sorted by: new top controversial old
Warning: NextDNS causes major DNS leak in c/privacy@lemmy.ml
[–] 1 point 1 day ago* (last edited 1 day ago)

So instead of querying a recursive dns service like cloudflare or google you query the 13 root DNS servers such as https://a.root-servers.org/

This way no data goes through 3rd parties. However, this is a poor idea since none of the root servers support encrypted DNS queries.

You can use DoH or DoT. DoT already has its own port 853 which can be firewall blocked. So then DoH can be harder to block because it uses port 443 same as HTTPS hence the name.

So the best way of doing it is either using ODoH which uses a proxy to ask on your behalf, but the proxy knows your IP address.

DNS privacy is in my opinion a farce because someone knows your IP address and someone knows your queries. The best way is to hide in numbers and the external promise of no logs queries.

So for me, I just pick the fastest encrypted no logging DNS servers. And the top 3 for my location is

https://dns.nextdns.io/

https://freedns.controld.com/uncensored

https://95.85.95.85/dns-query

I used this tool to help pick the fastest encrypted servers.

https://center2055.github.io/DNS-Hop/

Good luck and happy labbing

  • permalink
  • fedilink
  • source
  • parent
  • context
    • Warning: NextDNS causes major DNS leak in c/privacy@lemmy.ml
    Mozilla Thunderbird email service edges closer to launch with early access in c/thunderbird@lemmy.world
    [–] 3 points 3 days ago

    Occasionally if it's free, you're a rider, because they only charge for enterprise licenses.

    Tangentially related, Proxmox. Individual licenses are pretty expensive for a private person, but for a small business, it's likely a justifiable expense.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • recommendations for small, energy efficient hardware in c/selfhosted@lemmy.world
    Warning: NextDNS causes major DNS leak in c/privacy@lemmy.ml
    How do you isolate a printer in your homelab? in c/selfhosted@lemmy.world
    Best way to transfer files and messages between Android phone and linux laptop locally (no cloud)? in c/privacy@lemmy.ml
    British soldier ignored order to pull his SIM card, then got blackmailed in c/technology@piefed.social
    [–] 2 points 6 days ago

    Good point. Although good hacking and manipulation can seem like it's a local compromise.

    Or perhaps the automatic backup of the photos could have gotten decrypted? Shooting in the dark.

    There are zero click zero days that are used all the time so perhaps the roaming sims of "hostile" countries are sent the zero click payloads.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • British soldier ignored order to pull his SIM card, then got blackmailed in c/technology@piefed.social
    It's self hosting Sunday! What's up? in c/selfhosted@lemmy.world
    Trying to find a good watch for workouts and everyday use in c/privacy@lemmy.ml
    Some Google Home Speakers downloading massive amounts of data in the background in c/technology@lemmy.world
    18
    14th Gen iGPU encoding woes (programming.dev)
     

    Hi, I'm trying to pass an HD770 from a i5-14600K to a jellyfin container that's on Open Media Vault. I keep thinking I have the correct firmware downloaded but I guess that's not the case.

    The GPU is fully passed through via Proxmox.

    Hypervisor: 6.14.5-1-bpo12-pve

    OpenMediaVault: 6.12.32+bpo-amd64

    lspci | grep -i vga:

    00:10.0 VGA compatible controller: Intel Corporation Raptor Lake-S GT1 [UHD Graphics 770] (rev 04)

    dmesg | grep -i drm:

    [    2.084954] i915 0000:00:10.0: [drm] Failed to find VBIOS tables (VBT)
[    2.093499] i915 0000:00:10.0: [drm] *ERROR* DMC firmware has wrong CSS header length (1097158924 bytes)
[    2.093502] i915 0000:00:10.0: [drm] Failed to parse DMC firmware i915/adls_dmc_ver2_01.bin (-EINVAL). Disabling runtime power management.
[    3.998600] i915 0000:00:10.0: [drm] [ENCODER:240:DDI A/PHY A] failed to retrieve link info, disabling eDP
[    4.001294] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC firmware i915/tgl_guc_70.bin: size (2134KB) exceeds max supported size (2048KB)
[    4.003303] i915 0000:00:10.0: [drm] GT0: GuC firmware i915/tgl_guc_70.1.1.bin: unexpected header size: 1841953 != 128
[    4.003305] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC firmware i915/tgl_guc_70.1.1.bin: fetch failed -EPROTO
[    4.003307] i915 0000:00:10.0: [drm] GT0: GuC firmware(s) can be downloaded from https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/i915
[    4.004270] i915 0000:00:10.0: [drm] GT0: GuC firmware i915/tgl_guc_70.1.1.bin version 0.0.0
[    4.004331] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC initialization failed -ENOEXEC
[    4.004333] i915 0000:00:10.0: [drm] *ERROR* GT0: Enabling uc failed (-5)
[    4.004334] i915 0000:00:10.0: [drm] *ERROR* GT0: Failed to initialize GPU, declaring it wedged!

    I have adls_dmc_ver2_01.bin, tgl_guc_70.1.1.bin, and tgl_guc_70.bin all within /lib/firmware/i915/

    This docker container returns this

    docker run --rm \
  --device /dev/dri:/dev/dri \
  --entrypoint ffmpeg \
  ghcr.io/linuxserver/ffmpeg \
  -init_hw_device qsv=hw:/dev/dri/renderD128 \
  -hwaccel qsv -hwaccel_device hw -hwaccel_output_format qsv \
  -f lavfi -i testsrc=duration=3:size=1280x720:rate=30 \
  -vf 'format=nv12,hwupload=extra_hw_frames=64' \
  -c:v h264_qsv -f null -

    [AVHWDeviceContext @ 0x56479ec06c00] libva: /usr/local/lib/x86_64-linux-gnu/dri/iHD_drv_video.so init failed
[AVHWDeviceContext @ 0x56479ec06c00] Failed to initialise VAAPI connection: 1 (operation failed).
Device creation failed: -5.
Failed to set value 'qsv=hw:/dev/dri/renderD128' for option 'init_hw_device': Input/output error
Error parsing global options: Input/output error

    I'm at a loss and pulling my hair out.

    1
    14th Gen iGPU encoding woes (programming.dev)
     

    Hi, I'm trying to pass an HD770 from a i5-14600K to a jellyfin container that's on Open Media Vault. I keep thinking I have the correct firmware downloaded but I guess that's not the case.

    The GPU is fully passed through via Proxmox.

    Hypervisor: 6.14.5-1-bpo12-pve

    OpenMediaVault: 6.12.32+bpo-amd64

    lspci | grep -i vga:

    00:10.0 VGA compatible controller: Intel Corporation Raptor Lake-S GT1 [UHD Graphics 770] (rev 04)

    dmesg | grep -i drm:

    [    2.084954] i915 0000:00:10.0: [drm] Failed to find VBIOS tables (VBT)
[    2.093499] i915 0000:00:10.0: [drm] *ERROR* DMC firmware has wrong CSS header length (1097158924 bytes)
[    2.093502] i915 0000:00:10.0: [drm] Failed to parse DMC firmware i915/adls_dmc_ver2_01.bin (-EINVAL). Disabling runtime power management.
[    3.998600] i915 0000:00:10.0: [drm] [ENCODER:240:DDI A/PHY A] failed to retrieve link info, disabling eDP
[    4.001294] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC firmware i915/tgl_guc_70.bin: size (2134KB) exceeds max supported size (2048KB)
[    4.003303] i915 0000:00:10.0: [drm] GT0: GuC firmware i915/tgl_guc_70.1.1.bin: unexpected header size: 1841953 != 128
[    4.003305] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC firmware i915/tgl_guc_70.1.1.bin: fetch failed -EPROTO
[    4.003307] i915 0000:00:10.0: [drm] GT0: GuC firmware(s) can be downloaded from https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/i915
[    4.004270] i915 0000:00:10.0: [drm] GT0: GuC firmware i915/tgl_guc_70.1.1.bin version 0.0.0
[    4.004331] i915 0000:00:10.0: [drm] *ERROR* GT0: GuC initialization failed -ENOEXEC
[    4.004333] i915 0000:00:10.0: [drm] *ERROR* GT0: Enabling uc failed (-5)
[    4.004334] i915 0000:00:10.0: [drm] *ERROR* GT0: Failed to initialize GPU, declaring it wedged!

    I have adls_dmc_ver2_01.bin, tgl_guc_70.1.1.bin, and tgl_guc_70.bin all within /lib/firmware/i915/

    This docker container returns this

    docker run --rm \
  --device /dev/dri:/dev/dri \
  --entrypoint ffmpeg \
  ghcr.io/linuxserver/ffmpeg \
  -init_hw_device qsv=hw:/dev/dri/renderD128 \
  -hwaccel qsv -hwaccel_device hw -hwaccel_output_format qsv \
  -f lavfi -i testsrc=duration=3:size=1280x720:rate=30 \
  -vf 'format=nv12,hwupload=extra_hw_frames=64' \
  -c:v h264_qsv -f null -

    [AVHWDeviceContext @ 0x56479ec06c00] libva: /usr/local/lib/x86_64-linux-gnu/dri/iHD_drv_video.so init failed
[AVHWDeviceContext @ 0x56479ec06c00] Failed to initialise VAAPI connection: 1 (operation failed).
Device creation failed: -5.
Failed to set value 'qsv=hw:/dev/dri/renderD128' for option 'init_hw_device': Input/output error
Error parsing global options: Input/output error

    I'm at a loss and pulling my hair out.

    2
    5G/LTE on the go (programming.dev)
     

    I was poking around for a USB C 5G/LTE modem that I can run either off my laptop or plug into my router as a secondary WAN. Has anyone messed with something like this?

    The secondary WAN is common, but I usually need some sort of DC power input instead of a single USB C cable that I can put into my laptop.

    view more: next ›