QubesOS workstation + homeserver, and DANE for TLS without 3rd party company

neowutran.ovh
preview

2.5 years ago, I migrated all my services hosted on a cloud provider to a homeserver.

This homeserver is also my workstation/gaming/dev/everything. I use QubesOS (an operating system based on the Xen hypervisor), and wrote some document about it: neowutran.ovh/qubes/articles/homeserver.pdf

Basically, I am hosting:

  • DNS
  • Matrix
  • Email
  • Jitsi
  • Mumble
  • Peertube
  • Screego
  • Nextcloud
  • Searxng
  • Tor
  • Wireguard VPN
  • Copy of wikipedia
  • Personal website And others.

And for TLS, to have better security, and to avoid relying on third party company/providers, I am using DANE.

en.wikipedia.org/…/DNS-based_Authentication_of_Na…

sr.ht/~yukikoo/dane_without_root/

github.com/buffrr/letsdane

The “dane_without_root” is one of my projects and I am welcoming review / feedback on it

( I also posted about it on the QubesOS forum: …qubes-os.org/…/highlighting-neowutrans-technical… )

Day 771 of posting a Daily Screenshot from the games I've been playing

preview

Today’s game is Old School RuneScape. I went through and did the stronghold of security today. I completed control, and wanted to do something a little lighter so this is what I chose to do.

I hadn’t realized the Stronghold was the kind of thing where you just run through and hope not to get swiped at. I assumed you had to level up to do it, but nope. Still though those extra levels came in handy. Gave me a few extra points to avoid getting swiped at.

Getting over there was a bit of a pain in the ass because the count wouldn’t teleport me for whatever reason. So I had to make the tedious walk all the way over there to start the dungeon. I at least benefited because I got some stuff i can sell for a decent amount of money (like poison)

Anyways, to end off I headed to the exchange. I wanted to pick up a Mithral Scimatar as I’ve been making my way down the Steam Achievements as a “Things to experience in OSRS”. I don’t think holding a Scimitar is really that big of an experience, but may as well do it for consistency sake

Charges Dropped Against Person Who Clapped at a City Data Center Meeting / Lux Claridge was dragged from a city meeting about data centers and charged with interfering with the police after they clap…

404 Media Charges Dropped Against Person Who Clapped at a City Data Center Meeting
preview

Full title: Charges Dropped Against Person Who Clapped at a City Data Center Meeting / Lux Claridge was dragged from a city meeting about data centers and charged with interfering with the police after they clapped during a presentation.

Charges Dropped Against Person Who Clapped at a City Data Center Meeting / Lux Claridge was dragged from a city meeting about data centers and charged with interfering with the police after they clap…

404 Media Charges Dropped Against Person Who Clapped at a City Data Center Meeting
preview

Full title: Charges Dropped Against Person Who Clapped at a City Data Center Meeting / Lux Claridge was dragged from a city meeting about data centers and charged with interfering with the police after they clapped during a presentation.

What's something people should buy today instead of tomorrow?

preview

Anybody know of anything else that would be quite wise to purchase sooner than later, due to potential (or incoming) regulation that would be regarded as privacy-infringing to enforce? I was thinking about this because I’ve been pondering a high-quality 3D printer purchase for this reason.

Advice for varying levels of budget would be quite nice, too; I partially intend on this being a post people may want to revisit.

book pipeline help

preview

Has anyone here had much success with automated book downloads and a self-hosted library? I've been pulling my hair out trying to get shelfmark and calibre-web automated to work for me.

I'm trying to use them for engineering textbooks which I realise is not the intended use-case, so any more appropriate suggestions would be appreciated. I want something that handles creating a searchable text layer on top on the book so I can search the textbooks more easily.

ShelfMark is having the following issues:

  • not connecting to annas-archive.is. I can reach it from my browser
  • the sources I want aren't covered by the indexers via prowlarr

CWA is struggling to ingest my engineering textbooks at all. I've just increased the time-out so hopefully that helps.

edit: increasing the CWA timeout setting let it get through the textbooks. shelfmark is my only problem now, assuming adding a text layer with stirling-pdf goes well 🤞

edit 2: shelfmark is now working (thanks to TheFerventLion below)! OCR in stirling-pdf is the last step

Bill Gates warns ‘there is no plan’ for the ‘upheaval’ AI will cause

CNBC Bill Gates warns ‘there is no plan’ for the ‘upheaval’ AI will cause
preview

“The challenge is monumental. Even under the best circumstances, the transition to this new AI era will be one of the most turbulent times in human history,” Gates said.

He said managing the transition requires new national bodies able to coordinate policy across employment, taxation, energy, elections, public health, the financial system and national security.

“But even a country that gets its own house in order will still be exposed to risks that cross borders. This is why an international organization will need to be built in parallel,” he said.

These agencies could be modeled on certain existing systems, such as the global inspections regime for nuclear weapons, regulations for international aviation and agreements that protect the ozone layer.

“A new global organization for AI will need elements of all three and more,” he added.

[ NL] Urgent advice: 'EU must tackle China harder, even if it hurts economically'

Dringend advies: EU moet China harder aanpakken, ook als dat economisch pijn doet
preview

[ The Netherlands] "Europe must take much stricter action against China to stay afloat economically. That is one of the most important advice in a new report from the Scientific Council for Government Policy (WRR).

Europe should not be afraid that China will strike back and damage the European economy. Doing nothing is more risky in the longer term, says WRR scientist Haroon Sheikh. “And the alternative is for our industry to disappear.”

Note; Translation via Vivaldi of NOS article in Dutch. See comments for the rest of the translation of 'Dringend advies: 'EU moet China harder aanpakken, ook als dat economisch pijn doet"

AliExpress caught using silent audio to fingerprint visitors’ browsers | Malwarebytes - sh.itjust.works

AliExpress caught using silent audio to fingerprint visitors’ browsers | Malwarebytes - sh.itjust.works
preview

This was posted to cybersecurity and I am not sure how to make a proper crosspost. Or even if that is a thing I can do. So just dropping a lemmy link in the url. Hope that is OK. The external link is here -> malwarebytes.com/…/aliexpress-caught-using-silent…

Given how much fingerprinting relates to privacy, seems related for this group too. Yet Another Fingerprinting Technique. It doesn’t record the user, just a silent signal which still has variance due to the unique device.

researchers and browser maker Brave reported finding silent Web Audio processing on the site that could help fingerprint visitors’ devices.

on top of that, the traditional fingerprinting signals are used too,

The scripts also gathered information tied to canvas rendering, WebGL, display settings, hardware configuration, WebRTC behavior and user interactions. Together, those signals can create a more detailed profile of a device than any one signal would provide on its own.