Check out my open source game engine! https://strayphotons.net/ https://git.sw0.com/frustra/strayphotons
I have been developing this engine on and off for over 10 years, and still have big plans.
This seems like a decent guide on how to set it up:
https://www.cyberciti.biz/faq/how-to-set-up-wireguard-firewall-rules-in-linux/
It’s very similar to the config I’ve got. The nat iptables stuff in step 1 is what enables wireguard to be used as a VPN exit node. (+ net.ipv4.ip_forward=1)
This feels like it has validated my decision to just use plain wireguard and hardcode my client list. It’s really not too hard to set up, barely different that configuring authorized_keys or ssh.
I think there’s been one or two image decompression exploits over the years, so a site with a malicious file could end up running code on your system. I remember this being an issue with Minecraft clients and player skins at one point, but I can’t remember any specific times this happened in browsers tho.
What confuses me as someone who hasn’t written PHP in ages, is why is it supposedly so easy for a request to hit the memory limit? Does this only work on servers that accept user uploads and other large request payloads? People are saying a static PHP page can be exploited, but I don’t understand how if it’s behind even a basic nginx instance with default request limit of 1MB.
My point is, it’s hard to read the credit card numbers when they’re not visible inside a wallet or pocket. It’s the difference between having to ask to use the credit card and just using it without the parent noticing (until it shows up on the bill). Point-of-sale equipment to charge credit cards by tap aren’t exactly something people leave their kids unattended with.
You better hope all the kids’ parents keep their credit cards locked up in a faraday cage. All it takes is waving the controller past, and the charge is made. It’s a lot different than having to take the card out and type in the numbers.
All we had to do was follow the damn Train, CJ!
What’s crazy to me is how this insurance database lookup even makes sense… Most insurance companies give you a grace period to add new vehicles if you have an existing policy. For mine in Washington, I have 14 days to tell my insurance if I’ve bought a new car, and it’s covered under my existing policy until then. Flock would have no way of looking up this information and has no justification to flag a vehicle like this…
I remember this from back when it was still called Minetest. I’m actually surprised the name change doesn’t seem to be because of Microsoft lawyers, but just that they wanted to get away from being considered a “Minecraft Clone”.
I’ll have to check out what’s been happening with it the last few years, it sounds like there’s a lot more to it now.
Neat, I might have to set this up for myself. It sounds like it could get around some of the VPN blocking I’ve seen while traveling through airports.
It’s honestly impressive what you can do with under 3W of power these days
I find the easiest way to think about it is kind of like email. You can have an account @gmail.com and still send mail to other servers @outlook.com. Your posts and comments will be stored on your local instance, as well as any instances that are subscribed to the community. When you post to a community on another instance, I think the text will be stored on both instances, but image uploads point back to the copy on your local instance.
I ignored all the email setup because I disabled signups anyway on my instance.
For DNS on my home server I use ddclient. It supports a ton of different DNS providers, so you can have your server automatically update its DNS record as soon as your IP changes.
With how big the cab is, it almost looks like they took an SUV and bolted on a tiny truck bed sticking out the back. The proportions are very strange.
It’s got 50% more range, so it’s probably got a bigger battery. Lithium is expensive.
Since I already host a bunch of stuff, it hasn’t been a big burden for me. I get to laugh any time one of the popular instances goes down or has some admin/mod controversy, but the tradeoff is I have to manually subscribe to everything since I don’t have an “All”.
I mostly did it because this is the only way to truly own your lemmy identity. I hope one day it will be possible to link accounts on different instances together so that migrating doesn’t lose your history.
Selfhosting Lemmy has been surprisingly nice
I think the only safeguard against that is to do your own moderation. The only tool I can think of that would even come close to detecting “power tripping” would be AI, and we all know that would end terribly. The best you can do is remove incentives (somehow, idk) so mods aren’t rewarded for a bad ban.
In my configuration I have a server with a public IP that manages incoming connections, and my home network connects to that server via a keepalive connection, so it’s actually operating in the same client-server mode you described going through my NAT. This also solves the dynamic IP issues.
When I’m at home, my phone can route directly over my LAN, and when I leave the house it proxies through my public server back to my house (or out to the web depending on what I’m accessing).