• 1 Post
  • 23 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle
  • Jitsi Meet is a good foss choice for video conferencing in general, and includes a decent screen sharing function. You can try it out on the free to use (8x8 hosted, I think?) instance at https://meet.jit.si/

    Heads up: that partocular instance now requires the host to be logged in to either a Google or Gihub account first, raising privacy concerns. that’s just how that instance is configured tho, to avoid abuse. it’s also self hostable and there should be other free instances available if you search for them.

    edit: just noticed a few already mentioned this one (sorry, i must have scanned too quickly). fyi, Jitsi works well in combo with OBS virtual camera, allowing very precise control over exactly what audio and video you’re streaming









  • The main problem I see you running into is that if they decide for any reason to go after you (even just cause now they want your domain), it won’t matter if they have a solid legal standing or not. They can afford to tie you up in court indefinitely, and you will likely be unable to outlast them.

    Source: This is exactly what happened to my family. We have the same last name as a large corporation, and in the early days of the internet we registered a domain based on a name-related slogan they had used in an older commercial compaign. We were just hosting a basic family website and email, and clearly had no conflicting or overlapping IP. We even checked in advance - they did not own a trademark for the slogan or the name.

    A few years later, they decided the wanted the domain for themelves, but instead of offering us a fair price to purchase, they first filed a trademark for the slogan and then sued us for the domain. If we’d had the funds to continue fighting we would have eventually won, but we’re just a middle class family and they’re a large multi-national corporation with near infinite funds to pay their lawyers. We lost the domain, and it cost us a small fortune in legal fees fighing it.

    Proceed with caution.




  • Yeah, they provide a “Flow” section where you can setup firewall-like rules to control your flow of traffic. You can configure rules that say, allow ssh to a specific server, but only from a specified devices, while allowing ssh, https and smb to another server from any device, blocking all other TCP traffic. UDP is a little weirder to control, but there’s a decent tutorial with example configs.

    I hear about TailScale a lot, and I know its super popular in the self-hosting & linux communities. I haven’t used it myself though, so can’t offer a comparison vs ZeroTier. I found ZeroTier refreshjngly easy to use and install on client devices, so haven’t had reason to look elsewhere yet.

    Anyway, have fun with your endeavor!


  • I just finished building a cloud solution leveraging an AWS EFS (elastic file system), a secure ZeroTier mesh, and a simple EC2 instance (vm) running Samba (or just sshfs/scp/sftp if multi-user file locking isn’t needed). EFS does have some pretty big limitations like the fact users can’t be in more than 16 groups (because it behaves like an NFS mount), and it lacks xattr and ACL support. Still, if you can work around these shortcomings you can build a very secure, surprisingly speedy cloud filesystem. Largest expense is the EFS, but after 30 days infrequently accessed files automatically move to slower storage, which is way cheaper. ZeroTier is an important piece of the puzzle, making your security and encryption a breeze. This allows you to run SMB over the internet without actually exposing any services. Connections are only made through your ZT mesh, which is highly secure.







  • If you have to use Windows, the Chocolatey package manager knows about most great foss apps in the base config, including LibreOffice. You can first ‘choco install libreoffice’ and later ‘choco upgrade all’ to keep apps updated.

    I rarely need to spin up my Windows vm, but after discovering Chocolatey it’s been much more pleasant keeping those apps updated. Same idea as homebrew for macOS; providing *nix-style pkg management. Enjoy!