the agent is a tool you used

My hammer is also a tool. But if I start using (and talking about) it to wash my cloth and do my dishes I would really hope to get called out for being stupid.

I’m using the default calendar app that a long time ago came with that lineageos install.

Should be this one iirc…

Don’t host the calendar, just host some WebDAV/CalDAV. That format is supported by basically all apps on every platform (usually including the default app on most phones), so everyone can pick what they want (or just stick with what they already use).

My personal pick for that purpose is Radicale.

A mandatory [AI] tag? Sure.

A [NOT AI] tag? No, that’s the default. Why normalise AI bullshit even further?

While you are right in general, you are just creating a file with a <user>:<hashed password> line without any identifying context. So have fun searching the world for where I might have actually used it. Sounds like a really bad use of ressources to create list of passwords.

PS: Yes, as an Arch user I am still pissed that this tool is not available in the repos beside installing the complete Apache server…

The options to password protect it are in the (usually /etc/radicale/)config file under [auth].

For proper security you could use

type = htpasswd

htpasswd_filename = /etc/radicale/users

htpasswd_encryption = bcrypt

then create a users file with apache tools (htpasswd -c -B users User1) or one of the million online htpasswd file creators.

Occasionally I need to run an “occ” command after an install to fix some indexes

That then fails and breaks it (in about 1 out of 3 cases). Which requires rolling back everything, running the commands again pre-update, then updating and praying to not have to do another re-install (~ 1 out of 5).

I actually moved away from classical self-hosted cloud storage solutions after trying the usual suspects like opencloud, nextcloud etc.

And for me the time and effort (also the ressource-hogging if you don’t use quite overpowered servers) just weren’t worth it. Not when the used interfaces most of the time are open standards anyway and simpler solutions do the job:

Radicale for contacts and dates via a webdav subset. Webdav concidently being widely supported for integrating online storage into any filesystem (or as the backend for several other things like for example syncing my bookmarks over several devices and browsers). SFTP or the million tools being just a frontend for it.

One shiny platform like for example Nextcloud to do it all might be nice for a lot of users when they have someone dedicated to maintain it. But for selfhosting (as in: mainly for myself) the constant attention needed to fix stuff was quite tedious.

When I think of “Google Drive” or “Dropbox” alternatives nowadays it’s just a drive hooked up to some low-spec device and accessed via one (or several) already existing open standards.

(Bonus point: that lost phone is simply cut off by deleting its keys - unlike so many dedicated platform where you have to manage -if you even can- multiple dedicated users and their rights just to easily separate your personal access from your devices that are by design not all equally secure.)

While that is true in general, combined coal power plants also only sit at about 50% on average, 65% with the most modern ones.

So burning stuff in a power plant, then adding some more loss in transfer, is not actually much better.

Which of course is not an argument against EVs but against coal and gas power plants. In the end they are still just glorified rather primitive steam machines.

“…reduce…”

Sure… 😂

A bug in Apple’s notification system allowed extraction even when the message that triggered the notification was deleted.

This means access you any text you got. This means a list of any incoming calls. This means all your appointments that your phone reminded you of.

And instead we get a story about deleted Signal messages, prominently featuring Signal in the thumbnail and picture while failing to mention any of the other implications of that Apple-specific bug.

How is that accurate or even just sane reporting? Either it’s an incredibly stupid take or there is an actual agenda focusing on Signal here. And when I see several of those (including stuff like people falling for phishing attempts and giving away access to their devices being reported as “Hackers getting access to Signal account”) within just a few days I tend to assume the latter.

Wasn’t my point. What’s going on with Signal to tell the story of accessing deleted Signal messages (and multiple other Signal hack/ bug/exploit headlines I’vs seen within a short time frame) when this is exactly zero about Signal?

There was an Apple bug that allowed restoring information from their notification system. So Apple leaked info from Apps that used the notifications. From any App. Why is this talking about Signal? Why not a “Apple patches bug that allowed access to E2E encrypted WhatsApp messages”? Why not “bug that allowed access to your call history even after deletion”? Because those are all equally true. What’s reason we are talking about Signal here.

And to add more context: the exact same was true for the other “Signal bug/hack/exploit” articles I mentioned. No actual connection to Signal at all, yet that was always the story told.

Apple fucks up and leaks all private information that passes through their notification system? “Bug that allowed to read Signal messages!” Idiot fell for phishing attempt and logged into a fake website giving someone else full access to their device? “Hacker managed to access XY’s Signal account!”. I left my door standing wide open when leaving to work and got robbed? “Locked doors don’t actually protect your stuff!”

Those 3 statements are equally stupid. I am pretty sure the third one would trigger you to question either my sanity or if I think you are an idiot and why I would try to convince you that doors are useless. Why don’t the other two?

What actual news did I miss that triggered the half a dozen fake hacked/bug articles regarding Signal I read in the last 48 hours?

If it wast just AI, but the idiotic crawlers everywhere are getting worse by the day it feels.

I still have some ancient RPi running a basic homepage with some reverse proxies. A few weeks ago and after stopping to care about that thing years ago I realized that the access log that was just happily sitting there for years without getting to relevant sizes has suddenly grown by nearly 1GB, most of it in the last 6-8 months because I never bothered to set up logrotate.

But hey… I wanted to test setting up Anubis for quite some time. So now I can watch them run circles in the (still experimental) honeypot feature reading pages and pages of non-sensical babbling 😂

But decades of media has conditioned people to believe that most tech and IT stuff is basically magic, and that seems to nowadays include tech-centric journalists.

So they simply don’t think about actual feasibility and just report omitting details because “look, tech wizard did tech-wizardry”.

Security through obscurity never works, so changing you SSH port does barely anything

… for security that is.

What it does is keep a lot of automated bots from spamming your server. No, they don’t have any chances to get access when key authentification is used (and they won’t try either… most go for the incredible low hanging fruits like admin/admin user/password sets), but they can become a strain on your own ressources.

What actually helps (and is usually configurable with any firewall) is rate limiting access. Just blocking someone’s access for 10 seconds after a failed attempt will make absolutely no difference for you but a big one for those spammers. Now add some incremental increase after multiple fails and you are perfectly set.

PS: 53 is the standard port for DNS when your server operates as such.

PPS: Don’t use it. People should really let that stuff die and exclusively run encrypted DNS (via TLS, HTTPS or Quic…)

Mainly my normal phone app. But for a long time it’s not sync’d to some google cloud (which would be the default) but a Radicale instance.

I used Nextcloud before but honestly it’s a mess to maintain. So much that I would not suggest it without planning to extensively use a lot of the different available addon functions.

Just for file sharing and caldav/carddav I will pick some simple solutions (like Radicale and Syncthing) over Nextcloud any day.

And to give you a reference to some of the details glossed over…

The anubis instance listening to a socket doesn’t work as described there. Because the systemd service is running as root by default but your web server would need access to the socket. So you first need to harmonise the user the anubis service runs as with the one from your web server with the permissions of the /run/anubis directory.

(see Discussion here for example)

Also having one single setup example in the docs with unix sockets when that isn’t even the default is strange in the first place…

Half the Environmental Variables are just vaguely describing what they do without actual context. It probably makes perfect sense when you know it all and are writing a description. But as documentation for third-person use that’s not sufficient.

Oh, and the example setup for caddy is nonsensical. It shows you how to route traffic to Anubis and then stops… and references Apache and Nginx setups to get an idea how to continue (read: understand that you then need a second caddy instance to receive the traffic…).

PS: All that criticsm reads harsher than it is meant to be. Good documentation needs user input and multiple view points to realize where the gaps are. That’s simply not going to happen with mostly one person.

More than once. But -not actually surprsing by a work in progress by mostly one single person- it’s not actually what I would call well-structured or even coherent. 😅

More than once googled for a detail I didn’t understand and ended up on the issue tracker realizing I’m not alone and some behavior is indeed illogical or erratic.

And then some of it is of course referencing forwarding- and header-information, how it’s handled, where it’s flattened… and as my question should have told you, I don’t even much clue how it is handled normally.