• 17 Posts
  • 222 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • If you’re behind cgnat opening ports on your router won’t do you any good. You have to call your isp and ask them for a dedicated public ip, usually for a price if they offer one at all. If that ip is static you can remember it, if not, you need ddns. If you’re one of the lucky few not behind cgnat then yeah, your setup will be the simplest possible, but if you are, like the majority of people these days, it’s one of the most complicated.




  • That’s not always an option and when it is, setting it up is often more complicated and less secure than using a relay server. Honestly, the fastest (to setup), easiest and most secure option would be ssh server as a tor hidden service. Everything is handled by tor out of the box, .onion domain name, nat hole punching, E2EE, port scanning bots… all taken care of, no need for opening ports, static ip, dns, ddns, fail2ban, worrying that there’s a 0 day or that you misconfigured something. No one can exploit you service if nobody knows it exists.


  • If you can rent a vps you can use it as a relay server. You setup sshd on your home pc and ssh to the vps with the -R flag.

    ssh -R 8022:localhost:22 user@relay

    As long as the connection is live you can ssh to the server via relay. If you set GatewayPorts to yes on the relay in sshd_config then it will act as an open port on your home pc and anyone will be able to connect to it over the internet with

    ssh -p 8022 user@relay

    so make sure to secure it correctly, only allow ssh keys etc. If you set GatewayPorts to no, then only clients connected to the relay will be able to connect to the server, this is a must have if you’re gonna use unsecure protocols like VNC. First ssh to the server

    ssh user@relay

    next

    ssh user@localhost -p 8022

    or one line, especially useful when combined with -i to point at the home pc’s ssh key stored on the client

    ssh -J user@relay user@localhost -p 8022

    You can also setup VNC over ssh. Add 2nd -R on home pc with vnc ports

    ssh -R 5901:localhost:5901 user@relay

    or together

    ssh -R 8022:localhost:22 -R 5901:localhost:5901 user@relay

    On the client ssh with the -L flag

    ssh -L 5091:localhost:5091 user@relay

    Now you can connect your VNC client to

    localhost:1






  • North Koreans may have GNI per capita of $1800 compared to $61900 of South Koreans, healthcare index of 37.5 compared to 82.9, infant mortality of 22.2/1000 vs 2.9/1000, maternal mortality of 107/100k vs 8/100k, internet access below 1%, purchasing power of 18.9 vs 116.6 and 42% of them may be undernourished, but at least they get to spend their, on average, 10 years shorter life compared to South Koreans serving his Excellency, Supreme Leader Kim Jong Un.



  • We call on the European Commission to propose legislation ensuring that digital identity and age-assurance systems used to access online services in the Union remain voluntary, privacy-preserving and non-discriminatory. Citizens must not be forced to identify themselves to access lawful online content or services unless strictly necessary, proportionate and provided by law. The legislation should require anonymous or pseudonymous proof-of-age, data minimisation, selective disclosure, open-source implementation, independent security audits, prohibition of cross-service tracking by relying parties, and equivalent alternatives for citizens who do not use a digital wallet.

    Yeah, nah.