• 1 Post
  • 14 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle






  • You’re cool with it until you realize that they only want to do this to personally gain from it. And guaranteed will protect their own IP, and the IP of every large corporation.

    It’s just that you yourself and small businesses will no longer have the benefit of intellectual property. Megacorps can steal whatever they want with impunity since they are the only true holders of intellectual property.

    That sounds good on paper until you look at the long history of these people and how everything they do is entirely focused on their own benefit over that of others. They gain something to win here, guaranteed they aren’t going to let themselves lose on anything either.

    It’s the same sort of situation as AI regulation. Sam Altman and openai want the United States to crack down and make it extremely difficult to develop new models. Why? So that they don’t have any competition. They already got their foot in the door they want to close the door for anyone else.

    This is very likely the same sort of situation.



  • That’s a good call out.

    There are a few things I do right now:

    1. All of my public DNS entries for the certs point at cloudflare, not my IP.
    2. My internal Network DNS resolver will resolve those domains to an internal address. I don’t rely on nat reflection.
    3. I drop all connections to those domains in cloudflare with rules
    4. In caddy, I drop all connections that come from a non-internal IP range for all internal services. Additionally I drop all connections from subnet that should not be allowed to access those services (network is segmented into VLANs)
    5. I use tailscale to avoid having to have routes from the Internet into my internal services for when I’m not at home.
    6. For externally accessible routes, I have entirely separate configurations that proxy access to them. And external DNS still points to cloudflare, which has very restrictive rules on allowable connections.

    Hopefully this information helps someone else that’s also trying to do this.


  • I just:

    1. Have my router setup with DNS for domains I want to direct locally, and point them to:
    2. Have a reverse proxy that has auto- certbot behavior (caddy) connected to the cloud flair API. Anytime I add a new domain or subdomain for reverse proxine to a particular device on my network a valid certificate is automatically generated for me. They are also automatically renewed
    3. Navigation I do within my local network to these domains gives me real certificates, my traffic never goes to the internet.



  • I like how you just conveniently ignore the part about a dictator oppression.

    The key word here is oppression.

    A country that is closing its eyes and deserves what they’re going to get is the US. In 20 or 30 years when the US is an authoritarian oppressive State then at that point the people don’t have a choice, just like they don’t in Russia today.

    Authoritarian oppressive states don’t just let the people think what they want to think. You are groomed and indoctrinated the moment you receive education until the day you die. The easiest way to control a populace is for the populace to not even know they’re being controlled.

    A key factor to that is limiting and restricting access to outside information. Which is what Russia does which is why the Tor project is so important



  • Are you really suggesting that we take the low quality Reddit approach to high quality subs like /r/funny?

    I suppose this is what happens when the lowest common denominator goes down coupled with ignorance of how the lowest common denominator affects community quality.

    Communities lose their niche by catering to the lowest common denominator and become homogeneous with each other. This has been a long-standing phenomena on Reddit, one which I would expect to not be carried over to Lemmy since it’s largely a symptom of a user base that has more interest in memes, funnies, and celebrity worship than discussion and real news.