Privacy

hideshow 12 child comments

parent

[–] mrnngglry@sh.itjust.works 4 points 15 hours ago (6 children)

I use Tailscale on my devices and my servers with pi hole so that I can set them as my dns no matter where I am. Works pretty well and lets me access my other self-hosted services as well.

hideshow 6 child comments

parent

[–] ScoffingLizard@lemmy.dbzer0.com [S] 3 points 15 hours ago (3 children)

I think I recall Tailscale being a Microslop product with big tech single sign-on options. Assuming I can get past the MS thing, can we use a regular id/password instead of logging in with big tech accounts?

hideshow 3 child comments

parent

[–] wltr@discuss.tchncs.de 3 points 13 hours ago

I’m not sure about the MS (which I hate as the next guy), but the point is, it’s what works. You can replace Tailscale with Headscale or NetBird, or even just WireGuard.

parent

[–] mrnngglry@sh.itjust.works 1 point 7 hours ago*

You could sign in/sign up with your email vs single sign on. I used an alias when I registered. That was some time ago so I’m not sure that’s still an option. I haven’t confirmed.

As far as I can tell, they are not a Microsoft product.

parent

[–] RogueBanana@lemmy.zip 1 point 14 hours ago

The last time I checked, it was not possible for some stupid reasons. I am trying to reduce reliance on them as well as I think its gonna get enshitified soon.

parent

[–] CoconutLove@lemmy.today 1 point 14 hours ago (1 child)

Is it true that Tailscale logs all of your IP addresses and usage timestamps?

parent

hideshow 1 child comment

[–] mrnngglry@sh.itjust.works 1 point 7 hours ago

It does. It is needed for the services provided inside the console where you manage your mesh. What they cannot see is what you’re actually doing, the content. If you don’t need the services that require that info, then Tailscale is probably more than you need and there are simpler (not easier) solutions.

parent

[–] ScoffingLizard@lemmy.dbzer0.com [S] 1 point 15 hours ago

I was wondering if I could partition my phone and run it, but I don't want to risk screwing it up.

parent

[–] Reannlegge@lemmy.ca -2 points 16 hours ago (3 children)

So does my pihole. You should never trust your ISPs firewall/modem/router, never ever. You should have a hardware firewall/router and than you can set up a VPN into your LAN.

hideshow 3 child comments

parent

[–] floofloof@lemmy.ca 8 points 16 hours ago (2 children)

Some ISPs require you to use their router, and their router may not be configurable to support custom DNS or VPN access. For users in that situation third-party DNS can make sense.

hideshow 2 child comments

parent

[–] ScoffingLizard@lemmy.dbzer0.com [S] 3 points 14 hours ago* (last edited 14 hours ago) (1 child)

Looks like in this case our third party DNS could be compromised. Who knows if they sold our info or not? Third party DNS is the solution with no notice that service no longer works the same.

I'm about to set up Pi Hole with Unbound. F all this.

parent

hideshow 1 child comment

[–] mrnngglry@sh.itjust.works 1 point 7 hours ago

You won’t regret the move to Pi Hole. It can help protect you while you are figuring everything else out. It’s a long journey and doesn’t need to be perfect all at once. You’ll make mistakes along the way and once trusted providers will enshittify so it will always be a work in progress.