• 0 Posts
  • 17 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle




  • Tailscale is just a bunch of extra fancy stuff on top of Wireguard. If you don’t need the fancy stuff, using raw Wireguard can be more lightweight, but might require more networking knowledge.

    The biggest thing Tailscale brings you the table is NAT traversal. On top of that it uses direct Wireguard tunnels as necessary instead of creating a mesh like you usually would if you were using raw Wireguard. It also offers convenient bits of sugar like internal DNS, and it handles key exchanges for you so it’s just generally easier to configure. When you do raw Wireguard you’re doing all the config yourself, which could be a pro or a con depending on your needs—and you’ll be editing config files, unlike Tailscale which has a GUI for most things. It also supports some more detailed security options like ACLs and I think SSO, while Wireguard is reliant on your existing firewall for that.

    Here’s what Tailscale has to say about it: https://tailscale.com/compare/wireguard

    I’ve messed around with Tailscale myself, but ultimately settled on running Wireguard. The reason I do that though is because I trust my LAN, and I only run Wireguard at the edge. Tailscale really wants to be run on every node, which in turn is something that raw Wireguard theoretically can do but would be onerous to maintain. If I didn’t trust my LAN, I’d probably switch to Tailscale.


  • A lot of people have suggested Tailscale and it’s basically the perfect solution to all your requirements.

    You keep saying you need ProtonVPN which means you can’t use Tailscale, but Tailscale actually supports setting up an exit node which is what you need. Put Protonvpn on the Raspberry Pi, then set it up as an exit node for your tailnet. There’s a lot of people talking about how they did this online. It looks like they even have native support for bypassing the manual setup if you use Mullvad.

    As long as every client has the ability to use Tailscale (I.e. no weird TVs or anything) this seems like it checks all your boxes. And since everything is E2EE from Tailscale, TLS is redundant and you can just use HTTP.



  • I prefer to stick to uncontroversial works made by politically conscious creators, like H.P. Lovecraft!

    But no, I get it. I like art made by people who are or weren’t great. And that’s before considering my participation in the vast system of capitalism which necessarily involves systemic evils far beyond what JKR personally is capable of.

    It just hurts to have a person who is loudly transphobic like JKR, who uses all support of her IP as support of her views, and then all the majority of society has to say is “I love HP tho”. It hurts especially when society is increasingly hostile towards trans people right now.


  • There’s no ethical consumption under capitalism. And it’s not like HL was handmade by JKR herself, there were plenty of people working on it who I’m sure aren’t transphobic and whose livelihoods are connected to the franchise as a result, some of whom are probably trans themselves.

    The “separate the art from the artist” argument just always rings a little hollow to me. I tend to be put off when people cling to a franchise that is owned by a person who profits off hateful rhetoric and contributing to an unsafe environment for us. It feels like continuing to enjoy her art continues to platform her hate and shows people that being transphobic not only isn’t a deal breaker, it’s acceptable and profitable.










  • Melmi@lemmy.blahaj.zonetoSelfhosted@lemmy.worldZeroTrust Your Home
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    2
    ·
    7 months ago

    When done correctly, the banner is actually a consent banner. It’s a legal thing, not necessarily trying to discourage criminals. It’s informing users that all use will be monitored and it implies their consent to the technology policies of the organization. It’s more for regular users than criminals.

    When it’s just “unauthorized access is prohibited”, though, especially on a single-user server? Not really any point. But since this article was based on compliance guidelines that aren’t all relevant to the homelab, I can see how it got warped into the empty “you no hack” banner.