Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)ME
Posts
11
Comments
95
Joined
2 yr. ago
Technology @lemmy.world
megaman @discuss.tchncs.de
darkmentor.com The ESP32 "backdoor" that wasn't | Dark Mentor LLC

This post refutes the claim that researchers found a "backdoor" in ESP32 Bluetooth chips. What the researchers highlight (vendor-specific HCI commands to read & write controller memory) is a common design pattern found in other Bluetooth chips from other vendors as well, such as Broadcom, Cypress, a...

The ESP32 "backdoor" that wasn't | Dark Mentor LLC
  • I played Balatro for the first time a few weeks ago and thought "I could make a killing if I made the chess version of this". But I don't know how to make games - much less computer games - so no money for me. Just a game to play instead

  • Ooo, interesting.

    I am going for public access here, so it wont work. But i think this is how some routers are set up. Like i think asusrouter.net is set to 192.168.0.1, so anyone with the router can go to the same url / domain and itll send them each to their own router. Found that out the other week and thought it very clever.

  • So i had done this (with Adguard rather than pihole) and i think i was getting caching issues. Whether or not i was, though, i removed it and it looks like my router is handling it all just fine without the rewrite on the local DNS server.

    Some folks mentioned "hairpin NAT" - i was reading the wiki on NAT last night but didnt get to hairpin, but that appears to be what is happening.

    The conclusion is - my setup had been doing what i want the whole time without any DNS fiddling. I updated the original post with the speedtests.

  • i think this is what I was doing with Adguard and using the re-write rules, but then the client (my phone, for example) would cache the IP address and it would fail when I was out of the house/network.

    Or am I misunderstanding what you are saying here?

  • ok, well that's easy to set up if that is how it just works! i wonder if maybe i should (at least temporarily) self-host some sort of speedtest app on the server and check the speed from my phone while i'm on wifi using the IP, wifi using domain name, and off wifi using domain...

  • Selfhosted @lemmy.world
    megaman @discuss.tchncs.de

    How do I use public URLs but route within my home network?

    Let's say I've got Nextcloud selfhosted in my basement and that it is accessible on the world wide web at nextcloud.kickassdomain.org. When someone puts in that URL, we'll have all the fun DNS-lookups trying to find the IP address to get them to my router, and my router forwards ports 80 and 443 to a machine running a reverse-proxy, and the reverse-proxy then sends it to a machine-and-port that Nextcloud is listening to.

    When I do this on my phone next to that computer hosting Nextcloud, (I believe) what happens is that the data leaves and re-enters my home network as my router sends the data to the IP address it is looking for (which is itself). This would mean that instead of getting a couple hundred Mbps from the local wifi (or being etherneted in and getting even more), I'm limited by my ISPs upload speed of ~25Mbps.

    Maybe that just isn't the case and I've got nothing to worry about...

    What I want my network to do is to know that nothing has to leave the network at all and just

  • Server is running the password manager for myself and family, and that needs to stay on while gone (there are ways of handling local copies and they sync later, but when ive accidentally had to troubleshoot that it sucks).

    Then ive got nextcloud, which while i don't normally need things on there i do enough that it is nice to have.

  • I asked a very good, thoughtful question yesterday and within 5 minutes got a downvote with no comment or explanation or feedback as to why. Ive got around 3k rep, not while im not a poweruser or whatever i aint new to it.

    Glad other people engaged with it productively, but yea was a real "this is what people have been talking about"

  • A "TLD" is a Top-level Domain, examples of which are .com and .org. They sell names within their domains.

    You'd just be buying a "domain name" within some TLD and redirecting traffic from that domain name, not from the TLD.

  • For a domain name:

    You go to something like NameCheap.org and buy a name (hackers4life.xyz or something cool like that). Then their web interface has a place for you to enter the IP address that you want associated with that name. Whenever someone then types "hackers4life.xyz" there will br a series of computers asking other computers "do you know the IP address for this?" until they do.

    If you have that Pi in your house, there are (at least) two steps for you then: (1) Getting your home IP address (2) Forwarding the port

    (1) Your router admin panel may have this, or else if you search the web for "what is my ip" there are sites that will tell you (basically, you connect to their webpage and they just print out the IP they are sending data back to). There are two concerns here, though.

    (a) Do you have a unique IP? There arent enough IPv4 addresses in the world for all the computers connecting to the internet. To get around this, ISPs will essentially group customers together under the same IP and then they figure out how to get the traffic to the right place. If you dont have a unique IP, you might be screwed (but i havent looked into dealing with that much).

    (b) If you have a unique IP, you still probably dont have a stable IP. Your ISP might reallocate all the addresses in their network every day/week/month/whenever. This is the case for me. Namecheap (or whatever other domain vendor) has a process for you to use a script to send them your IP address, and so you make a script to recheck it and send namecheap updates every hour or something like that.

    (2) Forwarding the port

    Some other machine on the web knows your IP (because it is associated with hackers4life.xyz) and so they try to connect. This comes down the wire from the street into the side of your house/apartment, into the modem, and into your router. If your router isnt expecting it (or prepared to do something with it), itll just ignore it. You want the router to instead send it to your Pi. To do this, you go to your router's admin settings and forward the messages based on the port they are coming in on. The standard ports for HTTP and HTTPS are 80 and 443, and so you can forward those ports to the Pi. Making sure that then the Pi does the right things with those is outside the scope of me writing right now.

  • I turned off QoS and immediately am getting 930 on speedtest.net from the desktop browser!

    Also, very helpful to know Issue 1 here. I assumed that the router would be the best spot to test since it is farthest upstream (other than the modem). I didn't know it could pass traffic faster than it can decode, but that makes sense that people would have tried to make that the case. The router is still getting ~500 Mbps while the browser is much closer to the full 1000.

  • that makes sense, and I'm looking now. However, the only thing that has anything other than zero in the 'Real-time rate' on the router is the computer i'm typing this on, which is at ~30KB/s up and down

  • That is the correct question, and mostly no, I don't have any specific problem.

    The biggest motivator for me looking at it is probably just hobby/interest/how-does-this-work.

    That said, my partner and I both work from home ~50% and are often pulling files/data that are a couple GB from the work network, and having those go faster would be nice. Probably the limiting factor in those, though, is the upload from the work network and so faster download for us likely wouldn't matter, but I'd like to be able to say "I looked into it, honey."

  • Technology @lemmy.world
    megaman @discuss.tchncs.de

    How to properly test my internet speed from ISP?

    Edit: at risk of preemptively saying "solved" - disabling the QoS on the router bumped the desktop browser speedtest from the ~600 up to >950Mbps.

    My internet plan with my ISP is for 1000 Mbps. This is far more than I need almost always, but it is what they say I am paying for. However, I can't get any speed tests to read more than ~650 Mbps, which is around about what my old package was.

    My router itself has a speedtest functionality and that is what I'm getting off of that. As I'm writing this post, I did a speedtest on my wired-in desktop and got ~590Mbps on speedtest.net.

    One thought I had was that maybe the ethernet cables themselves are the limit. All of them say 'cat5e' (actually, just checked and the modem-to-router is cat6), though, which should be 1000Mbps, yea? I swapped out the cable from the modem to the router once and got the same speed with the new ethernet cable.

    Maybe the router is just too weak? Well, I used iperf3 between two desktops that are both hardwired in

    Selfhosted @lemmy.world
    megaman @discuss.tchncs.de

    Store (and access) old emails

    Yet another question about self-hosting email, but I haven't found the answer at least phrased in a way that makes sense with my question.

    I've got ~15 GBs of old gmail data that I've already downloaded, and google is on my ass about "91% full" and we know I'm not about to pay them for storage (I'll sooner spend 100 hours trying to solve it myself before I pay them $3/month).

    What I want is to have the same (or relatively close to the same) access and experience to find stuff in those old emails when they are stored on my hardware as I do when they are in my gmail. That is, I want to have a website and/or app that i search for emails from so-and-so, in some date-range, keywords. I don't actually want to send any emails from this server or receive anything to it (maybe I would want gmail to forward to it or something, but probably I'd just do another archive batch every year).

    What I've tried so far, which is sort of working, is that I've set up [docker-mailserver](https://github.com

    Linux @lemmy.ml
    megaman @discuss.tchncs.de

    I am the fool (linux install)

    I installed pop!_os as my daily driver some months ago (completely got rid of windows) and have thought it pretty good. But something about it seemed off - it would take programs just too long to open, it wasn't snappy... Once I got into something it seemed to run fine (playing dota or something else was fine after initial quirks).

    Well, today, figured it out...

    When I did the first install, I was very nervous about deleting all of my existing data on my disks and so tried to manually partition everything so that I could get it right (I think I was also planning to dual-boot).

    Fast forward to today, and I'm testing speeds on all the drives to see which one to pitch for a new one I acquired. I see the 3 HDDs, but where is the SSD... Oh god, I installed the boot partition and root and home all onto one of the ~12 year old HDDs and the SSD has been sitting idle.

    Anyway, just about done with the new fresh install onto the SSD, hopefully it isn't too hard to start port over the home dir

    Programming @programming.dev
    megaman @discuss.tchncs.de

    Real examples here?

    Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if "runk" was real, which I assume not.

    But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.

    Technology @lemmy.world
    megaman @discuss.tchncs.de

    Jetbrains attempting to shutdown IPFS gateway manager, EFF defends

    www.eff.org Defending Access to the Decentralized Web

    Decentralized web technologies have the potential to make the internet more robust and efficient, supporting a new wave of innovation. However, the fundamental technologies and services that make it work are already being hit with overreaching legal threats.Exhibit A: the Interplanetary File System....

    Defending Access to the Decentralized Web
    Open Source @lemmy.ml
    megaman @discuss.tchncs.de

    I figured out how to get around the iPhone green bubble /blue bubble

    An android messaging app that sends everything as an image where the text is in a blue bubble. All images, baby.

    Open Source @lemmy.ml
    megaman @discuss.tchncs.de

    Is my 'smart' thermostat violating the GPL?

    So, I know very little and have a poor understanding of the software licenses, hence why I'm asking.

    I have a 'smart' thermostat that came with the new HVAC system. It is the AprilAire 8920W. It has a touchscreen, connects to wifi, does lots of 'computer' things. I cannot imagine that this furnace company built their own OS and kernel and everything else from scratch; it seems most likely it is running linux, yea? And with that, includes libraries and other tools that are under some version of the GPL, yea?

    I went down the router rabbit-hole some weeks ago and found the firmware for routers available on the Linksys website, the Linksys site has this 'GPL Code Center'. I'm finding nothing of the sort from AprilAire, though...

    So, if we assume that my 'smart' thermostat is running Linux (and, say, busybox, a common GPL-ed tool on

    Selfhosted @lemmy.world
    megaman @discuss.tchncs.de

    Using rsnapshot on a nextcloud borg backup?

    I've got my main house server that has a number of dockerized applications, including nextcloud-aio. Nextcloud-AIO comes with a built-in backup system using BorgBackups. I've had this running and doing my backups, it is probably fine. Notable, it does encrypt the backup.

    Now, I recently setup a separate machine to use rsnapshot to backup the things from the main machine that need backing up. It is SSHing on a schedule to do that, and backing up the folders I've listed.

    When I set that up, I skipped the nextcloud borg backup, because that is already backing up; however, it is not a remote backup, so is of limited use (granted, my 'official' backup computer is using about 18 inches away from the main server, so also of limited use).

    I can easily just include the nextcloud-borg-directory on the rsnapshot list, but does anyone know if it will properly handle just the updates?

    That is, both Borg and Rsnapshot are set up so that each backup isn'

    Selfhosted @lemmy.world
    megaman @discuss.tchncs.de

    Skip server registration for selfhosted Rocketchat?

    Hey, all.

    Is it possible to skip this 'register your server' step when creating a self-hosted Rocketchat instance? I just don't want to, ya know? Regular websearching is just giving a lot about how to disable user registration rather than skipping the server registration with Rocketchat HQ.