3 ms·

Don't. That's backwards thinking. Go the other way. Host your website and other services from your home IP (and syndicate elsewhere). Participate in the interne

Don't. That's backwards thinking. Go the other way. Host your website and other services from your home IP (and syndicate elsewhere). Participate in the internet as an equal. It's not going to significantly change the chance you'll ever get DoS'd or otherwise "attacked" or your vulnerability to such things. By far the biggest attack surface on any end-user computer is the browser automatically running untrusted code from anywhere.

jhoelzel 4y ago
I am intrigued, please explain further :D So what you are suggesting is to host software on my private ip (which changes) in order to have the trackers interpret this as "ohh this is hurrudurrs webserver making requests and therfore not an individual!"? I can see how this helps when someone is actively profiling me, like listening in to my connection, but does it help me further´?
- superkuh 4y ago
  By self hosting you don't have to depend on others and their perverse profit incentives. I'm saying that hiding your IP is missing the point entirely. When you give up your ability to participate as a peer in the internet and go through 3rd party services you have no expectation of privacy. Someone knowing your IP address does not matter. It is not private information.
  - jhoelzel 4y ago
    while true, its still cheaper and greener (at least in europe) to go rent a vm somewhere instead of hosting it yourself. not to speak about availability or failover. Or the risk of allowing foreign traffic on your network. Or bandwith caps. Or a whole lot of other downsides no? I mean sure, not everybody needs and AKS supercluster, but so far im still seeing the advantage of self hosting besides the point that "my users made those requests to the illicit servers your honor" which at least in phase two means strict logging for you. I did the math recently and abandoned the "bare metal k8s at home" theorem simply because the energy cost at 30 Eurocents and hour are already more that the vm im renting with limitless traffic. Im also not a tor end node, because, at least in europe, you are responsible for the traffic that leaves your home connection too.
    - superkuh 4y ago
      A personal website does not care about availability, failover, green-ness, "deployment", or issues of massive available bandwidth. Those are cargo cult concepts and they don't matter at all for a personal website hosted from home. It's okay to be down for a few days. It is okay to throttle your upload to 200 KB/s. It's okay to install nginx from your distro's repository and serve files from a regular ~/www/ directory. It's just for you! You don't have to work with a dozen other people on a team or all that that implies. The electrical cost is extremely marginal. But I guess I was just assuming if you're going to host your website from home you're a geek and you already have computers running.
      - jhoelzel 4y ago
        While I appreciate the effort, this is just your opinion man! Im Sorry that this is going to sound like a rant because i disagree with allmost everything you said. Of course High availability matters to me because i can be proud of what i build. No Its 2022 its not enough to just make public your /var/html/ folder and call it a day. While creating my rootles container builds i learn about the software that i am putting into my servers. No its not okay for my site to be down for a couple of days because if i would not assume someone would be using it, why do i bother to create content in the first place? Finally talking about electrical costs: 3 pies with k3s is about as much power as some people put into their IDLING graphics card.
        superkuh 4y ago
        You're not talking about a personal website. You're talking about your profit motivated resume for work. Of course work stuff has to use stupid technologies and do cargo cult stuff. You're trying to show you can do the things that for-profit contexts require.
        jhoelzel 4y ago
        "profit motivated resume for work" sure come to my site learn about all the awesome stuff I did as a resume, that's totally not what my blog is about :D My Blog literally headlines that i want to give back to the people that taught me tech over the last 20 years, nothing more and nothing less. there is also no cargo cult, because i have not told a single soul besides you how this runs and is hosted :D Stupid technologies, and cargo cult stuff, you seem bitter my friend. I come from a time where you didnt have websites but shared folders, that worked too! Just as going to the library did. Please dont get me wrong, I can setup a nice http server from bash scripts that runs on an egg timer for you too, I just dont believe that it is appropriate and usually iam actually hired to get rid of the stuff that "has worked for the last 15 years, we dont need no updates" ;)
sneak 4y ago
> Host your website and other services from your home IP (and syndicate elsewhere). DO NOT do this if anything on your website might make other people want to kill you while you sleep, or if you anticipate becoming prominent enough to be read by the criminally insane percentage of the general human population. Your home IP address (along with a timestamp) is a single cash bribe away from the physical location where you and your family sleep unguarded at night. If you wouldn't put your home address on the website, don't host it on your home IP. It's the same thing in the hands of a motivated attacker.
- superkuh 4y ago
  If the above is your actual threat model I'd suggest getting off the internet entirely. You have more serious, life threatening, problems to deal with.
  - sneak 4y ago
    This aliases to “just stop publishing”.

jhoelzel 4y ago

I am intrigued, please explain further :D So what you are suggesting is to host software on my private ip (which changes) in order to have the trackers interpret this as "ohh this is hurrudurrs webserver making requests and therfore not an individual!"? I can see how this helps when someone is actively profiling me, like listening in to my connection, but does it help me further´?

superkuh 4y ago
By self hosting you don't have to depend on others and their perverse profit incentives. I'm saying that hiding your IP is missing the point entirely. When you give up your ability to participate as a peer in the internet and go through 3rd party services you have no expectation of privacy. Someone knowing your IP address does not matter. It is not private information.
- jhoelzel 4y ago
  while true, its still cheaper and greener (at least in europe) to go rent a vm somewhere instead of hosting it yourself. not to speak about availability or failover. Or the risk of allowing foreign traffic on your network. Or bandwith caps. Or a whole lot of other downsides no? I mean sure, not everybody needs and AKS supercluster, but so far im still seeing the advantage of self hosting besides the point that "my users made those requests to the illicit servers your honor" which at least in phase two means strict logging for you. I did the math recently and abandoned the "bare metal k8s at home" theorem simply because the energy cost at 30 Eurocents and hour are already more that the vm im renting with limitless traffic. Im also not a tor end node, because, at least in europe, you are responsible for the traffic that leaves your home connection too.
  - superkuh 4y ago
    A personal website does not care about availability, failover, green-ness, "deployment", or issues of massive available bandwidth. Those are cargo cult concepts and they don't matter at all for a personal website hosted from home. It's okay to be down for a few days. It is okay to throttle your upload to 200 KB/s. It's okay to install nginx from your distro's repository and serve files from a regular ~/www/ directory. It's just for you! You don't have to work with a dozen other people on a team or all that that implies. The electrical cost is extremely marginal. But I guess I was just assuming if you're going to host your website from home you're a geek and you already have computers running.
    - jhoelzel 4y ago
      While I appreciate the effort, this is just your opinion man! Im Sorry that this is going to sound like a rant because i disagree with allmost everything you said. Of course High availability matters to me because i can be proud of what i build. No Its 2022 its not enough to just make public your /var/html/ folder and call it a day. While creating my rootles container builds i learn about the software that i am putting into my servers. No its not okay for my site to be down for a couple of days because if i would not assume someone would be using it, why do i bother to create content in the first place? Finally talking about electrical costs: 3 pies with k3s is about as much power as some people put into their IDLING graphics card.
      - superkuh 4y ago
        You're not talking about a personal website. You're talking about your profit motivated resume for work. Of course work stuff has to use stupid technologies and do cargo cult stuff. You're trying to show you can do the things that for-profit contexts require.
        jhoelzel 4y ago
        "profit motivated resume for work" sure come to my site learn about all the awesome stuff I did as a resume, that's totally not what my blog is about :D My Blog literally headlines that i want to give back to the people that taught me tech over the last 20 years, nothing more and nothing less. there is also no cargo cult, because i have not told a single soul besides you how this runs and is hosted :D Stupid technologies, and cargo cult stuff, you seem bitter my friend. I come from a time where you didnt have websites but shared folders, that worked too! Just as going to the library did. Please dont get me wrong, I can setup a nice http server from bash scripts that runs on an egg timer for you too, I just dont believe that it is appropriate and usually iam actually hired to get rid of the stuff that "has worked for the last 15 years, we dont need no updates" ;)

sneak 4y ago

> Host your website and other services from your home IP (and syndicate elsewhere). DO NOT do this if anything on your website might make other people want to kill you while you sleep, or if you anticipate becoming prominent enough to be read by the criminally insane percentage of the general human population. Your home IP address (along with a timestamp) is a single cash bribe away from the physical location where you and your family sleep unguarded at night. If you wouldn't put your home address on the website, don't host it on your home IP. It's the same thing in the hands of a motivated attacker.

superkuh 4y ago
If the above is your actual threat model I'd suggest getting off the internet entirely. You have more serious, life threatening, problems to deal with.
- sneak 4y ago
  This aliases to “just stop publishing”.