Mikelius

Just to get it out there... I checked this out about a year ago. It's not completely open source. The project consists of many executables and "pre complied dependencies" that don't appear to share matching checksums which may indicate modifications of some sort. Looks like a great tool, but I'm extremely skeptical of what's going on under the hood.

Hopefully they do truly open source it and prove me wrong, I'd love to give it a try some day.

Nice! Guess I can add it back to my wishlist and consider buying it soon! Been holding off on it too long

I hate short variable names in general too, but am okay with them for iterators where i and j represent only indices, and when x/y/z represent coordinates (like a for loop going over x coordinates). In most cases I actually prefer this since it keeps me from having to think about whether I'm looking at an integer iterator or object/dictionary iterator loop, as long as the loop remains short. When it gets to be ridiculous in size, even i and j are annoying. Any other short names are a no go for me though. And my god, the abbreviations... Those are the worst.

What is that weird >>=== symbol? Looks like a cross breed between C and JavaScript here.

I'd do my part in buying games from them more if they didn't block my home network from their website lol. Yes it's behind a VPN, and no I'm not turning it off to give up my privacy just to buy something I can get from stores that won't block me.

I honestly used to buy games from them a lot, but once their website became inaccessible, I sorta forgot about them. Surely I'm not the only one right...?

Even if a game doesn't look like it'll work based on protondb, try it anyway. Many times I've had games that were marked as low ratings start up without any changes lol. I remember even when d4 beta came out, I saw people struggling to install and play it on the first weekend... Worked out of the box for me.

Even if it's removed from fdroid because they want to close source it, I assume my current installations of their apps would be unaffected - just become stale and obsolete over time since they won't get updates... But as they're offline anyway, not too concerned in the short term. Hopefully the company respects the privacy amd care of the open source community and won't take that away from us, though. One way to find out.

I'm a Linux mint user for my main system and am no beginner. As others have said, it's friendly to both beginners and advanced users, it's good to see you've made that choice.

That being said, don't stop there. Whether it's in a virtual machine or some old laptop, also try one of the "from scratch" systems. I went with Gentoo and that is the root of where a ton of my Linux knowledge started. It's my favorite distro simply because it has that history for me. You'll find everyone has their own favorites for their own reasons, so be sure to explore and find the one that you enjoy and helps you learn.

It always amazes me that they're able to do so much for voyager after all these years. Had I been the one to make it, I'd be like "space junk now" after the first problem because I doubt I would have come up with all the amazing redundancies they did.

Out of curiosity, why not just leave ssh access to the local network so you can only reach it by VPN in the first place? Note I might be misunderstanding what the goal of this was, so feel free to lmk if I'm off the field with my question lol

Been using Gentoo on my server for over a decade now and probably won't ever leave the compiling front, especially with a 12-core/24-thread CPU making it go as quick as regular binary updates on my mint laptop... But that being said, in happy to see them considering to do this. It'll bring in some folks who are afraid of (or just dislike) compiling everything from source. I think the biggest packages that'd benefit from this are definitely the browsers and desktop environments.

This isn't really a "Linux" problem. Calling it a Linux problem implies all distros do the same thing out of the box because it's a part of the core system. Systemd has a file, /etc/systemd/resolved.conf which has one line DNS= that you can add the servers you want. It's as simple as that. If you're using Dnsmasq for DNS instead, you'd edit the Dnsmasq file. If you're not using my of those (i.e. you removed systemd-resolved, Dnsmasq, etc) then you can just edit the /etc/reeolv.conf directly without worry of it being overwritten.

While many distros come with systemd out of the box, not all of them do. For example, I use Gentoo with rc and after editing my resolv.conf, never had to worry about it again unless I decided to install a custom DNS software on it later.

I read many replies to your post as "DNS software shouldn't be allowed to change DNS settings" for the most part, and that doesn't quite make sense to me. If it's a problem, remove said software. Browsers are definitely annoying in the DNS front, I won't disagree with that. Fortunately, they allow you to turn that off though.

Seems phishy.

I also use Linux mint with cinnamon... Is this not just the Ctrl + Fn + arrow key? I think that's it, or maybe shift (not at my computer to check). Either way, I use this all the time to fit windows either on 50% of the left or right, or in one of the 4 corners. For example, if I want it in the top right, I just use the hot keys and target right then up.

Plus 1 to openvas. UI is indeed horrendous though.

Be careful running high load tests against sensitive devices. I once ran it against a PoE switch I used for my cameras and it did something so crazy that it required me not to only power cycle the switch, but to disconnect all the cameras first and then power cycle. Was super confusing and felt like it found a way to short the device lol. Scared the hell out of me.

That being said, I've found many many things to improve on my devices thanks to openvas.

Just got flashbacks of Lemmings from my childhood when reading this comment, lol

I tend to find out about vulnerabilities before it hits the news outlets from the rss feed at https://seclists.org/oss-sec/

Other than that, I've got a bunch of other security feeds I follow and also have automated updates with just about everything.

Gentoo!

Never tried regular Arch after trying Black Arch, so not sure if they're the same feel, but after realizing the work it would take just to be given the capability to resize windows in the UI instead of just coming with drag and resize out of the box, Black Arch was a huge no go for me... Which kept me from wanting to touch regular Arch, lol. That being said, I go nope to Ubuntu the most. Gentoo is my favorite and is what my server has been running for the past decade without any kind of issue, but for laptop and daily use, I use Mint. Been on that one for about a decade now too... Used to use Peppermint (that still a thing?) and Suse the most before those.

If you have a pi or Linux box, try setting it up as a syslog server. Then tell opnsense to use that for forwarding logs to. Doesn't guarantee you'll see what went wrong, but maybe it'll help.

I'm not sure opnsense has journalctl or something similar, but that would be a good place to look for some history, too.

This is what I use. The project is dead and had some bugs that kept it running on my system right away, but as it's open source, I was able to fix the code a little bit to success. Just wish it was a little friendlier on cpu or could be selective on which apps to run instead of recording nonstop regardless. I have it start up with Steam for now though.

This gave me a good laugh, absolutely loved this!

Not much for myself, like many others. But my backups are manual. I have an external drive I backup to and unplug as I intentionally want to keep it completely isolated from the network in case of a breach. Because of that, maybe 10 minutes a week? Running gentoo with tons of scripts and docker containers that I have automatically updating. The only time I need to intervene the updates is when my script sends me a push notification of an eselect news item (like a major upcoming update) or kernel update.

I also use a custom monitoring software I wrote that ties into a MySQL db that's connected to with grafana for general software, network alerts (new devices connecting to network, suspicious DNS requests, suspicious ports, suspicious countries being reached out to like china, etc) or hardware failures (like a raid drive failing).... So yeah, automate if you know how to script or program, and you'll be pretty much worry free most of the time.

I totally thought because of how long the equals looked, it was multiple equals characters, not just >>= lol. That's what got me confused. Don't think these are things I'd personally use but each to their own preferences right xD

Oh gotcha, I misunderstood this post as talking about a self hosted VPN, not external provider. That explains it! :D

I don't use those two flags, but have several pis running docker with no issues. They've been running (almost) 24/7/365 going on maybe 2 years now with the same sd cards.

My comment on arch is just related to the use of black arch for a regular desktop or laptop machine, not my server (no desktop environment for the server). Was mostly trying it to compare it with Kali, actually.

Black arch does come with xfce by default indeed, but resizing windows isn't available right away. At least it wasn't when I tried it a couple of years ago. It required changing a bunch of configurations manually for whatever reason.

I personally use it on a protectli with the 2.5G ports. I also replaced my ISP modern with a protectli running OpnSense. Decided to opt into that as my solution to have two different softwares protecting my network and also so I could scope internet facing devices at the OpnSense level instead of internal to the network. Just in case they get compromised, they can't access the rest of the network. Call me paranoid... But I also find it much easier to manage lol.

Damn nice! I left Game Pass Ultimate for the lack of this since I'm a Linux user. This could definitely bring me back lol

Try using the private IP options instead and see if that works. The generic one being 10.64.0.1, but other options that include ad voicing and such ranging from 100.64.0.1 to 100.64.0.25 or something like that. I've got my entire network setup behind their VPN and a a pihole pointing to one of their private DNS addresses without any issues. I left their pubic DNS years ago so that I could make sure my DNS requests were always within the tunnel instead

If you have a custom DNS, be sure to block all the relay domains they use and block the respective ports from external access. Even if you disable the settings to avoid relays, they don't acknowledge them and continue to try and phone home somewhere. Just checked the latest version on my phone, which has no relay setting configured, before commenting on this and sure enough, still true. Just logged an entry to rs-ny.rustdesk.com on my DNS, which of course was blocked. Desktop app has an option to disable them if I recall, but it never worked for me.

That out of the way, it is a very good local network software for remote access. Way faster than the alternatives I've tried.

Sorta kinda wondering (conspiracy thought, totally no evidence, just a random thing that came to my mind) if this is either an attack on AI or attempt to compromise those who use AI to write their code. Or both.

Agreed! I was just mostly showing my gratitude to the people fighting Sony and my relief that I can get a chance to play, didn't mean for my message to be taken literal on the "too long" part lol.

That being said, my reasoning for wanting to play it soon is that I've got a few friends who are all now interested in picking it up... I'd rather enjoy the time to play with them now then not be able to play it with them in a year when they've moved onto something else.

Okay hopefully attaching images work on this app, never tried on Lemmy lol. I blocked the domain on my network firewall and then unblocked it from the DNS to confirm... and yes, the latest rustdesk appimage still calls out. I guess my memory of trying to disable the relay server was to try and force it to localhost in the settings. Could have swore there was a checkmark setting in there, but maybe that was some other software. The fields are default blank I believe.

However... I just tried to put 127.0.0.1 in ALL the fields (unlike the screenshot, which was when I checked what I had in there before), and it appears to now to call localhost. Either I goofed before, or it was fixed recently, because I am pretty sure I did try that before. It doesn't get you around the very first call made when running the software of course... Opt out, not opt in, lol. But hey at least it's possible now? I just tried on mobile and it worked there to when filling everything in with 127.0.0.1.

Is wireguard hosted on opnsense, or an internal device that the port is being forwarded to?

If it's on opnsense, be sure you route outgoing traffic on that port over the correct gateway, possibly even an extra rule to be sure the proper reply-to is set. Opnsense used to do the gateway routing configuration automatically, but once wg got added to the kernel, you're now required to manually specify the gateway in your rules for it to work properly.

Also, if you see zero packets, then as others mentioned, try a different mtu. Some service providers (mobile, and even hotels) try to block all VPN traffic altogether and they do this by measuring the mtu of the packets. A little tweaking might get it to work, although I'd expect this to have held true for the VPS too, honestly.

Rarely do I find software I need that's not in the repo, but when I do, I just dusky build it myself. Not at my machine now, but I think I only have one PPA that's not default added. In the other cases where I don't want to build the app, it tends to be in Flatpak too.

That being said, although Mint is technically based on Ubuntu, it really doesn't feel like it at all. I personally can't stand Ubuntu, but again all personal opinions. If Debian-based systems didn't work for you and an arch based distro did, then go with it. Everyone's needs are their own and that's why we have so many choices :D

Noticed it with the android install (via fdroid) and I think I had the appimage on Linux (not at my machine to check, so going by my memory). I connected to a windows machine that had no internet connectivity so can't speak to the windows installs working and ignoring relays or not, but Linux and android do phone the relay servers at least. I'll see if I can pull some screenshots or details tomorrow when I get a moment! I'll update the appimage too just in case (since I only validated the DNS call being made on my phone yesterday)

Either way, if I had to choose between it and TeamViewer for what I use it for, Rustdesk is still a clear winner lol.