FedX

In theory yes, in practice, I have no idea. My guess is you would need to soft-fork the project to get it using either project, or maybe be really, really nice to the devs and ask them to support additional protocols. Technically there is no reason it wouldn’t work, but whether or not there are enough people with your usecase for devs to justify implementing a new feature is another matter entirely.

By no means should we avoid the development of the space environment for human gain.

I don’t want to be a naysayer or Luddite (wait, who am I kidding?), but I hard disagree with that take. A space economy will get us nowhere. Yeah, sure, some interesting technology (arguably) came from the Apollo program, and NASA has done some amazing astronomy with JWST and Hubble. But, as with so many other aspects of modern life, the cost is far too great to society as a whole. The energy needed to get anything to or from orbit is enormous, and there is no way around that. The thing we need to curb climate change is reduction of energy usage in any form (driving, flying, electricity, ect.). This is even on top of other issues in rocketry like ozone layer depletion and the light pollution described above. As such, if climate change really is the greatest threat to humanity (which it is), putting anything into space is not a worthwhile venture.

From what I can tell, the issue with Wireguard is that the traffic is quite obvious. Other options might be blocked, but technically harder to implement said blocks.

Yeah, WG is by far the best way to do this kind of networking.

That’s quite fascinating, didn’t realize Wireguard could be blocked in that way (although the WG traffic is pretty obvious looking, so it makes sense). The only solution I know of without a need for a VPS is hosting everything on Tor. Wildly private and secure, but also wildly slow. Beyond that, there are a number of ways of using a VPS to similar effect, I know people have used Cloudflare Tunnel to similar effect in the past.

Also, there are apparently quite a number of wiregaurd derivatives which protect better against detection and blocking methods. amnezia and wstunnel are the two that came up. Likewise, you will need a VPS, and might even be able to set up a tailscale-like coordination server that way (maybe with headscale, or maybe with one of its competitors like NetBird).

ZeroTier might also get the job done, but I really don’t know much about it.

Hope this helps, and good lucks!

What’s interesting is that this is far more an example of a social, rather than political, failing of our society. We can all agree that social media is harmful to everyone in many contexts, but can also provide a certain benefit in the sharing of knowledge, information, and ideas. How many of us had something of a queer awakening after being exposed it on social media? I sure as heck fall into that boat.

I once heard it equated to drinking, your taught from your parents what a responsible (or not) way of in taking alcohol is. Same with driving, same with work. In all these things were there is a fine balance of harm and benefit, we are taught be the older generation. But what if there is no older generation to teach us? Well, as is the case with certain indigenous communities in Alaska where no alcohol existed, you find yourself with no one being responsible. For the regulators, the obvious solution is an outright ban. But banning subsistence that are “bad” for you if addictive, never works. Prohibition, and the war on drugs are key examples of that.

We see this and scoff, because we are the ones who, though trial and error, found something approaching that balance. We see the harm is not in the social platforms themselves, but rather in the algorithmic monetization creating great psychological harm for everyone. We see that anyone using the internet is (more or less) a pseudonymous peer, and attempting to classify groups by geography and/or age is quite foolish. We also see the abuse and harm that attempting to do so would cause. Unfortunately, but rather predictably, the politicians are corrupt ass hats in the pocket of big-tech and invariably, make exceedingly stupid laws greatly to the detriment of the people. It is, therefore, of my opinion that the only reasonable solution is to get rid of them in their entirety Ⓐ.

Listened to a rather interesting episode of Darknet Diaries the other day about a European cyber crime group. To this day, the FBI has been unable to decrypt the devices. The feds didn’t give too many details about the specifics, but what they did share was quite interesting:

• Five layers of encryption, each with unique passwords.
• LUKS root partition presumably tied to TPM2.
• Veracrypt or truecrypt volumes in userland.
• A custom-made encryption toolkit.

From what I gathered, I think the optimal balance of usability and security (especially for a headless machine) would be the following:

• LUKS root volume tied to TPM to protect against cloning of disk. Also, nothing too valuable ever lives on root.
• More important data stored behind a FUSE encryption layer like gocryptfs, these can be easily opened remotely. You can also tie the password to data hidden inside the LUKS volume for effective two-password protection if the volume is not already behind a LUKS layer.
• If your really concerned, add in additional layers as needed. You can tie LUKS to TPM and FIDO, not sure if you can set up a two password mode, but that would be quite nice. You can also (probably) tie FUSE based systems to biometrics like Howdey or fingerprint sensors if you have them. This could also be setup in a kind of two-password mode for a single volume. Realistically, two layers of encryption is overkill, but it’s more about ensuring multiple layers of redundancy rather than making it harder to crack.
• I can’t recommend systemd because of its numerous security vulnerabilities, but homed does have a neat feature where it will unmount encrypted home volumes when your computer goes to sleep. Not sure how effective or useful it is, but it is a nice feature. Been wanting to see if I can setup something similar on Chimera/Artix with dinit user services.
• Defiantly set up duress key-codes/panic buttons. Likewise, been wanting to write a clone of swaylock with duress code support, but as far as I know, nothing of the sort exists right now.

It is also very much worth noting, even though the FBI never got into the hackers’ computers, they had more than enough evidence to convict the lot. Being the defender of a computer system is always a losing battle.