• 15 Posts
  • 1.38K Comments
Joined 3 years ago
cake
Cake day: January 16th, 2024

help-circle









  • I should hope that open source developers are exclusively using open source models that are trained on open source projects.

    I mean, I would think, at least. It seems to me that most of the people in charge of big projects are usually FOSS purists.

    That’s part of the reason why AI scrapers are breaking the small web. FOSS purists really have no significant defense against it aside from Anubis.

    Real DoS protection comes from capacity, which costs serious dollars, especially in this day and age where botfarms can be hired by the hour for rather cheap and record-breaking attacks seem to happen like monthly.

    The alternative is using a CDN, but there are none that align with FOSS ideals. And for CDNs to be really effective, you need them to break open TLS and handle the decrypted traffic, which raises privacy concerns on top.

    But anyways…most license agreements would make it a requirement that if you’re using an open-source model, that it be properly attributed, right?






  • This is one of the right answers, and probably the easiest.

    But…who is your domain registered with? A lot of the big registrars (I.e. CF) can easily integrate into several opnsense plugins…namely ACME/HAProxy, and Dynamic DNS.

    Dynamic DNS would make sure that “pubip.mydomain.com”, from the outside, always pointed to your Internet connection, even if your IP changes.

    Then just register CNAMEs for your external services to point to your pubip.mydomain.com.

    HAProxy reads the CNAME and directs it to the right service.

    You can either use split DNS and have HAProxy listen on both the internal and external, and map DNS around that way…or you can just listen on your external interface and connect that way and only update one end.

    Imo this is the more comprehensive solution, because this also easily solves certificates (via ACME). The last leg (from HAProxy to backend) and be unencrypted or just use long-life self-signed certs if you really care…but I wouldn’t worry about encryptipn on the inside of a homelab.


  • All kids are potentially in danger from any stranger, regardless of whether they’re an RSO. Assume there is a danger until proven otherwise.

    Imma stop you there. Stranger Danger is responsible for socially crippling several generations now.

    While I get an inkling that pedophilia is probably more common than anyone wants to admit…I also know that statistically, almost all offenses take a pre-established position of trust. Kids getting plucked off the street by strangers is incredibly rare…especially in the day and age of Flock and doorbell cameras…because you know they’d be screaming that from the rooftops every time it happened.