🇨🇦
Drink less paranoia smoothie…
I’ve been self-hosting for almost a decade now; never bothered with any of the giants. Just a domain pointed at me, and an open port or two. Never had an issue.
Don’t expose anything you don’t share with others; monitor the things you do expose with tools like fail2ban. VPN into the LAN for access to everything else.
and using DDNS
As in, running software to update your DNS records automatically based on your current system IP. Great for dynamic IPs, or just moving location.
Sure, cloudflare provides other security benefits; but that’s not what OP was talking about. They just wanted/liked the plug+play aspect, which doesn’t need cloudflare.
Those ‘benefits’ are also really not necessary for the vast majority of self hosters. What are you hosting, from your home, that garners that kind of attention?
The only things I host from home are private services for myself or a very limited group; which, as far as ‘attacks’ goes, just gets the occasional script kiddy looking for exposed endpoints. Nothing that needs mitigation.
Unless you are behind CGNAT; you would have had the same plug+play experience by using your own router instead of the ISP supplied one, and using DDNS.
At least, I did.
Ticketmaster will not respond to request to buy data from us.
No shit. Paying a ransom like this is pointless. You’ve already lost the data, and payment does nothing to guarantee it’s not copied/released afterwards anyway.
Move on and put your focus on preventing it happening again.
Obligatory fuck ticketmaster, break up that monopoly already.
The middle-man provides plausible deniability in this case. PornHub can genuinely say they don’t see connections from age-verification states atm. That stops being true if they host the VPN, making them aware of actual client locations.
Landlords can’t legally remove someone from a unit until they’ve filed in court and a judge orders the Cook County Sheriff’s Office to enforce the eviction.
Sounds like he’d have to go through a judge first too.
Huh, usually they ask ‘jump where?’
If they are injecting ads into the actual video stream; it won’t matter what client you use. You request the next video chunk for playback and get served a chunk filled with advertising video instead. The clients won’t be able to tell the difference unless they start analyzing the actual video frames. That’s an entirely server-side decision that clients can’t bypass.
Only if the ads are a fixed length and always in the same place for each playback of the same video.
Inserting ads of various lengths in varying places throughout the video will alter all the time stamps for every playback.
The 5th minute of the video might happen 5min after starting playback, or it could be 5min+a 2min ad break after starting. This could change from playback to playback; so basing ad/sponsor blocking on timestamps becomes entirely useless.
I’d just like to clarify: the new machines aren’t MRI (the magnets in those would prohibit all metal objects being within 100ft).
The new machines are also xray; but the xray emiters and detector are now on a spinning carriage similar to an MRI. This allows you to build a 3d model of the object and calculate it’s volume, which when combined with the density measurements gives much more reliable material detection.
This also means your stuff doesn’t have to be removed from bags to ensure items aren’t blocking each other from the scanner.
Fun fact: until recently, most airport scanners literally couldn’t differentiate between water and many common explosives. Hence the scrutiny of water based products/possessions.
I have one more thought for you:
If downtime is your concern, you could always use a mixed approach. Run a daily backup system like I described, somewhat haphazard with everything still running. Then once a month at 4am or whatever, perform a more comprehensive backup, looping through each docker project and shutting them down before running the backup and bringing it all online again.
I setup borg around 4 months ago using option 1. I’ve messed around with it a bit, restoring a few backups, and haven’t run into any issues with corrupt/broken databases.
I just used the example script provided by borg, but modified it to include my docker data, and write info to a log file instead of the console.
Daily at midnight, a new backup of around 427gb of data is taken. At the moment that takes 2-15min to complete, depending on how much data has changed since yesterday; though the initial backup was closer to 45min. Then old backups are trimmed; Backups <24hr old are kept, along with 7 dailys, 3 weeklys, and 6 monthlys. Anything outside that scope gets deleted.
With the compression and de-duplication process borg does; the 15 backups I have so far (5.75tb of data) currently take up 255.74gb of space. 10/10 would recommend on that aspect alone.
/edit, one note: I’m not backing up Docker volumes directly, though you could just fine. Anything I want backed up lives in a regular folder that’s then bind mounted to a docker container. (including things like paperless-ngxs databases)
You should certainly drive with more caution than a typical vehicle; but you’ve still got to get fuel and travel between storage and wherever you’re having fun.
A trailer + a vehicle to tow it isn’t always available/practical.
Point is, it’s likely not on public roads often or very long. It’s not like it would be out getting groceries and picking up the kids from school every day.
Tbh, regarding visibility; it doesn’t seem any worse than a semi truck. Probably has better stopping power too.
Sure, there are definitely some assholes out there; but all we’ve got here is this picture.
This does not show him being an asshole in anyway; dudes just existing alongside his toy. What’s wrong with that?
A sensible person wouldn’t judge a stranger based on the actions of others.
Except in this case, the driver is being called a POS simply for owning a toy and legally driving it down the road.
I could understand if he was actually engaged in some assholery like taking up multiple lanes… But he’s fine.
Something tells me it’s not a daily driver…
People are allowed to have toys.
Why would you ever be buying a sim card seprate from the carrier servicing it…?
Honestly asking, that’s incredibly unusual to me. Where I live, the mobile carrier always provides the sim card. Usually free with a monthly phone plan, or as a part of a pre-paid plan. (pre-paid you can usually buy from a corner store like seven eleven. monthly you’ll actually have to visit their store/mall booth)
A paid plex share is a plex server that someone is running + selling access too.
This is against plex’ terms, gets plex accounts banned; and in some cases, Plex (co) has taken rather drastic action by blocking entire VPS providers from reaching plex.tv; thus plex server software no longer functions on those VPS’s at all.
Naturally, people selling shares want to maximize profit, so they use VPS providers on the cheaper end; resulting in cheaper VPS solutions being blocked for everyone.