• 0 Posts
  • 14 Comments
Joined 11 months ago
cake
Cake day: August 15th, 2023

help-circle



  • Just going to address your first paragraph: I sincerely doubt that the devs are receiving money from a fascist government. I simply don’t think Lemmy is big enough yet to be on the radar of e.g., the Chinese government. Yes, maybe there are some Wumaos on here. My understanding is they get better training and autonomy these days, so it’s certainly possible. But most of the comments look more homegrown. I just doubt the Chinese government (or any similar government) would care to the point of trying to pay off devs, and it’s not their MO anyways.


  • The sad part is that this situation was entirely predictable a year ago.

    The Lemmy devs (who also run lemmy.ml) made no secret of who they are and what they believe. Especially dessalines.

    I do think they have made a very good piece of software. And I think we’re better off here than on Reddit. At least it is more difficult for one asshole to ruin everything. We have tools to block people and instances, so it doesn’t matter as much even if they’re in charge.

    I worry that if lemmy.ml continues to be run the way that it is, then it will bleed over into the software side, and we would be forced to fork Lemmy. So far though, despite running lemmy.ml like assholes, the actual development seems fine – not too different from any other open source project (I only remember that one issue where dessalines completely failed to understand why a user would want to block an instance).

    The irony is that, despite creating a tool with what seems like very socialist principles (it gives users & communities a lot of power, and doesn’t centralize that power with one person), those principles are often lost on the devs in favor of authoritarianism. Hence the term: “tankie”.


  • Dempf@lemmy.ziptoFediverse@lemmy.worldLemmy Active Users looking good
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    4 months ago

    Yeah I got permabanned too.

    I still post there occasionally. I made 4 new Reddit accounts from behind 7 proxies, but they all got banned due to browser fingerprinting. But I wised up and now the 5th one’s still not banned even though I access it from my home IP. I really try my best not to give such a hostile company more content, but there’s still a few local subs and specific content that isn’t big enough yet on Lemmy.


  • Want to drop some info here, not related to your question since it’s still out of your price range, but just for others who might be browsing, since I see HM chairs come up a lot in this thread and the other one.

    A lot of these fancy ergo chairs work similar to other furniture and use a network of dealers. This is important, because dealers often sell for way less than MSRP, especially when they’re buying for clients making big offers for office buildings buildouts. Some dealers can get you a great price by basically adding your chair to a big order for another client. I wanted a HM Embody and talked to 3 dealers in my area. One of them was able to get me the chair for about $1000, and this was also customized with the fabric that I wanted. Really shows the huge markup that MSRP is on this kind of item. Dealers are sometimes also willing to give you a loaner so you can try the chair at home before you buy.



  • VPN drains my phone battery like crazy, plus eventually I’d like to be able to share my services with some less technical people, and want to keep the barrier to entry low for them, so I’ve been looking at what I’d want in order to be comfortable exposing services publicly.

    Services are running on Truenas Scale (k3s).

    What I’ve been thinking is:

    1. Isolate services’ network access to each other and to my local network.
    2. Reverse proxy in front of all services (probably Caddy)
    3. Coraza as a WAF
    4. Crowdsec Caddy module
    5. Some sort of auth layer in the proxy, like oauth2-proxy (kind of tricky because not every service would work well with this, especially without client support). Probably would start with a 3rd party identity provider rather than rolling my own, especially since 3rd party will probably do a lot more monitoring around logins, patterns, etc.

    Thinking of hosting the reverse proxy piece on a VPS. Probably not completely necessary because I don’t think hiding my home IP really buys me much security, but Caddy might be easier to configure on the VPS compared to Truenas (though I guess I could run it in a VM on Truenas).

    Each app could run a wireguard sidecar to connect it to the VPS.

    Curious what others think about this setup, or if the recommendation is still to keep things behind a VPN.