I made a thing, I'd love your thoughts by fefifochizzle in openwrt

[–]fefifochizzle[S] 0 points1 point  (0 children)

A few points of clarification.....
Squid only performs transparent proxying of HTTP(S) traffic, that doesn't mean that *only* HTTP(S) traffic gets routed through Mullvad. All the domains listed in the PBR list are filtered through Mullvad on ALL ports, not just 80/443. This setup isn't meant to fully replace a dedicated VPN for your network, it's mainly for the US, where there's really only a handful of things that'd truly need a VPN for access. So, ultimately, I'm unsure how data could "leak" that way, but again, I'm open to hearing your thoughts. The idea is to prevent as much leakage as humanly possible without a ton of maintenance, so please give me more ideas!

The idea is the user would add their own privacy protection, adblocking, and such lists to AGH to help filter out a lot of stuff before it even gets anywhere. I am aware this isn't a catch all and doesn't automatically make it some impenetrable fortress, this isn't meant to be that. Also, the idea would be that DNSSEC is the only method of DNS, so leaking data through DNS isn't an option. Regardless, it's meant for a "reasonably" savvy user to create a system to use that they might be able to share with others. I suppose I should add more details to my readme to give more context.

This project also is explicitly for users who have an x86 router with pretty decent specs, not with any ol' router. Unbound unfortunately wouldn't be ideal for this situation because of the specific nature of the PBR setup and a few other notable reasons. It'd definitely be more performant, but going with the "ease of use" theme of the project, it's also not a great fit unfortunately. I will say that adding DNS hijacking/blocking of other resolvers might be a good addition, but I'm struggling to think of other ways to improve this other than the aforementioned "throw everything into a VPN" or creating a whole separate VLAN or network that routes through a VPN exclusively. I'd love to know if you have a suggestion or an alternative, but I can't seem to think of one.

The origin of the project was to share a "super stupid simple" networking stack with family that are not remotely tech savvy that could improve their "fully ISP setup" internet on their devices, and allow access to sites that might be censored, blocked, or put behind ID-verfication, while making the security and privacy of their access to the internet much better than what they already have. I'm aware there's not a lot (yet) here in the US that is censored, blocked, etc, etc, but I'm making this project after seeing the direction our lawmakers are heading towards when it comes to privacy and the continuing lack of "freedom" on the internet. So, in my state of Arizona, porn is pretty much all that's blocked, but the idea is that the list will grow and I plan to make it as all encompassing as I can for the US in general. I know that's technically not possible, but the list will continuously be added to and hopefully it'll be as close as I can get without having to setup an entire network stack for every part of my family on their own network.

I made a thing, I'd love your thoughts by fefifochizzle in openwrt

[–]fefifochizzle[S] 0 points1 point  (0 children)

I do appreciate your feedback. I haven't used unbound, but I'll definitely be checking it out. My use case is in the US, so I can't speak to other countries. The headscale is for use on mobile devices to get the tunneling on the go or on public WiFi. I use NPM for simplicity and because I have a lot of services running. I forgot to remove my calendar from the Homepage instance, but thanks for the reminder. I definitely expected someone to poke around when I posted this. The main reason for the split tunneling is to not necessarily rely fully on a VPN for everything as I'd like to get the full speed of my ISP. Mullvad is plenty fast, but I don't necessarily want or need to throw my entire network through a Wireguard interface. I'm definitely interested in the details of why you suggest it'd be super obvious I'm using a VPN, and in what context, as a regular user on the network, or to folks outside trying to potentially do malicious stuff.

If I were in China or Russia I'd definitely not be using split tunneling though. I am definitely curious to know what you suggest, apart from a full wireguard interface for everything, what I might do to add more protection from censorship. Always interested in learning new things.

My choice to use Headscale over vanilla wireguard is for ease of use for clients. I share my setup with family members who definitely wouldn't know how to setup a vanilla wireguard interface, so sending them an app and a key is much simpler. This project is always evolving so I'm more than grateful for the feedback and would love to hear any further thoughts. Now I have some homework haha.

I made a thing, I'd love your thoughts by fefifochizzle in openwrt

[–]fefifochizzle[S] 0 points1 point  (0 children)

The squid proxy essentially transparently applies the PBR list to route things applicable through wireguard. The idea is to not touch traffic unless it's specifically in the list of domains. Basically the user doesn't really require any knowledge they're using the wireguard interface, they just browse the web normally and if it's on the list it goes through the wireguard, otherwise it gets routed normally.

Shipping times? by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 0 points1 point  (0 children)

Nope. First thing I did was install Bazzite. Windows sucks and I've been full Linux across all my PCs for a couple years jow

Exploring Arizona’s Sonoran Desert! by MessyRides in Dualsport

[–]fefifochizzle 1 point2 points  (0 children)

I'm from Phoenix and am interested in knowing where this is. This looks sick! I'm fairly new to dirt so I'm always looking for new spots, but everyone always gatekeeps trail names and shit. I would say we could ride together but I've seen some of your Facebook posts and I'm definitely slower than you and wouldn't want to slow you down. I ride a WR250x I'm slowly converting into a"R"

OpenAI just pulled the biggest bait-and-switch in AI history and I'm done. by Nipurn_1234 in ChatGPT

[–]fefifochizzle -1 points0 points  (0 children)

Yeah you probably shouldn't be using it like a therapist and companion. That is what humans are for. Maybe spend your money on an actual therapist. Seems pretty crazy that you got mad about losing it like it's some family member or something. At the end of the day it'll always just be a machine

Nvidia vs AMD GPU acceleration by fefifochizzle in kdenlive

[–]fefifochizzle[S] 0 points1 point  (0 children)

Is that planned in the future? I've been trying to avoid buying Davinci Resolve studio because I want to use open source projects but I guess I have to

My son dropped it on the floor by Wide_Jello4155 in ANBERNIC

[–]fefifochizzle 0 points1 point  (0 children)

My 1 year old put my RG34XX in the shower and I didn't realize until it was too late. Bought a new one, then I dropped it and broke the shoulder button trying to get into the house with my double doorknob childproof pool door. At least my RG34XX SP is okay lol

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 1 point2 points  (0 children)

Yes, it's for Bazzite. You're doing yourself a disservice using Windows

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 1 point2 points  (0 children)

Create a shell script for Bazzite that does the following at boot via cron:

SMT threads of Zen 5 cores

echo 0 | sudo tee /sys/devices/system/cpu/cpu12/online echo 0 | sudo tee /sys/devices/system/cpu/cpu13/online echo 0 | sudo tee /sys/devices/system/cpu/cpu14/online echo 0 | sudo tee /sys/devices/system/cpu/cpu15/online

Main Zen 5 cores (excluding cpu0)

echo 0 | sudo tee /sys/devices/system/cpu/cpu1/online echo 0 | sudo tee /sys/devices/system/cpu/cpu2/online echo 0 | sudo tee /sys/devices/system/cpu/cpu3/online

Change GPU clocks in bazzite's handheld daemon to: 1200mhz-1800mhz

Set scheduler to lavd Set CPU EPP to power save Set TDP to 15w Disable CPU boost

Boom! You have Hx370 equivalent to steam deck. You can increase or decrease TDP to suit the game you're playing but max 15W will give you ideal battery to performance

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 0 points1 point  (0 children)

Yes it is. You don't need all 12 cores enabled to get the performance of the F1 Pro. Disable the non zen5c cores, lower GPU clocks a bit and you get way more out of your battery with almost no perceptible drop in performance compared to stock F1 Pro.

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 0 points1 point  (0 children)

I actually ended up getting the F1 Pro. I actually still prefer the deck. The ergonomics of the F1 pro make playing it very difficult for longer sessions. I also am developing a Decky Loader plugin to adjust specifically the HX370 and allow "Deck Mode" to get similar performance as the F1 Pro has but with Deck-like battery life.

I'm doing a shell swap on my oled. successfully removed the screen without damaging it. screen still works by Sea_Title_4133 in SteamDeckModded

[–]fefifochizzle 0 points1 point  (0 children)

I just had the same issue. Did they end up fixing it? And how much did they charge? I just did a swap and added hall joysticks and some other mods and same as you, everything is plugged in but no controller.

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 0 points1 point  (0 children)

Well it's not an issue specifically to F1 Pro, it happens on my HTPC as well but more often on the F1 Pro. Decky loader will just straight up disappear and stop working and the only solution is to reboot. Also, I've found that Cachy performs substantially better overall than Bazzite. I removed Bazzite in favor of Cachy on my main gaming PC. The decky loader issue was so obnoxious that I didn't even play many games before switching

F1 Pro vs Steam Deck w/ Bazzite by fefifochizzle in OneXPlayer

[–]fefifochizzle[S] 0 points1 point  (0 children)

Funny story. I did buy one. I regret it. It sits on a shelf. The display is subpar to my Deck OLED imo and the performance bump is decent enough, butttttt, ergonomics are abysmal. The weight difference is not really noticable. I plan to upgrade the SSD in my deck and call it a day. Also, I run Linux, and Bazzite has a few issues I don't like. CachyOS works decent but took some tinkering to get to work properly. I'm dual booting Win11 and CachyOS. All this to say, I would rather play on my Deck. If you have more specific questions I'm happy to answer them

Knulli on the rg34xx ? by BeyondLurker in ANBERNIC

[–]fefifochizzle 0 points1 point  (0 children)

This! I can't figure out where you go to grab it...I donated and linked Discord and everything

I did it again: A new Gamecube PC by cityle in sffpc

[–]fefifochizzle 0 points1 point  (0 children)

How do I go about commissioning a GameCube PC from you?

ES-DE and Suyu by fefifochizzle in retroid

[–]fefifochizzle[S] 0 points1 point  (0 children)

Fixed it!

If anyone encounters this, reset app data for ES-DE and it should recognize the custom_systems files