Sticky situation
How's my network privacy? Should I switch from a commercial router to PFsense or something?
I use Linux on all my personal computers and privacy respecting ROMs on phones, and Pi-Hole, but a part I haven't really taken a look at is my network at home.
I currently have my ISP's smart router in bridge mode connected to a brand name Wi-Fi 6 router with a wireless "mesh" range extender. I really like the range extender because it has an Ethernet port so it's basically a "free" Ethernet plug for that room connected to a high power Wi-Fi transceiver that's faster than a lot of on board Wi-Fi antennas.
But I feel like it's probably not the best thing privacy and security wise? I already don't use the app and luckily it still has a web interface for management, but I don't know how secure the firmware is or if it has any corporate "analytics" or not. I'm thinking a PFsense or similar router software on Linux box to connect to the bridge port of my ISP's router since I was told the "Ethernet" cable connecting from it to the fiber modem won't work with a store bought router, I assume it has some kind of DRM?
I already have an old PC in mind to convert to a router. I assume I could just use the onboard Ethernet port to talk to the router and add my own USB NIC to connect to the main switch?
I don't know what to do for Wi-Fi though, could I buy two dedicated access points and put them on different floors, and have them both connected to the wired network? How hard would it be to have those be the same Wi-Fi network and have devices actually switch between them depending on location?
Also, most of my NICs and switches are from the thrift store or eBay for higher end used server parts. Is that bad? As in how worried should I be about the firmware running in those being tampered with by whoever owned it last?
Zelensky fired chief of staff to hide own corruption – Russian diplomat
Zelensky fired chief of staff to hide own corruption – Russian diplomat
Ukraine’s Vladimir Zelensky has sacked his chief of staff to cover his own tracks, a Russian diplomat saysRT
Trump Bribing Honduran Voters To Restore Narcotrafficking Government to Power
José Luis Granados Ceja
Nov 28, 2025
In a social media post Wednesday to his Truth Social site, Trump expressed his support for Nasry “Tito” Asfura of the conservative National Party, while simultaneously taking the opportunity to sharply criticize the other two leading candidates. The boost to Asfura could paradoxically benefit the left-wing candidate, as it may undermine the closest challenger by further splitting votes.Trump doubled down on his endorsement of Asfura on Friday, suggesting he would withhold U.S. cooperation and aid with Honduras if he did not win and furthermore committed to pardoning former President Juan Orlando Hernandez, who sits in federal prison for narcotrafficking. Trump’s pardon of a major narcotrafficker comes as he threatens war with Venezuela and wages a campaign of extrajudicial killing of boats he claims are associated with drug trafficking. Trump’s message mirrors his strategy ahead of Argentina’s legislative elections in October where he offered a 20 billion dollar bailout to the country only if President Javier Milei’s party performed well.
Trump Bribing Honduran Voters To Restore Narcotrafficking Government to Power
Trump endorsed the nominee of the right-wing party, while pledging to pardon its most recent president, who sits in U.S. federal prison for drug trafficking.José Luis Granados Ceja (Drop Site News)
Maintaining privacy on a new desktop
Hello. I installed Linux Mint on a new desktop that I built about a week ago, and I'm starting to get used to it, so it's probably time to start using it for some actual life things.
A couple of these do involve talking with family members all in Facebook Messenger, as well as the necessity of using Google Workspace for some work-related functions.
I'm aware that using both of these is a compromise of privacy in and of itself, but I'm still interested in mitigating the damages best as I can.
What steps can I take to make the usage of these as private and non-invasive as possible? If it helps at all, the browser I'm using is Firefox and the operating system is Linux Mint.
RIP Windows: Linux GPU gaming benchmarks on Bazzite (Gamers Nexus)
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
Switched my gaming rig over a few weeks ago (Fedora 43 with KDE in my case). The games I play have generally performed better than on the same hardware under Windows 11. I'm fortunate in that the only multiplayer game I play is Counter Strike 2, and Valve has a vested interest in making sure that their anticheat works with Linux.
In the past week or so I've played Cyberpunk 2077 with AMD FSR4 support, CS2, and GTA IV with the fusion fix mod (this one runs ridiculously better than it did on Windows) via Steam, and Fallout London from GoG through Heroic Launcher. The hardest part of that was just configuring the wine prefix for Fallout London to be the same as the one Fallout 4, since it needs to share a bunch of the original game files. I've also got my Epic account hooked up through Heroic Launcher, but haven't tried any of their games yet. I mostly just have whatever they were giving away for free for the past few years on that service.
Really, gaming on Linux has improved in massive leaps and bounds over the past few years. It is unrecognizable compared to even 5 years ago.
An update on the move from one motherboard to another.
Hi all,
Just wanted to update y’all about the move. Windows worked with zero issues, it just rebooted a couple of time and then took over the boot menu, and I couldn’t get to grub. Basically windows told grub to kick rocks and put itself at the top of the boot sequence. No big deal and fixed it real quick.
Grub did get messed up, it wasn’t there. A chroot from a live environment, and a couple of commands fixed it.
All good and running now. 😀
Thank you so much to all who replied and helped. Y’all are amazing ❤
Trump's Bigoted Attack on Somalis Denounced From Minneapolis to DC to Mogadishu
cross-posted from: news.abolish.capital/post/1173…
President Donald Trump is being roundly condemned for making bigoted attacks on Somalis, whom he referred to collectively as "garbage" earlier this week.
During a Tuesday Cabinet meeting at the White House, Trump unleashed a racist tirade against Somali Americans living in Minnesota, whom he falsely portrayed as layabouts who sponge up welfare money.
"I don't want 'em in our country, I'll be honest with you," Trump said. "Their country's no good for a reason. Their country stinks, and we don't want 'em in our country. I can say that about other countries too... We're going to go the wrong way if we keep taking in garbage into our country."
Trump then singled out Rep. Ilhan Omar (D-Minn.), a refugee from Somalia, as being "garbage," and then added that "her friends are garbage."
Trump on Somalis: "We're gonna go the wrong way if we keep taking in garbage into our country. Ilhan Omar is garbage. She's garbage. Her friends are garbage." pic.twitter.com/xtRtiTLzLz
— Aaron Rupar (@atrupar) December 2, 2025Omar fired back at Trump in an op-ed published Thursday in the New York Times in which she said the president was resorting to overt bigotry against her community because he is rapidly losing popularity as his major policy initiatives fall apart.
Omar also defended her community against the false stereotypes deployed by Trump to disparage it.
"[Trump] fails to realize how deeply Somali Americans love this country," she wrote. "We are doctors, teachers, police officers, and elected leaders working to make our country better. Over 90% of Somalis living in my home state, Minnesota, are American citizens by birth or naturalization."
Speaking on behalf of the Congressional Progressive Caucus, Rep. Chuy García (D-Ill.) defended Omar and the Somali community, and called Trump's attacks on them "unacceptable and un-American."
"Not only does Trump's dehumanizing language put a target on her back and put her family at risk, it endangers so many across our country who share her identities and heritage," García added. "We know just how dangerous this racist and inflammatory rhetoric is in an already polarized country."
In an interview with Al-Jazeera, Minnesota state Sen. Omar Fateh (D-62), who is also of Somali descent, said Trump's attacks were "hurtful" and "flat-out wrong" given what many Somalis in the US have accomplished.
"It is a community that has been resilient, that has produced so much," he said. "We are teachers and doctors and lawyers and even politicians taking part in every part of Minnesota’s economy and the nation’s economy."
He also emphasized that Trump's rhetoric was putting the entire Somali community in danger.
“We’ve had our mosques be targeted," he said. "Myself, I had a campaign office vandalized earlier this year, and so we want to make sure that our neighbors understand that we’re standing up for one another, showing up in this time in which we have a hostile federal government."
Trump's bigoted attacks on Somalis are also making waves overseas. Al-Jazeera also spoke with a resident of Mogadishu named Abdisalan Ahmed, who described Trump's remarks as "intolerable."
“Trump insults Somalis several times every day, calling us garbage and other derogatory names we can no longer tolerate," he said. "Our leaders should address his remarks."
From Common Dreams via This RSS Feed.
From Mogadishu to Minneapolis, Somalis reject Trump’s bigoted remarks
Advocates warn that Trump’s anti-Somali rhetoric has fuelled fear in US communities and anger abroad.Faisal Ali (Al Jazeera)
Judge in Palestine Action case has ties to Israel lobby
Judge in Palestine Action case has ties to Israel lobby
Victoria Sharp worked for Robert Maxwell and her twin brother sits on charity board with Trevor Chinn.The Electronic Intifada
like this
Well, of course. If the judge was impartial there is a very real risk Palestine Action would win its case. We can't have that, can we?
Best regards,
The Government
like this
Does anyone know how to fix this?[SOLVED]
By this I mean the psensor applet icon (second from the left) being to big.
I was messing arround trying to customize my desktop and i followed a guide on how to install and setup latte-dock (kde).
Long story short, i failed removed latte (although I think it may have left some stuff behind) and when I restored my cinnamon panel the icon was like this. I've already restored the system with timeshift but it made no difference and tried to set "symbolic icon size" in panel settings but it completely ignores it. I googled for a solution but cant find any :c
Any ideas?
P.S. If I set panel height too small, all the applet icons go halfway off screen through the bottom, something they didnt used to do.
SOLVED: Using this comand:
gsettings reset-recursively org.cinnamon
Reverts the icons to their normal behaviour. Thanks to potatoguy
I tested all the parameters mentioned in the thread and none worked. Thanks tho.
With this command:
gsettings reset-recursively org.cinnamon
After I used the command the window list applet stopped working but a reboot fixed it
like this
Root on disk storage pool?
So far all my setups have had root on SSD mirror with separate hard disk storage pool for all the data. Years ago I used to keep the app config, databases and docker files on the root filesystem, while the app data resided on the storage pool. That was cumbersome for backups and storage size. Eventually I moved all app data to the storage pool. Essentially the apps can be started on any machine with a Linux OS that has docker installed. Database access is slower but it's a decent compromise for having trivial all-in-one snapshots and backup. Now I'm setting up a new NAS for a friend and I'm wondering whether it's worth keeping the root filesystem separate from the storage pool. If I put it on the disks, I'd get trivial full system snapshots and backups. I'd have the same hardware reliability as the storage pool. There wouldn't be issues with root filling up. The caveat is that the OS would be slower. Has anyone reasoned and/or tried this? Should I go for it?
E: I recently put my laptop's root on ZFS and the ability to do full backups while the system is running is pretty great. The full system can be pretty trivialy restored to a new drive with zfs send / recv during setup.
You generally keep OS and storage separate for functionality, not necessarily because one is more safe than the other these days with more advanced journaling filesystems that can self-heal and keep things pretty safe and sound.
The main drawbacks to having them combined is all surrounding flexibility. If one fucks up, everything is fucked up. You won't be able to perform rescue operations on either without impacting both at the same, you can't change the layout of one without affecting both...etc.
Performance is obviously another one, but if you're not running critical operations for a business or whatever, it probably doesn't matter.
Belgium’s De Wever dials up opposition to Russian frozen assets deal
Belgium’s De Wever dials up opposition to Russian frozen assets deal
The prime minister’s strongly worded intervention dashes EU hopes that a breakthrough on sending assets held in Belgium to Ukraine could be imminent.Gregorio Sorgi (POLITICO)
geneva_convenience likes this.
Which company has a better reputation Lenovo or ASUS?
cross-posted from: lemmy.world/post/39088745
Lenovo or ASUS? Trying to figure out which laptop to go with.Which company has a better reputation (in quality, privacy...), or are they both bad?
EDIT:
I have come to the conclusion that both Lenovo and ASUS are extremely terrible, anyone who sees this post should go straight to framework laptop
Never be loyal to companies. Ever.
That said, I've usually had good experience with Asus motherboards and the routers have served me well as well. Being able to throw merlin on them was very important to me.
The system continues to work as intended
USB-C to MagSafe 3 Cable (2 m) — Silver
A 2-metre charge cable with a magnetic MagSafe 3 connector that helps guide the plug to the power port of your compatible MacBook Pro. Buy now.Apple (AU)
like this
Trotsky was both wrong and an asshole. Trotsky’s plan of Permanent Revolution rested on the idea that the peasantry would erode socialism, because he thought they could not be truly aligned with the proletariat. That’s why he wanted to kick off revolution in the west, hoping that would save Russian socialism. This was, of course, proven false, as socialism survived and trying to build up socialism together with the peasantry worked out.
Trotsky then spent much of his time attacking the soviet union, essentially whining due to his loss.
It is easier to imagine the end of the world than the end of capitalism.
I forgot you mentioned PRC specifically.
If we're talking about PRC then China fought against Vietnam in the Vietnam War, 3rd Indochina war, and Sini-Vietnam war
Bosnian genocide survivor fired from Luxembourg school over pro-Palestine posts
A Luxembourg elementary school teacher and Bosnian genocide survivor has been dismissed from her position after the Ministry of National Education ruled that her Instagram posts in support of Gaza constituted "antisemitic expression".
The ministry’s decision was made without notice on October 7, 2025, a date Fatima described as symbolic and deeply unsettling. She said officials relied on screenshots from her personal Instagram account, where she has more than 111,000 followers and regularly shares commentary critical of 'Israel’s' actions in Gaza. According to Fatima, her lawyer reviewed the ministry’s evidence and agreed to take the case, convinced that the accusations lack merit.
Fatima says she has endured repeated police complaints and monitoring from the organization RIAL, which lists her in its annual report on antisemitism. None of the examples cited in the report provide clear evidence of antisemitic statements, according to déi aner. Fatima claims the group has monitored her for nearly two years and that the labeling has taken an emotional toll.
Bosnian genocide survivor fired from Luxembourg school over pro-Palestine posts
Fatima K (Credit: aamitaaf7 via Instagram)Roya News
distros with isolated programs?
I think that really depends on why the app made the system hang.
Can you reproduce it consistently? If so, you could try out different forms of isolation, like flatpak, docker, a VM. And there are linux distros focused on each of those, but you can try a solution on whatever distro you're running.
If for some reason your system hangs due to resources (which is the only case I have ever experienced), that can be limited through cgroups and such. The only resource I don't know how to limit is GPU compute.
Why I Dumped YouTube (and Why You Might Want to Too – No More Crap)
Hey Lemmy fam,
After years of wading through endless crap—click‑bait thumbnails, algorithmic rabbit holes, and non‑stop ads—I finally stopped using YouTube. Below are the main reasons I walked away and a handful of privacy‑friendly alternatives that let you keep the content you love without the garbage.
YouTube’s recommendation engine throws endless crap at you, turning a 5‑minute tutorial into a 2‑hour binge you never signed up for.
What I do instead:
- Lemmy – I follow specific communities (
r/technology,c/firefox,c/degoogle ``) and browse chronologically or by “Hot”. No hidden agenda, just the posts I chose. - RSS feeds – Subscribe to the channels I actually care about via an RSS reader (Feedly, Newsboat, or Lemmy’s built‑in RSS). New videos appear as they’re posted, no surprise junk.
Every view, pause, and hover is logged and sold to advertisers. Even with an ad‑blocker, YouTube still harvests data through its API calls and cookies.
What I do instead:
- PeerTube – Decentralized, ad‑free video hosting. Each instance runs its own moderation and privacy policies. You can even self‑host a node if you want full control.
Zelenskyy’s top aide quits after anti-corruption searches of his home
A seemingly indispensable aide until today, Yermak was a former intellectual property lawyer and film producer who knew Zelenskyy in his days as an actor and comedian before helping him be elected as president. Yermak became a foreign policy adviser, then the president’s chief of staff in February 2020.Rapidly he assumed a central position as Zelenskyy’s gatekeeper in the charge of the president’s office. He was routinely consulted on foreign policy, domestic affairs and appointments. Never far from Zelenskyy’s side, the two were particularly close during the early days of the invasion, when Kyiv was under threat.
Zelenskyy’s top aide quits after anti-corruption searches of his home
Ukrainian president announces departure of Andriy Yermak, who was leading peace talks with USDan Sabbagh (The Guardian)
Tesco worker facing hearing for refusing to sell 'Israeli' products
Pro-Palestine campaigners have turned up in their hundreds to a Tesco branch in the small County Down seaside town of Newcastle, protesting disciplinary action being taken against a worker who refused to assist in the sale of items from so-called ‘Israel’. The man, who wishes to remain anonymous, objected on the basis that the proceeds from such items go to fund the Zionist entity’s genocidal onslaught against the Palestinian people.
The action from Tesco management had first been highlighted in a post on the social media page of local activist group Mourne for Palestine, whose name is a play on words using the name of a notable nearby mountain range. Alongside the statement can be found more wordplay, with Tesco’s slogan remixed to say “Every little helps genocide”. The group said:
Today’s protest was organised by direct action group BDS Belfast, with activists pouring in from across Ireland, recognising the significance of a worker taking such a stand. A strong union presence was visible, with representatives from Unison, the Industrial Workers of the World (IWW), and union-linked solidarity group Trade Union Friends of Palestine among those in attendance. The action from the worker represents the most noteworthy instance of this form of defiance in the North of Ireland since the Zionist settler-colony began its campaign of mass murder over two years ago.
Tesco worker refuses to sell Israeli products
Just as Dunnes workers led the boycott of South African items, so too is one Tesco worker leading the boycott of Israeli products in IrelandRobert Freeman (The Canary)
China’s AI stock rally has room to run as valuations lag US giants: Goldman
China’s AI stock rally has room to run as valuations lag US giants, Goldman Sachs says
AI stock rally is sustainable and tech shares will be driven by application-focused growth, chief China equity strategist Kinger Lau says.Aileen Chuang (South China Morning Post)
Inside Khartoum: Sudan’s ravaged capital where paramilitaries looted history
Inside Khartoum: Sudan’s ravaged capital where paramilitaries looted history
A burnt-out armoured car fitted with an anti-aircraft gun rusts away inside what used to be the lobby of Khartoum’s wrecked Meridien hotel. Khartoum hospital, a colonial-style building dating back to the British era, is out of action.Peter Oborne (Middle East Eye)
Palestine Action prisoner hospitalised due to hunger strike
An activist held on remand in a British prison on charges connected to the direct action group Palestine Action has been hospitalised after entering his second week of hunger strike.
Kamran Ahmed is among six prisoners who launched a rolling hunger strike earlier this month after UK Home Secretary Shabana Mahmood failed to respond to a letter outlining demands relating to their treatment.
These included immediate bail and an end to prison interference with their personal communications, as well as lifting the ban on Palestine Action.
In July, the UK government proscribed the direct action group under terrorism legislation, making it a criminal offence to be a member of or show support for the organisation.
Palestine Action prisoner hospitalised due to hunger strike
An activist held on remand in a British prison on charges connected to the direct action group Palestine Action has been hospitalised after entering his second week of hunger strike.Katherine Hearst (Middle East Eye)
Switch to a Fully free Operating System
As per fsf only those linux distributions are 100% free:
Dragora
Dyne
Guix
Hyperbola
Parabola
PureOS
Trisquel
Ututo
libreCMC
ProteanOS
Do you agree or no?
I see a lot of people that want to switch from windows to a linux distro or a open os. But from what i see they tend to migrate to another black boxed/closed os.
What is a trully free os that doesnt included any closed code/binary blobs/closed drivers etc.
Just 100% free open code, no traps.
What are the options and what should one go with if they want fully free os that rejects any closed code?
Hard disagree. Only people that are already in linux-land should even think or talk about this, and only after they're aware of what they depend on and whether they can even do that in the first place.
Main reason: biggest thing holding Linux back is user-base. The more users there are, the more that companies will actually care about supporting the OS. In the meantime, newbies to Linux need an OS that is as hassle free as possible that supports what they need. Windows and macOS have their downsides, but you can't disagree that they work out of the box. You only get a few chances to get someone to even think about switching ecosystems, and going to a straight free distro is another huge hurdle on top of that. Most closed source applications only get tested on debian/rhel based distros anyway, I wouldn't be able to do my my day job on a distro outside of that without some serious headache.
There are many closed source components that don't have equivalent open source alternatives, and features are a thing that will snag many people. Most people aren't technical.
What do you think of tools for setting colorschemes in many apps at once, like pywal and base16?
It's very clear that the ricing community wants to set any given colorscheme in many apps automatically, most tools do so either with wallpapers (which is inherently opinionated), or the base16 spec. The original base16 repo hasn't been updated in over 2 years, and 16 colors simply isn't enough to make rich granular themes, especially when code has many different syntax elements. We need a successor that allows for more colors on both TUIs and GUIs, more than 16 colors (like 24 or even 32), mapped more granularly.
My story:
I've spent lots of time looking at how to have good colorschemes in apps that change dynamically, to make my desktop pretty and with variety. Many tools can apply colorschemes to apps using image / wallpaper colors like Matugen and Pywal. These tools are very well made, but I realized I actually prefer rainbow colorschemes like Catppuccin. Either way I got attached Matugen, fortunately it can be used without wallpapers and supports custom keywords, there are also base16 colorscheme managers like flavours and tinty.
But Cattppuccin's base16 theme didn't look right compared to its Neovim plugin. The plugin is very well integrated and colors a lot things for you that base16 plugins may not, I would have to set certain UI colors myself if I wanted them to match. Some of the major colors (variables, keywords, brackets, etc.) were shuffled around, so out of the box Catppuccin's base16 theme doesn't even match Cattppuccin's original vision / color harmony. All of this probably applies to other colorschemes as well. So if I want to switch between different schemes while staying true to each one, I would need to set up plugins for each app rather than automatically.
GitHub - chriskempson/base16: A Framework for building Themes
A Framework for building Themes. Contribute to chriskempson/base16 development by creating an account on GitHub.GitHub
Gaza nurse held by Israel says she was abducted by Abu Shabab gang
A Palestinian nurse says she was abducted by an Israeli-backed gang from the Gaza Strip earlier this year and handed over to the Israeli army, who used her to pressure her detained doctor father during interrogations.
Tasneem al-Hams, 22, was released in Khan Younis on Thursday, nearly two months after she was arbitrarily taken into Israeli custody.
Upon her release, she told local media she was abducted by members of the Israel-backed Popular Forces armed group - otherwise known as Abu Shabab gang.
"They then handed me over to the Israelis, east of Khan Younis," she added.
The nurse was abducted while working at a medical facility in Khan Younis, in southern Gaza, according to her family.
The ultralight gummy bear power bank just got yanked from Amazon
The ultralight gummy bear power bank just got yanked from Amazon
Amazon has removed the ultralight Haribo Mini Power Bank from its website and is canceling orders for the device.Emma Roth (The Verge)
If I keep js disabled and then use extension will it still be a fingerprinting issue?
So if I keep js disabled with Ublock origin (I'm doing it for a while now) and then install dark reader will websites still be able to tell that I have dark reader installed?
This could be a fingerprint as very few people keep JS off and you might stand out.
On the other hand, the browser gives out very little information without JS active. Turn off JS and test your browser on deviceinfo, amiunique, etc and see how many entries are "unknown".
I played around with coveryourtracks.eff.org/ and realized that I'm quite unique whether I allow js or not. Many trackers get blocked by the absence of js though so that would hamper them somewhat.
My Sony phone with 21:9 screen ensures I'm uncommon compared to most.
My goal isn't to be untrackable but to block the ads they try to shove in your face as step 2.
Interesting, it seems that while IronFox has the protections activated by default (and with some changes) you can also activate most of them on Firefox.
github.com/ironfox-oss/IronFox…
Ironfox Devs themselves say that the only browser that can truly protect you against fingerprinting is the Tor Browser.
github.com/ironfox-oss/IronFox…
Do you feel IronFox breaks many sites for you?
IronFox/docs/Features.md at dev · ironfox-oss/IronFox
Private, secure, user first web browser for Android. This is a read-only mirror of https://gitlab.com/ironfox-oss/IronFox. - ironfox-oss/IronFoxGitHub
Taiwan is illegitimate lemmy libs
Liberals be like "this is a legitimate and not at all totalitarian government"
en.wikipedia.org/wiki/White_Te…
Wanting to consolidate its rule on its remaining territories, the KMT imposed harsh political suppression measures, which included enacting martial law, executing suspected leftists or those they suspected to be sympathetic toward the communists.[5] Others targeted included Taiwanese locals and indigenous peoples who participated in the 28 February incident, such as Uyongʉ Yata'uyungana, and those accused of dissidence for criticizing the government.[6]
Another classic case of "every anticommunist cliche is actually projection"
NATO members terrorizing their own people – Russian envoy
NATO members terrorizing their own people – Russian envoy
Russian Ambassador to Belgium Denis Gonchar has accused European NATO members of terrorizing their people into supporting a war with MoscowRT
Yermak Resigns After Ukrainian Anti-Graft Investigators Launch Surprise Search Of His Office
Andriy Yermak, the influential chief of staff of Ukraine's President, has resigned hours after the country's National Anti-Corruption Bureau (NABU) and the Specialized Anti-Corruption Prosecutor's Office (SAPO) conducted searches in his office.
Yermak Resigns After Ukrainian Anti-Graft Investigators Launch Surprise Search Of His Office
Ukraine's National Anti-Corruption Bureau (NABU) and the Specialized Anti-Corruption Prosecutor's Office (SAPO) are conducting searches in the office of the presidential chief of staff, Andriy Yermak, NABU said in a statement on November 28.RFE/RL's Ukrainian Service (RFE/RL)
like this
M4st3rSh0e
in reply to HiddenLayer555 • • •Ahh, another cultured person. The only thing you'll get out of having a pfSense or Open sense box is a better firewall. If you want to properly segment your network with vlans and what can talk to what. My setup sounds like the same as yours. ISP box in bridge mode > Asus RT-AX86 (stock firmware cause I've been lazy) > pi-hole > network. I have a little Asus travel router in the garage in mesh mode.
I have two avenues to travel for an upgrade. I could grab on of those N100 boxes that they have on Amazon with the dual NIC and throw pfSense on it and AP mode the Asus router or I can spend money, cause I like nice things and grab a Ubiquity UDMpro and one of there PoE switches, cause I like PoE, and then throw the Asus stuff in AP mode.
I personally like Ubiquity cause it isn't Chineseium or Cisco with their shitty patching. Both options also give me experience messing around with industry standard firewalls (for the job experience). It really comes down to if you wanna stick with open source or not.
Sorry, I don't understand your Ethernet cable from the fiber box to router question.
I also have one of those USB NICs, never tried it like that though. I'd assume it'll work. Only one way to fins out.
I haven't meshed with many straight APs that aren't Ubiquity. The have a network controller app that has a webpage that let's you set them all up. I'm surprised your WiFi router doesn't have an AP mode.
Buying used is good, just factory reset everything you get. Keep that stuff out of the landfill.
stupid_asshole69 [none/use name]
in reply to HiddenLayer555 • • •truthfultemporarily
in reply to HiddenLayer555 • • •It depends on your threat model or how I like to call it: the paranoia level. Since all connections go through the ISP router anyway you won't really gain that much privacy unless you directly put a VPN on your router.
Here is what you could potentially stop leaking:
- MAC addresses of your devices
- DNS queries if you use unencrypted DNS
Also theoretically, the router could be an entry point to do attacks against your devices.
People who use pfsense mostly do that because they want more features. For example I have an IoT VLAN that cannot talk to the internet.
For privacy the simplest thing would be to try and put a custom firmware on your WiFi router, like OpenWRT.
Everything else is a bit of an overhaul. And in the end, you always have to trust that the WiFi access points manufacturers firmware does not exfiltrate data.
Also, I would just try plugging in to the modem and see what happens. Most likely you're just wasting power right now with that ISP router.
HiddenLayer555
in reply to truthfultemporarily • • •I'm more concerned about local network traffic to and from my home server, especially over Wi-Fi. Most of it is SSH but there are still some unencrypted HTTP (and proxy) traffic.
anamethatisnt
in reply to HiddenLayer555 • • •For wifi what you can do to break free from the proprietary black box "mesh" networks is to build it youself using openwrt. I'd only recommend it if you find learning networking fun, not a chore, as it takes some fiddling.
openwrt.org/docs/guide-user/ne…
Having a pfsense between your LAN and the ISP means the ISP won't know as much about your LAN devices, they are usually the true admin of the ISP router and can see what it sees.
I imagine you've run factory reset on the switches you bought second hand, should be enough.
Bonus: If you want to break ip cameras free check out thingino.com/ and frigate.video/
Thingino
thingino.comdislabled
in reply to HiddenLayer555 • • •If you are worried about the security of the brand name WiFi router, i would just try to set up pfsense on a stick(need only one NIC).
I am pretty sure i have seen an official guide for that.
So basically, you plug your switch (access port) to the isp router, and plug the pfsense box into another port(trunk port) on your switch.
Define a vlan for internet, and have that access port tagged with the same vlan.
Then turn off routing in your brand name router and use it as a pure access point. Now you can play with vlans as much as you want
I wouldn't worry about the isp router, it has no access to your network, and most traffic going through it should be encrypted anyway.
And for your brand named access points, you can block them from accessing internet.
Edit:
The guide: Official documentation for "router on a stick"
Configuring a Router on a Stick | Netgate Documentation
docs.netgate.com