hertg

u/hertg@infosec.pub
1 posts · 31 comments

Recent posts

Recent comments

CGNAT and changing IPs make this harder. What I'd consider in this scenario is renting a small vps at a local provider (a tiny/cheap machine is enough). Then use this one as a hop to your network, basically homelab->vps<-client. Here is a post that talks about something like that: https://taggart-tech.com/wireguard/

I haven't used this method personally, but I've done something similar for incoming web traffic before, when you want to host things behind a CGNAT. You can actually keep all the traffic confidential by having just an L4 proxy on the vps, then the http traffic is still end-to-end encrypted between the client and the service, so you don't even have to trust the vps provider when it comes to them snooping. They still get some metadata, but not significntly more than the ISPs.

There's nothing I'd like to do more than let the US internet-monopolizing company handle all my vpn traffic /s But without being snarky, for homelabbing purposes just use wireguard directly, it's fun and not that hard to handle. Automate peer configurations using Ansible or some other automation tool if it gets hard to manage manually.

on ich🎓iel · c/ich_iel · 13 pts · 329d

Ist wahrscheinlich auch wenig hilfreich dass Windows Dateigrössen in MiB darstellt aber dann MB hinschreibt 🤡

on capitalism · c/microblogmemes · 23 pts · 1y

"A film like Wall-E exemplifies what Robert Pfaller has called 'interpassivity': the film performs our anti-capitalism for us, allowing us to continue to consume with impunity. The role of capitalist ideology is not to make an explicit case for something in the way that propaganda does, but to conceal the fact that the operations of capital do not depend on any sort of subjectively assumed belief. It is impossible to conceive of fascism or Stalinism without propaganda - capitalism can proceed perfectly well, in some ways better, without anyone making a case for it."

-- Capitalist Realism, Mark Fisher