There is likely a less complicated way to do it but sudo to another user account and then run it with the protection. This way it can’t reach your web browser. Or - I don’t know if your program can do it, but Firejail certainly can - hide browser binaries and xdg-open from it, but I don’t know how effective this will be against your particular script.

If you don’t trust something maybe don’t run it on your main OS?

Well, you have already written the prompt 🪄

I envy you so much, I used to love programming. Enjoy the process and the firsts!

Nice job and congrats on the webp parser. You made Converseen but for videos :)

Windows cert -> you can also give your money to other companies, the cert doesn’t need to be from MS. But who cares, ask Windows users to buy it for you if they choose to continue using that OS.

You could distribute the kernel without shipping sources 🏴‍☠️

RCx

https://f-droid.org/packages/io.github.x0b.rcx

SNotepad + Syncthing

A Syncthing relay, very simple to set up, I always install it when I have no need for a VPS but it’s paid for until the end of the month

Looks like it just have to be like that with all open source projects in this space with a name ending in “cloud” ;)

Nice - but it’s a pretty crowded space between Zeronet and IPFS and possibly others. And even these well-known ones barely see any serious use. And these projects have been promoted pretty heavily. You need fanatical users ;)

What are you creating?

You can easily forward arbitrary IP traffic if you get an additional IP for that VPS. Then you add the IP as your own on the local end, and set up routing like

ip r a 1.2.3.4 via 10.10.10.10 dev wg0 where 1.2.3.4 is the extra ip, and 10.10.10.10 is your local wireguard address.

With just one IP, you can forward ports over wireguard with iptables, but I failed to do that correctly.

Now I’m using xinetd to forward traffic from external ports to Wireguard with a single IP. iptables would be better but I ran out of patience.

Yay i satisfied big chungus!

Save that post for the next time when someone with too much time on their hands asks what project they should start/contribute to.

Git controlled docker-compose files and backed up docker data volumes.pretty easy to go back to a point in time.

Ephemeral diffie-hellman is exactly that, it’s part of TLS since I think 1.2

At some point there was a browser extension to support DANE (and Perspectives and similar approaches against centralization) but since then, browser vendors fixed that security flaw.

No, but I have a link showing how ISPs and CAs colluded to do a MITM https://notes.valdikss.org.ru/jabber.ru-mitm/

Shorter cert lifespan would not prevent this.

Or just meet and maintain that friendship

Haha, server grade hardware. Impressive, actually, that it survived so many years. I have a similar one in my car and it’s 10+ years old and works okay, but another one that’s permanently sticked in my server with an emergency boot image died when it was needed the most.