For sure, you need a public (dynamic) IP for this.

NAT sucks, been there, done that… ugh! And, yeah, nothing can be done short of some sort of proxing that adds latency and unreliability

You need static IP only if you want to host the autoritative DNS server for your domain (spoiler alert: you don’t).

You don’t need to proxy your traffic via VPS (higher latency for no good reason) and the dyndns providers are over priced.

What you need is:

• Buy your domain
• Use a free DNS provider (I used for years the excellent dns.he.net but it is a bit cumbersome. Nowadays I gave up and I now use cloudflare without any proxying, just pure DNS)
• Point your registrar to the dns provider
• use ddclient to update the IP of a domain entry (e.g. server.example.com)
• add as many CNAME as you want that point to that entry (so you can have stuff like Jellyfin.example.com www.example.com Nextcloud.example.com)

That’s all… ddclient will update that single dns entry every time your server restarts (or the IP lease expires and you get a new IP)

The only thing you need to pay here is the domain (you can get free domains but that is another story and tbh I would not recommend, there are cheap domains out of there)

You are not thinking of the next (idiotic) issues: hypothetical people doing drugs in the stall and hypothetical people having sex in the stall.

Of couse if it was closed neither of the two would be an issue but, as far as I know, these are the motivators for the stupid stalls

You are not thinking of the next (idiotic) issues: hypothetical people doing drugs in the stall and hypothetical people having sex in the stall.

Of couse if it was closed neither of the two would be an issue but, as far as I know, these are the motivators for the stupid stalls

Every time I hear stuff like this I wonder what they expect trans Men to do.

Go to Women bathroom? Go to Men bathroom?

They have in mind trans women and while this is disgusting in itself, even following their perverted logic they would clash with their perverted logic on trans men

Or afraid… that given how military power is distributed… is not something that unfounded

The only explanation I have is dog whistle for some sort of “western supremacy“ 🙄

Genuinely curious… why using root for operations like these?

ChromeOS was exactly mean for that

sudo apt-get install friends

Awesome package! Still figuring out what it does though 🤔

I haven’t looked in the tor protocol for more than a decade but if routing was done based on traditional networking parameters (ttl distance, ping, etc) pretty sure you would end up all your nodes in your jurisdiction.

If you were using pure random, routing may involve only US (where there are a significant percentage of nodes)

Instead you can see that rarely there are two nodes in the same jurisdiction.

Years ago there were a config file mapping countries to jurisdictions and maybe that has been ditched but still I don’t buy that it is pure random or using traditional routing criteria

Of course not! For this reason you need different providers and jurisdictions for datacenters, operating systems, encryption providers.

It’s the very same principle tor works: sure you can do traffic analysis and be able to “unmask” a tor user… and for this reason tor deliberately sends traffic across 3 different jurisdictions. Is it still possible to force 3 different nodes to cooperate for the unmasking? Sure… but you need 3 jurisdictions to collaborate with that.

Also, fun fact: bank secrecy is still in effect for Swiss residents (regardless of the citizenship) and people resident outside of the US and EU. Because things are always more nuanced than they seem 🙂

Real world example

Yes, of course, it was a mistake, I reworded that sentece

The only safe phone is a phone with no data.

Otherwise there will be tools to gain full access.

Without forgetting the good old rubber hose attack

FWIW I think the only way to keep confidential information is hosted in another country, encrypted, with no credentials (or even the name of the server) cached, all on open sources stacks, with the infrastructure provider different from the operating system provider different from the application provider and encryption provider

Is this convenient? No Is this accessible to the average user? No

I just think something at certain point went extremely wrong in history. We accepted control in exchange of convenience

This was mentioned at the time of the story of the lake. The Epstein files include also the unverified tips to the FBI.

The strategy here is they are slowly releasing outlandish and unverified accusations first, slowly so that people start debating “is it true? Is it false?”

These are realistically all false (and this is the point) so when the real, verified, documented things will come out

1. They will sound minor
2. People that were invested (at the time realistically) in saying these are false, will keep in saying that are false.

The Bunba story, for example, now seems small and fake (while it was mentioned by people that were there not like this BS that was tipped by some idiot anonymously on internet)

In other words these are all attempts to discredit the Epstein files.

And based on a lot of conversations here… it seems that they are successful (and the average Lemmy user has waaay more critical sense than, let’s say, Facebook user)

Yeah and I think it’s a pity. It’s the byproduct of “app culture” everything has to be easy. One button, plug and play…

Unfortunately like many things in life “saving” (time and effort n this case) has a cost

Unfortunately even the best intentioned and best audited project can be compromised. So that is not a guarantee (sure, much better than closed source but that is a given)

You may be forced by a rubber hose attack (or legal one) to insert vulnerabilities in your code… and you have the traffic… a single point to attack… signal/proton/etc

Is it possible with two different vendors? Sure it is but it is way more complicated

Call me old fashioned but I really think that for real E2EE the vendor of the encryption and the vendor of the infrastructure should be two different entities.

For example PGP/GPG on <any mail provider>… great! Proton? Not great

Jabber/XMMP with e2ee encryption great! WhatsApp/Telegram/signal… less so (sure I take signal over the other two every day… but it’s enough to compromise a single entity for accessing the data)

“Such a nice airspace you have here, it would be a shame if something would happen to it” Also doesn’t say they would invade… still it’s a clear threat.

Putting a correlation on “more fighters jets in your airspace” on them buying more planes that cannot really be used to protect from the US (for software limitations) sounds a lot like a threat.

But, sure, you are technically correct