9 ms·

You don't need to spend all that much money. Just buy a Raspberry, install some HTTP server and forward port 80 to it, then use some free dynamic DNS provider:

by bullen 4y ago

You don't need to spend all that much money. Just buy a Raspberry, install some HTTP server and forward port 80 to it, then use some free dynamic DNS provider: $100 + $10/year. Everyone should do this.

constantcrying 4y ago
Your ISP can stop you from doing that whenever they want. Also: I really want to do this, but I have no idea how. The technical aspect is straight forward, the legal aspect is far beyond me. I have no Idea how I could legally host a website in my country.
- ehnto 4y ago
  What are the legal implications you're concerned about? Are there some laws explicitly outlawing or regulating speech or communication?
  - constantcrying 4y ago
    What do I have to do to comply with the GDPR. Even if I have e.g. no user accounts, access logs probably count as "user data", do I have to preserve them in any way? Do I have to secure them? What can/can't I do with them? Do I need to present a "cookie warning", how should that cookie warning be worded, what requirement does it need to fulfill, what cookies can I set under these circumstance? How does this change if I do not use cookies? What personal Information do I need to include, are real name+address+email enough? How do they need to be included? Do I have a legal requirement to respond to communications over that address, in what time frame? Surely there are more things to consider here. Do I need to register this website, do I need to register it under a buisiness? I really do not know. But to be honest the obligation to dox myself is pretty much enough for me not to give it a try. This is before putting anything on the website. The concerns about speech restrictions are a completely different topic.
    - stonogo 4y ago
      Personal activities are explicitly exempted from the GDPR. You have to be engaged in "economic activity" for these requirements to apply to you. https://gdpr.eu/Recital-18-Not-applicable-to-personal-or-household-activities/ https://gdpr.eu/Recital-18-Not-applicable-to-personal-or-hou...
      - constantcrying 4y ago
        >However, this Regulation applies to controllers or processors which provide the means for processing personal data for such personal or household activities. But hosting a website means processing personal data. This very much reads to me like the user is exempt. But the moment I am hosting a blog, I am providing a service which processes personal data. I fail to see how I would be exempt. And even if, at what point am I not? If I am taking donations? If I have a comment section? If I have accounts?
        stonogo 4y ago
        All of these things are defined in the GDPR, even the on-the-face-of-it term "economic activity," which is what differentiates "enterprise" from "household and personal." You just have to keep reading. You can process all the personal data you want as long as you're not a business entity selling goods or services. The thresholds involved are also defined.
    - yourusername 4y ago
      Easiest way is to not place any cookies and not keep any logs. You don't have to show a cookie warning if you don't place any cookies and you're not processing any user data if you don't keep logs.
      - constantcrying 4y ago
        Is it legal to not keep logs?
        4y ago
- bullen 4y ago
  They can't stop you if they don't know what you are doing.
  - constantcrying 4y ago
    Sure. I can host illegally. And I suspect, many, many websites are knowingly or unknowingly doing this. But this can not really be a real solution to the problem.
    - bullen 4y ago
      I never said anything about illegal, just front with VPN to your own physical hardware. But apparently he tried that and the VPN then shut him down, and ultimately he got DDoSed. My take is distributed if not decentralized network.
      - Gigachad 4y ago
        The people attacking him have time to track down every single infrastructure host behind the site, bully the company, hack their stuff and ddos their network. The attack on kiwifarms has shown the internet is no longer free.
Gigachad 4y ago
The author of this post runs kiwi farms. He has had just about every bit of infrastructure in existence deplatformed including his phone number. The end of the road is the ISPs stared blocking his site and when that happens it’s basically game over.
- bullen 4y ago
  ok, well you then need to hide your hardware behind VPS proxies. That's another $10/month.
  - nl 4y ago
    To quote the article: > Just as moving VPS companies kicked the can to the next VPS company. Just as getting my own IPs kicked the can to upstream. Just as getting a stable upstream kicked the can to DDoS mitigation.
    - bullen 4y ago
      ok, then maybe we need http://radiomesh.org http://radiomesh.org after all? My point is if everyone hosts all their production from home they can't control it, you cannot DDoS all IPs at the same time.
      - Gigachad 4y ago
        He is able to run the site on Tor just fine. The problem is that without being a normal clearnet site, your community will die off.
        boredhedgehog 4y ago
        That's a bit of a chicken-egg problem, as Tor still lacks a killer app. A popular Tor-only forum might just be what it takes to drive wider adoption.
        4y ago

by bullen 4y ago

constantcrying 4y ago

Your ISP can stop you from doing that whenever they want. Also: I really want to do this, but I have no idea how. The technical aspect is straight forward, the legal aspect is far beyond me. I have no Idea how I could legally host a website in my country.

ehnto 4y ago
What are the legal implications you're concerned about? Are there some laws explicitly outlawing or regulating speech or communication?
- constantcrying 4y ago
  What do I have to do to comply with the GDPR. Even if I have e.g. no user accounts, access logs probably count as "user data", do I have to preserve them in any way? Do I have to secure them? What can/can't I do with them? Do I need to present a "cookie warning", how should that cookie warning be worded, what requirement does it need to fulfill, what cookies can I set under these circumstance? How does this change if I do not use cookies? What personal Information do I need to include, are real name+address+email enough? How do they need to be included? Do I have a legal requirement to respond to communications over that address, in what time frame? Surely there are more things to consider here. Do I need to register this website, do I need to register it under a buisiness? I really do not know. But to be honest the obligation to dox myself is pretty much enough for me not to give it a try. This is before putting anything on the website. The concerns about speech restrictions are a completely different topic.
  - stonogo 4y ago
    Personal activities are explicitly exempted from the GDPR. You have to be engaged in "economic activity" for these requirements to apply to you. https://gdpr.eu/Recital-18-Not-applicable-to-personal-or-household-activities/ https://gdpr.eu/Recital-18-Not-applicable-to-personal-or-hou...
    - constantcrying 4y ago
      >However, this Regulation applies to controllers or processors which provide the means for processing personal data for such personal or household activities. But hosting a website means processing personal data. This very much reads to me like the user is exempt. But the moment I am hosting a blog, I am providing a service which processes personal data. I fail to see how I would be exempt. And even if, at what point am I not? If I am taking donations? If I have a comment section? If I have accounts?
      - stonogo 4y ago
        All of these things are defined in the GDPR, even the on-the-face-of-it term "economic activity," which is what differentiates "enterprise" from "household and personal." You just have to keep reading. You can process all the personal data you want as long as you're not a business entity selling goods or services. The thresholds involved are also defined.
  - yourusername 4y ago
    Easiest way is to not place any cookies and not keep any logs. You don't have to show a cookie warning if you don't place any cookies and you're not processing any user data if you don't keep logs.
    - constantcrying 4y ago
      Is it legal to not keep logs?
      - 4y ago
bullen 4y ago
They can't stop you if they don't know what you are doing.
- constantcrying 4y ago
  Sure. I can host illegally. And I suspect, many, many websites are knowingly or unknowingly doing this. But this can not really be a real solution to the problem.
  - bullen 4y ago
    I never said anything about illegal, just front with VPN to your own physical hardware. But apparently he tried that and the VPN then shut him down, and ultimately he got DDoSed. My take is distributed if not decentralized network.
    - Gigachad 4y ago
      The people attacking him have time to track down every single infrastructure host behind the site, bully the company, hack their stuff and ddos their network. The attack on kiwifarms has shown the internet is no longer free.

Gigachad 4y ago

The author of this post runs kiwi farms. He has had just about every bit of infrastructure in existence deplatformed including his phone number. The end of the road is the ISPs stared blocking his site and when that happens it’s basically game over.

bullen 4y ago
ok, well you then need to hide your hardware behind VPS proxies. That's another $10/month.
- nl 4y ago
  To quote the article: > Just as moving VPS companies kicked the can to the next VPS company. Just as getting my own IPs kicked the can to upstream. Just as getting a stable upstream kicked the can to DDoS mitigation.
  - bullen 4y ago
    ok, then maybe we need http://radiomesh.org http://radiomesh.org after all? My point is if everyone hosts all their production from home they can't control it, you cannot DDoS all IPs at the same time.
    - Gigachad 4y ago
      He is able to run the site on Tor just fine. The problem is that without being a normal clearnet site, your community will die off.
      - boredhedgehog 4y ago
        That's a bit of a chicken-egg problem, as Tor still lacks a killer app. A popular Tor-only forum might just be what it takes to drive wider adoption.
        4y ago