I am a Meat-Popsicle

  • 0 Posts
  • 38 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle





  • You could go as far as virtual audio cables and audacity. No matter what changes they can’t stop that.

    But if your library supports OD, go dig up the old PC app for OD. When you download the book to start listening to it it decrypts it as it throws it onto the drive.

    Some books seem to have some weird duplicated audio here and there is a coffee protection method. Like there’s some secret M3U somewhere that skips around when it plays it, but most stuff comes out clean.

    If you can’t get it to come out with the app use one of the virtual audio cable style applications wire the output into a line-in for audacity and just rerecord the whole thing compress it down. You lose individual chapters as files I don’t really pay attention to the chapters I’m on I care about the total distance to the book and being able to pick up where I left off. I suppose if you were trying to do some kind of hybrid read and listen back and forth it would be more useful to have the chapter numbers.








  • You need to have a rather capable router / firewall combo.

    You could pick up a ubiquity USG. Or set up something with an isp router and a PF sense firewall.

    You need to have separate networks in your house. And the ability to set firewall rules between the networks.

    The network that contains the hosting box needs to have absolutely no access to anything else in your house except it’s route out to the internet. Don’t have it go to your router for DHCP set it up statically. Don’t have it go to your router for DNS, choose an external source.

    The firewall rules for that network are allow outbound internet with return traffic, allow SSH and maybe VNC from your home network, then deny all.

    The idea is that you assume the box is capable of getting infected. So you just make sure that the box can live safely in your network even if it is compromised.


  • The first worry are vectors around the Synology, It’s firmware, and network stack. Those devices are very closely scrutinized. Historically there have been many different vulnerabilities found and patched. Something like the log4j vulnerabilities back in the day where something just has to hit the logging system too hit you might open a hole in any of the other standard software packages there. And because the platform is so well known, once one vulnerability is found they already know what else exists by default and have plans for ways to attack it.

    Vulnerabilities that COULD affect you in this case for few and far between but few and far between are how things happen.

    The next concern you’re going to have are going to be someone slipping you a mickey in a container image. By and large it’s a bunch of good people maintaining the container images. They’re including packages from other good people. But this also means that there is a hell of a lot of cooks in the kitchen, and distribution, and upstream.

    To be perfectly honest, with everything on auto update, cloud flares built-in protections for DDOS and attacks, and the nature of what you’re trying to host, you’re probably safe enough. There’s no three letter government agency or elite hacker group specifically after you. You’re far more likely to accidentally trip upon a zero day email image filter /pdf vulnerability and get bot netted as you are someone successfully attacking your Argo tunnel.

    That said, it’s always better to host in someone else’s backyard than your own. If I were really, really stuck on hosting in my house on my network, I probably stand up a dedicated box, maybe something as small as a pi 0. I’d make sure that I had a really decent router / firewall and slip that hosting device into an isolated network that’s not allowed to reach out to anything else on my network.

    Assume at all times that the box is toxic waste and that is an entry point into your network. Leave it isolated. No port forwards, you already have tunnels for that, don’t use it for DNS don’t use it for DHCP, Don’t allow You’re network users or devices to see ARP traffic from it.

    Firewall drops everything between your home network and that box except SSH in, or maybe VNC in depending on your level of comfort.





  • I love writing tests, It’s all the shit that comes after that that sucks.

    Those first few pushes that all come up green feel like magic. That first red that points out something you missed, you go back and make a quick change and it’s now green and it’s the best thing you’ve ever seen.

    It’s sooner or later, you throw a couple big red bois on a production build that don’t make any sense. You start digging through the code of some guy that only writes comments in haiku and has the impression he gets paid by the number of layers deep he can nest a ternary.

    Sooner or later you figure out it’s just an edge case there’s nothing actually wrong. You’ll need to refactor one of the systems but you still have production to push to fix a critical bug, so you hotwire the test and write it off as P1 tech debt.

    Eventually, you end up with unit tests that aren’t P1 and they fail. If you’re understaffed, or overscoped, sooner or later you just have a bunch of half-assed zombie test sitting around. Unless you can convince production to let you go back and clear up your tech debt it’s just a unit test graveyard. It still has the big bumpers in place so something serious can’t fail. But you never seem to be able to get back to make everything bright new and shiny again.


  • This place, it’s … beautiful. I’ve joined the communities with the topics i’m interested in and the posts I see are only (mostly) what I asked for.

    The average person is reasonably educated, capable of arguing a point in good faith. It’s not you against the world or the world against you here, it’s more like, did you consider it from this point of view. That’s nice!

    The trolls and corporations have gotten board and are going home. The people with 2 backup accounts have stopped using them because their primary choice stays up, online and stable.

    We could use a little extra mod tools and discovery, but this is a nice laid back place to relax and catch up on some random subject matter or ask for a little help in between life and sleep.