• 1 Post
  • 372 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle




  • I don’t bother with a proxy host or with LetsEncrypt, though I guess you could use LetsEncrypt perfectly well. Back when I was doing this, LetsEncrypt didn’t exist and you had to actually pay for public certificates, so using locally generated free ones saved money. It also had a minor(?) security advantage in that if the private server key somehow leaked, it wouldn’t let people impersonate our internet domain.

    For the private CA I simply used the crappy CA.pl script that comes with OpenSSL or did at the time. There are much better ways to do it, especially at any kind of scale, but CA.pl sufficed dealing with a few development machines.




  • solrize@lemmy.worldtoTechnology@lemmy.worldGumroad PSA
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    1 month ago

    There are in fact many extensions designed to suppress or rewrite headers, most notably cookies, but also proxy headers and other things like that. Stripping out privacy invading (or in this case revenue redirecting) query parameters is another thing that extensions can do, and there are various extensions for that too, including apparently ublock origin (UBO).

    UBO is not able to rewrite urls completely (a deliberate decision to protect users from accidental or intentional security breaking rules appearing in rule lists) but there are other extensions that do that too, like changing www.reddit.com to old.reddit.com, or bypassing google redirects and link shorteners that snoop on user activity. The web is a predator-prey ecosystem (users are mostly prey) and it is necessary to respond to new hazards as they appear.





  • solrize@lemmy.worldtoTechnology@lemmy.worldGumroad PSA
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 month ago

    Oh nice, that is pretty new, but will have to see if it works on those gumroad links. I have an offline script (not a browser extension, I haven’t bothered figuring out how to write those) that edits urls to remove tracking and it’s quite a pain, since there are dozens of sites and tracking schemes it has to know about. Also, rather than creating a pasteable url, a suitable browser extension should just rewrite the link automatically before navitation when you click on it.








  • Don’t care at all about dynamic lock screens. Actively want to keep AI out of my phone, maybe excepting specific apps. Battery tech by itself is nice but you know that stronger batteries will just result in even power hungrier phones, so no real good will come of it. Hinged phones break more and cost more.

    NTN (satellite text messaging for when you have no cell coverage) is the main interesting phone tech to appear recently IMHO. Everything else is just little tweaks or outright regressions. I prefer more repairability and openness to more features by now.