yak

joined 1 year ago
[–] yak@lmy.brx.io 1 points 2 months ago

I've used this list generating package for years now with great results: https://github.com/opencoff/unbound-adblock/tree/master

It is designed to generate blocking lists that can be used with unbound, the DNS resolver. There are even instructions for how to configure unbound so if you are new to it all you can follow along.

I use the resulting lists in my two local DNS name servers, running unbound.

The way it works is that if a query for a blocked address comes in to one of thenlocal DNS servers it returns a domain not found result. If the address is not on the block list then it forwards the query on to an internet DNS resolver securely using DoT.

You can gain further control over your DNS results by choosing those upstream resolvers carefully. Quad9 and Cloudflare etc all offer DoT resolving, along with some further filtering (eg. for malware), or completely unfiltered DNS if that's what you want.

Services like cleanbrowsing.org offer more fine grained filtering, useful if you want a family-friendly set of DNS results, based off categorify.org. You can pay for really fine tuned results, or there is a free layer which provides still very useful basic categories.

Combining the two forms of filtering, local advert and tracking blocking, along with open internet content categorisation, seems to be very effective.

I get complaints about too many adverts when my kids are on WiFi away from home. I take it as a compliment.

[–] yak@lmy.brx.io 3 points 5 months ago

SSH along with the extra stuff it comes with like scp is the way forward.

The two following suggestions make use of secure shell.

Termux and then pkg install mc (MC is Midnight Commander)

Alternatively, if you are feeling brave and GUI, Total Commander here.

[–] yak@lmy.brx.io 10 points 5 months ago

Consider using tar to create an archive of your home directory, and then unpacking that on the new machine. This will help to capture all the links as well as regular files, and their permissions.

Take a minute to think what else you have changed on the old machine, and then take another minute to think how tricky it would be to replicate on a new machine. Downloading the apps again is gloriously easy. Replacing configs, or keys and certificates, is not!

I normally archive /etc as well, and then I can copy out the specific files I need.

Did you install databases? You'll want to follow specific instructions for those.

Have you set up web sites? You'll want to archive /var/www as well.

[–] yak@lmy.brx.io 4 points 5 months ago

I have never knowingly used Arch. Am I allowed to like this song?

Also, Taylor Swift, is that you?

[–] yak@lmy.brx.io 2 points 5 months ago

Seems like the PlayStore team should get wiser to how OSS communities manage software releases. They should be good at this, because, you know, their platform is based on the Linux kernel.

PlayStore should enable Termux community to manage the app name, or at least be able to have a prominent link to an "official" alternative displayed on the PlayStore Termux page.

Obviously something has gone wrong between Fornwall and the rest of the team for this situation to arise. But at first sight this is not an uncommon or surprising situation to arise. I think PlayStore could do better, and Google could support the OSS ecosystem they benefit from better.

[–] yak@lmy.brx.io 3 points 10 months ago (1 children)

Is this just the backend, or is it UI too? Is there an easy way to find this out myself in future?

[–] yak@lmy.brx.io 2 points 1 year ago (1 children)

Procmail for the old school win.

[–] yak@lmy.brx.io 24 points 1 year ago (6 children)

Not tried the app version. Been using Fairemail for a while now, since k9 was unmaintained.

Fairemail is well maintained. Quick. Supports multiple accounts very well. Loads of features (could be a downside for those who like things simple). Designed with security and privacy as top priorities right from the start. Open source development. For a long time its been the best email client on Android IMHO.

[–] yak@lmy.brx.io 2 points 1 year ago

I cut my teeth on an early version of The Linux Networking Howto, still available at tldp.org. That's a little bit out of date now :-) but the basic IPv4 networking concepts are still good.

These days so much is implementation or distribution dependent. There has been so much very rapid development in this field during the internet era that the age of documentation matters significantly.

A mitigating, but also confusing, factor is that different generations of networking tools have backwards compatibility built in so that it has been possible to build firewalls on kernels running nftables using iptables utilities in userspace.

I think you could do worse than starting with the Debian wikis and then drilling down into other documentation for the specific distributions or applications you want to use.

I seem to remember that openwrt.org and shorewall.org (though that product is EOL) also have some good overarching network stuff. I think Hurricane Electric he.com may still do their free basic IPv6 certificate programme?

Wikipedia is also your friend in this, especially the references.

I've enjoyed onemarcfifty.com's videos too, but that format isn't what you are looking for, and the transcripts I have seen are not formatted.

[–] yak@lmy.brx.io 2 points 1 year ago

Oh wow! The Unexpected Keyboard is a very pleasant surprise!

My new default. Thanks for the recommendation!

view more: next ›