• 3 Posts
  • 341 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle



  • I have a phone with 128GB of space and an SD card with 256GB. To update to 256GB internal would have cost 250€ because price reductions often only happen on base models.

    I have used 86GB of internal with the rest on the SD. That is near-zero photos, a few streaming playlists, 2 game apps, and almost no documents. Apps take up ridiculous amounts of space now because devs don’t give a fuck about space.

    On my SD card I have used up 154GB of 256GB.

    My music library, all of my photos and videos are stored directly on the SD card, backups from apps, etc…

    See how 154 + 86 is way more than 128 and a 256GB SD card cost 30€ while to upgrade to 256GB internal would be more than 800% the cost? And the sum above would be at the limit of 256GB anyway? They didn’t offer a 512GB model.

    The added benefit of if my phone dies or gets destroyed, the chance that I can just pull my SD card out and have all of my needed info including backups of my TOTP codes and everything without having to go to a multi-hundred euro recovery service.


  • This is absolutely so true. All of the “hunting” survivalists don’t realize that you would essentially have 1000 people hunting every 1 deer if you live in the suburbs and not that much better rurally. This isn’t 1800 anymore.

    The best thing you can do is have enough land to farm, learn how to farm, and stock the hell up on base ingredients (wheat, rice, dry beans, lentils) and stock up on as many seeds as you know how to grow. Even then; one bad harvest and you starve.

    But seriously, I can’t stress dry beans and lentils enough. They last forever, they can be sprouted and replanted, and they have many many times more protein than corn or rice which is very important when you go vegan.

    Also getting ducks will give eggs for additional protein and B12 vitamins that you would miss out on otherwise.


  • Dropping instead of blocking might technically be better because it wastes a bit more bot time and they see it as “it doesn’t exist” rather than an obsticle to try exploits on. Not sure if that is true though.

    For me:

    • ssh server only with keys

    • absolutely no ssh forwarding, only available to local network via firewall rules

    • docker socket proxy for everything that needs socket access

    • drop non-used ports, limit IPs for local-only services (e.g. paperless)

    • crowdsec on traefik for the rest (sadly it blocks my VPN IPs also)

    • Authelia over everything that doesn’t break the native apps (jellyfin and home assistant are the two that it breaks so far, and HA was very intermittent so I made a separate authelia rule and mobile DNS entry for slightly reduced rules)

    • proper umask rules on all docker directories (or as much as possible)

    • main drive FDE with a separate boot drive with FDE keyfile on a dongle that is removed except for updates and booting to make snatch-and-grabs useless and compromising bootloader impractical

    • full disk encryption with passworded data drives, so even if a smash and grab happens when I leave the dongle in, the sensitive data is still encrypted and the keys aren’t in memory (makes a startup script with a password needed, so no automated startups for me)

    For more info, I followed a lot of stuff on: https://github.com/imthenachoman/How-To-Secure-A-Linux-Server





  • I also use ubiquiti. It is the apple of WiFi systems, for better or worse.

    I have yet to be able to find if they are privacy respecting or not. I am leaning more towards no since everything is by default through their cloud (my brand new UCG-ultra wouldn’t even let me set it up locally, it would break when trying to set it up locally via the app and DNS & IPs would be messed up so I couldn’t even contact it to fix it, I had to hard reset it and do it via their cloud)