• 5 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle



  • Timothée Besset, a software engineer who works on the Steam client for Valve, took to Mastodon this week to reveal: “Valve is seeing an increasing number of bug reports for issues caused by Canonical’s repackaging of the Steam client through snap”.

    “We are not involved with the snap repackaging. It has a lot of issues”, Besset adds, noting that “the best way to install Steam on Debian and derivative operating systems is to […] use the official .deb”.

    Those who don’t want to use the official Deb package are instead asked to ‘consider the Flatpak version’

    Ha. Flatpak got the honorable mention.









  • I did end up setting up my new Protectli appliance today. As i said below, I ended up with OPNsense and I have been able to replicate 97% of pfBlockerNG’s functionality on OPNsense. I’ve been able to load all of my previous DNS blocklists (including my own personal blocklists on Github), set up cron jobs (in the GUI) to update these lists every week and and whitelisted some sites too. The only thing that sucks is that regex isn’t supported. Instead they do wildcard domains (*.ampproject.org). Not nearly as good as regex but it’s better than nothing.

    I also used pfBlockerNG for hardcoded ip address blocks (like Roku hard-coding 8.8.8.8). For that, I used the alias function in the firewall and just set up floating rules for that. Definitely not as convenient as a list, but they don’t change very much. Also, for IP addresses for security, OPNsense has a whole IDS section that pfBlockerNG used to handle.

    pfBlockerNG made everything clean and easy but I’ve been able to get 97% of the functionality in pfBlockerNG in OPNsense. The 3% deficit is lack of regex support.

    Edit: I saw the article you were referring to. That’s how I set up IP blocking. But Unbound in OPNSense supports blocklists (it’s even called DNSBL) and that is much easier/quicker to set up than using aliases IMO. Just make sure you toggle on Advanced Mode. That’s how you quickly load the custom blocklist urls. Just remember to seperate the urls with a comma. I forgot the first time and nothing worked.






  • Disclaimer, This is only for Lemmy.world.

    I actually read the privacy policy. There are basically 3 segments of data:

    1. The one time when you signed up.
    2. All times you log in, after you’ve signed up.
    3. User generated data

    For part one: They store your username and the IP address used when you create the account. They store a hashed version of your password, not the actual password. They’ll store that info for as long as you have an account with lemmy.world (although they reserve the right to keep it for up to 12 months after you’ve deleted your account). They store the hashed password so you can log into your account.

    For part two: They keep a log of the times you sign in, the device you signed in from (iOS, Android, web) and the IP address you do it from. They delete this data on a rolling basis, every 90 days from the date the login data was created (from the time you logged in).

    For part three: These are your posts, comments, upvotes, downvotes, etc. This is stored this until you delete your comment/post or undo your upvote/downvote. When you delete your account, if you haven’t deleted your data, the connection (the association) between your account and the data itself is severed. This means that the comment will remain but the username value will be null.

    tl;dr: I’m no expert but I think they keep a very small amount data. They probably do this to keep their costs as low as possible (but that is just my speculation).

    If you’re really worried about data mining and data logging, you can always go back to reddit /s