LXC is namespaces only, maybe you’re thinking of libvirt I stand corrected about LXD, never knew it did that, weird I don’t know why you’d wanna do that instead of using libvirt.
Flatpack uses namespaces. And unless you have it disabled in the kernel, namespaces can be nested. There’s nothing stopping a browser running a flatpack from using namespaces itself.
Not to say that you are incorrect about namespaces vs security. Namespaces are not as secure as a VM.
I’m not claiming the contents of the messages are at risk here. You’re social graph and metadata though is another story.
Second is that it runs on AWS. This isn’t a problem in the sense that it’s possible for it to still retain privacy while running on AWS. Some people don’t like it because they view the dependence on the infrastructure of an American company to be a risk to availability. They also believe that it would exacerbate a security flaw if one were found.
Let’s not pretend the hypervisor doesn’t have full access to the VMs memory and execution. The only thing protecting the Signal server is Intel SGX.
You need to set the fsid fort your export entry in the NFS server since they are all on the same actual mountpoint.
It’s weird they don’t really really talk about it in the documentation, but yes it sleeps you to change the data path of AppImages
Then SOCKS is what you want. It can be used on a Chromebook as well.
These proxying websites are running full browser instances in the background. It’s the only way to guarantee all the traffic is routed through it.
I just had a look at croxy you’re right, it doesn’t run a full browser… and there’s a TON of data that doesn’t get proxied.
Yeah what you want is a SOCKS5 proxy then just launch another browser with the proxy config.
You can run a browser inside a docker or VM, and then use webvnc or something. I just don’t see the point.
What exactly do you mean by web proxy? Something site specific like Invidious? Or an HTTP or SOCKS5 proxy like danted?
Home Assistant can absolutely do that. If you are ok with simple intent based phrasing it’ll do it out of the box. If you want complex understanding and reasoning you’ll have to run a local LLM, like Llama, on top of it
Does Evolution not do that? Thunderbird might as well, not sure.
Still sounds at least as good as Monster Cables
Absolutely. Simply use ACME with the DNS validation method. Using bind you’ll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn’t exclusive to bind, ACME tools supports dozens of other backends. That’s all you need the actual domain doesn’t need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.
Except it isn’t. Saying it is trivial is just gross generalization. It’s trivial to configure bind to have internal zones that aren’t resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.
You can have (sub)domains that are listed in the certificate lists and yet aren’t resolvable externally as well.
It’d be better and more accurate say the list of certificates then.
Sub domains aren’t public unless your DNS server has XFER on.
Worth noting about this approach is that the global list of subdomains is publicly searchable.
Can you expand on this? What is it that you call the “global list of subdomains”?
Use yt-dlp to download the file and play is in MPV/VLC/Celluloid.
Anything that supports bind’s built-in nsupdate.
Is this the return of BonziBuddy?