Skip Navigation
Ah yes, smart lights need Tor.
  • It's just an NTP pool. The device is trying to update it's time. Likely it made many other requests to other servers when this one didn't work.

    Maintaining up to date lists of anything is a game of whack a mole, so you're always going to get weird results.

    If you're actually unsure, pcap the traffic on your pfsense box and see for yourself. NTP is an unencrypted protocol, so tshark or Wireshark will have no problem telling you all about it.

    That said, I'd still agree with the other poster about local integration with home assistant and just block that sucker from the Internet.

  • Grocery shopping apps
  • Ran into a similar conundrum. We use mealie for recipe management and occasionally meal planning, but the shopping list is clunky. We resorted to just making a list on a card in Planks. Not purpose-built, but it has worked rather well for us.

  • You probably don't need a VPN
  • This is absolutely not what DNSSEC is. DNSSEC provides authenticity of the response, not privacy. You're describing a means of encrypted name resolution, like dns-over-tls, dns-over-https, etc.

  • GL.iNet routers are trustworthy?
  • I haven't done a code review so I can't answer that question with facts. I do think however, that anything that bootstraps a FLOSS framework like openwrt could easily be a risk to privacy.

    You use privacy and security interchangeably here. They are not the same.

  • GL.iNet routers are trustworthy?
  • If you have any question on truth worthiness, you can flash stock openwrt on them. You just lose out on their proprietary webUI and pre installed plugins. I believe their firmware is public on GitHub though.

  • I am pouring one out to this little champ. Stripping HDCP and letting me... archive streaming services from 2016-2023 RIP
  • This is pedantic, but there are indeed capacitors there. They're all surface mount components, so they don't look like the caps that people typically talk about replacing, and they likely aren't what caused it to fail. Anything labeled on the board with a C## is likely a SMD capacitor.

  • Forward IP headers in HAProxy to get the real IP of the client
  • You don't need haproxy on the vps at all, unless I'm misunderstanding you. Just route the traffic using iptables hooks in your wireguard config. This is exactly how I manage my email server and it's entirely transparent.

  • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)ST
    StarkZarn @infosec.pub
    Posts 0
    Comments 21