Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
What do you run; Opnsense, pfsense, Smoothwall, maybe a WAF like wazuh?
Today was update/audit firewall day. I'm running a standalone instance of pFsense on a Protectli Vault FW4B - 4 Port - Intel Quad Core - 8GB RAM - 120GB mSATA SSD with unbound, pfBlockerNG, Suricata, ntopng, and heavily filtered. I did bump the swap to 8 GB as I've previously noticed a few 'out of swap' errors under load.
Before I signed off, I ran it through a couple porn sites to see if my adblocking strategy was working. Not one intrusive ad. Sweet!
Also this. On some unremarkable HP office PC that's probably about a decade old. No ad filtering or anything as it interferes with others in the house. I've thought about trying a second unbound service with adblocking for me, but haven't gotten around to it.
I run a secondary wifi network with “Ads” in its name, whose vlan doesn’t get forced into pihole DNS. It mostly prevents me from having to hear complaints from others in the house, and they barely ever use it.
I quite like this idea, thanks! If I did this I could adblock all the rest of my network, which might help with blocking ads on things like smart TV's. I could also DMZ that wireless network. I would consider their devices untrusted (not malicious, just not careful), and they wouldn't notice the difference.
No ad filtering or anything as it interferes with others in the house
Ahhh the WAF (Wife Aceptance Factor). I made a seperate Vlan for my lady friend so when she comes over to visit, I don't have to reinvent the wheel for her. She can have all the ads and slop she can stomach, just keep it on your seperate branch and we'll both be happy.
Opnsense on dedicated device, several built in filters + several github backed filters for unbounddns.
Haven't tested it heavily, but the times I am on an outside network not using VPN into my network, or using TOR, etc, i am inundated with ads... So i guess successful internally.
outside network not using VPN ........ i am inundated with ads…
I swear I do not know how the regular Joe Schmoe internet user deals with all that clutter. Sometimes I am called by a friend to look at their computer for some issue they are having. It is mind bogglingly frustrating for me.
The thought has crossed my mind on several occasions. If you don't mind me asking and take up your time, how do you integrate f2b with pFsense? I'm running f2b on several VPS I have, and it just downright works. So, my thought was, what would f2b do to enhance pFsense's capabilities, and how would you make that all homogenate?
Been a while since I set it up but as I recall it's a 5-minute from job that runs a command that just dumps the pf block list fail2ban manages into a text file in my public_html directory. Then I just add a feed in pfblocker with the address of the text file and it loads from that feed.
I'll see if I can dig up some info. I started searching, then got busy. So I put the few I had time to find in a selfhosted Readeck instance. I use it for 'read it later' kind of bookmarks.
I run iptables on Debian, on a cheap aliexpress minipc with dual NICs. Been using more or less the same config for about five years. It’s simple, boring, and works great.
One cannot quibble with long term success. Admitidly tho, I am a sucker for a good UI. One of the first things I do when researching a piece of opensource software is to do an image search to see what it looks like. LOL
I love my Protectli. I tried Opnsense. Seemed to be a well put together piece of open source software by people really who care. There's nothing wrong with it. Does what it says on the tin. I guess I just liked the flow of pFsense. They both acomplish the same thing. I am aware of the pro's and the cons of each. pFsense just appealed to me more.
My firewall varies from installation-to-installation, as it's always client-side with a custom DNS provider. Right now, I'm using YaST Firewall on my main machine, iptables on my old ThinkPad, and my other machines are currently between operating systems. In the past, I have also dabbled in ufw, pf, and awall.
In addition to that, I generally use NextDNS (though I also get excellent results with Mullvad DNS).
My policy is simple: reject all incoming connections, except for Torrent and Syncthing.
nftables. Deny all, start adding stuff until þings work.
My firewalls are simple, b/c I run a private VPN and just shut off all traffic except over WG. I've got one exposed VPS reverse proxying services from oþer VPSes over WG.
But: nftables, and only nftables. I'm a big believer in understanding how stuff works, and þe rulesets created by firewalld and ilk are convoluted - complexity adds risk.
Ubiquiti DM pro with its built in suricata. Honeypots, no remote mgmt, ACLs to minimum need, HA networks in isolation. DPI, multiple pi-holes. Phone alerts on intrusion wazuh just for node security compliance. ManageEngine for patches. NTFY alerts on console access.
Opnsense with unbound DNS here. Running on an old PC that got converted to dedicated firewall (with added NIC card for ports). Nothing crazy, just enough to control what communicates out of my network.
I've always wondered about OpenWRT. In my uneducated thinking, running an access point/wifi, firewall, router, etc, all in the same package would create a bottleneck right at the point you wouldn't want it. What has been your experience?
I run IPFire on a PC Engines apu4d4 (pcengines.ch/apu4d4.htm). I use dynDNS, WireGuard and set up a DMZ with it. I also have a WiFi card installed und use hostAPD to run that.
I think they stopped producing them because the AMD SOC they used is EOL. I was a big fan of their open platform.
my home server needs to be redone and i'm seeking ideas on how to future proof it. here's some ascii art in a screenshot to help describe how it's currently setup:
description (left to right): - laptops, smartphones, tables, etc connect to an access point configured on a windows 10 virtual machine (vm). the windows10 vm uses pci passthrough on the wireless adapter and this is done to get gigabit wifi speeds since intel's drivers won't allow linux to do this in ap mode; but will allow it just fine if you're using windows. - requests from the wifi clients are passed via dns & ip masquerade to another virtual machine based on pfsense - pfsense serves as the router, firewall, vpn, ad blocking & web hosting and it's also configured to use pci passthrough on the primary network interface to gap internet traffic from the server - the center of the drawing shows how i perform data backups using a wired connection with a hardware switch and i setup the host ubuntu server to manage dhcp on the secondary network interface & the devices that are connect to the switch. the data is stored using rsync and harddrives are setup to use an extremely large lvm made of several different types of hard drives.
i've rebuilt this server multiple times each time i encountered a "gotcha" or a surprise that i had not anticipated and it made some needful component stop working; so i'm seeking advice from Lemmy on how to redesign this to mitigate future surprises.
some of the surprises i've encountered so far are: - the pfsense logs overfilled the root volume of the bsd based vm because logrotate was configured for linux. the image is hardcoded with a single volume so i will need to find a way to borrow some space from the backup volume using nfs and configure the logs to write there instead of locally. - i have no key for the windows10 vm; so i'm forced to clone it's qcow image and manually configure the hotspot each time the 30 day free trial from microsoft expires. I intend to improve upon this creating an ansible job to rotate this virtual machine every 30 days automatically and include powershell based tasks to configure the hotspot in windows automatically - intel limits the speed for linux native internet connection sharing to 100 megabits (already mentioned & fixed above) - the local users home volume overfills when trying to take my google backups (already fixed)
constraints: - don't spend anymore $$$ - gigabyte wifi is A MUST
I have found that a lot of VPN kill switches interfere with other security measures. For instance, I use tailscale on my VPS. I also run a local VPN. If I have the kill switch on the local VPN engaged, it interferes with tailscale and I cannot ssh in to my VPS. So, a not so elegant solution for me is to disengage the local VPN's kill switch for that session, and then re-enable it after I am finished administering my VPS. After which I will do a DNS leak check to make sure everything is as it was. Takes a couple of quick steps, but it seems to work.
I think I have the same protectli as you and it is awesome. Need it for my 2.5gb uplink. I use openwrt on it... Didn't really like opnsense. I am more used to linux than bsd.
I host lots of services and get bombarded by scrapers, scanners, and skids both at home and on my VPSs.
I use ipset for the usual blocklists which I download regularly. I also have tarpits on 22/tcp (endlessh). I pipe the IPs from the endlessh logs into fail2ban which feeds the ipsets. I have ipset blocks and fail2ban on my home firewall and all VPSs and coordinate over mqtt. So any fail2ban trigger > mqtt > every ipset block. Touch my 22/tcp anywhere and you get banned instantly everywhere. The program I use for this is called vallumd and it runs on openwrt.
I also put maltrail everywhere but I'm not totally sure how to interpret and respond to the results. Probably will implement a pipe from maltrail to my mqtt > blocklist setup.
I don't do any network-level adblocking... Might be a future project.
I think I have the same protectli as you and it is awesome
Yes it is. It was a little more than I wanted to spend, and I'm sure I could have gone with a cheaper configuration, but I figured I'd get something with a little ass to it as to not create a bottleneck right at the firewall.
I host lots of services and get bombarded by scrapers, scanners, and skids both at home and on my VPSs. Touch my 22/tcp anywhere and you get banned instantly everywhere.
I too host most of the services I use on a couple of VPS I run. It has always amazed me as to the thickness of the bot layer on the internet. Clearnet experiences something like 2+ zetabytes per 24 hours. Around 50% of that is bot traffic, and they are very sophisticated bots as well. Open port 22 and here they come by the thousands like a feeding frenzy. I went as far as blocking everything with hosts.allow (do first) & hosts.deny (do last). I've set f2b on aggressive mode with only one shot. LOL UFW rocks in the background along with Crowdsec. I probably go overboard with security. LOL
Pfsense guy here, and professionally Palo alto guy. Can someone tl;dr the purpose of blockerng and suricata? I thought I remember the Lawrence systems folks mentioning using it for IPS but with segmentation at home "human" IPS seems more relevant than digital
PfBlockerNG: Used to block ads, malicious content, and manage access based on IP geolocation and domain names. It provides features like DNS-based blocking
Some of the features of both overlap which might not be a bad thing.
Some of it is for fun and testing, learning. Which I used to do. I used to have an old watchdog that I put pfsense on, just don't need it nowadays.
Once i learn how it works and have run through the setup, I move on. Just need to spend my time in other areas, but now I have an understanding of it and can apply that logic or idea to other things and troubleshooting.
This is perfectly valid! I to a lot of tinkering with selfhosting using Docker containers, and I have learned a ton from that. I feel a bit silly that I didn't make the connection with firewalls - just tinkering for fun!
The last stats I remember reading cited some 1.5 million home networks are compromised on a daily basis. Some people, such as myself, run more complex services on their local servers that are perhaps tied into remotes such as VPS. You'll see a lot of selfhosters with rather elaborate firewall defenses set up. I self host a lot of services I use that the 'normal family home' would outsource to public entities. I have a rack in the closet and several VPS, so I need something more than just Windows Firewall, or similar, that I can dial in to my unique environment.
Git, Paperless, UniFi Controller, Pihole, Mattermost chat, Immich, Home Assistant, Frigate, Syncthing, Hoarder. Just stuff for myself, my home, and my friends. And 🏴☠️
Exclusive: Declassified has obtained a list of Israelis who graduated from the Royal College of Defence Studies in London. We’re publishing it for the first time.
Tech companies are marketing AI-based note-taking software to therapists as a new time-saving tool. But by signing up, providers may be unknowingly offering patients’ sensitive health information as data fodder to the multibillion-dollar AI therapy i…
Jeff Goldblum's Jurassic Park monologue feels appropriate here.
"You stood on the shoulders of geniuses to accomplish something as fast as you could and before you even knew it you had it. You patented it and packaged it and slapped it on a plastic lunch box, and now your selling it!"
Not universally true— with my healthcare network there is a consent form that allows you to decline the use of AI for online appointments, and for in-person they request verbal consent. I make sure to decline every time.
Just wanted to share so that people can check if opting out is possible (for now at least).
My network (my insurance is with an HMO so it’s all centralized with all the physical and mental healthcare providers I have access to) has you click on your appointment in the app or online, and then it opens Zoom.
I have to use Teams for work and the idea of using that for therapy is kind of funny for some reason…
were you talking also about poisoning the training data?
two distinct (but imo highly worthwhile) things
tar pits are a bit like turning the tap off (or to a useless trickle). fortunately it’s well understood how to do it efficiently and it’s difficult to counter.
poisoning is a whole other thing. i’d imagine if nothing comes out of the tap the poison is unlikely to prove effective. there could perhaps be some clever ways to combine poisoning with tarpits in series, but in general they’d be deployed separately or at least in parallel.
bear in mind to meaningfully deploy a tar pit against scrapers you usually need some permissions on the server, it may not help too much for this exact problem in the article (except for some short term fuckery perhaps). poisoning this problem otoh is probably important
were you talking also about poisoning the training data?
two distinct (but imo highly worthwhile) things
tar pits are a bit like turning the tap off (or to a useless trickle). fortunately it's well understood how to do it efficiently and it's difficult to counter.
poisoning is a whole other thing. i'd imagine if nothing comes out of the tap the poison is unlikely to prove effective. there could perhaps be some clever ways to combine poisoning with tarpits in series, but in general they'd be deployed separately or at least in parallel.
bear in mind to meaningfully deploy a tar pit against scrapers you usually need some permissions on the server, it may not help too much for this exact problem in the article (except for some short term fuckery perhaps). poisoning this problem otoh is probably important
Meanwhile the guy who breached a Finnish therapy database and held 33,000 records for ransom just got out of prison after serving around 2 years of a 6 year sentence:
To make matters worse he basically "served" 2 years in hotel. Because that's what Finnish prisons are. He clearly wasn't punished enough. I'm afraid he will go back to his criminal life...
i think that the worse thing about this is that the people committing the same crime are made millionaires and will never receive any sort of comeuppance for it.
Prisons shouldn't be cruel and unusual. If you think Finnish prisons are so good compared to being free in your country... what do you think that says about your country?
I'm already got bit off topic and I'm afraid this will go far away from the topic if I'd answer your question. I rather keep this sub on topic. And also one of the rules of this community is literally: "Try to keep things on topic"
Nah rehabilitative justice doesn't work for financial crimes. This has been shown time and time and time again. Financial criminals are not the result of troubled youth or poverty, these pieces of shit are the privileged cream of the crop who only care about expanding their already unjust wealth. Unlike your run of the mill robber, there's nothing to rehabilitate. They have never lived a hard day in their life yet that's still not enough for them. They deserve to suffer and be made to repay tenfold what they stole from society in back breaking labour, or worse. There's a reason every socialist country makes financial crimes over some threshold punishable by death, something every country needs to implement.
Finland to financial criminals victimizing the entire country:
Finland to the actual victims:
(Hi from Canada where the courts do the same thing and then get all high and mighty about being "progressive" and "rehabilitative" when the victims express their grievances)
You know, as with a lot of these tech advances that impinge upon privacy and put us at risk in the name of profit, the buy-in, the thing they're offering in exchange, IS actually pretty worthwhile. This is extremely useful. It's such a shame that all this cool Star Trek shit that I would have been giddy about as a kid has been realised, but at a sinister and often hidden cost.
Is there any way this can be done on local metal? Would it achieve the same level of accuracy and sophistication of the progress notes? Because if this can be offered to the therapists that wanted it enough in the first place that they either knowingly or unwittingly sacrificed their patient's privacy for it, maybe they can be given an alternative.
I think nothing stands in the way of doing this on local metal, as far as technology goes. Something similar has already been achieved for personal photo sorting, e.g. ente.io/
Ente Photos is the private, secure, end-to-end encrypted photo storage app. Cross-platform, open source, and self-hostable. Get started with 10GB free.
The specific application in this instance was that it creates "progress notes". Admittedly, as I have only the information from the article itself, having no background in this field myself, I can only make assumptions what those are like, but as the name implies it's charting a client's progress through therapy and would also imply to me a lot of summarising of information gleaned during sessions. I guess in as much as it also would necessarily have to create a transcript in doing this for you, I guess it also provides that too. This is portrayed as tedious and time consuming work by the creators of the service, who obviously have a vested interest in casting it in such light, but taken at its word, I would say in my opinion the advantage would be in automating some of the tedious and time consuming aspects of the job.
As I suspect you were driving at from the tenor of the question, there's a lot of ways this could go wrong, in particular privacy concerns when this service is offered in the manner that it is here where it's processed outside of the therapist's own clinic by 3rd parties and information is shared with additional parties and used for many purposes with only the flimsy promise of "de-anonymisation" which appears to be hollow. It could also maybe affect how the therapy is conducted, making decisions about how to summarise this information that will influence what decisions a therapist makes and perhaps that therapist might have summarised it differently if doing the notes themselves, then again this all hinges upon how effective it is considered to be. If it can be evaluated and found to be generally good, then it seems tentatively like this could be a pretty helpful tool for a therapist. But in general, my comment was really more directed at what I feel like is a sad state of affairs across the board with recent tech advances including generative AI as applied in any aspect of life or work, that I think is often lost in these conversations where the technology really shows promise or is quite impressive but because of the manner of its development or the surveillance profit model, it's basically tainted and ruined. I feel like I often come across commentary that fails to make the distinction between the negative aspects of how these techs have come about and are monetized and the tech itself where the latter is simply cast as inherently undesirable even when there's clearly reason enough for people to find it appealing in the first place for it to end up in use.
that's plausible. in my opinion a therapist should take the effort to take their own interpretation of what has been said, instead of relying on a machine that digests the system in a uniform way. words of a patient can mean a lot of things, even depending on things like their body language. but I have to admit I'm even more concerned about the privacy consequences which you pointed out. that's like, it simply can't go unabused in my opinion. too tempting. I wouldn't even want to run a business that just stores it without abuse, it's too risky too.
I am currently looking for a privacy respecting alternative for the medication tracking app I currently use. Apple's native health app seems to be decent privacy wise, but it lacks the ability to input my current capsule inventory and set a reminder at a certain amount of pills so I can refill them on time. (I should also note that I have an older phone so I'm running iOS 18.6? I'm not sure if the app has changed on iOS 26.)
Thanks for reading and I look forward to your recommendations. ^-^
I just use the native one. My issue is, I have medications that have to be spaced apart and Apple does not support that. Like pill A can be taken whenever, but pill B has to be taken 4 hours out. You can set them for times that are that far apart, but if you take pill A late, you aren't told to take pill B even later to compensate.
What you need? Sounds like you need reminders. Apple's medication tracking isn't a pill counter. So you either have a 1 or 3 month supply, typically. When you start taking them, you could set a reminder (in the Reminders app or in another app you like) for however many days before telling you to refill. Some of the prescription apps actually will remind you on their own when it's getting to be time to refill.
At the VIII Congress of Leaders of World Religions in Astana, Kazakhstan President Kassym-Jomart Tokayev stated that experts assess the risk of nuclear conflict as the highest in recent decades. He expressed concern that confrontational approaches are gaining momentum globally, geopolitical rifts are widening, and social tensions are rising, while constructive initiatives and détente policies are being sidelined.
In this situation, Tokayev emphasized the critical role of diplomacy and dialogue in overcoming mutual alienation and increasing trust between countries. He placed particular hope on religious leaders, calling on them to use their efforts to remind politicians of common sense, goodwill, and moral responsibility in order to prevent "the world from sliding into the abyss of chaos."
Kazakhstan's President Kassym-Jomart Tokayev opened the plenary session of the 8th Congress of Leaders of World and Traditional Religions on September 17 in Astana,...
Perhaps only mildly interesting but I just did an apt show for birdtray on Debian 13 and got this in the second paragraph of the description:
It is a nasty hack -- an external process looking at Thunderbird's insides, it suffers from problems like noticing new mails only after a delay, having to restart Thunderbird just to hide its window, etc -- you'd want to use an extension like firetray instead -- but, it is likely that support for Thunderbird XUL extensions will be dropped soon, possibly by the time you read these words.
Not used to seeing this kind of language in the Debian repos tbh.
Sounds like a developer who's pissed they had to make this hack in the first place, not proud of it, and not the way they'd like to solve the problem. But the external factors they can't control keep putting up road blocks, so this hack was all they could come up with to temporarily solve the issue for themselves.
Yeah, part of the reason I like open-source. The devs don't need to sell you anything, so they can just tell you that what they made is a steaming pile of garbage.
i got my hand slapped for describing a project that i put together for an old-silicon employer in the recent past; i reverted it back just before i left. lol
I do too. But I have this illusion about Debian that everything is perfect, authoritative and dignified, which it is of course and then I am struck by this kind of candid resentment and bitterness in apt like a bolt out of the blue. I just don't what to think any more.
I always go back to Fedora. Different strokes for different folks and I’m definitely not trying to have a “Which distro?!?” conversation. Maybe you have philosophical reasons to hate it. (I do sometimes too.) But that’s my home base.
It’s partly because I learned on WhiteHat/CentOS/RHEL for work. But even today, it’s my stable, baseline distro. They don’t change Gnome or push updates without at least some testing. (I know.) Drivers almost always work. There’s (usually) documentation written by paid professionals. It’s just a good, solid OS that I can make mine without uninstalling shit or worrying it’s unstable.
Debian is perfect for that too, obviously and I’m eternally grateful for Arch’s wiki and community. But for my needs, Fedora strikes a near-perfect balance.
I like Fedora and Debian a lot, but update fatigue drove me crazy with Fedora in particular. I know I don’t HAVE to update everyday, but if they’re available I can’t help myself. I like how calm and still Debian feels in comparison. I’m running mostly Debian 13 now days and I’m going to try holding out the full 2 years before the next version. It’ll be a bit of a marathon as I read about all these new features every 6 months.
Typically with Debian distros, I set security updates to be automatic and I just go in every now and then and update the rest. But I pretty much only use it on servers and Raspberry Pi side projects.
To be clear to people who find this, none of these distros we’re talking about are for massive scale. We’re talking personal stuff, side projects, small businesses, etc. Don’t put Kali Linux on your laptop. It’s made for a specific purpose.
To be clear to people who find this, none of these distros we’re talking about are for massive scale. We’re talking personal stuff, side projects, small businesses, etc. Don’t put Kali Linux on your laptop. It’s made for a specific purpose.
Arista had a mass produced network switches line based on fedora circa 2020; they back ported everything to keep it up to date.
Haha, perfectly valid, thanks for the clarification!
Edit: Just realizing who you are here, and wanted to express my gratitude! Bazzite has been the thing that finally allowed me to feel comfortable ditching Windows on a gaming living room PC, with all my finicky requirements for HDR and a clean controller-driven experience, and it's been a fantastic decision.
"The new Video Player prioritizes a distraction-free viewing experience"
How can you say this while having the controls overlaid onto the video, youtube-style, and cropping the video corners ? admittedly corners are rarely of the utmost importance in any film, or other video file. But just don't touch my corners.
I like the "Power connected status change". Helps to find out if the charger is relly plugged in. Hopefully Papers will receive support for digital signage which evince never did. This is still lacking in GNOME.
Rubio ranted, “This happened because on October 7th these animals, these barbaric animals, conducted this operation ... against innocent people.”
He concluded, “It needs to end. And how does it end? It ends by eliminating the people who did it, by ending them as a threat.”
As vast as the crimes of US imperialism have been in funding, arming and enabling the Gaza genocide, Rubio’s statement marks a new turning point. American imperialism, dropping its veil of promoting “democracy” and “human rights,” has adopted language that would not be out of place in a speech given by Adolf Hitler.
Rubio’s use of this genocidal language was the starting gun for the full-scale Israeli onslaught on Gaza City, as tanks and warplanes moved in, displacing countless thousands at gunpoint over the choked coastal road to Gaza’s south.
On Monday, US Secretary of State Marco Rubio held a joint appearance with Israeli Prime Minister Benjamin Netanyahu to inaugurate what Netanyahu called the “concluding moves” in the US-Israeli onslaught on Gaza: the conquest and destruction of Gaza C…
By now, many have probably read Jonathan Riddell’s blog post yesterday about his departure from KDE and the events that led up to it. And today, an article has been published in ItsFoss about…
The next day I ended up at a funeral for some German accountants
I feel there is a story here? A funeral form multiple accountants? Was someone finally done with how capitalism is unchecked and had a mass shooting at an accountants firm?
In a congressional hearing in July of last year, a research scholar on antisemitism named Charles Asher Small shared an explosive finding: Funding from the government of Qatar had fueled a 300% spike in antisemitism on university campuses in the United States. Members of Congress responded with rapt interest. “I want everybody to hear this. So universities that took money from Qatar had a 300% increase in antisemitism [compared to] other universities?” said Iowa Republican Rep. Randy Feenstra.9
The statistic about Qatari funding for antisemitism became the highlight of Small’s testimony to Congress. But this precise statistic was never actually recorded in his study.
Small repeated the same claim in a Senate hearing in March of this year. But when contacted for comment about the figure, ISGAP could not point Drop Site to any specific report or finding. One ISGAP study published in 2023 did report that, from 2015-2020, universities that received money from “Middle Eastern” donors had a 300% increase in antisemitic incidents compared to those that do not. But this report is also disputed—and there is no data in it specifically linking Qatari funding to a rise in antisemitic incidents.
Drop Site interviewed over a half-dozen former employees and scholars of ISGAP, many of whom explained that the organization has strayed from the mission of academic study of antisemitism into a hyper-fixation on Qatari funding of U.S. institutions—while ISGAP itself has accepted foreign funding from Israel.
ISGAP is attempting to shape policy in Washington, at a time when the Trump administration is looking to justify a broader crackdown on opposition to the war on Gaza.
Scientists have imaged heat traveling as a wave, called "second sound," in superfluid quantum gas. It may unlock mysteries of neutron stars and superconductors.
The Financial Times has written that the commander of the Donetsk Joint Task Force, Oleksandr Lutsenko, was dismissed after the rapid advance of the Russians towards Pokrovsk. Brigadier General Oleksandr Tarnavskyi was appointed to his position.
Spanish government officials have suggested they could pull their national team out of the 2026 World Cup.
World football's biggest tournament will take place once again next summer in Canada, Mexico and the United States, the first time the competition has been hosted by three different nations.
European champions Spain are the bookmakers' early favourites to win and are on course to book their place at the tournament, having taken two wins from two at the start of qualifying.
But there are now suggestions Luis de la Fuente's side could withdraw from the World Cup in protest if Israel also qualify for the tournament.....
"Every political system is a dictatorship, except the one I live in." - Communists, "Leftists" ,Libs, Naz..Conservatives, etc.
"Don't tell me about the answer, 'cause then Another one will come along soon I don't believe you have the answer I've got ideas, too But if you've got enough naivety And you've got conviction Then the answer is perfect for you" - Bad religion, The Answer
With DPRK it seems pretty simple: Are citizens permitted to leave the country of their own accord? The answer of course is no, and that is extremely telling. Combined with choreographed & escort-only tourism, one really has to question it.
My opinion: Odds are likely that it really is a shithole in many ways and in many places (and for many reasons, sanctions included). That said, people will still live their lives within those constraints, because that's what people tend to do. We won't get accurate and verifiable information from their government about citizen health and longevity, causes of death, etc. so OP's propaganda must be taken as just that.
At some point NK's system will fall, and some historians and archeologists will get to do their thing, and we'll gain some more insights.
It's important to recognize that a large part of why the DPRK appears to be insular is because of UN-imposed sanctions, helmed by the US Empire. It is difficult to get accurate information on the DPRK, but not impossible; Russia, China, and Cuba all have frequent interactions and student exchanges, trade such as in the Rason special economic zone, etc, and there are videos released onto the broader internet from this.
Finally, it's more unlikely than ever that the DPRK will collapse. The economy was estimated by the Bank of Korea (an ROK bank) to have grown by 3.7% in 2024, thanks to increased trade with Russia. The harshest period for the DPRK, the Arduous March, was in the 90s, and the government did not collapse then. That was the era of mass statvation thanks to the dissolution of the USSR and horrible weather disaster that made the already difficult agricultural climate of northern Korea even worse. Nowadays food is far more stable and the economy is growing, collapse is highly unlikely.
What I think is more likely is that these trends will continue. As the US Empire's influence wanes, the DPRK will increase trade and interaction with the world, increasing accurate information and helping grow their economy, perhaps even enabling some form of reunification with the ROK. The US Empire leaving the peninsula is the number 1 most important task for reunification, so this is increasingly likely as the US Empire becomes untenable.
He is a Mormon weirdo, I’ve seen him driving his Cybertruck in Salt Lake City. But! If this fuckin’ tool can see it, maybe there’s some hope that the rest of the demons who comprise the US population can too.
The right wingers are turning on Israel full swing. But at least Jerry makes wheelchairs for charity and stuff and doesn't seem too caught up in identity politics.
The right wingers are turning on Israel full swing.
i'de love to see evidence of this. i know that liberals are turning on isreal because of social media live streaming the gaza genocide, but i thought right wingers were immune to it since they're not even rolling on epstein.
Krystal and Saagar discuss Candace saying the Tyler Robinson texts are doctored. Sign up for a PREMIUM Breaking Points subscriptions for full early access to...
the biggest take away from this video is that breaking points is asserting that the shooter had a boyfriend like how trump et al. are trying to paint him as a radical leftist and that coupled w where breaking points also tried to pain luigi supportors as weirdos are making me think that breaking points has become another compromise news source.
Ryan and Emily discuss the judge dropping terrorism charges on Luigi. Sign up for a PREMIUM Breaking Points subscriptions for full early access to uncut show...
Krystal and Saagar discuss Kimmel pushed off his show after Trump threats. Sign up for a PREMIUM Breaking Points subscriptions for full early access to uncut...
No AVB yellow state on most devices (bootloader relock with custom keys), MicroG (while actually a cool project) Isn't a fully functional implementation (no Chromecast if you enjoy self harm, no U2F, FIDO authentication, etc.), you also can't use safetynet (for banking apps) with unlocked bootloader
This is actually incorrect, on almost all devices that Murena sells the bootloader is locked. I think you are confusing their official builds with their community/volunteer builds
I have bad news for you. From the specs on their site it appears to be a 6.5 inch FHD screen with a mid-range MediaTek processor. Really not much different from all the other mid-range phones offered in their site. For flagship price.
Though to be fair to the project, you don't need to buy a phone from them, you can re-inage an existing device bought elsewhere as long as it's one of their supported models.
Correct me if I’m wrong but I thought eOS wasn’t trust worthy? I can’t remember why though but I remember reading something about why it wasn’t good to use
My understanding is that it just redirects all the data collection from Google to Murena. Like you’re just trading one corp for another. That’s why some people have an issue with it anyway. Especially since GrapheneOS exists. I take a slightly more nuanced view that a lot of the conveniences modern smartphone users take for granted rely on this type of backend infrastructure. It’s sort of hard to avoid if you value mainstream features. That may be sort of a controversial viewpoint though.
I think that’s what I saw someone say somewhere the point about data being directed to murena, but I suppose it depends on how murena handles data and what privacy policy’s are in place. That’s what I think many people would look at before deciding whether to use it or not
it just redirects all the data collection from Google to Murena
Where did you see that? My understand is that it's only the case if you explicitly create then use a Murena account.
Also trading one corporation against another, in that case if the user genuinely want to (they are not being coerced), would be technically true but... Google is not "one corp". It's one of the largest corporation ever, one of the only two popular mobile OS. It does not mean automatically picking another corporation is better but it's definitely hard to do worst.
Mostly through hearsay on here and Signal groups. I do agree the Murena-bad circlejerk has gone a little too far. I use an iPhone so I don’t have a dog in this race.
I think that's q bit overblown. You have an option to use a Murena account in place of a Google account. I just said no thanks and everything works perfectly fine with no services affected. In terms of security of privacy of the Murena account itself, no idea. Never used one.
I thought eOS wasn’t trust worthy? I can’t remember why though
...seriously? Why do you even repeat it then? The least you can do if you don't want to fuel rumors is to :
either ask a genuine question, rather than suggest the answer
or, IMHO better, actually
take just few minutes to find the claim, one way or another, so that at least people can clarify, either confirming what you found or rather explain why it's no correct.
I bet you are referring to lemmy.ml/post/35472063 simply because it's relevant recent and (sadly) quite popular... but unfortunately you can read my response, incorrect. OP there has their opinion (they clearly don't like Murena and /e/OS and prefer alternatives, perfectly fine) but unfortunately, and that's what honestly piss me off, make claims that are just not true. You can check the details there. Now is it trust worthy or not, that's up to you, just don't imagine that Murena services are mandatory in /e/OS based on that posts because (as others in this thread also confirmed) it is just a lie.
/e/ OS does a little trolling and sends all your Text to Voice data to OpenAI for processing and Speech generation.
First of all, to anyone downvoting my Comments about /e/ being a piece of shit, because...
they advertise themselves as degoogled, but instead let you connect to Google/Microsoft/etc services
replace all the propriatery not at all Secure Services from Google, with.... Drumroll please.... Propriatery and not at all Secure Services from themselves and actively encourage it.
They are For-profit
and being MORE out of date then even Fairphones stock roms.
... I told you so. Dm your Instance admin, pay them to send the DB entries of your Downvotes on a Thumb drive (or anything else from SSD to 3.5 inchHDD, depending on your preferences), and shove it up your rectum.
But a TL;DR:
/E/ is not Private. They just switch one bad comany to another one.
If it was cheaper than the competition in the googled Android space and was a foldable, I'd consider buying it.
Just be aggressive with pricing and don't be afraid of working with middlemen, since for example in Slovakia, people are used to shop via the green alien shop, because they can have student discounts, volume-based discounts for businesses, drop boxes, and more things that the manufacturer can't afford to do.
I'll never understand why privacy companies do this: sell a thoroughly mid-range phone for a flagship price. The privacy OS market in my experience is largely either tech nerds with enough cash to splash out on a new/second unnecessary device just so they can play around with trying to get the new OS working for themselves, until it eventually becomes their daily driver, or poor students who got a beat up phone from their friend's cousin's neighbor's ex-girlfriend's roommate and are slapping this alternative OS on it to use as their main with all consequences be damned. Obviously there are people in the middle there, but tjoses eem to be the two primary groups. So the bulk of people you're selling to are those who want a higher end phone primarily, and probably would be willing to pay for it. Instead, they make a mid-range device that has low margins, often in small quantities because they throw in some niche feature that costs a ton to add to the existing design like a hardware kill switch, and then charge flagship phone prices for a mid-range device.
I'm willing to settle for having to buy a google pixel for instance (which is always a 2 year old design by the time it's released), and wait a bit before it's supported, but I'm never interested in a mid-range device. I dont care how much I support your mission, I'll throw a couple hundred at you as a donation before I even consider that. And that's assuming I'm buying the device at mid-range price. It's out of the question that I'd ever pay flagship prices for it.
Let me know when you have something that's closer to a 3 year old flagship and we'll talk, otherwise stop throwing your time and money at making a phone for a market that doesn't exist.
To this day I still can't understand what all the "need" for incredibly high-end phones come from. Gaming? That's the answer I've gotten before, and that just leaves me wondering why anyone would want to game on a phone to begin with. Are there other use cases for a phone that actually requires anything top of the line?
My phone was considered "mid-range spec" when it was released 4 years ago and it is still perfectly capable for anything I would want to use a phone for.
As for pricing - remember that there are other things than pure specs baked into a price. A locked down phone (i.e. no way of unlocking bootloader) riddled with spyware is likely cheaper than it otherwise would be from a company that won't be able to keep monetizing you as a product after your purchase. That's not to say that there is no such thing as a price mismatch, but matching price vs specs does not tell the whole story.
For me? Basic functionality. Even the Pixel 9 Pro is laggy as hell just opening apps like Garmin. God forbid I try to use the browser for anything. And that's a flagship phone.
I know it's the crazy badly designed apps, but I can't change that. What I can change is a phone that can run them.
Also, it's nice to be able to occasionally take a picture that's not completely washed out and looks like it was taken with a pre-OG Razer flip phone. No joke, I have pictures from that old flip phone 120x120 pixel screen!) from 20 years ago that look better than what came off the mid range phones I've tried in the last few years. I'm confident it's just poor implementation of much more capable hardware, but it doesnt change the fact that I can't even expect to use it for the most basic of functions.
Strange, I am rarely experiencing any lag on my four year old mid-range model, browser included. Maybe we have a very different perception of what lag is? Or maybe you have an insane amount of background processes running that bogs down your phone?
Camera is not great, but I always have a good time looking back at pictures taken with it and it is certainly much, much better than what I took 10 years, let alone 20. If your flip phone took better pictures, something is wrong and there could be ways to fix that.
Maybe the US intends for more farmers to go bankrupt so that the farmland is consolidated into fewer hands, but I think they'll just get a bailout. Literally biting the hand that feeds is too stupid for even this administration.
Ironic considering your last 6 posts are Russian state media. Turning a critical eye to things that support our own preconceptions is hard for all of us I guess
There are plenty of great non-msm perspectives challenging traditional narratives in America/ the west. State sponsored media from a nation with very clear biases is not among them.
Saying “your sources of news are bad so I’m going to post equally bad ones from a different side” doesn’t help anyone, posting better sources does.
Why get perspectives from the west? You'll miss like 90% of the people in the world's perspectives this way. The other way around its like 10% missed (and those 10% are mostly genociders)
The whole notion of dismissing information because it's from a state media source is so bonkers. You don't have to accept their framing, and you can go look up other sources to get different perspectives on a particular piece of news. The reality is that any outlet will have its own biases and leanings. That doesn't mean the news it reports should be discarded out of hand. I read mainstream western media every day, yet I hardly agree with any of their opinions.
The EU continues its hostile policy towards Russia by discussing the 19th package of anti-Russian sanctions, Kremlin spokesman Dmitry Peskov said on Wednesday.
In my relentless pursuit of trying to coax more performance out of my Lemmy instance I read that PostgreSQL heavily relies on the OSs disk cache for read performance. I've got 16 GB of RAM and two hdds in RAID 1. I've PostgreSQL configured to use 12 GB of RAM and I've zram swap set up with 8 GB.
But according to htop PostgreSQL ia using only about 4 GB. My swap gets hardly touched. And read performance is awful. Opening my profile regularly times out. Only when it's worked ones does it load quickly until I don't touch it again for half an hour or so.
Now, my theory is that the zram actually takes available RAM away from the disk cache, thus slowing the whole system down. My googling couldn't bring me the answer because it only showed me how to set up zram in the first place.
Lower the postgre to 8GB and see what happens? Also, hard drives, ssds, or nvme ssds? Recent info suggests it is possible memcaching is actually slower than direct access to nvme ssd
You're probably correct, although I have no experience with zram so can't be sure. But you're absolutely right that PostgreSQL depends heavily on the OS disk cache for optimal performance. Lowering the PostgreSQL setting like Blaster M suggests won't improve performance much, since all that setting does is tell PostgreSQL's algorithms how much memory is likely to be allocated to the OS disk cache. Of course it's best if it's accurate, so you're best off seeing how much memory is actually allocated to disk cache under heavy use before setting it, but it shouldn't massively reduce performance if you don't get it right.
The 250 American legislators spending a week in Israel for the “50 States, One Israel” conference have sparked backlash from across the political spectrum this week.
Israeli Foreign Minister Gideon Saar lobbied the US lawmakers on a visit to Israel to pursue anti-Boycott Divestment and Sanctions (BDS) legislation, as Israel's leaders increasingly warn the country is becoming isolated on the global stage.
US citizens across the political spectrum have taken to social media to denounce the trip. Social media users from across the aisle repeated the same message throughout their posts: America is "occupied". "This is what's now being pushed across America," one social media user posted, alluding to the title of the conference, "50 States, One Israel". "Total occupation."
The 250 American legislators spending a week in Israel for the “50 States, One Israel” conference have sparked backlash from across the political spectrum this week.
Israeli Foreign Minister Gideon Saar lobbied the US lawmakers on a visit to Israel to pursue anti-Boycott Divestment and Sanctions (BDS) legislation, as Israel's leaders increasingly warn the country is becoming isolated on the global stage.
US citizens across the political spectrum have taken to social media to denounce the trip. Social media users from across the aisle repeated the same message throughout their posts: America is "occupied". "This is what's now being pushed across America," one social media user posted, alluding to the title of the conference, "50 States, One Israel". "Total occupation."
Junta troops detained, tortured, and burned six civilians to death in Sagaing Region’s Kantbalu Township on 12 September, according to a report released by the Kyun Hla Activists’ group.
Direct exports to the United States make up just ~2% of China’s industrial revenues. Electronics and consumer goods are most exposed, but US (or even global) demand is marginal for other industries. | 13 comments on LinkedIn
Hobbes_Dent
in reply to irmadlad • • •OpenBSD pf
Edit: just home/hobby now, I’m not in tech anymore.
irmadlad
in reply to Hobbes_Dent • • •I'd never heard of it so I went and checked it out. It seems to have a lot of pFsense/Opnsense features just managed from the cli. Cool.
Hobbes_Dent
in reply to irmadlad • • •It’s the ‘pf’ in pfSense.
pf is developed as part of the OpenBSD project and is the built in packet filter/firewall.
like this
osaerisxero likes this.
JovialSodium
in reply to Hobbes_Dent • • •trailee
in reply to JovialSodium • • •JovialSodium
in reply to trailee • • •irmadlad
in reply to JovialSodium • • •Ahhh the WAF (Wife Aceptance Factor). I made a seperate Vlan for my lady friend so when she comes over to visit, I don't have to reinvent the wheel for her. She can have all the ads and slop she can stomach, just keep it on your seperate branch and we'll both be happy.
HotChickenFeet
in reply to irmadlad • • •Opnsense on dedicated device, several built in filters + several github backed filters for unbounddns.
Haven't tested it heavily, but the times I am on an outside network not using VPN into my network, or using TOR, etc, i am inundated with ads... So i guess successful internally.
irmadlad
in reply to HotChickenFeet • • •I swear I do not know how the regular Joe Schmoe internet user deals with all that clutter. Sometimes I am called by a friend to look at their computer for some issue they are having. It is mind bogglingly frustrating for me.
like this
osaerisxero likes this.
Nightlight
in reply to irmadlad • • •kalpol
in reply to irmadlad • • •Works wonders. Pipe fail2ban to pfblocker for extra goodness.
irmadlad
in reply to kalpol • • •The thought has crossed my mind on several occasions. If you don't mind me asking and take up your time, how do you integrate f2b with pFsense? I'm running f2b on several VPS I have, and it just downright works. So, my thought was, what would f2b do to enhance pFsense's capabilities, and how would you make that all homogenate?
kalpol
in reply to irmadlad • • •irmadlad
in reply to kalpol • • •I'll see if I can dig up some info. I started searching, then got busy. So I put the few I had time to find in a selfhosted Readeck instance. I use it for 'read it later' kind of bookmarks.
Thanks for the share.
☂️-
in reply to kalpol • • •kalpol
in reply to ☂️- • • •nbailey
in reply to irmadlad • • •irmadlad
in reply to nbailey • • •One cannot quibble with long term success. Admitidly tho, I am a sucker for a good UI. One of the first things I do when researching a piece of opensource software is to do an image search to see what it looks like. LOL
monovergent
in reply to irmadlad • • •poccalyps
in reply to irmadlad • • •irmadlad
in reply to poccalyps • • •I love my Protectli. I tried Opnsense. Seemed to be a well put together piece of open source software by people really who care. There's nothing wrong with it. Does what it says on the tin. I guess I just liked the flow of pFsense. They both acomplish the same thing. I am aware of the pro's and the cons of each. pFsense just appealed to me more.
Hellfire103
in reply to irmadlad • • •My firewall varies from installation-to-installation, as it's always client-side with a custom DNS provider. Right now, I'm using YaST Firewall on my main machine, iptables on my old ThinkPad, and my other machines are currently between operating systems. In the past, I have also dabbled in ufw, pf, and awall.
In addition to that, I generally use NextDNS (though I also get excellent results with Mullvad DNS).
My policy is simple: reject all incoming connections, except for Torrent and Syncthing.
irmadlad
in reply to Hellfire103 • • •I hear a lot of good things about NextDNS.
Do you call your network Virgin, because that's pretty tight.
Ŝan
in reply to irmadlad • • •nftables. Deny all, start adding stuff until þings work.
My firewalls are simple, b/c I run a private VPN and just shut off all traffic except over WG. I've got one exposed VPS reverse proxying services from oþer VPSes over WG.
But: nftables, and only nftables. I'm a big believer in understanding how stuff works, and þe rulesets created by firewalld and ilk are convoluted - complexity adds risk.
irmadlad
in reply to Ŝan • • •warbond
in reply to Ŝan • • •Ŝan
in reply to warbond • • •rumba
in reply to irmadlad • • •Ubiquiti DM pro with its built in suricata. Honeypots, no remote mgmt, ACLs to minimum need, HA networks in isolation. DPI, multiple pi-holes. Phone alerts on intrusion wazuh just for node security compliance. ManageEngine for patches. NTFY alerts on console access.
It's not perfect
Billegh
in reply to irmadlad • • •kylian0087
in reply to Billegh • • •Billegh
in reply to kylian0087 • • •irmadlad
in reply to Billegh • • •Sitting in my bunker
Hid behind my wall.....
In perfect isolation here behind my wall
Waiting for the worms to come
Broken
in reply to irmadlad • • •Nothing crazy, just enough to control what communicates out of my network.
irmadlad
in reply to Broken • • •The Bard in Green
in reply to irmadlad • • •irmadlad
in reply to The Bard in Green • • •The Bard in Green
in reply to irmadlad • • •Wurzelfurz
in reply to irmadlad • • •I run IPFire on a PC Engines apu4d4 (pcengines.ch/apu4d4.htm). I use dynDNS, WireGuard and set up a DMZ with it. I also have a WiFi card installed und use hostAPD to run that.
I think they stopped producing them because the AMD SOC they used is EOL. I was a big fan of their open platform.
PC Engines apu4d4 product file
pcengines.chs3rvant
in reply to irmadlad • • •pfSense on this:
https://a.co/d/6WpafWQ
I also block outgoing port 53 only allowing my Pihole through.
I use Tailscale to access the network while away.
irmadlad
in reply to s3rvant • • •s3rvant
in reply to irmadlad • • •eldavi
in reply to irmadlad • • •you're doing the same thing i am, so there's not point. lol
eldavi
2025-02-14 21:49:08
irmadlad
in reply to eldavi • • •Zoma
in reply to irmadlad • • •irmadlad
in reply to Zoma • • •ki9
in reply to irmadlad • • •I think I have the same protectli as you and it is awesome. Need it for my 2.5gb uplink. I use openwrt on it... Didn't really like opnsense. I am more used to linux than bsd.
I host lots of services and get bombarded by scrapers, scanners, and skids both at home and on my VPSs.
I use ipset for the usual blocklists which I download regularly. I also have tarpits on 22/tcp (endlessh). I pipe the IPs from the endlessh logs into fail2ban which feeds the ipsets. I have ipset blocks and fail2ban on my home firewall and all VPSs and coordinate over mqtt. So
any fail2ban trigger > mqtt > every ipset block. Touch my 22/tcp anywhere and you get banned instantly everywhere. The program I use for this is called vallumd and it runs on openwrt.I also put maltrail everywhere but I'm not totally sure how to interpret and respond to the results. Probably will implement a pipe from maltrail to my mqtt > blocklist setup.
I don't do any network-level adblocking... Might be a future project.
irmadlad
in reply to ki9 • • •Yes it is. It was a little more than I wanted to spend, and I'm sure I could have gone with a cheaper configuration, but I figured I'd get something with a little ass to it as to not create a bottleneck right at the firewall.
I too host most of the services I use on a couple of VPS I run. It has always amazed me as to the thickness of the bot layer on the internet. Clearnet experiences something like 2+ zetabytes per 24 hours. Around 50% of that is bot traffic, and they are very sophisticated bots as well. Open port 22 and here they come by the thousands like a feeding frenzy. I went as far as blocking everything with hosts.allow (do first) & hosts.deny (do last). I've set f2b on aggressive mode with only one shot. LOL UFW rocks in the background along with Crowdsec. I probably go overboard with security. LOL
ki9
in reply to irmadlad • • •Largest ddos attack of all time? 12 tb/sec.
But yeah, I believe it when you say you get 24,855 tb/sec on your VPS.
irmadlad
in reply to ki9 • • •swelter_spark
in reply to irmadlad • • •MangoPenguin
in reply to irmadlad • • •OpenWRT on a Linksys router, with adguard home for DNS blocking.
I used to run OPNSense on some older x86 hardware, but wanted to move to something simpler and less power hungry.
weewkron
in reply to irmadlad • • •irmadlad
in reply to weewkron • • •Some of the features of both overlap which might not be a bad thing.
weewkron
in reply to irmadlad • • •thermal_shock
in reply to irmadlad • • •PlutoniumAcid
in reply to thermal_shock • • •Same. What's the deal with having elaborate firewall stuff for a normal family home anyway?
If the built in stuff isn't good enough then 99.9% of households would be compromised a long time ago already.
thermal_shock
in reply to PlutoniumAcid • • •Some of it is for fun and testing, learning. Which I used to do. I used to have an old watchdog that I put pfsense on, just don't need it nowadays.
Once i learn how it works and have run through the setup, I move on. Just need to spend my time in other areas, but now I have an understanding of it and can apply that logic or idea to other things and troubleshooting.
PlutoniumAcid
in reply to thermal_shock • • •irmadlad
in reply to PlutoniumAcid • • •The last stats I remember reading cited some 1.5 million home networks are compromised on a daily basis. Some people, such as myself, run more complex services on their local servers that are perhaps tied into remotes such as VPS. You'll see a lot of selfhosters with rather elaborate firewall defenses set up. I self host a lot of services I use that the 'normal family home' would outsource to public entities. I have a rack in the closet and several VPS, so I need something more than just Windows Firewall, or similar, that I can dial in to my unique environment.
Also, because I can.
PlutoniumAcid
in reply to irmadlad • • •irmadlad
in reply to PlutoniumAcid • • •PlutoniumAcid
in reply to irmadlad • • •Nothing spectacular.
Git, Paperless, UniFi Controller, Pihole, Mattermost chat, Immich, Home Assistant, Frigate, Syncthing, Hoarder. Just stuff for myself, my home, and my friends. And 🏴☠️
And you?
irmadlad
in reply to PlutoniumAcid • • •The usual. Might be a few I've missed:
eleitl
in reply to irmadlad • • •