[-] sneakyninjapants@sh.itjust.works 237 points 4 months ago

Telegram's server side software is closed source, owned and ran by them exclusively so they really have no room to talk. WhatsApp doesn't even have OSS clients so they're even worse in that regard

[-] sneakyninjapants@sh.itjust.works 12 points 5 months ago

Here's one I have saved in my shell aliases.

nscript() {
    local name="${1:-nscript-$(printf '%s' $(echo "$RANDOM" | md5sum) | cut -c 1-10)}"
    echo -e "#!/usr/bin/env bash\n#set -Eeuxo pipefail\nset -e" > ./"$name".sh && chmod +x ./"$name".sh && hx ./"$name".sh
}
alias nsh='nscript'

Admittedly much more complicated than necessary, but it's pretty full featured. first line constructs a filename for the new script from a generated 10 character random hash and prepends "nscript" and a user provided name.

The second line writes out the shebang and a few oft used bash flags, makes the file executable and opens in in my editor (Helix in my case).

The third line is just a shortened alias for the function.

[-] sneakyninjapants@sh.itjust.works 49 points 6 months ago* (last edited 6 months ago)

How does the xz incident impacts the average user ?

It doesn't.

Average person:

  • not running Debian sid, Fedora nightly, ~~Arch~~, OpenSUSE Tumbleweed, or tbh any flavour of Linux. (Arch reportedly unafffected)
  • ssh service not exposed publicly

The malicious code was discovered within ~~a day or two~~ a month of upload iirc and presumably very few people were affected by this. There's more to it but it's technical and not directly relevant to your question.

For the average person it has no practical impact. For those involved with or interested in software supply chain security, it's a big deal.

Edit:
Corrections:

  • OpenSUSE Tumbleweed was affected; Arch received malicious package but due to how it is implemented did not result in compromised SSH service.
  • Affected package was out in the wild for about a month, suggesting many more affected systems before malicious package was discovered and rolled back.
[-] sneakyninjapants@sh.itjust.works 12 points 6 months ago* (last edited 6 months ago)

In addition to the ones listed:

  • Matrix client (Element, Shildichat, Fluffy chat, etc.)

  • XMPP client (Conversations, Monocles Chat, Blabber, etc.)

  • SimpleX Chat

  • Briar

None of them are tied to your phone number if that's what you mean by non voip.

[-] sneakyninjapants@sh.itjust.works 13 points 9 months ago

They did. Its called airmessage. Has been around for almost 3 years now

[-] sneakyninjapants@sh.itjust.works 10 points 10 months ago

Skip-intro is an unofficial plugin ATM but can vouch that it works decently well. Can't compare it to the Plex implementation since it has been quite a while since I've had Plex deployed.

Today's episode of Veronica Explains is brought to you in part by corporate greed.

Less than 5 seconds in and I already know I'm going to like this video.

It depends on if you were the first person on your instance to subscribe, and if that subscription happened before or after the posts were made. Lemmy doesn't do backfilling content, which means only new content after the subscription happens will be visible to your instance. I'm not a fan of that personally, but I can see why they did it that way.

[-] sneakyninjapants@sh.itjust.works 12 points 1 year ago* (last edited 1 year ago)

Loving the new interface. Seems like it fixed quite a few of the small issues I've had with the UI. Subscribing to a new community from the sidebar is fixed on desktop. Expanding an image, then voting on the post doesn't collapse the image anymore. Voting on posts and comments seems to be almost instant now (probably related to upgrade, but not 100% certain). The "Darkly-Compact" theme is amazing, much more like old.reddit. Haven't seen anything about whether or not @TheDude devoted more compute resources to the instance, but everything seems so, so much more snappy than a few days ago. Read that @db0 somehow tweaked the query parameters for the PG database, which helped reduce the server load (announcement link here). Maybe that would be worth looking into as well to optimize even further.

Edit: Looks like @phiresky has been contributing to Lemmy on GH, I wonder if that's what db0 meant. Though not seeing any commits directly related to DB queries.

I self-host basically everything I can, aside from email. Self-host Calendar, contacts, streaming, budgeting, documents and storage, passwords, private chat, etc.

Email I'd love to self-host, but consensus seems to be that it's between moderately difficult to impossible to get outbound deliverability depending on quite a few factors, some of which are out of one's control.

As for reasons why I self-host, basically everything you've listed in your post. I want to be the owner of my data, not some corp making profit by mining it for ad revenue or selling it to data brokers. Also I love digging into the guts of standing up my own services and keeping them maintained, I've learned so much over the years from it.

[-] sneakyninjapants@sh.itjust.works 26 points 1 year ago* (last edited 1 year ago)

My long and mostly complete list:

  • Audiobookshelf (GH)
    • Using for audiobooks. Ebooks, comics, and podcast support in early stages.
  • Authelia (GH)
    • Using for two-factor authentication in front of all of my services. Critical infrastructure.
  • Bazarr (GH)
    • Using for automated subtitle management. Have not needed to rely on it much.
  • Code-Server (GH)
    • Using for a plethora of things. I could write an entire post on this alone.
  • Courier
    • Using (occasionally) for package-tracking from various carriers.
  • EmulatorJS
    • Using for retro-emulation.
  • Gitea (GH) x2
    • Using as a git repo server, package repository, and for CI/CD automation. Is critical infrastructure in my lab. Could also write an entire post on this one.
  • Headscale with Headscale-UI. Tailscale clients on various VMs LXCs, etc.
    • Using to securely network with my remote servers.
  • Homepage
    • Using as a "single-pane-of-glass" to get an overview of service health with links to the various services.
  • Invidious
    • Using in-place of YouTube.
  • IT-Tools (GH)
    • Using for the myriad of various useful tools it offers.
  • Jellyfin (GH)
    • My media player of choice. Using for movies and television, but supports music, ebooks, and photos in addition.
  • Kopia Server (GH)
    • Using for data backups to my Minio instance on local NAS and Wasabi. Simple, fast, and reliable.
  • Librespeed (GH)
    • Using for the occasional speedtest to my remote servers.
  • Matrix stack using Conduit back end and Element-Web front end
    • Federated Discord essentially. Using as a private instance for friends and family.
  • Minio
    • Using primarily as a gateway to storing backups, also serves git-lfs for Gitea.
  • N8N (GH)
    • Using for home-automation, backing up my Reddit saved posts to a database, deal-alerts, and part of a CI/CD pipeline.
  • NTFY (GH)
    • Using for infrastructure notifications mostly. Very simple and versatile alerting solution.
  • NZBGet
    • Using for getting "usenet articles".
  • Paperless-NGX
    • Using for document archival. Important receipts, documentation, letters, etc. live here.
  • Portainer (GH) with multiple agents on VM's LXCs and VPSs
    • High level management of my various docker containers.
  • Prowlarr
    • Using to provide torznab API to websites that dont natively have it. Integrates with Radarr and Sonarr
  • Radarr (GH)
    • Using for movie management.
  • Radicale
    • Using for contacts and calendar server.
  • Raneto (GH)
    • Using as a knowledge base. Lab documentation, lists, recipes, lots of things live here. Using with with code-server and Gitea.
  • Readarr (GH)
    • Using for book management
  • Recyclarr (GH)
    • Using for Radar and Sonarr to sync search terms for their automations. Very useful, hard to summarize.
  • Requestrr
    • Using (very rarely) as a requests bot for Radarr and Sonarr.
  • SFTP-Go
    • Using mostly in-place of Nextcloud. Used to back up phones mostly.
  • Shaarli (GH)
    • Using as a read-it-later service. Went through lots of these, and Shaarli has been good enough.
  • Singlefile-Archive
    • A hacky way of presenting pages saved with the singlefile browser extension. Not exactly happy with the solution, but for my ocasional use it does work.
  • Sonarr (GH)
    • Using as TV series manager
  • Speedtest-Tracker (GH)
    • Using to get periodic speedtests. Plan to automate results to blast my ISP if my service speed gets too low.
  • Traefik (GH) on each seperate host
    • Using as a web proxy in front of my various services. Critical infrastructure.
  • Transmission (GH)
    • Using to get "Linux ISOs"
  • Uptime Kuma (GH)
    • Using to monitor site and services status along with a few others. Integrated with NTFY for alerts.
  • Vaultwarden
    • Using as my password manager. Have been using for years, cannot recommend enough.
  • A handful of static websites served with NGINX
    • The old standby, its been reliable as a webserver.

These services are the result of years of development and administrating my lab and while there is still some cruft, it's mostly services that I think have real utility.

As far as hardware:

  • Running pfsense on a toughbook laptop as a router-firewall.

  • A SuperMicro 24 bay disk-shelf with Proxmox and ZFS for NAS duties and a couple services.

  • Lenovo Tiny boxes with a Proxmox cluster for the majority of my local services.

  • Dell managed switch

  • A few Raspberry-pi's with Raspbian for various things.

  • Linksys AP for wifi

Edit: Spelling is hard.

view more: next ›

sneakyninjapants

joined 1 year ago