@moonpiedumplings@programming.dev

comments

• Edit: no, it doesn’t. Looking at the comments below, it’s public key crypto.

  Original comment:

  The problem is that if that is your threat model, then the VPS provider, ISP, and literally everything between you and letsencrypt can pull a conpromised key fro letsencrypt.

  This actually happened btw, an xmpp server was attacked this way, they compromised not the server itself, but the VPS provider MITMed their traffic: www.devever.net/~hl/xmpp-incident

  If your threat model involves this, then the only solution is Tor, which eliminates these requirements of trust.

  on Letsencrypt is under US jurisdiction. Is there a free-er alternative? in c/selfhosted@lemmy.world · 5d ago

• Probably not.

  on Document history in c/foss@beehaw.org · 14 Sep 2026

• It was around last year.

  Fresh firefox profile, US. Worked fine.

  Maybe it doesn’t work if I try it again.

  on I am asked for Gmail in c/privacy@lemmy.ml · 12 Sep 2026

• I’ve created gmail without a phone number. It seems to still be possible.

  on I am asked for Gmail in c/privacy@lemmy.ml · 12 Sep 2026

• EDIT no wait, this post is about secure, not hosting/tunneling in general. This comment is off topic ig.

  I would like to avoid paying for a VPS

  Oracle cloud free tier, but it does have a history of randomly killing the VPS’s created.

  Public ipv4 addresses are scarce, and becoming more expensive now. You are probably going to have to shell out some cash if you don’t already get one as part of your internet plan.

  on Hosting external services in c/selfhosted@lemmy.world · 12 Sep 2026

• Step 1 is communication.

  Talk to your english teacher. Explain to them, why Google Docs, the way they track history and changes, is not a preferred option for you, due to ethical or privacy considerations.

  Explain to them your selected technical alternatives for tracking changes. A few alternatives are (many commenters already covered):

  • LibreOffice Word + it’s build in version history
  • Etherpad, onlyoffice, or an open source hosted solution with version history
  • Git: Yes, it is the most technical option. But don’t assume that your teacher doesn’t know it, or is unwilling to learn it, so it has to be included on the list for a complete set of options.

  Secondly, you need to remember that what your english teacher wants is not “document history”, but instead seeing your process (maybe to prove you didn’t chatgpt it, in which case, writing it on paper also might prove that). If none of those technical alternatives are viable solutions for them, another alternative is to simply submit documents that encapsulate each stage of the process. For example, a common pattern that my teachers and professors would do for writing assignments is:

  • Annotated Bibliography: Collection of sources, but also annotations, or comments on each one. Why you included them, how they can be used in your essay, and so on.
  • Outline: This can be bullet point like overviews of each paragraph and the topics they will discuss, how, and what sources will be used
  • Rough draft (and various stages of it, as it gets reviewed by you, or others like classmates)
  • Final Draft: self explanatory

  The above setup is nice, because it is not tied to any particular software, and can even be executed on paper. This would mean that future students, similar to you, going through the same class, could write essays with their preferred writing software, instead of only with google docs or whatever solution you get the teacher to learn how to work with (assuming they are nontechnical and teaching the teacher is difficult.

  I only started seeing it done like this in college classes. High school classes only sometimes required an outline, and never required an annotated bibliography. It also is more work then just writing an essay from sources.

  But the two big benefits of this setup are:

  • Even though it is more work initially, it is less work overall, while leading to a better organized and higher quality essay.
  • By assigning due dates to each step of the process, the teacher can eliminate lots of procrastination and doing the entire essay at the last minute.

  Good Luck!

  on Document history in c/foss@beehaw.org · 9 Sep 2026

• What reverse proxy are you using?

  on Replacing Cloudflare Tunnel with a Selfhosted Towonel Tunnel in c/selfhosted@lemmy.world · 1 Sep 2026

• Tailscale works great, but their free tier is limited to a total of 8 users, which is enough for a tiny minecraft server, but doesn’t seem to be enough for your usecase.

  For 10-15+ users, you probably want to self host a VPN on your own VPS. Like, you can self host headscale, which is tailscale but self hosted. : github.com/juanfont/headscale [1]

  I wouldn’t port forward game servers, because they often lack authentication (login and stuff), and then they also have security issues due to not receiving updates. If your game server isn’t truly public, then it’s easier to just have people use the tailscale client to connect to your VPN.

  [1] Although I would recommend headscale to OP for it’s simplicity, it is very barebones, and software like netbird or netmaker is more close to a truly self hosted tailscale, with things like more advanced accounts, OIDC integration, authorization, and so on. But they are more annoying to host and set up.

  on What are my best options for hosting classic game servers in 2026? in c/selfhosted@lemmy.world · 31 Aug 2026

• Do nix and then use nix2appimage, or nix bundle to package the app compressed as an arx archive without the startup times they complain about.

  You can also use github.com/DavHau/nix-portable to bundle it a bit better, without needing nix on the host.

  And then, based off a quick search:

  github.com/neobrain/nix2flatpak

  github.com/barstoolbluz/nix2deb

  I couldn’t find nix2rpm or nix2pacman, but there exist tools to convert between formats (alien, debtap, rpmtap, and one more who’s name I can’t remember but I remeber as being the most versatile).

  What I’m trying to say, is that when people said “just use nix”, they probably really mean to use nix as a platform to build other packages withouth doing extra work.

  On the other hand,

  You can also use one of the newfangled appimage like formats: docs.pkgforge.dev/formats/packages

  This one is linked in there and creates a static executable from any binary: github.com/VHSgunzo/sharun

  Now they would still have to build for macos and windows, but they are already doing that anyways.

  As a sidenote, there is also this: github.com/pacur/pacur , which is an aur like repo that buids debs, rpm’s, and pacman packages. So there’s semi-automatic updates, via a publuc repo you can out stuff on.

  The real elite solution, imo, is to host forgejo, or use codeberg, which insanely has a package registry for every possible format of packages. So you can directly just push there, after building however you want.

  But if developer’s were good at packaging, I wouldn’t be so mad when they try to do it.

  Because this:

  The next version will include a new built-in self-updating mechanism

  Downloading unsigned, unverified binaries directly from the latest versioned github release?

  Makes it so that all that’s needed for getting malware on the system is pwning the developers account via some supply chain malware, that hooks into there browser and pushes a release.

  And every additional developer who can release, or every github actions that is potentially vulnerable but can be made to release, or claude (since the author is letting it commit, which requires it to run without sandboxing afaik) becomes more attack surface.

  There are ways to fix this. Conventional distros use multi party signing of commits and releases, where developers continously verify eachother and look over changes.

  More newfangled flows involve using github actions to build immutable releases, directly from tagged versions of the code.

  But random developer #3989 isn’t doing this. They are distributing their software in a way that malware distributors will be ery happy to see after pwning their account.

  I want devs to use nix, because then I can build or run their program directly from the source code. It sidesteps so many issues with visibility of the supply chain, or being unable to inspect what I am running.

  I like nix becuase I can make developers like the above satisfied by giving them a way to easily build static binaries, or other formats.

  on I hate packaging my software for Linux (fresh) in c/technology@lemmy.world · 30 Aug 2026

• Docker is foss. Docker desktop and docker sbx are not.

  on Every time I use podman in c/linuxmemes@lemmy.world · 24 Aug 2026

• Is your comment supposed to say “native pf or nftables”?

  on VyOS or Opnsense in c/selfhosted@lemmy.world · 23 Aug 2026