WireGuard is what you’re looking for, because this would require setting up all these other people with WireGuard as well. Or doing a more complex setup where you use a VPS and WireGuard and have that serve an exit point instead of your home connection. Or any other number of more complex setups that would work but require a lot more effort… and it sounds like you were just looking for basic port forwarding.

    Mullvad took that feature away a couple of years ago (presumably to combat CSAM dissemination). So if you were hoping to just have a secure path for someone to connect to your media server routed through Mullvad, I don’t believe that’s possible anymore.



  • Depending on how you’re accessing this, and how many people you’re trying to set this up for, it would probably be easiest to learn how to deploy your own Wireguard network. In my case, my phone automatically connects to my own Wireguard on my server (an 11 year old laptop) and whenever I’m on the go I have full access to my LAN + PiHole DNS filtering.

    So, what’s the point? The point is that you will be able to securely connect to your media server without exposing it directly to the internet, all without paying for a service to do what you can already do yourself, provided your ISP allows you port forward.


  • If in the future you think you might bring family/relations onboard to the password manager, it may be worthwhile to pay for a BitWarden family plan. BitWarden is really low-cost and they publish their stuff as FOSS (and therefore are worth supporting), but crucially you don’t want to be the point of technical support for when something doesn’t work for someone else. Self-hosting a password manager is an easier thing to do if you’re only doing it for yourself.

    That said, I use a self-hosted Vaultwarden server as backup (i.e. I manually bring the server online and sync to my phone now and again), and my primary password manager is through Keepassxc, which is a completely separate and offline password manager program.

    Edit: Forgot to mention, you can always start with free BitWarden and then export your data and delete your account if you decide to self-host.


  • GnuLinuxDude@lemmy.mltoSelfhosted@lemmy.worldWhat is Docker?
    link
    fedilink
    English
    arrow-up
    11
    ·
    2 months ago

    You might notice that your Windows installation is like 30 gigabytes and there is a huge folder somewhere in the system path called WinSXS. Microsoft bends over backwards to provide you with basically all the versions of all the shared libs ever, resulting in a system that can run programs compiled from decades ago just fine.

    In Linux-land usually we just recompile all of the software from source. Sometimes it breaks because Glibc changed something. Or sometimes it breaks because (extremely rare) the kernel broke something. Linus considers breaking the userspace API one of the biggest no-nos in kernel development.

    Even so, depending on what you’re doing you can have a really old binary run on your Linux computer if the conditions are right. Windows just makes that surface area of “conditions being right” much larger.

    As for your phone, all the apps that get built and run for it must target some kind of specific API version (the amount of stuff you’re allowed to do is much more constrained). Android and iOS both basically provide compatibility for that stuff in a similar way that Windows does, but the story is much less chaotic than on Linux and Windows (and even macOS) where your phone app is not allowed to do that much, by comparison.


  • GnuLinuxDude@lemmy.mltoLinux@lemmy.mlPost Deleted!
    link
    fedilink
    arrow-up
    3
    ·
    2 months ago

    Ok good luck with your state-sponsored reeducation programs in your Nazi-adjacent Western democracies where the left holds no political power 👍.

    For everyone else who has a fucking clue: when your government has a gestapo police state that rounds up and deports the people the state has deemed undesirable, guess what? The Nazis are already in control.





  • I use Bazzite on my Steam Deck because I wanted to get LUKS encryption for the hard drive (and otherwise do not wish to manually maintain the computer). I cannot take what is effectively a general purpose PC out and about without encryption. Especially not with the current political climate in my country (USA).

    From dealing with SteamOS, I am already familiar enough with how to set up a full dev environment on the immutable distros. So while that is not a challenge for me, it is still a hassle to deal with. I’d rather just directly install my libraries and binaries rather than do workarounds in containers (and then remember the containers).

    I think we’ll truly be in the immutable desktop distro future when I can do something like install the base distro image AND simply dnf install something (e.g. nvidia-vaapi-driver or gcc) on top without having to layer it with rpm-ostree. That is, my dnf installs should transparently live on top of the base distro, and that way my base system will never break even if something on top of it does. The problem with layering with rpm-ostree is you are running the risk of a future failed upgrade. It would be like if your MacBook said “sorry, you installed a weird XCode library and therefore we cannot upgrade the OS” – and that should obviously never happen. Restoring my computer to a base state could be as simple as dnf remove * or a GUI option to “Revert to base + keep user files” and that should leave me with a functioning basic system.

    Anyway, even though I only use an immutable distro on one device I do see it as the future of Linux desktop computing. I am not up-to-date with the development efforts, but I think we’ll eventually reach a day when using and configuring it, even for advanced users, will be no more difficult than traditional distros. Maybe by 2030 that will be the case.

    I made my remarks w.r.t. rpm-ostree and the Fedora family of distros because that’s what I use. Obviously the other immutable distros have their own versions of these tools and their own versions of solving the problems related to them.