Mama told me not to come.

She said, that ain’t the way to have fun.

  • 2 Posts
  • 1.35K Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle


  • Grayjay on my Android phone. I like that it supports a lot of different services, and I have subs on Odysee, Rumble, and Nebula (I pay for a sub there). I sometimes download videos for offline use if I’m going to listen on my commute or something (no point in using up data if I don’t need to).

    On my desktop/laptop, I just use YouTube directly w/ uBlock Origin on Firefox (to block ads) without logging in. I don’t watch much YouTube on my desktop/laptop, and when I do, I’ll just look for a specific video or whatever.

    I also have NewPipe installed on my phone for when I want to find something specific (i.e. background music or something), because Grayjay’s search kind of sucks.










  • If Chrome is at v162 and you’re at v3, people perceive the version numbers to reflect the quality and development.

    I don’t think it is the case. Ask some random person what version their browser is and they probably won’t even know how to check.

    It doesn’t matter for the vast majority of people, the only people who care are power users. And what do power users appreciate? Clear communication. If there’s a major UI change or something, bump the major version. If there’s a new feature, bump the minor version. If it’s just bug fixes, bump the patch version. Or even simpler, since Firefox has the ESR build, bump the major version whenever an ESR build is cut, bump the minor version every regular release (4 weeks?), and bump the patch version every patch release like we do now. That way I know how much the ESR build has deviated from the regular build, which is valuable information (just look at the minor version for the latest Firefox).

    How you manage versions doesn’t matter to the vast majority of people, so it should be tuned for the minority who actually kind of care, so make it mean something. A year would be fine and useful, a number that increases w/ the ESR refresh would be useful, an ever-increasing number isn’t useful. Pick one of the useful options…


  • Eh, my Ubiquiti AP works pretty well, though it’s a bit annoying setting up the server software. I get way better range with it than I ever got with my previous routers, and I never have to reboot it (my Mikrotik router needs to be rebooted more often, and that’s rock solid as well).

    I honestly haven’t had any issues, but I have a very simple setup:

    • Mikrotik router
    • UAP-AC-LITE

    That’s it. No mesh, just a single AP and a single router. It works well, and I largely forget about it because it just works.

    That said, I’m considering upgrading to a newer wi-fi standard, so I’ll be doing some research again. Ubiquiti was the best at the time, but I don’t have any particular brand loyalty, so I’ll get whatever seems to work well and is a reasonable price. I will probably keep this AP and add a second, so that’ll factor in as well (i.e. can I have two APs serving the same SSIDs? If so, how do I get them to work seamlessly?).




  • Is a vpn always safer then a reverse proxy?

    Depends on what you trust, I guess.

    A reverse proxy on a standard cert is a bigger target for automated scripts than a reverse proxy on a non-standard port. A VPN runs through the VPN’s authentication, whereas a reverse proxy relies on whatever that app’s authentication is. So whether it’s secure enough depends on the VPN configuration, what you’re hosting, etc.

    I’m behind CGNAT, so I have limitations you don’t, but here’s my setup:

    • VPS at the edge for my public services - basically the same as a reverse proxy because the application is directly exposed
    • self-hosted VPN at VPS to facilitate reverse-proxy - I could shut down public access any time and just login w/ the VPN
    • static DNS entries on my router so I can use my domains inside my network (TLS also works properly)

    I like this approach because I can eat my cake (nice domain names instead of IPs and ports) and have it too (fast connection inside LAN, can disable reverse proxy if I want better security). You could get the same w/o the VPS, and if you require WireGuard VPN access outside the LAN, you get better security than a public-facing service.