Just the reason why I stopped using Vaultwarden and returned to Bitwarden (EDIT: ditching self hosting the password manager).
I’m not specialized in this, can’t update right away, might not know of all security vulnerabilities I have - better leave it for the professionals.
the .ru domain probably got a lot cheaper after the war start, lol
I knew this would be a waste of time! *loads gun
that’s not to wear off of the importance of awareness. you should be aware always, even if you don’t take action.
Obviously I’m not avoiding it all together, but I’m taking a step in the right direction.
And it’s not just replacing Google by CF, because CF has much less access in comparison as I explain.
you can deploy some zero trust models in your setup, and eliminate the threat even further. for example end to end encryption
mind elaborating?
If I let them handle the TLS for me then I can see that. but if, for example, I’m using NextCloud, which implement end to end encryption from client to server, then I wouldn’t care if they did, no?
tl;dr: classic convenience/privacy. depends on your threat model. surely better than Google. models of zero trust will help.
That’s a great question, that I have asked myself before too. It doesn’t have one answer, and any one would make their own choices based on their own respective threat model. I’ll answer you with some of my thoughts, and why I do use their services.
I’ll take as an example my usage of NextCloud, coming as a replacement to Google Drive for example.
let’s break up the setups:
It’s oversimplified, but to the point: In Google’s setup, you have control of 0 out of three things.
In NextCloud’s setup,
From just this look, NC is clearly better off. now, it’s not perfect, and each one will do their own convenience vs privacy deal and decide their deal.
If you deploy some sort of e2ee, the severity level of CF drops even more, because they’re exposed to less data. specifically for NC they do do e2ee, but each solution to its own. https://nextcloud.com/encryption/ this goes as an example for zero trust model. if you handle the encryption yourself (like using an e2ee service), you don’t have to trust the medium your data is going through. like the open internet.
gotta admit I haven’t read the ToS, but I didn’t encounter any problems. I’m streaming GBs of music via the tunnel and it still works. p2p I didn’t try, but I don’t really see a reason to?
another option is to use Cloudflare’s tunnels. it’s free, I use it all the time. really great.
yeah that’s very odd…
thanks! it actually makes much sense.
welp guess I was wrong. so back to .edu scraping!
I think it’s running Raspberrian. I wanted something Debian based, and thought the official image will do (it does).
Specifically on my Pi, I’ve set it up in such a way that even if it loses power or internet, I won’t need to do anything for it to be back up.
But I did have lottts of problems on my VPS. programs crashed, Out Of Memory crashed the OS… really, no shortage of errors. And I had service there I used all the time like music.
So what I did is use Termux on my phone. this way I could SSH to it from anywhere. Just click the button, run a few commands and be back on with my day. It’s the most convenient way I’ve found. being able to do it from my phone on the go. And since it’s CLI it was much easier to do. Just run the command needed and leave.
If you want I can elaborate on what Termux is and how I used it here.
I have a Raspberry Pi myself, and after the initial setup there’s not much maintenance needed. it just works as expected. the services hosted on it have their own respective Web Pages or APIs or mobile apps, depending on the service.
note that installing additional software to access your Pi will take up system resources like memory, storage, and bandwidth. So take that into consideration, and how much the other services consume.
and in due time, we’ll hack OpenAI and get the sources from the chat module…
I’ve seen a few glitches before that made ChatGPT just drop entire articles in varying languages.
yes, you’re right. my message was unclear, I see now. While I do self host many other things, I just didn’t want to take the risk regarding my password manager.