krash @ krash @lemmy.ml

Posts

18

Comments

344

Joined

4 yr. ago

Moderating

---

I wanted to use this on my RPI2 buy I think the CPU is too old 🙃 I to however have a openWRT router and I suppose I can achieve similar functionality with a bit of hacking on the OS.

Thank you for taking the time to write this! Well, first stage of my project (getting openwrt my router) has gone according to plan, and now to strive for the next objective 😏

Sounds like our situation here in Sweden (ICA, coop, Axfood).

Thank you for taking the time to answer throughly! I noted your advice and chunked up my goals into "mini-projects", once I have all the configurations set and all devices connected to the new router. I did check what I bought is a router, not a switch (I find the naming of the device acting as the gateway between the LAN and WAN to be a bit ambigous: switch, router, gateway...).

As for the IDS capability, this is something that would be done by a raspberry pi being fed packets from the router. I don't know if I will ever undertake that task, but I keep it in mind if I'll feel adventorous 🙃

(for those wondering: Linux Magazine #279 has a guide on how to accomplish this with a Fritz!Box 7583).

Rome.

Thank you for all the questions to help me clarify my use case 🙂

At the very basic, I'd like to:

1. achieve better security through segmentation by isolating cloud-connected devices, guest devices from trusted devices.
2. Being able to "pin" a Mac address to an IP, and being able to use internal network name resolution to reach those devices.
3. a blocklist for known ad-domains / malicious domains.

Once the basics are in place, I'd like to elevate my netsec game and implement:

• a high level monitoring capability to seen what devices are communicating with what domains / IPs
• An IDS capability of some sort to be able to detect anomalies in my LAN.

The NAS part is just for convince, it would be nice to have a samba / NFS with my files available when I need them.

From the GH issue:

"There are multiple privacy and telemtry issues with this browser. Please see the discussion forum for people raising these issues. It seems telemetry is very much still enabled (not just a we missed some things problem)."

Calling this a backdoor is way overblown?

Welcome to the deep rabbit hole :-) how much do you know about how computers work? In general, you're going to need to understand some basic networking and general Linux administration, but if you already have a grasp on that then I'd say you just need to start small (simple service, aim to have a resilience goal with backups and restoration) and other metrics that motivates you. Perhaps you want to learn something new with every service you host? You decide, this is your hobby :-)

Hey, don't forget unciv :-) it may not look amazing but that game is a very fun 4x to play.

This is a very solid (if not the best) roguelike to play on phone.

The Danish krona is actually pegged to the euro, so you are half right 🙂

WORD

Scholz and Merkel have their flaws, but they're not fascist buffoons. Yep, that's where the bar is right now.

Devin Townsend was without a doubt one of the best artists I've seen live last year. I limed his music for the longest time, and got tickets the day before the concert, and it was so damn good. It wasn't anything fancy, just awesome interaction with the crowd and amazing music.

I saw them two years ago, and I was amazed by how radically the stage shifted between songs. The band members were struggling bouncing around though 😅

I think for matrix to be usable in a homelab setting, Matrix needs to enable a way to handle these huge data storage with prune or something similar.

I found snikket to be quite decent, give it a whirl.

I have a galaxy phone but haven't pursued the idea of installing grapheneOS on it as I thought it would be impossible. Please share you arcane knowledge of the unholy incarnations.

There are various obstacles to "just forking" a project; it requires times to understand the frameworks / libraries used in the project, understand the code and its different parts and last but not least, have a interest to invest that time and energy (most often, that time could be spent developing your own solution that would fit your usecase better).

As for the stage I was referring to, both the theories of enshittification and rot-economy see software and services going through stages to attract new users, before going in for the profit maximizing.

What's wrong with Ubuntu and RH? Is it because of the snaps / source code debacle? Both of those had solid business cases to them and while I dislike the outcome, I do understand why they made that choice and most importantly - I still appriciate what each company does for FOSS.