• 0 posts
  • 77 comments
Joined 3 months ago
Cake day: June 8th, 2026
  • I mean, would you want it to serve clients outside of your subnet? I guess maybe if you had something like a guest network. But I tend to take the “fuck it, you get basic service and nothing else” approach to things like guest networks.

    Isn’t it a potential security issue to have your pihole serve things on any subnet, because it allows an improperly configured firewall to stab at your pihole? I think you can specify any additional subnets it will serve in the settings somewhere. But IIRC, the default behavior is to intentionally drop traffic from unknown subnets. But that’s just off the top of my head.

  • Yeah, I very distinctly remember the “just wander and figure the details out later” feeling of adventure from my first time playing. As a noob, I carted around most of the starting gear (basically everything that exists on your toolbelt now) just in case I needed it while I was out and about. Because I didn’t have a good idea of the map yet, (and the game map at the time didn’t give you a “You Are Here” marker) so I didn’t want to find myself lost in the middle of nowhere without a tinderbox or fishing net.

  • I’m a weird mix of both. I’m a blue dot in a sea of deep red… But I also work in the arts, so my coworkers all tend to be extremely blue. So in my work circles, I’m surrounded by blue. But in my personal life, I’m surrounded by red. I get both extremes, to the point that I’m seen as the rainbow sheep of the family, but I’m the most cishet person in my department. And ironically enough, I also heavily suspect that I’m the farthest left in my department, (I’m firmly in the anarcho-communist hole) despite the fact that I’m the only cishet person in the office.

    It can be good for getting the current talking points from conservatives. I like to stay on top of that kind of thing, so I can see how they’re forming the views they are. Even if I fully disagree with the reasoning, or recognize that they’re working with incorrect/incomplete/biased sources, it can be helpful to know how both sides are approaching certain topics. It makes debates easier, because I have a fairly good grasp of how conservatives think. I’ll see a major event hit the news, and my coworkers will have a vastly different take on things compared to my family.

  • I’m somewhere in the middle, because comments like yours actually reinforce my concerns. A reverse proxy isn’t really doing anything to make you more secure, unless you’re using it for some sort of access control. It hides which ports you’re using, and allows you to encrypt your traffic with TLS… But it doesn’t add any additional security to the services you are exposing.

    Maybe if you use it for access control, to add a secondary username/password to the services. But that breaks most legitimate things (apps, mostly) that try to reach the double-password-protected service. Because a user on a web browser may be able to type in two passwords, (one for the reverse proxy, and then one for the service itself) but an app will try to pass that info automatically using headers.

    Any vulnerabilities in the services will still become potential attack vectors. Anyone who remembers the Huntarr debacle will know exactly what I’m talking about, because a single service being vulnerable can do a lot of damage. Yes, containerization does a lot to help mitigate damage by excluding access to everything except what you give it. But it won’t completely stop things from going wrong.