InEnduringGrowStrong

Shattered Pixel Dungeon

Agreed, but less so than corpses disappearing under eyes.

The old jank engine is honestly pretty good for atmospheric storytelling.
Sure, Cyberpunk is shiny and all, but there’s something about Bethesda.
Idk how to explain, corpses in Fallout never despawn. That item you hid in the bush? it’s still there 300h later. It has a certain persistence that isn’t that common.
It can also feel stale real quick though.
Especially when you get into janky bugs.
But all this needs an interesting premise, story and vision.

I don’t have much hopes for whatever they release next.
Nor from any AAA.
Games is art and art is incompatible with the corpo mindset of most game companies these days.

I’d rather play something that was made with passion than with greed.

I’ve had both forever. It’s been a while, but I remember switching without much issues.

Droid-ify still shows permissions

I mean, my phone charges at 60W. Granted, it’s not charging 24/7 but 50W is pretty good indeed.

and let’s hope that the login page doesn’t have any vulnerabilities…

Home assistant also supports mTLS.
home assistant is something you’d likely ever want to allow from a handful of trusted devices, so deploying a client certificate on them can make sense.
This way a non-onboarded device doesn’t even get to the html part, it’s denied upstream by a reverse proxy before HA is involved.

I’m a big fan of mutual TLS, which I just do in nginx reverse proxy.
Client certs get installed on trusted devices and then it’s mostly seamless.
Not every app will support it, but I use Firefox as a fallback for stuff that doesn’t, or my VPN.
TBH, I’m just happy homeassistant supports it as that’s the one thing I’d rather be as seamless as possible.
Other things I don’t mind having to connect a VPN for, like jellyfin, which I don’t currently share with others.
For nextcloud I’m currently not running mTLS as it wasn’t supported back then and I had to share some links with some people where I wouldn’t deal with certs. I think mTLS support has been merged since, so if you just use it for devices under your control, or might be viable

All good answers so far.
Basically your internet gateway doesn’t support what’s called NAT hairpin, also called NAT loopback.

The DNS solution is better anyway, and that particular setup is called split-horizon DNS, which basically just means your internal DNS requests get different results than ones from outside your network.

For one thing, it still has the option for an additional fingerprint lock to open the app.
Sure, my phone itself is locked anyway, usually.
I still like having the second lock built into the app itself for the odd time (however rare) that I hand my unlocked phone to someone.
I know they’re not snooping into my signal messages while I blink or misclick on a notification or whatever.

It may not be a big deal for some/most but I like that feature and I can’t imagine that’s something that needs much upkeep once initially implemented.

I’m sure it’s not the only feature, but it’s one I use often.

Signal (but actually Molly)

My customer decided to host their shit there ¯\_(ツ)_/¯

Oh yeah, I’ve seen the guillotines being censored in some places. /eyeroll I don’t get it, there’s no corporate overlord to appease here, no advertisers, no IPO.

I’d argue for content removal if you were to post specific plans to take specific violent action.
Mostly because it’d be utterly dumb to plan something high profile on a public forum.
By all means, do so on something actually private and secure that won’t result in either of our doors being busted down.

Realistically, not really.
To be honest, these days, most bans are for obvious spam, *phobes or the occasional CSAM.

Just don’t post dentist adspam (which is oddly common) or be that one person who posts their cartoony-kiddie-diaper-fetish thing.

Assuming that’s the 2 recently removed posts in the modlog, I’ll check if I can see what happened to those reports.

The post themselves were to our “test” community and first seemed to me like they were just random strings, but from the context I’m reading they might have been part of some onion link?

SJW doesn’t ban email domains, IPs nor VPNs.

To my knowledge, we’ve alsp never shared specific details about users with dotworld or other instances for that matter.
I myself would take offense about leaking any of this info.

The only thing I can even think of is we might have shared something like this once or twice during bigger spam attacks:

this last wave of spammer were all made in the last hour and fit the following pattern “5 letters, 5 numbers @ sketchy domain dot com” without sharing actual user info.

Edit:
I don’t know about dotworld, but at least on our end, there’s only TheDude and me who even have access to see a user’s email address.
The only other times we’ve really even checked one was before 2FA & password reset worked properly.

We even have users who didn’t want to provide an email at all which we’ve verified manually through matrix.

My OG Steam controller is still kicking.
I use it in desktop mode more than anything these days

Well damn

Yea, I was referring to the OSI model.

A single misconfigured thing can suck real bad as you’ve seen.
Selfhosting involves lots of things that can be misconfigured or go bad.

That’s not to scare you out of it out anything, merely to congratulate you in seeking knowledge first.

Disclaimer: I’m biased towards networks because I’m a network engineer, opinions may differ.

I would say… having at least a vague grasp of layers 1-4 of the traditional network model is a decent start.
You don’t need to understand everything, but knowing a minimum will help a lot imho.

It’s hard to point you in the right direction without knowing what you already know or not.