• 1 Post
  • 111 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle


  • h3ndrik@feddit.detoSelfhosted@lemmy.worldCloudflare is bad. Youre right.
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    2
    ·
    edit-2
    5 months ago

    Well, centralization and giving up your freedoms, letting someone else control you, is always kinda easy. Same applies to all the other big tech companies and their platforms. I’d say it applies to other aspects of life, too.

    And I’d say it’s not far off from the usual setup. If you had a port forward and DynDns like lots of people have, the Dns would automatically update, you’d need to make sure the port forward is activated if you got a new router, but that’s pretty much it.

    But sure. if it’s too inconvenient to put in the 5 minutes of effort it requires to set up port forwarding everytime you move, I also don’t see an alternative to tunneling. Or you’d need to pay for a VPS.


  • h3ndrik@feddit.detoLinux@lemmy.worldAnti Malware with Linux
    link
    fedilink
    English
    arrow-up
    19
    ·
    edit-2
    5 months ago

    Not really. Contrary to what people say, there is practically no malware targeting desktop machines and the risk is close to zero. There have been a few select pieces of malware during Linux’ history. But as far as I remember nothing to worry about for desktop users. You need to worry about security if you run a server. And ClamAV and such are mainly for scanning for Windows viruses, so noone else in the network gets infected by files they download from your server.

    Do backups, though. Loosing all your files is as easy as running ‘rm -rf *’ in the terminal.

    And as anecdotal evidence: I’ve been running Linux for like 20 years and I know lots of people who do. Practically no one I know uses an antivirus. And I know 0 people who got their desktops infected. We had our servers targeted though and the website defaced because we didn’t update the webserver for nearly two years. That definitely happens.

    Yeah and as other people pointed out: use software from the package repository of your Linux distribution. That’s the nice thing about Linux and a popular Distro, that most popular software is packaged and ready to install with one command/click. Lately some users have adopted the habit of installing lots of software from random sources. I avoid that unless it’s absolutely necessary.





  • Agreed. I think most prominently competitive gaming; development where you need to assure it later on actually works as intended on the target platform; and business stuff where parties are obliged by contract to guarantee something works flawlessly and keeps running that way - are good examples.

    That laptop doesn’t look to me like it was intended to do any of that, so that’s maybe why I’m being a bit negative here. It’s cool and a nice idea, though…

    (And we already have ARM-based retro machines, FPGA clones if popular processors available. So there is no need for them to do the exact same thing.)


  • The M6117C also isn’t the original and not that old. Also the 8MB of RAM aren’t true to the original.

    I’m not sure. I occasionally use emulation. And I think it’s fine. Unless you’re a speed runner and need everything to be exact to the frame timing, you won’t notice. Certainly not for a desktop UI like the Win 3.11 on the photo. I guess it depends on the use-case.

    Something like a FPGA or an ESP32 can also be repaired, replaced, programmed and most of the things a CPU or different architecture can do. And if the emulation layer doesn’t have too many flaws, it’ll be pretty realistic. Not exactly the same thing, but I think it’ll do for practically any use-case. And it comes with other benefits.

    I think you’re allowed to do it just for the sake of it. But I often see people using an original SNES because “emulation is shit” and then they proceed to connect it to the TV set in their livingroom, which isn’t even close to the original experience because it adds lots of latency and doesn’t have interlacing and the colors are different than on a CRT, too. I think that’s just having strong opinions despite being uneducated. And I think I’m equally as well off with my Raspberry Pi and Emulationstation. (Which can also run DOS games.)

    In the end everyone is entitled to their opinion. But this also isn’t the original (You can get an old Laptop… I have one with an 486.) But this isn’t the original but a replica. And it’s debatable (in my opinion) whether it’s the CPU architecture that does the realism, or other factors. I think for realism, you’d need a black and white liquid crystal display, a NiMH battery that degrades fast if you don’t charge it right and half the amount of RAM at most. And maybe just a floppy drive. The CPU is something you wouldn’t notice with the current state of technology.





  • I installed it like 2 weeks ago. As of now it’s still running and has a really low memory footprint compared to Synapse. But a lot of things aren’t implemented. Chatting works fine. I get a lot of warning messages about not implemented things, though. Like my client (FluffyChat) trying to query some profile status … I’d say try it. I’ve done so. But I can really only give some good advise after a few more weeks of using it. Maybe there is a dealbreaker.







  • As of now all advice here is kinda missing the point or wrong… (Exept the one recommendation to do updates ;-) I wouldn’t use Cloudflare as it’s really bad for freedom, watches your traffic and most interesting things aren’t even in the free/cheap plans… You can’t restrict connections to the “Established state” or you can’t ever connect to your server… And SSH is a safe protocol. Just depends on the strength of your passwords… And yeah, opening ports is never 100% safe. Neither is using computers. They can be hacked but that’s not helping… And I’d agree using Wireguard or Tailscale would help. But you already said you don’t want a VPN…

    I didn’t have a proper look at the Forgejo Docker container. I’d say it’s safe. It’s probably using keys instead of passwords(?!) I hope they configured it properly if they ship it per default. And it’s running sandboxed in your Docker container anyways and not running a system shell on the machine.

    The issue with SSH is, there are lots of bots scanning the internet for SSH servers and testing passwords all day. Your server will be subject to a constant stream of brute-forcing attempts. Unless you take some precautions. Usually that’s done by blocking attackers after some amount of failed login attempts. This is either preconfigured in your Docker container (you should check, or watch the logs.) Or you’d need to use something like fail2ban on top. Or ignore the additional load and have all your users use good passwords.

    (What I do is use Git over https. That worked out of the box while ssh would have required additional work. But I also have lots of other ports forwarded to several services on my home-server. Including ssh. No VPN, no Cloudflare … I have fail2ban and safe passwords. I’m happy with that.)