• 0 Posts
  • 138 Comments
Joined 3 years ago
cake
Cake day: July 29th, 2023

help-circle
  • (I don’t need strong censorship resistance; it just has to work in offices and hotel WiFis.

    Wireguard on 443 or OpenVPN + Stunnel on 443

    Wireguard is easier to setup because there’s no OpenVPN app that packages stunnel (afaik), so you have to run 2 apps on your phone to make it work.

    A server like caddy can also accept HTTPS traffic for some regular websites next to the VPN server.

    Wireguard uses UDP, so just run whatever you want on 443 TCP with caddy (unless you want QUIC for some reason?)

    Anything beyond that and you’d be looking at using a proper obfuscation solution like Shadowsocks or obfs4, in which case you should look into Amnezia or Tor bridges.





  • I can’t find it now, but there was some talk about AppArmor being dropped due to its limiations, but I guess that’s no longer the case?

    But yeah the selinux “just relabel all” is an annoying duct tape solution to anyone who has issues. Optimally you should only need to relabel a dir/file once or set the appropriate selinux policy flag if you do run into a problem.

    The user friendly solution is supposed to be the troubleshooter, which actually works pretty well most of the time, but it still requires the user to know how SElinux works to use correctly.



  • There’s a lot of misinformation in this thread. Linux malware targeted at desktop users has actually become more apparent in recent years due to the growing number of users.

    That didn’t use to be the case because Linux was almost exclusively used for everything except end user desktops.

    What you need to understand is Linux is fundamentally more secure from the OS perspective. A good example is how there are no network listening services running like how Windows has SMB/NetBIOS which had the infamous eternal blue vulnerabilities.

    That means it is highly unlikely you will be targeted by system/service level malware that exploits known vulnerabilities, so long as you stay reasonably up to date with your package manager. Add on to the fact you probably won’t be running such software like Apache or NGINX anyways.

    but is it a reasonable concern?

    Yes, you should still stay vigilant as a user as current malware, even for windows, typically invovles some level of social engineering.

    The bonus for linux is that you should optimally never have to download executables from the browser. Anytime you do, make sure to pay close attention to what you are downloading and where from.

    Some key stuff for linux:

    1. Never do a curl | bash. Always download the script and peruse it to see what it actually does.

    2. Always prefer packages from package manager, and be careful if using 3rd party repos such as AUR or COPR

    3. Don’t download binaries from untrusted sources, and never run as sudo without knowing what it does.

    Are there sufficient tools for people who don’t really know what they’re doing to be reasonably secure on Linux and will they keep up if the threat profile expands as Linux picks up more users?

    Yes, I suggest you become a little bit familiar with a distro that has SELinux (ex: Fedora). It’s just a MAC security control scheme, but it adds a lot of benefit if you aren’t familiar with Linux in general.

    Aside from that, you can use ClamAV for virus scanning. AV and consumer EDR on Linux isn’t that widely available due to the low amount of malware at this time, but I do expect that to slowly change as the userbase grows.

    As malware detection gets better, I’m sure ClamAV will add features and functionality to keep up.


  • mlg@lemmy.worldtoGames@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    7
    ·
    12 days ago

    Original Fortnite was garbage lol. Dunno how much its changed since, but I found it to be the worst f2p battle royale game at the time.

    The projectile physics were cruddy, the weapons sucked, the building mechanics seemed like an abusable/spammable gimmick more than a proper feature, there weren’t any vehicles, the rewards were non existent, the graphics looked pretty lame, the emotes had nothing compared to TF2 taunts.

    I had more way more fun on some random Chinese mobile pubg knockoff with touchscreen controls.

    Maybe its just me, but I feel like Fortnite just got lucky by being the first on the PC/console space that was free, so it exploded in popularity. Otherwise there were a ton of much better alternatives.





  • As others have said, repeaters are pretty garbage for extending wifi. Even mesh systems are nothing compared to multiple APs connected with ethernet.

    For hardware if possible, I’d try to stick to using proper APs and not just reused wireless routers so that you can ensure the radio settings are properly matched automatically or manually. I prefer Ubiquiti, but they’re on the pricier side. You can get something way cheaper so long as it has configurable radio settings.

    When using multiple APs, you wanna make sure that the newer standards for device roaming are on, and that they are running the same WiFi network. Make sure any repeater or AP to AP wireless function stays off.

    Best thing to do is whip out the wifiman app and look at the channel map which will show you what frequency your WiFi devices are running at, as well as any overlap with other people’s routers. Assuming you’ve taken out the repeaters, the packet loss will then most likely occur from overlapping SSIDs.

    Now APs are supposed to pick the most empty channel possible, but lots of times they suck at it or are just overcongested (ex: apartments). This is where you can manually configure channels to eliminate overlap.

    In my personal experience, you can just consider 2.4Ghz a lost cause and leave it on auto. There’s only 3 non overlapping channels, so there’s just no chance you’ll ever get a solid signal unless you live like a solid half mile away from your neighbor.

    For 5Ghz, you get a ton of more room and bandwidth to play with. Once you feel comfortable playing with the channel settings, you will discover the super secret DFS channels if you live in the US. Those channels can interfere with weather satellite data, so you should totally never use them because its not like our current administration has been budget cutting the national weather service or anything.

    If you want to have some extra fun, spin up Kali linux on a laptop or anything with WiFi and run bettercap to see the inevitable smart home or IoT device spamming the airwaves causing even more packet loss.

    EDIT:

    If you’re on a tight budget, you can reuse the routers that you have, just know that you might not be able to change the channel settings depending on the router, and that AP to AP roaming will rely on your client devices to work, which can be a mixed bag sometimes.



  • If you want a very good in depth answer: https://youtu.be/7y_hbz6loEo

    The gist of it is that the USA, KSA, and Israel all want Iran’s current government to be toppled as they are a direct military/economic/political threat.

    What’s the logic here? Not just the conspiracy. But why now? Why at all? Is Israel gaining something that I’m not seeing? Destabilization the main goal? What’s the USA gaining here?

    Israel is an ethnostate so they do ethnostate things, which means constantly attacking anyone they view as “not us”. Iran happens to be on the top of that list after Israel’s former enemies, Egypt, Syria, Jordan, Iraq, Lebanon, and KSA were passified via the US or Britain.

    The US and KSA also want to secure their oil regime, and now that Venezuela is dealt with, Iran is next.

    Why does the USA love Israel so much?

    They have a significant economic and military investment in Israel, and many of those Israeli billionaires are a part of AIPAC, which successfully lobbies the US to do what they want.

    A bonus is Christian zionism which reinforces the idea that Israel must exist to cause the second coming of christ, or the messiah for the Jewish zionists.





  • Use our easy bash oneliner to install our software!

    Looks inside script

    if [ $(command -v apt-get) ]; then apt-get install app; else echo “Unsupported OS”

    Still less annoying than trying to build something from source in which the dev claims has like 3 dependencies but in reality requires 500mb of random packages you’ve never even heard of, all while their build system doesn’t do any pre comp checking so the build fails after a solid hours of compilation.