LG very much tries to connect to random Wifi networks to leak your data, Gamers Nexus talks about it in their recent video.
Here's an arstechnica article if you don't got 2 hrs to spare 😅
Excerpt:
YouTube channel Gamers Nexus worked with Level1Techs, a technology-focused YouTube channel, and security researchers to analyze LG TVs’ tracking capabilities. They shared packet captures that pointed to the TVs, including LG’s pricey G5 OLED TV, scanning the LAN for other devices.
“The [G5] crawled our entire network and found dozens of unrelated devices, including smartwatches and phones of our staff who didn’t even know we were working on this,” Steve Burke, Gamers Nexus’ editor-in-chief, said.
LG’s ad business, LG Ad Solutions, has said in recent marketing materials that it can reach 363 million “addressable secondary devices” in the US.
In that arstechina article (orignal exposé here) about the journalist's ID getting leaked hours after getting a rental car, they mentioned Pete Hegseth's data was accessible too (screenshot and all).
So yeah, our very smart goverment loves to fuck over their most powerful too just to piss on the poors and ensure we are watched at all times.
Idk if Wholphin will fully fit your needs, but that's what I use on my FireTV and we love it. It looks sleek as hell and has sone plugins like Serr requests. Weirdly though, it takes longer to load an ep on there compared to my laptop or phone.
Sorry, thanks for correcting me. I got too doomer and got lazy, but I should hold myself up to basic standards.
Yeah, Clorox produces these products, but the bleach itself is fine, it's just these two cleaners and only the ones sold in Puerto Rico and the Virgin Islands.
Clorox is recalling about 6.3 million bottles of scented Mistolin Dilutable Cleaners and scented Lestoil Heavy Duty Multi-Purpose Cleaners over concerns the products may be contaminated with dangerous bacteria, including Pseudomonas aeruginosa, according to the U.S. Consumer Product Safety Commission. The recall was announced Sept. 3 and covers products sold in Puerto Rico and the U.S. Virgin Islands at major retailers including Walmart, Sam’s Club and Costco.
Fuck, even the lily white people are getting attacked. Germans and British people are getting deported, and American born white men are getting mistakenly targeted as immigrants. Nevermind the fact that their trigger discipline is nonexistent and they're happy to shoot anyone who breathes in their direction.
I truly wish I could figure out how to explain this to MAGA supporters, but I don't need to be more depressed today.
Checked my OPNSense Kea DHCPv4 setup, and it's only running on my LAN/VLANs. WAN side is correctly disabled for both IPv4 and IPv6. Since it's not advertising on the WAN uplink to my Cox modem/router, there shouldn't be a collision right? Even then Internet access completely fails even when connected directly to the Cox LAN. Additionally, wouldn't DHCP collision be a constant issue rather than sporadic? Is there something else I'm missing software wise?
I really hate how people keep trivializing this point. I use Magic Earth (OSM data + proprietary traffic data) and I woukd have been cooked many a times without it providing traffic. Literal 40-60 minute differences in routes.
Are you using OPNSense to do the PPPoA / PPPoE connection through the ISP modem?
I'll look into this, unsure rn. EDIT: Nope! No PPPoE setup, plus Cox doesn't offer PPPoE anyway.
Keep a track of when this happens and what was happening at the time, that might help you to work out what's going on. Only during the day? Also failing at night?
Seems to be mostly during the day, but kinda random hours during the day. It's usually when I'm out and about and my mom who's at home often will immediately know when it goes out. Since most of us are out at that time, it'd just be her watching YT and my arr going on in the background.
I don't think it's gone out at night before, and the one time she said it was out at night, my father and I were fine, so that could've just been device stuff.
And as someone else mentioned... have you disturbed the cables, etc... maybe one of the cheap cables is having problems?
No new cables to the modem, only to my OPNsense. But it is sitting on top of one of my servers rather than the carpet floor it used to be on. I'll move it back to the floor. But the modem coax cable should be fine, I'll check it.
The original Cox Wifi LAN has DHCP running, and then my own OPNsense LAN/VLANs have DHCP running. Would that cause overlaps despite two different network addresses on a /24? My OpenWrt AP used to do the DHCP until I changed it to OPNSense, but once again, this is all on OPNsense LAN side.
Hey man, I frequently post to selfhost and I get nervous everytime thinking someone is gonna berate me, only to be met with support and guidance. I'd give it a try again, and if you encounter issues then post in the Linux comm, Selfhost, or even a more general place like asklemmy.
If someone's an asshole, ignore them, cause they're a sad excuse of a human being.
Try sticking with a simple distro like Mint, Fedora (Silverblue and Bazzite work too), or even Zorin.
Yeah , I love this guy. I learned how creepy precise location is because of him and I basically turn it off for every app on my phone.
After reading Mozilla's reports on cars a few years back I already felt dread about the day I get a new car, and this will certainly kill me even more.
Here's hoping Slate cars are reported as reliable/ have good fuel economy in the next few years. Cause I really love how minimalist they are + electric.
Plenty? I have never been to any restaurant that didn't take cash or credit card, and especially not one that FORCES you to use Whatsapp to get a code so you can pay through their shitty app.
Have YOU been to a restaurant like that in the US? Not saying they can't exist, but I just imagine it'd be extremely rare.
Exactly. In fact, I love that he's openly displaying the stuff he does arohnd the city, because it lets me know of the wondeful stuff he's doing rather than how so many reps refuse to advertise the stuff they do and have a nice record of their actions. I definitely think some of them obscure what they do because they don't want voters to realize how shady they are, but it just frustrates mr more when i have to go out of my way to dig through records of a politicians vote history.
If they would be fucking transparent they wouldn't be struggling to get votes, but whatever...
I just bought from Bandcamp last Friday cause it was a special day where all proceeds go straight to the artist. I made a neat little list of artists I wanted to look for on there, and most were on Bandcamp. Of the ones that weren't I think it was mostly because they're Japanese, so there's probably some other platform that they sell digital albums on rather than Bandcamp (Discogs was one of them).
You can download your music in multiple formats. The only thing that sucks is you have to download each album individually as far as I know. Some artists offer their entire discography in a bundle that's cheaper than individually buying each album, but do check if some of those songs aren't available for download anymore.
For me, I care most about having a working product and ethically consuming music as much as I can (afford lol), so the downloads and stuff is just quality of life things for me. I'm happy with my purchases and eagerly planning out a list of my next choices for September's Bandcamp Friday.
Also you can apparently stream on Bandcamp but i just selfhost a Navidrome and use that.
I'm not too worried about lack of tls/https for my websites rn, I just want to get working concept lol.
But thanks for the caddyfile, although I'm not sure I can use it since OPNsense seems to like to auto generate the config based on the settings in the UI.
I've narrowed down my issue a little more with the help of frongt@lemmy.zip, and I've established that:
If I curl http://immich.homelab.internal/, I get:
curl: (7) Failed to connect to immich.homelab.internal port 80 after 6 ms: Could not connect to server
Through some digging through other people's forum posts, I made sure to turn off https redirects (auto_https disable_redirects).
I definitely know that it's failing because Caddy isn't redirecting my services from port 80 to their upstream port (2283, 8006, etc.), but I don't know why it won't redirect, even when looking at logs...
Sorry, I didn't specify in my original post but I did plan to use .internal for my domains. And I never planned to open my ports on my firewall either so that's good to know. But I'm still having issues despite this...
Here's my Caddyfile:
# DO NOT EDIT THIS FILE -- OPNsense auto-generated file
# caddy_user=root
# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
}
servers {
protocols h1 h2
}
email [redacted]
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}
# Reverse Proxy Configuration
immich.homelab.internal {
handle {
reverse_proxy 192.168.10.247:2283 {
}
}
}
import /usr/local/etc/caddy/caddy.d/*.conf
Here's my firewall config (I allowed any source IP to Destination "This Firewall" & port 443/80 on my LAN/VLANs):
Here's my Caddy configs:
And I did make a wildcard domain override (*.homelab.internal) in Unbound with this config:
Host = *
Domain = homelab.internal
Type = IPv4
IP = 192.168.10.247
I can ping my server's IP, nslookup the homelab.internal domain, and ping homelab.internal. So the regular DNS entry is working, I just can't get my reverse proxy to work...
What's crazy to me is that the barrier to entry is lower on the fediverse in my experience
Note the word "entry." The likelihood that someone doesn't already have an account on Twt/Insta/FB/etc. and is making an account on the Fediverse has got to be near zeroo. No one is ever gonna hear about the Fediverse first before other major social media platforms unless they're a literal child who is getting their first ever account.
So yes, while making a second acc on social media platforms is a major pain-in-the-ass, most people already have their account + app and don't have to deal with that shit.
LG very much tries to connect to random Wifi networks to leak your data, Gamers Nexus talks about it in their recent video.
Here's an arstechnica article if you don't got 2 hrs to spare 😅
Excerpt:
Well, potentially.
In that arstechina article (orignal exposé here) about the journalist's ID getting leaked hours after getting a rental car, they mentioned Pete Hegseth's data was accessible too (screenshot and all).
So yeah, our very smart goverment loves to fuck over their most powerful too just to piss on the poors and ensure we are watched at all times.
Idk if Wholphin will fully fit your needs, but that's what I use on my FireTV and we love it. It looks sleek as hell and has sone plugins like Serr requests. Weirdly though, it takes longer to load an ep on there compared to my laptop or phone.
Sorry, thanks for correcting me. I got too doomer and got lazy, but I should hold myself up to basic standards.
Yeah, Clorox produces these products, but the bleach itself is fine, it's just these two cleaners and only the ones sold in Puerto Rico and the Virgin Islands.
Frozen blueberries, rice....
Clorox scented diluted cleaning products also have bacteria in them, hence recalls...
Fuck, even the lily white people are getting attacked. Germans and British people are getting deported, and American born white men are getting mistakenly targeted as immigrants. Nevermind the fact that their trigger discipline is nonexistent and they're happy to shoot anyone who breathes in their direction.
I truly wish I could figure out how to explain this to MAGA supporters, but I don't need to be more depressed today.
Checked my OPNSense Kea DHCPv4 setup, and it's only running on my LAN/VLANs. WAN side is correctly disabled for both IPv4 and IPv6. Since it's not advertising on the WAN uplink to my Cox modem/router, there shouldn't be a collision right? Even then Internet access completely fails even when connected directly to the Cox LAN. Additionally, wouldn't DHCP collision be a constant issue rather than sporadic? Is there something else I'm missing software wise?
I really hate how people keep trivializing this point. I use Magic Earth (OSM data + proprietary traffic data) and I woukd have been cooked many a times without it providing traffic. Literal 40-60 minute differences in routes.
Cable modem used to sit on the carpet in a corner of the room, now it's on top of my Dell running Proxmox. So maybe heat? I'll move it off the server.
Same orginal coax cable, and it doesn't look loose, but I'll check.
I'll look into this, unsure rn. EDIT: Nope! No PPPoE setup, plus Cox doesn't offer PPPoE anyway.
Seems to be mostly during the day, but kinda random hours during the day. It's usually when I'm out and about and my mom who's at home often will immediately know when it goes out. Since most of us are out at that time, it'd just be her watching YT and my arr going on in the background.
I don't think it's gone out at night before, and the one time she said it was out at night, my father and I were fine, so that could've just been device stuff.
No new cables to the modem, only to my OPNsense. But it is sitting on top of one of my servers rather than the carpet floor it used to be on. I'll move it back to the floor. But the modem coax cable should be fine, I'll check it.
The original Cox Wifi LAN has DHCP running, and then my own OPNsense LAN/VLANs have DHCP running. Would that cause overlaps despite two different network addresses on a /24? My OpenWrt AP used to do the DHCP until I changed it to OPNSense, but once again, this is all on OPNsense LAN side.
Hey man, I frequently post to selfhost and I get nervous everytime thinking someone is gonna berate me, only to be met with support and guidance. I'd give it a try again, and if you encounter issues then post in the Linux comm, Selfhost, or even a more general place like asklemmy.
If someone's an asshole, ignore them, cause they're a sad excuse of a human being.
Try sticking with a simple distro like Mint, Fedora (Silverblue and Bazzite work too), or even Zorin.
Do you know what specifically went wrong?
Yeah , I love this guy. I learned how creepy precise location is because of him and I basically turn it off for every app on my phone.
After reading Mozilla's reports on cars a few years back I already felt dread about the day I get a new car, and this will certainly kill me even more.
Here's hoping Slate cars are reported as reliable/ have good fuel economy in the next few years. Cause I really love how minimalist they are + electric.
Plenty? I have never been to any restaurant that didn't take cash or credit card, and especially not one that FORCES you to use Whatsapp to get a code so you can pay through their shitty app.
Have YOU been to a restaurant like that in the US? Not saying they can't exist, but I just imagine it'd be extremely rare.
Exactly. In fact, I love that he's openly displaying the stuff he does arohnd the city, because it lets me know of the wondeful stuff he's doing rather than how so many reps refuse to advertise the stuff they do and have a nice record of their actions. I definitely think some of them obscure what they do because they don't want voters to realize how shady they are, but it just frustrates mr more when i have to go out of my way to dig through records of a politicians vote history.
If they would be fucking transparent they wouldn't be struggling to get votes, but whatever...
I just bought from Bandcamp last Friday cause it was a special day where all proceeds go straight to the artist. I made a neat little list of artists I wanted to look for on there, and most were on Bandcamp. Of the ones that weren't I think it was mostly because they're Japanese, so there's probably some other platform that they sell digital albums on rather than Bandcamp (Discogs was one of them).
You can download your music in multiple formats. The only thing that sucks is you have to download each album individually as far as I know. Some artists offer their entire discography in a bundle that's cheaper than individually buying each album, but do check if some of those songs aren't available for download anymore.
For me, I care most about having a working product and ethically consuming music as much as I can (afford lol), so the downloads and stuff is just quality of life things for me. I'm happy with my purchases and eagerly planning out a list of my next choices for September's Bandcamp Friday.
Also you can apparently stream on Bandcamp but i just selfhost a Navidrome and use that.
I'm not too worried about lack of tls/https for my websites rn, I just want to get working concept lol.
But thanks for the caddyfile, although I'm not sure I can use it since OPNsense seems to like to auto generate the config based on the settings in the UI.
I've narrowed down my issue a little more with the help of frongt@lemmy.zip, and I've established that:
Pinging immich.homelab.internal gets a response from the correct IP. When typing http://immich.homelab.internal/ or http://immich.homelab.internal:2283/ in browser I get an ERR_NAME_NOT_RESOLVED page.
If I curl http://immich.homelab.internal/, I get:
curl: (7) Failed to connect to immich.homelab.internal port 80 after 6 ms: Could not connect to serverIf I curl http://immich.homelab.internal:2283/, I do get the html of the site at least.
Through some digging through other people's forum posts, I made sure to turn off https redirects (auto_https disable_redirects).
I definitely know that it's failing because Caddy isn't redirecting my services from port 80 to their upstream port (2283, 8006, etc.), but I don't know why it won't redirect, even when looking at logs...
Sorry, I didn't specify in my original post but I did plan to use .internal for my domains. And I never planned to open my ports on my firewall either so that's good to know. But I'm still having issues despite this...
Here's my Caddyfile:
Here's my firewall config (I allowed any source IP to Destination "This Firewall" & port 443/80 on my LAN/VLANs):
Here's my Caddy configs:
And I did make a wildcard domain override (*.homelab.internal) in Unbound with this config:
I can ping my server's IP, nslookup the homelab.internal domain, and ping homelab.internal. So the regular DNS entry is working, I just can't get my reverse proxy to work...
Note the word "entry." The likelihood that someone doesn't already have an account on Twt/Insta/FB/etc. and is making an account on the Fediverse has got to be near zeroo. No one is ever gonna hear about the Fediverse first before other major social media platforms unless they're a literal child who is getting their first ever account.
So yes, while making a second acc on social media platforms is a major pain-in-the-ass, most people already have their account + app and don't have to deal with that shit.
Today is Bandcamp Friday y'all! That means the money any song you buy today goes straight to the artist! Start building those slefhosted music stores!
They seem to do one on the first Friday of the month. So you don't have to wait long if you miss it!