Spyke

Replies

LLM

Comment on

People are using AI to make their smart TVs dumb again | TechCrunch

Reply in thread

Hate to be the bearer of bad news but HDMI is bidirectional, it's fundamental to how it works.There is a data channel between the devices, even ignoring things like ARC and CEC. A device would have to be VERY naughty to use it to smuggle out data and have software on the computers side to receive it, but it's absolutely technically possible. The manufacturer also controls at least half the hardware in the equation, so it's possible (though farfetched) they could do other less obvious stuff outside of standard HDMI behavior.

HDMI also has a feature to tunnel Ethernet over the cable, though it's so rare for devices and cables to implement it that the chances of it working are near zero.

Comment on

Actual Budget is a fantastic FOSS budgeting tool that you can self-host

Reply in thread

In the US it has integration with SimpleFIN. SimpleFIN isn't free but it's pretty cheap ($1.50/mo) and supports most banks out there, even my obscure local credit union. It works pretty well, though sometimes the banks fuck with stuff and seem hell bent on breaking any kind of API access, but SimpleFIN support was really responsive for me to get it fixed when it happened. I do also have to reauthenticate my bank every day when I want to sync, but that's also just the banks being assholes and isn't too bad to do.

news

Comment on

U.S. mulls ban on Chinese-made TP-Link routers over security concerns

Reply in thread

Not fully, there are still places a backdoor could be hidden (and that's disregarding the possibility of backdoors in OpenWRT, which just recently fended off its own supply chain attack), but I'd sure trust it more.

The thing to keep in mind is that the more sophisticated and difficult to detect a backdoor is, the more valuable it is. And therefore, the less likely it is to ever be used against a normal person. So getting rid of blatantly buggy and insecure software, which TP-Link unfortunately has a bit of a reputation for, goes a long way. And not to pick on TP-Link, evidence suggests many/most home routers are riddled with vulnerabilities.

news

Comment on

Gen Z are over having their work ethic questioned: ‘Most boomers don’t know what it’s like to work 40+ hours a week and still not be able to afford a house’

Reply in thread

I had a basic but nice first house, but I sold it to move for a new job. I even was lucky enough to still make a bit of a profit. But not enough, and now I'm stuck back with renting again, can't really afford to buy a new house with interest rates, prices, inflation eroding my income in other areas, and poor availability. I think back to my parents buying their first house and how nice it was by comparison, for a fraction of the price even adjusted for inflation and it gives me a really unfortunate sense of perspective, much less hearing stories like yours or from friends I know who are in a bad situations. I'm not struggling, but prospects for improving things aren't great either, and that seems to be the case for everyone I know.

Comment on

Tailscale in the Hugging Face intrusion: The good news and the bad news

Reply in thread

Best way to think about it is as an abstraction layer where you can make any computer anywhere talk to another one like they are on the same network without being. You can build networks however you want and it mosly just works. It became popular to do things like tie together multiple machines or networks in datacenrers or home or wherever and let them network together irrespective of the underlying isolation. At home people like to use it to let them access their home network and self hosted services on the go without having to expose anything to the Internet.

Under the hood it's mostly "just" a VPN with some extra convenience and controls, but it made VPN networking a lot more convenient.

Comment on

Means to privately connect to my home server other than Tailscale?

Reply in thread

WG is not meant to be a stealthy protocol and is easy to detect at the ISP level. It has distinct characteristics that packet inspection tools can use to identify it by examining the traffic and block or flag it. Blocking it completely is trivial for any ISP, much less a nation.

There are modified versions like AmneziaWG that make it stealthier, or alternative protocols built to evade traffic inspection like xray or sing-box (these two are really more like protocol frameworks that have multiple protocols you can use). It's a bit of an arms race for packet inspection tools to be able to reliably identify these intentionally stealthy protocols, but the advantage is generally in your favor as long as you are using your own servers and not public VPNs. Though even then you need to take care to camouflage your traffic to be truly safe, like if you are shoving all of your traffic through one remote server that has approximately the same amount of traffic going out immediately etc that is something that can also be identified.

How much precaution is actually warranted depends on where you are and what the potential consequences are. You don't have to go to a full tinfoil hat paranoia level setup to avoid most blocking.

Comment on

Tailscale in the Hugging Face intrusion: The good news and the bad news

Reply in thread

You can do most everything Tailscale does with native Wireguard, it's just a lot of work to manage any of what Tailscale does beyond the most basic. It's a lot of convenience on top of Wireguard. If you just need a basic "I want my phone to easily get back to my home network" then I would probably stick to Wireguard (and maybe a GUI on top like wg-easy). If you want to do more complicated stuff, like link multiple sites, mesh routing between multiple networks, sophisticated user access controls, etc, Tailscale starts to be maybe be worthwhile. Or another solution, I personally actually prefer to use Netbird, which is basically similar.

One thing it does do that native Wireguard does not is it includes a relay server, so that if two hosts can't actually reach each other directly they can still negotiate a direct connection or even fall back to using the relay server to communicate. This is useful if you're stuck behind something like CGNAT or other networking schemes where hosts may not be able to have a publicly routable IP address.

Tailscale (and Netbird) also offer one extra convenience which is they both have built in reverse proxies that integrate with the VPN network they generate. Strictly speaking that part is separate from Wireguard; you can also do that yourself but it's rather convenient. This lets you have publicly trusted TLS certificates and stuff for your internal sites and depending on how you use it can replace stuff like Cloudflare tunnels. So you can host sites without port forwarding.

FWIW I primarily use a native wireguard server with wg-easy for most of my VPN needs and I only really use Tailscale (actually, Netbird) for some specialized uses. Mostly replacing Cloudflare tunnels with something I fully control.

news

Comment on

The Answer to Trump’s Victory Is Radical Action

Reply in thread

RCV was also on the ballot in Colorado, but for some reason they bundled it with a "jungle primary" for governor and a bunch of other seats, where the four choices on the ballot for governor in the general election would be the top four from the ranked choice primaries, regardless of party (so you could end up with four options from the same party in theory). The latter addition was pretty unpopular with both parties, who put out tons of messaging against it and especially conflated it with RCV. It got voted down with a significant margin.

I'm not opposed to either measure, but I'm really struggling to understand why they rolled the two together into one ballot initiative instead of separating it. Alas, I'm just a lowly voter not privy to such advanced political reasoning. Fortunately most of Colorado's other ballot initiatives went well, at least according to my preferences.