Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

@Darkassassin07@lemmy.ca avatar

Darkassassin07

@Darkassassin07@lemmy.ca

🇨🇦

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Is it practically impossible for a newcomer selfhost without using centralised services, and get DDOSed or hacked?

I understand that people enter the world of self hosting for various reasons. I am trying to dip my toes in this ocean to try and get away from privacy-offending centralised services such as Google, Cloudflare, AWS, etc....

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Drink less paranoia smoothie...

I've been self-hosting for almost a decade now; never bothered with any of the giants. Just a domain pointed at me, and an open port or two. Never had an issue.

Don't expose anything you don't share with others; monitor the things you do expose with tools like fail2ban. VPN into the LAN for access to everything else.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Unless you are behind CGNAT; you would have had the same plug+play experience by using your own router instead of the ISP supplied one, and using DDNS.

At least, I did.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Sure, cloudflare provides other security benefits; but that's not what OP was talking about. They just wanted/liked the plug+play aspect, which doesn't need cloudflare.

Those 'benefits' are also really not necessary for the vast majority of self hosters. What are you hosting, from your home, that garners that kind of attention?

The only things I host from home are private services for myself or a very limited group; which, as far as 'attacks' goes, just gets the occasional script kiddy looking for exposed endpoints. Nothing that needs mitigation.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

and using DDNS

As in, running software to update your DNS records automatically based on your current system IP. Great for dynamic IPs, or just moving location.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I'd be curious to know more about the methods used.

Did they somehow spread an infection through the bittorrent protocol, or was there an alternate route used?

How exactly did the malware arrive on consumer devices?

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

No. You just need to be able to exit without power. Getting back in mechanically isn't a requirement.

It should be, but it's not.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

It's not immoral until you start having your kid throw games to swing the odds in your favor.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I wonder how that compares to my own collection...

https://lemmy.ca/pictrs/image/50ee9fb2-a68e-4c5f-8d0f-6eabb1057fc4.jpeg

I haven't found a source for the size of Netflix/Amazon/Hulus libraries; but I haven't looked all that hard either.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Storage is expensive :/

That's already almost 36tb, after conversion to HEVC which compressed it ~40%

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Tdarr: (Automatic transcoding of media, can help save you a lot of disk space)

That's a new one to me, I'll have to check that out. Thanks!

Been doing conversions via Emby, but it's not a very powerful tool for that.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Because the legal options are garbage.

The pirates provide a better service with more content for cheaper than the legal options; and pirating yourself takes effort as well as cost (hardware, trackers, usenet, etc).

Some people are happy to just pay for decent service; others like to learn about the process, then setup and run their own servers.

To each their own.

Darkassassin07 , (edited )
@Darkassassin07@lemmy.ca avatar

Up until now, I've been using the convert tool in Emby server. You can select a whole library and convert it, or individual items/playlists/collections; with options to automatically convert new media as it's added.

Tbh, I've been having a bit of trouble with it re-converting media it's already done, so I was looking for another solution.

Someone in this thread mentioned tdarr, so I'm going to be looking into that this weekend. Seems like a much more manageable tool with more powerful options.

/edit; I should also mention, this is a long process. Using an rtx4080, it was almost 3 full months non-stop to convert my entire media library from mostly h264 -> h265.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I'm gonna need a lot more lotion...

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Cheaper, but it's still not cheap and I really don't have a whole lot of disposable income rn.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

they probably made a really good return before it shut down.

Part of the sentence was to forfeit $1million in profits, I'd say they did pretty well for themselves.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Plex is a privacy nightmare that's slowly trying to faze out you having a server all together in favor of feeding you commercialized content from other providers; and many people find Jellyfin is far too unpolished/disorganized for a lot of debatable reasons I won't go into.

I've been quite happy with the middle ground: Emby. It's not FOSS, but is well polished with consistent development, great feature parity across platforms, excellent clients for pretty much every device I'd want to use, and a helpful community ready to assist with any problems you come across. They also have a heavy focus on privacy; with no third party partners collecting your info like Plex, and no telemetry sent from servers/clients.

The lifetime premier license I bought 7 years ago was well worth it.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

The number of people I've come across that are absolutely baffled by the concept of port forwarding....

Then you add CGNAT ontop and things can get really complicated for someone unfamiliar.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Reminds me of the BBC licence fee in the UK.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Yes. Emby was originally open source, but people would regularly fork it to remove the licensing. When they chose to go closed source; jellyfin forked that final release and has built from there.

Emby has a premier licencing system to support their development, instead of selling user data and making deals with content providers like Plex, or depending on OSS development/contributions like Jellyfin.

As far as I understand almost 80% of jellyfins current code is the original Emby code (called 'media browser' or 'MB' at the time), though to be fair, I haven't verified that claim.

Darkassassin07 , (edited )
@Darkassassin07@lemmy.ca avatar

Both the client and server connect to plex.tv which then brokers the connection between them. They essentially work as a very limited vpn between your clients and server.

This also gives them unrestricted access to the entirety of data passed between devices; and the ability to request any and all info from your server to be handed to whoever they chose.

This is also how they allow you to 'share' content/libraries with each others servers; through their public infrastructure that's collecting your information. Information they then sell to third parties to support their development and broker content agreements.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

They just share a chimney. Extra Smokey flavor.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I still want Futurama style human transport tubes

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

As long as you didn't want to send it whole...

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

It will definitely require corrections from GPS or other systems, but if made sufficiently accurate; it could be months or even years before the accumulated errors necessitate a correction.

What seems more concerning to me is a system like this would require 100% up time between outside corrections.

A gps receiver can acquire its position from a completely powered off state. Inertial guidence though, needs to be told its current position; then it can keep track of where it goes from there. If there's any hiccup with power, you've completely lost your location fix and can't reacquire it alone.

Put the two together though, and the inertial guidence can accurately fill in the gaps between gps service while also getting regular updates/corrections when you do have that signal available.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

It would certainly make jamming of guided weapons quite difficult; missiles, drones, UAVs, etc.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

The middle-man provides plausible deniability in this case. PornHub can genuinely say they don't see connections from age-verification states atm. That stops being true if they host the VPN, making them aware of actual client locations.

Lawsuit Filed Challenging Constitutionality Of Vast Network Of Illinois License Plate Readers (www.techdirt.com)

This lawsuit might be a long shot, but it’s not completely a foregone conclusion at this point. The state of Illinois has tougher privacy laws than most states, which may factor into the judge’s decision. On the other hand, this lawsuit — filed by two Illinois residents with the assistance of the Liberty Justice Center —...

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I don't mind the concept of automatic plate readers; but that data should not be retained. (specifically; images that don't match the hot list, should be immediately discarded)

Taking the photos isn't an issue, it's aggregating that info into a long-term searchable database of people's movements that's the problem.

That information will be released/abused; either by leaks/insiders or via systems breach.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

https://www.theverge.com/22985101/dji-aeroscope-ukraine-russia-drone-tracking

Something that stuck out to me:

The AeroScope signals are not encrypted, despite what we wrote in a previous version of this post — even though DJI and an independent source both told us they were encrypted, and DJI insisted they were when we did a fact-check, DJI now admits that they aren’t encrypted at all. So they could be picked up by other kinds of receivers.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

A one-off, or on occasion is fine; but having to constantly reassure someone that they aren't the cause of every single frustration you encounter gets extremely exhausting.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Fun fact: until recently, most airport scanners literally couldn't differentiate between water and many common explosives. Hence the scrutiny of water based products/possessions.

https://youtu.be/nyG8XAmtYeQ

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I'd just like to clarify: the new machines aren't MRI (the magnets in those would prohibit all metal objects being within 100ft).

The new machines are also xray; but the xray emiters and detector are now on a spinning carriage similar to an MRI. This allows you to build a 3d model of the object and calculate it's volume, which when combined with the density measurements gives much more reliable material detection.

This also means your stuff doesn't have to be removed from bags to ensure items aren't blocking each other from the scanner.

Darkassassin07 , (edited )
@Darkassassin07@lemmy.ca avatar

I setup borg around 4 months ago using option 1. I've messed around with it a bit, restoring a few backups, and haven't run into any issues with corrupt/broken databases.

I just used the example script provided by borg, but modified it to include my docker data, and write info to a log file instead of the console.

Daily at midnight, a new backup of around 427gb of data is taken. At the moment that takes 2-15min to complete, depending on how much data has changed since yesterday; though the initial backup was closer to 45min. Then old backups are trimmed; Backups <24hr old are kept, along with 7 dailys, 3 weeklys, and 6 monthlys. Anything outside that scope gets deleted.

With the compression and de-duplication process borg does; the 15 backups I have so far (5.75tb of data) currently take up 255.74gb of space. 10/10 would recommend on that aspect alone.

/edit, one note: I'm not backing up Docker volumes directly, though you could just fine. Anything I want backed up lives in a regular folder that's then bind mounted to a docker container. (including things like paperless-ngxs databases)

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I have one more thought for you:

If downtime is your concern, you could always use a mixed approach. Run a daily backup system like I described, somewhat haphazard with everything still running. Then once a month at 4am or whatever, perform a more comprehensive backup, looping through each docker project and shutting them down before running the backup and bringing it all online again.

Spotify is raising the cost of Premium subscriptions, again (www.engadget.com)

Spotify is officially raising its Premium subscription rates in the US come July, following reports of the move in April. The platform is increasing its Individual plan from $11 to $12 monthly and its Duo plan from $15 to $17 monthly — the same jump as last year's $1 and $2 price hikes, respectively. However, its Family plan...

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

It's funny: I haven't paid for any streaming/cable/media service in 10+ years; instead choosing to sail the seas, hord media, and host my own streaming service using tools like Emby/Plex/Jellyfin.

Spotify was the one and only service I had been considering, mainly because managing music files is still a PITA; but I keep running into articles like this one and renewing my will to fly the Jolly Rodger.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Trumps lawyers*

I doubt he had any hand in that statement.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Lmao at the number of MAGA simps in that comment section.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Sorry you have trauma; stop making other people into victims of your trauma.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

No. It's not appropriate to take someone's joyful conversation about their experiences and shift the focus to you and your past trauma. It's an incredibly shitty thing to do.

To be clear; The previous comment was not a response to OP, it's a response to people that overshadow/intentionally bring down other peoples happiness with their past traumas. Like the humanoid character in the image did.

An alternative to having lazers shoot from your eyes.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

The context you are missing is that these interactions aren't limited to strangers or the internet, and typically form a pattern of regular behaviour vs just a one off comment.

A person is a victim of and suffers from the effects of their own traumatic experiences and instead of learning to deal with them and heal, they induce others to suffer some those effects as well; thus turning others into victims of that same trauma.

It's not as big and dramatic as a murder, but it's still victimization.

Darkassassin07 , (edited )
@Darkassassin07@lemmy.ca avatar

Record for Saudi, or record in general...?

'Cause I'm currently paying (CAD) between $109.7 and $140.8 (so USD $79.9 - $102.5) per MWh.

Edit: Damn it, I shifted a decimal in the mental conversion from KWh to MWh. Fixed the values above. (10x)

That Saudi power is much cheaper than I thought...

Darkassassin07 , (edited )
@Darkassassin07@lemmy.ca avatar

Southern BC.

Not sure what you mean by demand charges. Additional cost for peak hours perhaps? Not really a thing where I live.

Energy is billed at the lower of the two numbers I gave for the first ~1.4MWh, then the rest is billed at the higher rate. (metered between two months) It doesn't matter when you use the energy.

Aside from the energy costs, there's a ~$0.22/day base charge and 5% gst. That's it.

Edit: (see the edit in previous comment)

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

Yup, but we have quite a few of our own as well. Taking advantage of the Rocky Mountains above and below the border.

Darkassassin07 ,
@Darkassassin07@lemmy.ca avatar

I shouldn't do math late after work....

(see the edit above)

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • incremental_games
  • meta
  • All magazines