Just some Internet guy

He/him/them 🏳️‍🌈

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Max_P,
@Max_P@lemmy.max-p.me avatar

Set up full disk encryption or an encrypted container like gocryptfs. But typically they analyze network traffic not IO traffic because that’s quite a pain to implement as they’d have to reimplement the entire filesystem just to analyze what you store.

Max_P,
@Max_P@lemmy.max-p.me avatar

That’d be really nice as a feature.

My main concern on my end is someone using my instance to go browse some illegal content off another instance, and now I’m legally on the hook for it because now my instance is publicly serving that content.

Max_P,
@Max_P@lemmy.max-p.me avatar

It requires an HTTPS connection, and certificates can only be obtained for domain names. So yes, pretty much.

Also consider than IPs can change, even if you’re using a hosting provider. Domain names makes changing the IP much easier.

Domain names can be obtained for as cheap as $3/year for the xyz TLD. If you can’t pay for anything, there’s also free services that can let you get a subdomain, like noip.com, afraid.org, azote.org.

Max_P,
@Max_P@lemmy.max-p.me avatar

It would be nice if it also remembered which feed your’re looking at. Having to change it to subscribed instead if local everytime is also rather annoying.

Max_P,
@Max_P@lemmy.max-p.me avatar

It’s already set, but still goes to local and sorts by hot

https://lemmy.max-p.me/pictrs/image/07427358-1bf0-479a-9055-b943316d7e04.png

Why is youtube recommending conservative "talking points" to me?

Hi, I am a guy in early thirties with a wife and two kids and whenever I go on youtube it always suggests conservative things like guys dunking on women, ben shapiro reacting to some bullshit, joe rogan, all the works. I almost never allow it to go to that type of video and when I do it is either by accident or by curiosity. My...

Max_P,
@Max_P@lemmy.max-p.me avatar

This, the algorithm doesn’t care whether you like enjoy it or not, it cares whether you engage with it or not. Even dislikes are engagement.

Max_P,
@Max_P@lemmy.max-p.me avatar
  1. DNS server, because everything depends on it
  2. The Lounge - got like 7 people using it basically daily to chat
  3. Lemmy, even though I’m the only one really actively using it.
  4. E-Mail server, I don’t get a whole lot of mail but it’s a pretty important one!

Everything else tends to be a lot more idle, but I’ve also got NextCloud, an IRC server, soon a Matrix server, an internal VPN so all my devices can always talk to eachother no matter where they are.

Max_P,
@Max_P@lemmy.max-p.me avatar

It’s been set up for almost a decade at this point, it’s shockingly low maintenance once it’s all set up and going. It is a pain to figure out Postfix’s and Dovecot’s fairly arcane configuration files, but smooth sailing afterwards. It’s been a long time since I’ve even got a mail rejected/not make it to the recipient’s inbox.

Max_P,
@Max_P@lemmy.max-p.me avatar

Any particular reason not to leave it on all the time? That sounds simpler. It’s not like the amp will consume much more power than the stock radio to drive about the same volume. Power is power, if you only play at 2W, it’ll use 2W whether the amp does it or the radio does it. The radio’s not also going to spend another 2W to “drive” the amp through the speaker output, it’s going to be milliwatts.

Personally I just ran an aux jack to RCA to my amps in the back and just use that all the time. It’s not like I have to run it at full blast all the time, if I want it quiet it remains quiet. But it still sounds better than the stock radio.

Max_P,
@Max_P@lemmy.max-p.me avatar

Hmm, my subs actually take a fair bit of volume to kick in, when I’m playing talk stuff it’s barely audible and the bass only kicks in at higher volumes.

But I do have two amps, one for the speakers and another one for the subwoofers, and they have different levels set so that could be a happy coincidence.

Maybe try playing with the level and bass boost knobs? If you’re lucky, you may land in a spot where the bass is less sensitive and gives you more treble at lower volumes. Lowering bass on the radio and adding more bass boost might achieve this, counterintuitively.

Otherwise, it might be easier to switch in a low pass filter on the input, which can be done with just a capacitor. That’d be much easier than trying to switch the entire systems with relays and whatnot.

Max_P,
@Max_P@lemmy.max-p.me avatar

Just go to lemmy.world and see for yourself, although be careful it’s nasty.

As of now it looks like this: https://lemmy.max-p.me/pictrs/image/f4c1eb3f-b1a7-4e26-83de-7d1f2b647e89.png

And then it randomly redirects to gore sites like lemonparty or chaturbate or some pedo shit. It’s pretty bad.

Max_P,
@Max_P@lemmy.max-p.me avatar

You can take out “to dual-boot with Windows 10” out of the equation, they’ll all do that just fine especially if you stick with the bigger distros. They’re all assuming that people will do that at first when trying out Linux.

My usual recommendation is to try out a few in a VM first, get acquainted with it, get a feel of whether you like it or not before you install it on your real hardware. Then simply enjoy and welcome to Linux!

Max_P,
@Max_P@lemmy.max-p.me avatar

I’d put a legal blob in the Legal section clearly outlining the nature of the fediverse and making it clear to the user that really deleting stuff from Lemmy is near impossible because every instance has a copy of it. That you’ll happily comply and purge the user’s data upon request but that it will still be cached on every other server.

I’d be interested to see what lawyers have to say about it. Technically the data sharing is absolutely required by the protocol so it might be okay with the GDPR, but it’s also possible that as worded it can’t possibly be GDPR compliant. It was designed with big companies like Google, Meta and big advertisers in mind, and didn’t really account for decentralized services like the fediverse…

Max_P,
@Max_P@lemmy.max-p.me avatar

Actually I wonder if the end result would end up essentially being, you can only federate with other GDPR compliant instances that you trust will respect the GDPR and honor federated data delete requests.

The core of the issue is that just by the virtue of running, an instance collects a stupid amount of data. I was baffled at how many user accounts my instance had discovered mere hours after starting it up.

Edit: row counts after just a week of running my private instance with only 3 users:

https://lemmy.max-p.me/pictrs/image/b6f90455-5b5a-495f-83ce-48f383d58d63.png

The profiling potential is scary, so users should be really careful with basically every interaction on the Fediverse, including votes. I bet the feds are having a field day monitoring what’s going on on exploding-heads and lemmygrad.

Max_P,
@Max_P@lemmy.max-p.me avatar

They could try that but I suspect it would be rather easy to find anomalies like that. These are ultimately patches to an upstream and already open-source project, so one can just diff the RHEL version with the release it’s based on and quickly notice that random GUID in the sources or random spaces/indentation. Or have multiple sources leak the code independently, and then you can diff them all between eachother to verify if you got exactly the same code or if they injected something sneaky to track it, and remove it.

Lots of companies in enterprise also want to host their own mirror because the servers are airgapped, so they can’t even track who downloaded all the sources because many companies will in fact do that. And serving slightly modified but still signed packages sounds like it would be rather computationally expensive to do on the fly, so they can’t exactly add tracking built into the packages of the repos either. And again easy to detect with basic checksumming of the files.

Max_P,
@Max_P@lemmy.max-p.me avatar

I don’t know, I’ve worked in Debian/Ubuntu companies mostly. Last two had thousands of servers and both had an apt-mirror custom repo including the deb-src ones. Otherwise we just get ourselves banned from the official mirrors when thousands of VMs pull updates from the same NAT IP.

Not sure how that works exactly on the RHEL side, maybe it’s not nearly as easy or common to do that.

Max_P,
@Max_P@lemmy.max-p.me avatar

I don’t know why Google have allowed their bootloaders this freedom, but I can’t imagine that a company with a reputation for killing anything they touch would allow it to continue for much longer.

They’ve historically always been very pro-developers, and they know Pixels are attractive to developers as sort of the defacto successor to the Nexus line, which was aimed specifically for developer as a way to have a close to AOSP ROM.

Google’s also responsible for the entire bootloader specification, which does include provisions to provide your own keys and allow relocking the bootloader with a custom OS. So it’s quite fair that their phones implements the full spec completely. If they didn’t want people to be able to do this, they wouldn’t have written a spec that calls for people to be able to unlock and relock. They also provide ways to authorize Gapps on any device/emulator, if they didn’t want that they wouldn’t let people do that either. But ultimately most people flashing their Pixels end up still using Google services and spending money on the Play Store and other Google products.

It probably also works to their advantage because it lets people poke at the security which helps people uncover bugs in AOSP so they can fix it.

The bigger concern is more about Google abandoning the Pixel project entirely rather than closing the bootloader.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines