• 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle


  • If you’re just interested in connections (and don’t care about packet inspection) you can use Little Snitch (paid) or LuLu (FOSS).

    Actually, all the Objective-See Foundation security tools are great and target specific classes of vulnerabilities, like LuLu for outgoing network connections, RansomWhere for detecting ransomwear by looking for encryption events, Oversight that monitors you cameras and microphones and a bunch of other really small, but really useful security utilities. Better than running a shady antivirus that’s going to suck up loads of resources and rely on signatures.






  • and now Google of all companies wants to lock down the whole internet?

    Of all the companies, Google always seemed the most likely, both to want to and to be successful. They’ve tried before, sometimes in small ways, sometimes in larger more obvious ways (AMP, the implementation of content filtering in Chrome etc.).

    They’re the world’s largest advertising and data harvesting company. It’s their business. Of course they want to lock the internet down to serve their goals of learning as much about you as possible and using that data to shove ads in your face.

    Whenever using any Google/Alphabet product you have to ask yourself, “am I ok with this thing I’m about to use being built by the world’s largest advertising company?”. The answer should be “no” more than it is “yes”, particularly for things that have access to lots of your data, like web browsers, phones, home speakers etc.



  • It’s really hard. And really expensive. I used to work in five nine environments, life or death type use cases, and my rule of thumb was that you double your cost for every extra nine you add.

    When we got to five nines it was multiple hot standbys with a custom control and orchestration plane - literally custom hardware we had to build. This was for local installations, so not modern cloud environments (it was over a decade ago), but many of the challenges are similar, like session handling, transmission replay and caching, locking, clashing, routing, jitter, latency etc.






  • I moved from Organizr to Homepage via Heimdall.

    I had no end of issues with Organizr. It felt like something broke with each update and performance was pretty bad (not to mention some apps just not working with it). Seemed to be pretty common when I last tried it a couple of years ago, there were lots of similar complaints.

    The good thing about Homepage is that the widgets mean you rarely have to go in to each app’s ui, so it actually saves me time.


  • Don’t do any port forwarding, and test your network’s external exposure regularly. If you do that, you’ll set yourself up in the right way.

    If you need to access anything you’re self-hosting from outside your network, do it through a VPN and open up one single port, the one the VPN users, rather than accessing services directly. And use a non-standard VPN.

    This has other benefits too. For example, if you’re running a pihole, you’ll be able to use it when out and about on your phone if you’re going through your own VPN.


  • We (i.e. those of us who work in the industry and care about such things) really need to work on messaging to get through to normal people.

    For instance, people are genuinely freaked out at the idea of Facebook listening to them through their phones. It really hits a nerve. Now that isn’t happening, but what is happening is even worse. Facebook are able to predict your behaviour, your thoughts, so well that it gives the illusion that they’re listening to you. They’ve spent decades training their models on your behaviour, your content, both on their website and across the entire web and beyond. And they’ve fucking nailed it.

    That’s far far more scary than them listening to you. They know things about you that you don’t even say out loud. It’s terrifying.


  • My slightly vague recollection was that they were basically feeding “enterprise customers” a load of information including stuff that could be used for union busting, monitoring protests etc. Their enterprise plan has

    Feedly AI Advanced Skills: Market intelligence Threat intelligence Biopharma research Competitive intelligence

    as features. So yeah, creepy as fuck. And they said at the time that this was all done using “AI”.


  • I stopped using Feedly after all the creepy AI stuff. Reeder synced over iCloud with an OPML export every now and then keeps it so I’m not reliant on a central service and can run it all locally should I choose.

    Anyone using Feedly, or equivalent, hasn’t learnt the lessons of Google Reader. Manage it yourself, don’t rely on a central service that’s going to do creepy monitoring on you to power their AI model.