Hacker Newsnew | past | comments | ask | show | jobs | submit | kavouras's commentslogin

I don't like the idea of moving from google's ecosystem to proton. While they're better, ecosystems tend to get locked down or change for the worse.I'm not planning to repeat the google cycle. I got my own domain for email, bitwarden for passwords, firefox forks for browsing, and many other stuff to get off google. Also I realised that stuff like contacts, notes, calendar don't really need to be on the cloud, but I'm planning to self host some services like that, mostly for the nerd in me.


We should all have e-mail backups regardless of which service we are on. Even Google shuts down accounts randomly. Owning your domain and having e-mail backups makes it easy to switch e-mail services.


True, just happened to one of my friend. 10 years old gmail account got suspended because he supposedly sent phishing emails. Which is completely false (he didn’t even understood what pishing was, he had google authenticator for totp). Ofcourse the appeal process was useless as no one reply to those. It’s been 2 months now. Own your domain.


Owning your domain just changes your point of failure from Google to your registrar. It is not, in fact, any safer.

It's not like registrars haven't randomly shut down people's domains due to accidental (or malicious) abuse reports.


But as long as you're using a registrar in your own country and a TLD managed by a legal entity in your own country, you do have a path of legal recourse against both parties.

It might not be successful, but you do have far better options than relying on a third party in a country far away.

It's always a varying grade, not either/or.


Your registrar won't use automated tools to suddenly close your account. They have no reason to look at anything you're doing and most likely won't care as long as you pay your bills and they can pay theirs.

Google knows what you watch and post on Youtube, your emails, your google drive contents, your photos, contacts and everything. Any bit of that can trigger an automated ban for your account you can't recover from unless you know a Googler personally or can get through to their only working customer service outlet: the front page of HN.


It's easier to keep track of your own IP addresses than whatever you'd hosts or DNS hack to over at Google.


The risk of loosing a domain, especially if used only for email, is lower than losing a google account. Using a gmail.com means that google owns both your emails and your email address and can do whatever they want with it.

Even if it's just your google account being locked for some random reason, good luck getting out of the situation and/or getting in touch with a human there.

If you can't access your gmail.com address anymore then you become locked out of so many other things.


Yes, I've started to think about this more seriously now in the UK. I have moderate political opinions, but I now ask myself will they be acceptable now or in the near future by the UK government or where my data is hosted (i.e. the US). Will I suddenly have an email account blocked or closed down for supporting a non-violent cause I believe in?

Horrible times when this has started to become a part of my thought process.


Register with one provider and DNS with another. You can always use one to regain the other.


Well WebDav/CalDav/CardDav works quite OK. Baïkal is trivial to selfhost (cal+card) then you just pick some webdav implementation like KaraDav/PicoDav/FlyDav and you are good.

Email is really the one that requires lot of caring about so not easy to self host.


IMHO the problem starts when you need to share your calendar with the outside, then you need to expose that service to the Internet and, to me, it's a whole different level of complexity making sure it remains safe.


If read only is good enough, a simple export of the .ics to a bucket can suffice.


Yes I'm aware, what I'm saying is, in the time between setting up my home server again, I've realised it's not even that useful. I used to think that having my todo and calendar locally on my phone was unusable.


You can self host email in an afternoon, its not nearly as bad as people make it out to be.


It's not about configuration but rather your IP reputation and the struggle to not have your mail go straight to addressee's spam folder.


Thats just a matter of buying a decent IP and setting up DMARC and DKIM.

I see this reasoning as the #1 reason not to self host, but it really isn't a big issue once you do the initial setup.


> Thats just a matter of buying a decent IP

Please expand on this. Public cloud IPs would be on spam lists, and providers like Hetzner and OVH aren’t any better. Where does one go to buy a decent IP?


Use an IP reputation tool like https://mxtoolbox.com/blacklists.aspx

What you will find is that many dedicated IP's from larger vendors are fine.

I personally use Hetzner and don't have any issues with reputation at all.


I had troubles with Apple blocking a bunch of range IPs from OVH, because they don’t handle abuse claims. It didn’t show up in blocklists at the time, but was in practice unusable.

IME anything that can be purchased by an average developer is in some list nowadays and deliverability is always crap (with luck it lands on spam folder).


With proton, at least, you can just use your own domain and if they ever get bad, you just point the MX record to some other service, or self host, and pretty much have it taken care of.


I also agree on "for personal things we don't need SaaS" and I would say do we even needs self hosted in the sense of a central server.

By that I mean, could we have like for firefox , heavy clients but with client to client sync. The goal is to not need to have a always online machine while still solving the "i prefer if my emails are copied both on my laptop and my phones" . Especially as nearly all my devices are often if not always on the same LAN


Firefox sync clearly requires a central server. For any kind of peer to peer syncing to work you must have the machines on at the same time and accessible. And then there is the issue of NATs, including CGNATs. To work reliably these almost always have to have some kind of relays anyway (Tailscale's DERP, Syncthing also has relays).

For the experience an average consumer expects, you at a minimum need a central short-lived cache.


Yes sorry I meant firefox not for the way its sync , but in the way its a heavy client you install. As said for me most of my devices will be at some times during the week in the same nat so that no centralized server even short lived should be needed. And for personnal use, I only care if the device I have on me is the one with latest data especially as for most use case I'm the only one reading/ writing , so eventually consistency is not an issue


This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/). It works pretty well, but doesn't have any automatic conflict resolution (I've been working on [something](https://github.com/LightAndLight/syncthing-merge) for this).

Next up I'm moving my TODOs off Todoist to something local-first, and plugging that into my Syncthing setup.


Perhaps you might like syncthing?


Yes what would be better is a "libsyntching" that i can plug to a software so that it does not require additional brain power, i.e install Note app on device A and B, pair them once, fire and forget.


I agree that Google (and in the above comment MS) failed to fulfill their lofty promises (“don’t be evil” etc.)

But the blame is on us: we should have known better than to entrust our data to free services run by a company whose entire revenue comes from ads.

Proton is funded by our subscription payments. I think there’s reasonable hope that their incentives will remained aligned with those of their paying users.


Google has very good PR, people still can't grasp that they're an ad company that dabbles in hardware and services.


  > I got my own domain for email
Doesn't this make migrating easier? Since you are just changing where it directs to?

Edit: s/mining/migrating


Mining?


lol thanks for the catch. Meant migrating


It's a non profit so I think the risk of change for the worse is little.


I think it has to be enabled as a module, and the android kernel has it disabled.


Isn't this putting unsustainable load on the root servers?(on the scenario that many people do that)


If we are talking about the actually root servers, there are 13 redundant names spread out (thanks to anycast) on around 1700 servers located around the world, and the lookup a user would do is cached for 2 days. That mean the highest amount of traffic a system will generate is one request per unique TLD (like .com) per 2 days, and it will fit a single UDP package.

We can then do some guesses about size for questions like "what is the nameservers for .com". Those are a bit larger than most dns queries since the answer is a bit bigger than most, since .com has a lot of nameservers, so lets put it down to 800 bytes. Every 2 day a average use might then, using some guessing, generate maybe 10 kb of traffic, or about 0.015 seconds of watching a 1080p video on youtube.


Everyone used to query the root servers directly from their ISP or corporate edge servers until the big platforms wanted to gather more of everyone's data in the name of "keeping people safe" from "bad ISP's". As with any manipulation campaign there are a few incidents corporate propagandists can site to say, "See! We are protecting you!!" forcing people to debate the issue and knowing the majority will accept the default settings. Blocking all the DoH/DoT resolvers would be trivial for any ISP to do just as I have been doing at home since the inception of DoH.

The root Anycast clusters are absolutely designed to handle the entire internet querying them which I do from Unbound. If one wishes to help reduce load they can enable large memory caches and rewrite min-ttl to something sane to protect the root servers from Amazon EC2's default 5 second ttl and others like them. Blocking known spam and tracking domains also helps reduce the total number of queries. Groups of friends can even further reduce the load by setting up their own DoH/DoT servers using Unbound DNS and sharing the cache and using cron to keep their favorite domains hot in the cache and increasing private by making the crond queries from a VPS node.

Here's my cache stats for a 3 day uptime:

    total.num.cachehits=18149
    total.num.cachemiss=2300
    total.num.prefetch=4561
Memory usage permitting up to 1.5 GB:

     Private  +   Shared  =  RAM used Program
    343.1 MiB + 523.5 KiB = 343.6 MiB unbound


https://datatracker.ietf.org/doc/html/rfc8806

Abstract

Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server; those resolvers may have difficulty getting responses from the root servers, such as during a network attack. Some DNS recursive resolver operators want to prevent snooping by third parties of requests sent to DNS root servers. In both cases, resolvers can greatly decrease the round-trip time and prevent observation of requests by serving a copy of the full root zone on the same server, such as on a loopback address or in the resolver software. This document shows how to start and maintain such a copy of the root zone that does not cause problems for other users of the DNS, at the cost of adding some operational fragility for the operator.

This document obsoletes RFC 7706.


RFC 7706. Even has config file examples.


If I understand what you're saying, you can do any modulation scheme with sdr, it doesnt depend on the model


Groovy. Are there any limiting factors such as processor speed and what is the best software that does it all on Linux? I have no idea what ratio of magic smoke is in the software vs. ratio of magic smoke is in the hardware.


The output of a usb radio like this is a set of IQ values which is the raw data from the ADC. The amount of values (samples) you get is device dependent and also limited by your interface. The RTL SDR 4 over usb can do up to 2.4-3.5MHz. The ADC on that device is 8 bit so you will get two 8 bit, IQ numbers per sample.

You can tune into remote SDR’s people set up to work with this data without having your own device or download recordings others have made.

It is this raw sample data that you then demodulate according to whatever scheme required on the PC side.

A great resource I found was pysdr.org. I had absolutely no background in RF and very little python experience but that guide explains everything from the ground up from how the IQ samples are physically generated and read in an antenna, all the modulation schemes you mentioned, and how to code useful things with the various devices. No affiliation but a great resource.


There are levels to this that can get very expensive very fast depending on what your intent is, and how comfortable you are with programming various FPGAs.


The title of the original article calling the app "activism theater" is also extremely rude. The author prefered being a prick than doing the best to fix the app.


> title of the original article calling the app "activism theater" is also extremely rude

It’s also not wrong.

The app doesn’t seem designed to do what it claims to do. And the developer doesn’t seem interested in remedying that.

Worse, by hosting this on linode, they may be doing our corrupt DoJ and ICE’s work for them in identifying community organizers who could interfere with them down the road.


Wouldn't you rathet talk with the people thatade them?


Sure, but Musk showing them means full access to anything, demos, etc since he runs the show.


Yeah that's what I was thinking, you need both


yep, you need both; and in fact the definition includes both: https://en.wikipedia.org/wiki/Abelian_group


A Greek friend of mine who applied for a visa to do a PhD in US about a month ago, was required to unlock their social media profile by the US embassy, this is already happening.


What does 'unlocking' a social media profile mean, specifically? Making your Facebook / Instagram public?


Whenever getting a US visa you were also getting your palm fingerprinted, also at the entry in the airport.

Weird that people somehow are making more fuss about showing your social media to authorities than giving away your biometrics.


Of course its worth making a fuss about it. My social media are private because what's getting shared in it is for close friends and family only. The US government has no right searching through it. This is a big joke and I'm afraid it's only the beginning. Personally, with how things are going, I don't think I'm pursuing a PhD in the US after graduating. What's next, sharing a backup of my private conversations?

I'm afraid we're going into a weird timeline where authoritarian figures in power(not just government) are having immense amounts of data for people, and the technology to go through it without much effort. It's a good time(if it's not to late) for everyone who cares about their privacy to start getting as much as possible outside mainstream social media and centralized accounts(google etc)


problem is not being on social media is becoming more and more suspicious in and of itself sadly.


I can fake, change or delete my social media. I can't fake, change or delete my biometrics. So it's crazy to me to see people focusing on the least worst violations of their privacy like the government seeing their vacation photos.

>The US government has no right searching through it.

Well they just made it a right. What are rights anyway? Rights are not a natural construct, they're whatever the government decides. So if the government decides one thing, tomorrow it can decide another thing if it wants to.

It's not a US issue, every country you will go to can change their rights willy nilly based on the current boogie man: terrorists, COVID, Russia, Iran, right wing "extremists" etc

In the UK or Germany you can be fined, swatted or arrested for tweets and wrong think. Why? Because government made that a right.


I'm not sure what your argument is. I'm not trying to talk about the semantics of the word right. Yeah every human rule is a social construct, I'm just saying this is bad, and it's only the beginning.

I'm guessing you're a US citizen, because this isn't about the US. Many countries in the world are more or less puppies of the US government, it's not like we're living in an isolated world where the decisions of the US government don't apply to others because they're not US citizens. This is showing a general trend, which doesn't concern just visa applications.


>I'm guessing you're a US citizen, because this isn't about the US.

I'm not and I never said it is, I was just saying it's a bit hypocritical for people to complain about governments wanting to see your social media before letting you in the country, while being OK with giving up your biometrics.

You might say you're also not OK with giving up your biometrics, and then I would say, well why are you going to places that do things you're not OK with? Just stay home or go to other places. Why complain about the politics of countries you're not a citizen of and can't vote? Their country, their rules, only their citizen can enact change.

And BTW, I'm OK with governments wanting to see your social media before letting you in. Where I live in EU, there's a lot of middle eastern "refugees" whose social media is full of support of terrorist orgs and calling for death to Israel. Why would you want to let such people in? Would you want those people living next to you? If they're that brazen and stupid to be so open about extremist beliefs on social media, they don't belong in our society and shouldn't have been let in the first place. Granted that won't stop all these extremists, but it will at least stop the really dumb ones.

I expect my elected government to prioritize the safety of its taxpayers over the privacy rights of foreigners and visitors.


I expect my elected government to obey the Constitution under which it is set up. Treating anyone differently because they exercised freedom of speech is against how the US is supposed to work.


Freedom of speech means saying what you want, not blocking roads, college campuses and disrupting activities so people can't walk and study.

Your freedom of speech ends when you're physically and practically disturbing other people's freedoms. Weird how people don't get that.


What does any of that have to do with vetting social media posts for unapproved viewpoints?


What does your previous comment have to do with it?

Inspecting visitor's social media doesn't break the constitution same as how inspecting their/your luggage at the airport doesn't. Border checks are a thing orthogonal to the constitution.

Employers will also Google you and judge you based on what you said on social media. If your profile is full of swastikas or other schizo shit, you probably won't see an offer. Why shouldn't countries do it? Do you want dangerous people let?

So no, that doesn't break the constitution.


I realize that you aren't from the US, so maybe you don't know how US courts have interpreted the first amendment. The US government cannot prohibit "swastikas and other schizo shit", as distasteful as they are. Your employer is perfectly free to do so, however. Those are two different things in the US.


I don't see any signs of AI in the image, also the book in his hands is a real book, usually AI messes up those kind of things.


I thought "toi la mot con Lua" was French for "You, the word with Lua!", the well-known, but not to me, scripting bible.

Turns out I misread the Unicode, and it is actually "Tôi Là Một Con Lừa", which is Vietnamese for "I am a donkey", which probably makes it suitable reading material for yours truly.


In my limited understanding, there are many factors differentiating between antennas, different antennas are better at emitting/receiving at different frequencies, and also there's directionality in the mix . For example a satellite dish and an FM radio antenna are both antennas, they're certainly not the same thing.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: