• 28 Posts
  • 222 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle










  • I’m running Mint on an 8GB laptop and I’m surprised by just how much can be running at one time. Right now I’m running Firefox with 10 open tabs, Waterfox with 8 tabs, Thunderbird, Keepass, Calibre, Signal, a Whatsapp client, Syncthing, Libreoffice Writer with 2 open docs & Calc with 2 open small spreadsheets, a couple of terminals and Gedit, and didn’t even notice it until came across these comments. A friend who uses Windows 11 says 32GB is recommended now.

    Microsoft must be thrilled with age verification being required at the OS level. What a great way to lock people into their Microslop garbage.




  • There are ~50,000-60,000+ available IP ports. If you had Wireguard configured correctly and running on every single one of them a port scanner would get exactly the same result as if every port was closed. Wireguard is completely silent unless the correct key is provided.

    The “script kiddies” could scan every port for months and they’d get the same result. There is no known way to even know there’s an open port much less know that Wireguard is running on it AND have the correct key for access.

    I understand being gun shy after your experience (I would be too), but that experience has nothing to do with what happens when you open a port for Wireguard.






  • I think you’re overthinking it. Wireguard is considered the “gold standard” and an excellent solution for what you’re trying to do. Open ports can be a concern, but an open Wireguard port is completely silent when not in use and does not respond unless it receives the correct access keys. That makes it invisible to port scanners.

    Wireguard on my OpenWRT router works flawlessly. If the router is working the WG endpoint is too, and there are no 3rd parties involved. Tailscale provides much the same thing, but as I understand it requires the involvement of multiple 3rd party services. I’ve been burned too many times by terms of service changes and security breaches so I wanted to avoid relying on any corporate entities wherever possible.

    Tasker brings up the tunnel on my phone automatically whenever I’m not connected to my home wifi and drops it when I get back home, so my home servers are always available. My biggest problem when not at home is Verizon’s crappy mobile network.

    IMO it’s worth the effort to properly configure Wireguard and get your servers working. Once you get it set up you probably won’t have to touch it for years.