Skip Navigation
Are there any guides, tutorials or similar on how to use Steam more privately?
  • A non technical answer: Don't interact with other players and don't give out any personal information.

    Use a unique and non-memorable username in steam and in game. Don't use any of the social functions in steam.

    It's often overlooked that the biggest risk to personal information is the person themselves.

    (Obviously you need to give some information to Steam for purchasing, and others have shown other methods to limit what information is sold about you as much as you an. It also depends where you reside - the EU has better protections than most)

  • Why does nobody here ever recommend Fedora to noobs?
  • All good points and I appreciate and enjoy the discussion.

    In my view, CentOS Stream is already a lot more of a “community” distro than the original CentOS was.

    This is possibly a semantic point, but for me, a community distro is owned and operated by the community without any corporate control. All the points yonu make are true and valid, but ultimately, Centos is owned by a very large corporate entity that could stop it whenever they want to and nobody else can do anything about that.

    Some examples of community owned distros are Debian, as well as Rocky and Alma Linux. Both of the latter have commercial arms, but are are fully independent legal entities owned by the distro. Rocky is owned by Rocky. This point was particularly important because that's what the community thought Centos /was/, but it turned out that Redhat owned Centos. I don't think either of the new distros would have been as trusted if the same thing that happened to Centos - a corporate entity ultimately deciding what happens - could have happened to them. When abandoning a sinking ship, it's prudent to check you're not boarding another with a big hole in it.

    I did happen to look follow Rocky's path closely, and our company chose it to migrate our doomed Centos8 machines to, because our developers didn't have time to rebuild everything for Debian in that particular window. That decision was largely based on that legal standpoint because we didn't want Centos repeating on us. It was also reassuring that Rocky was founded by Greg Kurtzer, who founded Centos and had that project effectively stolen from him, and he least of anyone wanted the same thing happening. (BTW, Rocky was named after the other co-founder of Centos, who has since died - a nice gesture)

    My cynicism of Redhat and their motives are real and may be misplaced, but I don't think they're done piddling in the EL swimming pool just yet. I adored the company once and had nothing but respect for what they achieved. But that was then and this is now.

  • Why does nobody here ever recommend Fedora to noobs?
  • You're mixing up Redhat with RHEL.

    Redhat is a publicly traded company, so yes, their financials are strong. But my question was about RHEL, which is an internal project and not publically known.

  • What is your set up? How do you use Jellyfin?
  • Good question, good to see how others do it.

    Mine: A well specced debian server in the garage running a crapload of stuff, including arrs and Jellyfin with Jellyseer, all in docker containers. Playback via debian laptop or Windows desktop using the official apps, and the tv paired with an Amazon Fire dongle running the Jellyfin app. All works really well.

    The only problem is my wife sometimes deletes an entire series instead of the series somehow. I honestly don't know how but I've had to download Young Sheldon for her four times now...

  • Why does nobody here ever recommend Fedora to noobs?
  • RH had taken over the Centos project and Board by that time. You're right that Centos was already circling the drain in terms of resources (I remember waiting many weeks for point releases), but the way they did this was brutal and poorly communicated.

    And remember those downstream 'rebuilds' only appeared to fill the vacuum caused by Centos disappearing. That they're both doing very well does make you question whether Centos could have been sustained in its traditional form. (As opposed to Stream, which is only of benefit to Redhat and those in its testing cycle)

  • Why does nobody here ever recommend Fedora to noobs?
  • I actually agree with you, it would survive. It would change, but it's big enough to have that critical momentum.

    Historically Fedora has been suggested as a free way to learn Enterprise Linux skills for a career. RHEL now provide free licences so that doesn't apply. Has this hurt Fedora at all? Probably not and may no longer be relevant.

  • Why does nobody here ever recommend Fedora to noobs?
  • Rocky and Alma are RHEL alternatives and are absolutely aimed at the enterprise. Fedora merging with either of these projects would be super surprising indeed. It would make no sense whatsoever.

    It would make a lot of sense to Rocky and Alma though - as if RHEL went there would be a huge vacuum and their models would be impossible. I know there was a lot of talk in both companies when the source was paywalled about building directly from Fedora's sources (Alma may actually be doing that, I'm not sure). Both R & A have significant user bases, both Enterprise and Community, and there would be considerable desire to keep the wheels turning. Some sort of collaboration (or just downstreaming directly from Fedora) feels inevitable as a choice if that were to happen.

    The “community” enterprise option from Red Hat is not Fedora, it is CentOS Stream.

    Centos Stream is not community by the way - it's entirely owned and run by Redhat (AIUI, They took over the name from its community origins and replaced the board with its own employees. The vote to end traditional Centos (which was community run) was given as an ultimatum with a great deal of bad feeling) Stream's purpose is as an upstream staging area for new releases of RHEL. Redhat state it's not suitable for production use, so it's of no real benefit to anyone that isn't part of that test cycle. (In some defence of Redhat here, Centos was struggling with low resources for a long time before this and point releases often took weeks or even months to appear behind RHEL)

    RHEL don't publish sales figures afaik, so they're the only ones who could say whether they're up or down. I'm just one guy who's worked in a mostly EL based world which has been negatively affected by these decisions, so I'm keeping half an eye. I could be completely wrong, but the facts we do know aren't healthy for someone wanting to enter into a business relationship with them, which is what a corporate company does when choosing a supported distro like RHEL.

    And yes, I am quite cynical - you're right to point that out. I also hope I'm wrong. If I'm not, I have a lot of confidence that the world will continue with or without RHEL, but yes, it would be a big loss to the FOSS contributions they have made and continue to make - as well as a lot of good people losing their jobs.

  • Why does nobody here ever recommend Fedora to noobs?
  • Also, with the fuckery RedHat pulls lately, it’s a disservice to new users to get them to learn the RedHat ecosystem, unless they plan or need to use it professionally.

    We and several other companies that I know are migrating away from EL entirely directly because of those Redhat decisions. We can't trust them not to be stupid again.

  • Why does nobody here ever recommend Fedora to noobs?
  • Nice to hear that recommended! Slackware was the first distro I installed at home, thanks to it being included on a special cover CD from one of the magazines some time in the late 90s? Not touched it for about 20 years but glad to hear it's still going.

  • Why does nobody here ever recommend Fedora to noobs?
  • You say that like it was a small thing, but small things don't create such bad feeling, cause most of the Centos volunteer team to resign, create off two entirely new distributions (Rocky and Alma). The subsequent paywalling of RHEL sourcecode and its accompanying spiteful communications make it clear where Redhat's focus is - or, rather, isn't. People judge companies by what they say and do, and I and many others are deeply concerned for the future of RHEL after the IBM takeover and are moving away from it.

    I think there is a lot of nostalgia about the great work that Redhat did (and still does, at a smaller scale) and are overlooking what it's become but RHEL as a business product is not the force it once was. I think it's entirely possible that Redhat/IBM will simply pull the plug on RHEL and the entire EL universe will need some serious remapping if its to survive.

    (Was a Centos user, still maintain 180 EL servers, am quite aware of the FUD, much of which originated and still does in the other direction from Redhat and its employees. The Centos 8 announcement came just after I'd manually migrated 60 vms to it, which then needed migrating again to another distro - so this did cause us some significant work and cost.)

  • Why does nobody here ever recommend Fedora to noobs?
  • I would not encourage anyone to join the EL universe as I don't consider it as stable as others.

    TLDR; Redhat's being absorbed into IBM and they don't care about RHEL. RHEL (in my view) is dying a slow death. Without RHEL, there is no Fedora or Centos Stream. There'd also be no Rocky or Alma, as things currently stand.

    (Although if that happened, I'd not be surprised if the users of Fedora merged with Rocky and Alma in some form of new and fully independent distro - we've already seen how well such disasters can be worked around)

    Longer reasoning: Redhat, in my view, have made some unpredictable and frankly terrible decisions over the past few years with RHEL which have caused a great deal of concern in the business sector about its stability as a product. (Prematurely ending Centos 8 six years early, paywalling the source code, and more recent anti-rebuilder steps. They also treated the community team working for Centos appallingly throughout these leading to many resignations.) Further more, these were communicated without warning or consultation and have sometimes come across as petty and spiteful, rather than as professional business decisions.

    IBM bought Redhat shortly before this happened, mostly for its cloud services. It seems from the outside that RHEL is being squeezed. There have been two major rounds of layoffs. In all, this paints a picture of a company that is in decline and we've seen a reduction in contributions to the excellent work done by Redhat in the foss world. IBM have a long history of buying and absorbing companies - I don't see why Redhat would be any different and RHEL doesn't make enough money.

    Our company is moving away from EL and I know of several others who are doing so. We're all choosing Debian.

  • Basically the extent of my IPv6 knowledge
  • I think you'll find some ISPs will be reluctant to let go of CGNAT - they're doing quite nicely by charging extra for 'commercial' services where it's not in the way.

    Fortunately, many of us know about cloudflare tunnelling and other services, so NAT really isn't a problem to self hosters and even SMEs any more.

  • Leak: EU interior ministers want to exempt themselves from chat control bulk scanning of private messages - EU Reporter
  • That's great optics.

    Not sure how workable it is to define how you would define "confidential information" without having already viewed the content. But the whole thing isn't very clever on a technical level anyway. Technically competent people will always find a way around such censorship.

  • What is/was your distrohopping journey?
  • Linux: 1995, Sco (At work), then got a copy of Slackware on a Cover-CD around 2000. Shortly after found Debian and have been using that at home exclusively for over two decades, now onto desktops and laptops as well as a couple of home servers. (I use EL distros, Ubuntu and OpenSuse at work nowadays)

    Longer history: 1981: ZX81. 1985, Dragon 32. 1988 Amstrad CPC. 1991 an XT. 1992 A 386 sx25 with 1mb ram, and so on.

  • DeAmazoning a FireTV
  • So you're using Kodi as the OS on the TV itself? Not the Kodi App or Kodi backend?

    I'm still struggling to understand how that would work, and still have Jellyfin in the mix - could you please explain exactly what you mean?

  • Stopping a badly behaved bot the wrong way.

    I host a few small low-traffic websites for local interests. I do this for free - and some of them are for a friend who died last year but didn't want all his work to vanish. They don't get so many views, so I was surprised when I happened to glance at munin and saw my bandwidth usage had gone up a lot.

    I spent a couple of hours working to solve this and did everything wrong. But it was a useful learning experience and I thought it might be worth sharing in case anyone else encounters similar.

    My setup is:

    Cloudflare DNS -> Cloudflare Tunnel (Because my residential isp uses CGNAT) -> Haproxy (I like Haproxy and amongst other things, alerts me when a site is down) -> Separate Docker containers for each website. On a Debian server living in my garage.

    From Haproxy's stats page, I was able to see which website was gathering attention. It's one running PhpBB for a little forum. Tailing apache's logs in that container quickly identified the pattern and made it easy to see what was happening.

    It was seeing a lot of 404 errors for URLs all coming from the same user-agent "claudebot". I know what you're thinking - it's an exploit scanning bot, but a closer look showed it was trying to fetch normal forum posts, some which had been deleted months previously, and also robots.txt. That site doesn't have a robots.txt so that was failing. What was weird is that the it was requesting at a rate of up to 20 urls a second, from multiple AWS IPs - and every other request was for robots.txt. You'd think it would take the hint after a million times of asking.

    Googling that UA turns up that other PhpBB users have encountered this quite recently - it seems to be fascinated by web forums and absolutely hammers them with the same behaviour I found.

    So - clearly a broken and stupid bot, right? Rather than being specifically malicious. I think so, but I host these sites on a rural consumer line and it was affecting both system load and bandwidth.

    What I did wrong:

    1. In docker, I tried quite a few things to block the user agent, the country (US based AWS, and this is a UK regional site), various IPs. It took me far too long to realise why my changes to .htaccess were failing - the phpbb docker image I use mounts the root directory to the website internally, ignoring my mounted vol. (My own fault, it was too long since I set it up to remember only certain sub-dirs were mounted in)

    2. Figuring that out, I shelled into the container and edited that .htaccess, but wouldn't have survived restarting/rebuilding the container so wasn't a real solution.

    Whilst I was in there, I created a robots.txt file. Not surprisingly, claudebot doesn't actually honour whats in there, and still continues to request it ten times a second.

    1. Thinking there must be another way, I switched to Haproxy. This was much easier - the documentation is very good. And it actually worked - blocking by Useragent (and yep, I'm lucky this wasn't changing) worked perfectly.

    I then had to leave for a while and the graphs show it's working. (Yellow above the line is requests coming into haproxy, below the line are responses).

    !

    Great - except I'm still seeing half of the traffic, and that's affecting my latency. (Some of you might doubt this, and I can tell you that you're spoiled by an excess of bandwidth...)

    1. That's when the penny dropped and the obvious occured. I use cloudflare, so use their firewall, right? No excuses - I should have gone there first. In fact, I did, but I got distracted by the many options and focused on their bot fighting tools, which didn't work for me. (This bot is somehow getting through the captcha challenge even when bot fight mode is enabled)

    But, their firewall has an option for user agent. The actual fix was simply to add this in WAF for that domain.

    !

    And voila - no more traffic through the tunnel for this very rude and stupid bot.

    After 24 hours, Cloudflare has blocked almost a quarter of a million requests by claudebot to my little phpbb forum which barely gets a single post every three months.

    !

    Moral for myself: Stand back and think for a minute before rushing in and trying to fix something in the wrong way. I've also taken this as an opportunity to improve haproxy's rate limiting internally. Like most website hosts, most of my traffic is outbound, and slowing things down when it gets busy really does help.

    This obviously isn't a perfect solution - all claudebot has to do is change its UA, and by coming from AWS it's pretty hard to block otherwise. One hopes it isn't truly malicious. It would be quite a lot more work to integrate Fail2ban for more bots, but it might yet come to that.

    Also, if you write any kind of web bot, please consider that not everyone who hosts a website has a lot of bandwidth, and at least have enough pride to write software good enough to not keep doing the same thing every second. And, y'know, keep an eye on what your stuff is doing out on the internet - not least for your own benefit. Hopefully AWS really shaft claudebot's owners with some big bandwidth charges...

    EDIT: It came back the next day with a new UA, and an email address linking it to anthropic.com - the Claude3 AI bot, so it looks like a particularly badly written scraper for AI learning.

    31
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)DI
    digdilem @lemmy.ml
    Posts 1
    Comments 139