smiletolerantly

joined 1 year ago
[–] [email protected] 34 points 1 week ago (2 children)

I host it publicly accessible behind a proper firewall and reverse proxy setup.

If you are only ever using Jellyfin from your own, wireguard configured phone, then that's great; but there's nothing wrong with hosting Jellyfin publicly.

I think one of these days I need to make a "myth-busting" post about this topic.

[–] [email protected] 9 points 1 week ago (1 children)
[–] [email protected] 3 points 1 week ago (7 children)

Nice!

How much do you know of nix? (Just gauging where I should start in my propaganda script :D)

[–] [email protected] 5 points 1 week ago (9 children)

Ah, understandable.

May I talk to you about our lord and savio, NixOS? (Only kinda /s)

[–] [email protected] 8 points 1 week ago (14 children)

Is this really a common occurrence for you, that the package isn't available via apt?

[–] [email protected] 13 points 1 week ago

Consider this me asking

[–] [email protected] 7 points 1 week ago

Matrix fits the bill.

Unless you don't like the federated nature.

[–] [email protected] 7 points 1 week ago

I don't like that it's not open source, and there are opt-in AI features, but I can highly, highly recommend Kagi from a pure search result standpoint, and one of the only alternatives with their own search index.

(Give it a try, they've apparently just opened up their search for users without an account to try it out.)

Almost all the slop websites aren't even shown (or put in a "Listicles" section where they can be accessed, but are not intrusive and do not look like proper results, and you can prioritize/deprioritize sites (for example, I have gituib/reddit/stackoverflow to always show on top, quora and pinterest to never show at all).

Oh, and they have a fediverse "lens" which actually manages to reliably search Lemmy.

This doesn't really address the future of crawling, just the "Google has gone to shit" part 😄

[–] [email protected] 3 points 1 week ago

Fair, maybe remove the question altogether, and have dedicated GOV endpoints for specific attestations?

[–] [email protected] 2 points 1 week ago

While that's true from a technical perspective...

How/where do you keep the certificate? If you either need an app for it, or need to manually install it on your device, most users would probably be out. The benefit of my suggestion is that you need absolutely nothing except a way to authenticate with GOV.

  1. is a Problem with all of these, that's for sure.

I fjnt get the part about the info service tbh

[–] [email protected] 4 points 1 week ago

As long as your browser saves an auth token or something for GOV somewhere, all of that can happen without user interaction.

[–] [email protected] 9 points 1 week ago (4 children)

I think that at the bare minumum, the PORN<->GOV connection must not occur. How about this (simplified):

  • USER visits porn site
  • PORN site encrypts random nonce + "is this user 18?" with GOV pubkey
  • PORN forwards that to USER
  • USER forwards that to GOV, together with something authenticating themselves (need to have GOV account)
  • GOV knows user is requesting, but not what for
  • GOV checks: is user 18?, concats answer with random nonce from PORN, hashes that with known algo, signs the entire thing with its private signing key
  • GOV returns that to USER
  • USER forwards that to PORN
  • PORN is able to verify that whoever made the request to visit PORN is verified as older than 18 by singing key holder / GOV, by checking certificate chain, and gets freshness guarantee from random nonce
  • but PORN does not know anything about the user

There's probably glaring issues with this, this is just from the top of my head to solve the problem of "GOV should know nothing".

view more: ‹ prev next ›