Hacker Newsnew | past | comments | ask | show | jobs | submit | aborsy's commentslogin

Tailscale has tailnet lock. Do you still need to trust the coordination server?

More than on a Nebula setup..

Linux desktop is amazing. Coming from Debian, I installed Windows and had to quickly purge it from my hardware! Super bloated, slow, constantly phoned some CC center, automatically connected to OneDrive, …

Debian is a breath of fresh air in comparison. Totally quiet and snappy.


Debian (stable) is great but I wouldn't use it for a gaming PC on modern hardware. The drivers included are just too old. Bazzite or Arch (DIY option) seem better options.

Debian Stable gamer here, with modern hardware, having a great time.

> The drivers included are just too old.

This can usually be fixed by enabling Debian Backports. In some cases, it doesn't even need fixing, because userland drivers like Mesa can be included in the runtimes provided by Steam, Flatpak, etc.

Once set up, Debian is a very low-maintenance system that respects my time, and I love it for that.


I don't game, but all my computers run Debian Stable, and my oldest child wastes considerable time gaming on Steam. I had to tweak one or two things for him early on, but it all seems to work fine.

People who don't use Debian misunderstand Stable. It's released every two years, and a subset of the software is kept up to date in Backports. For anything not included in Backports, its trivial to run Debian Testing or Unstable in a chroot on your Stable machine.

I moved to Debian Stable ~20 years ago because constant updates in other distros always screwed up CUPS printing (among other things). Curiously, I was using Ubuntu earlier this year and the same thing happened. Never going back.


If I’m not wrong, a hetzner VM by default has no firewall enabled. If you are coming from providers with different default settings, that might bite you. Containers that you thought were not open to internet have been open all this time. Two firewalls failed: They bypassed ufw and there was no external firewall either.

You have to define a firewall policy and attach it to the VM.


TMR and co are basically repetition codes, simplest performant least efficient ECC.


I had this question a while ago. Type I hypervisors are not designed to run on laptops. Some features like battery optimization, suspension, WiFi , Bluetooth etc may not work well. And more importantly, the consoles in web interfaces seem to be more for emergency access than everyday use; the access is primarily meant to be over ssh or rdp.

QubesOS is an exception. The next best option is a type II hypervisor like Qemu/kvm on Linux, pretending that it’s type I.


Linux, particularly Debian.


Canada is liberal and a better option for hosting privacy projects than EU.

Every few months a bad proposal comes out of somewhere in EU. The details of this case don’t matter, the tendency is big government control.


I'm not sure... they've added some pretty repressive language controls themselves already. Let alone proposed legislation.

https://www.eff.org/deeplinks/2025/07/canadas-bill-c-2-opens...


The Canadian parliament can vote laws that break/infringe upon most of our charter rights with a simple majority, using the non-withstanding clause. The Quebec government has already used it and is signaling that it will use that clause even more often.

Again, that requires a simple parliament majority and courts aren't allowed to really do anything about a law once that clause is invoked. That makes for one of the worst places to be in for something like grapheneOS in the long term. You're just a single election away from a PM like Legault deciding that encryption is against "Canadian values" or something.

(They wouldn't even need that to restrict encryption, but it still makes us unique in the west since it's just a "routine" clause that can be invoked to suspend almost every possible legal challenge against a law outside of any emergency situation or extraordinary circumstance, and is used almost on a yearly basis nowadays )


> but it still makes us unique in the west since it's just a "routine" clause that can be invoked to suspend almost every possible legal challenge against a law

It is not unique in the West, or even specifically in those parts of the West that share the same head of state as Canada; in fact, Britain itself has a more extreme form of it given Parliamentary sovereignty.


It is unique in the sense that the charter itself has a clause that makes itself almost useless. And that provinces can also use it at will (that's really the main problem, as the federal government is way less likely to use it, and hasn't used it), and doing so short circuits any federal court oversight.

But I agree that parliamentary sovereignty is an even bigger can of worms.


There is no place in the world where there are not bad proposals all the time. Some places are worse than others, but everyplace has problems and needs to be watched.


EU is not a country. There are many different countries in the EU.


EU has reciprocal arrest warrants and other treaties to assist law enforcement.


Though not an equivalent, the US has extradition treaties and various international agreements for surrendering a fugitive to a foreign country


Why do you need cloud, if you don’t need public sharing?

You can connect to a 2-bay NAS with 20 TB of storage at home with a VPN. Fast, private, secure, practically unlimited storage, under your control. That much storage will be very expensive in the cloud. Proton is like 120$/year for 500GB.

You can also run unlimited applications for free on the same nas: photo management, streaming with apps like plex etc. Each of those apps is an additional cost in the cloud.


Because what you described is an unbearably complex, and highly unreliable solution. There is no way your home storage is more reliable than a geography-duplicated cloud center with 6 nines (or more) of data reliability.

If you love spending hours a day twiddling with linux configs, knock yourself out, but my time is worth more and the every arrow of opportunity cost points toward an integrated cloud ecosystem.

I prefer to save data in the cloud, and not "on the computer... in my house..." as the hank hill meme goes, because that hardware is painfully fragile.


In my experience, all it took was buying a consumer Syno NAS, turning on the VPN server and connecting a DDNS service.

Setting up a second off-site NAS and connecting it to the primary one over VPN was also easy.

I haven't twiddled with Linux configs since I set up the system in 2018.


Did you actually measure that? Because I did and self hosted NAS easily reaches realibility of any cloud in place without common power outages.

I'm not saying it's a good idea, but this myth about cloud reliability is a myth lately - all the corps have started squeezing for profit at the cost of reliability and availability.


No Linux configs, off the shelf NAS boxes come with their own operating systems. You learn a few concepts in initial days. The control plan is simpler than in a windows computer or phone.

You configure an offsite backup in the NAS.

Obviously you don’t have eleven 9 availability. But good enough for home use.


So far with the Cloudflare and AWS outages this year my home storage is far more reliable hah


I keep a home server for exactly that reason but I still use cloud for some things to have an off site copy as well. There are some things I don't want to risk losing over burst pipes, a fire, burglary, power surges, etc.


Because of 3-2-1 Backup Rule, it's great to have a cloud backup for things that you don't want to lose.

It's also great if you move frequently, or travel a lot.


Sure, but you don’t need to pay a premium for end to end encryption like with proton.

You would encrypt (all or part of) your NAS client side with your software of choice (I use restic) and ship it anywhere off site: could be cheapest cloud, or another location you have access to.


True, I use proton for their mail and VPN, but use hetzner for bulk backups


Because your house might be destroyed with the drives?


Off site backup.


He was killed in maximum security custody, so an Intel operation.


This guy also used gmail. He doesn’t look clever in IT.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: