• 0 Posts
  • 10 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle
  • You misunderstood my point. LocalSend is great. It does exactly what it promises, and works well.

    But you’re claiming “AirDrop = LocalSend” and that is not true and causes false expectations. People used to Apple think they can use it in all the same situations and for the same things, which they can’t. Just because you mostly used it in the same network doesn’t mean most people use AirDrop that way, and I know quite a few that mostly use it while out and about, meeting new people etc.

    The “Good advice” version is too tell them there is LocalSend, which can do quite a few things like AirDrop, but not all. Basically make it clear they need to be on the same network.


  • This is such bad advice. If you tell people that, people expect it too work like AirDrop, which it doesn’t.

    LocalSend is great, but it is much more limited than AirDrop. As the name suggest, it only works if people are in the same network. If you’re in your home network, and both devices are yours, that’s probably fair enough, but that isn’t the point or (only) use case of AirDrop.

    Also if you’re installing it on a Linux machine which happens to have a firewall enabled by default, you will have to open the correct ports for it to to work out even just see the other devices.






  • It’s all a matter of what you consider reasonable risk. I also run some specific services exposed where it makes sense (they are designed to do this, think things like home assistant or next cloud or jellyfin), but would never put anything that is used to do server administration public facing (Webmin, Termix, proxmox, that sort of thing). If the purpose of the tool is to perform or allow elevated actions, I run it behind a VPN (yes for me that includes ssh).

    There’s also a difference between being randomly port scanned and/or probed, or being actively and personally targeted for some reason. If the second is ever a reasonable threat, that changes what is acceptable dramatically as well.


  • Yes, it inherently is. Authentication/encryption happens as the very first thing at the network level, before anything resembling a service becomes accessible. This is fundamentally different than for example a web interface, which needs to present “the Web page” to allow the user to log in, which might involve multiple individual parts that can already have a 0-day.

    As a more direct comparison: look into historic vulnerabilities between ipsec VPN and SSL VPN. The former is the older technology, the second is more “web like”. The number of serious CVEs for the latter over just some manufacturers (Cisco, fortinet, …) in one year probably beats the number for ipsec in is entire life time.

    Going back to Tailscale (or netbird, …): it is one very secure layer which then secures everything. You can have 1 service or 20, same security. If you expose individual services, c you also expose every possible vulnerability of all of them, so all 20 services if that’s what you run.



  • If you’re in a country where there’s is snow or just cold temperatures, you don’t “randomly” have 4 extra tires. You literally need them for at least a few months. Typically you’d swap over in late October, then back in March/April depending on how it’s going. Swapping them yourself is trivial enough, but it’s also incredibly cheap to get them swapped at a shop.

    Note that at least last I checked, the proper transition temperature isn’t “freezing” or “there is snow”, but about 7-8°C. That’s when winter tires will have better grip, and summer tires grip steeply diminishes below this. Once there is actual snow, your just actually up shit creek with no paddle on summer tires. But if you have to emergency brake at like 3°C for example, it makes a significant difference what kind you got on your vehicle.