Post A5BPM8AQCi4chSdvYu by thegibson@hackers.town
(DIR) More posts by thegibson@hackers.town
(DIR) Post #A5AeU2nDNEUQVF3l3I by nomad@hackers.town
2021-03-13T03:39:28Z
0 likes, 0 repeats
@thegibson called it.https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-cameras
(DIR) Post #A5AeU3D5p1BpnVAQO8 by requiem@hackers.town
2021-03-13T13:38:54Z
0 likes, 0 repeats
@nomad @thegibson I guess this is one more reason to re-reverse my position on GitHub, but also Gitlab, etc.Time to do it myself somewhere safe, but it looks like even my hideout in Switzerland isn’t enough... 🤔
(DIR) Post #A5AeU3a8RLcawxwpIu by thegibson@hackers.town
2021-03-13T13:55:27Z
0 likes, 0 repeats
@requiem @nomad We need a distributed LAN, eh?
(DIR) Post #A5AeU3ywx5TGBvYdyy by requiem@hackers.town
2021-03-13T14:05:01Z
0 likes, 0 repeats
@thegibson @nomad yes, this is one of these ideas I’ve been noodling on for years, and wondering if it could be built using off-the-shelf VPN tech or something.An internet on top of the internet.
(DIR) Post #A5AeU4LzZPu1LOL2tk by thegibson@hackers.town
2021-03-13T14:05:28Z
0 likes, 0 repeats
@requiem @nomad It's the only way to be sure.
(DIR) Post #A5AeU4jk96twX3S0v2 by requiem@hackers.town
2021-03-13T14:09:26Z
0 likes, 0 repeats
@thegibson @nomad it would be fun to experiment with.I’ve thought about this as a way to deal with firewall traversal, routeability, etc. problems for IoT projects but privacy for general-purpose computing would also be a benefit.I’ve never used VPN for anything other than point-to-point links though so I’m not sure how it would work for something more... (waves hands in the direction of the topic).
(DIR) Post #A5AeU578k7cHhcOhO4 by djsundog@toot-lab.reclaim.technology
2021-03-13T14:16:02Z
0 likes, 0 repeats
@requiem @TheGibson @nomad long ago I set up a web portal for adding mac addresses to a tftp server so co-workers could easily self register set top boxes to get particular builds of the software we were working on and I often wonder about the feasibility of having folk self-register a gateway into a collectively operated vpn extranet. looking forward to seeing where this goes, y'all.
(DIR) Post #A5AeU5X1BuJgzsVMiu by thegibson@hackers.town
2021-03-13T14:17:58Z
0 likes, 0 repeats
@djsundog @requiem @nomad I mean... all the parts are right out there.pretty inexpensive to do.
(DIR) Post #A5AeU5wXf0jWH2RkVU by requiem@hackers.town
2021-03-13T14:30:19Z
0 likes, 0 repeats
@thegibson @djsundog @nomad I guess you could do it like they did with the internet the first time: a few labs connected by wan links with a shared address space, expect use VPN over the “legacy” internet instead of physical links.I’d like to try this. If a few of your are interested in experimenting, let’s draw something up.
(DIR) Post #A5AeU6LMAkaBW03ZBY by djsundog@toot-lab.reclaim.technology
2021-03-13T14:43:37Z
0 likes, 0 repeats
@requiem @TheGibson @nomad I'm in. lemme drink more coffee.
(DIR) Post #A5AeU6oQQfpoy9emUi by thegibson@hackers.town
2021-03-13T14:48:36Z
0 likes, 0 repeats
@djsundog @requiem @nomad
(DIR) Post #A5AeU7EIsSXEGPlRpY by djsundog@toot-lab.reclaim.technology
2021-03-13T14:54:10Z
1 likes, 0 repeats
@TheGibson @requiem @nomadI haven't played with this yet but it looks interestinghttps://github.com/h44z/wg-portal
(DIR) Post #A5AeU7z64TxubXeolc by djsundog@toot-lab.reclaim.technology
2021-03-13T14:57:03Z
0 likes, 0 repeats
@TheGibson @requiem @nomadthe rpi setup looks pretty simple: https://github.com/h44z/wg-portal/blob/master/README-RASPBERRYPI.md
(DIR) Post #A5BPM5qUpowlV5IzE8 by Orwelldonesteak@mastodon.online
2021-03-13T15:06:21Z
0 likes, 0 repeats
@requiem @thegibson @djsundog @nomad I’m interested
(DIR) Post #A5BPM6Lgxptt3pttqq by z@weirder.earth
2021-03-13T15:30:44Z
0 likes, 0 repeats
@Orwelldonesteak @requiem @thegibson @djsundog @nomad
(DIR) Post #A5BPM6j5YqcEEOqaJs by thegibson@hackers.town
2021-03-13T15:32:21Z
0 likes, 0 repeats
@z @Orwelldonesteak @requiem @djsundog @nomad @Killab33z_OG
(DIR) Post #A5BPM7A1wgANZxS6JU by thegibson@hackers.town
2021-03-13T15:34:42Z
0 likes, 0 repeats
@z @Orwelldonesteak @requiem @djsundog @nomad @Killab33z_OG Site to site I presume?
(DIR) Post #A5BPM7UwgutecpEnui by thegibson@hackers.town
2021-03-13T15:39:48Z
0 likes, 0 repeats
@z @Orwelldonesteak @requiem @djsundog @nomad @Killab33z_OG plenty of places seem to be doing mesh with wireguard...and that would be cool.
(DIR) Post #A5BPM7oRWQUbbIMNIu by Orwelldonesteak@mastodon.online
2021-03-13T15:40:42Z
0 likes, 0 repeats
@thegibson @z @requiem @djsundog @nomad @Killab33z_OG shit if that’s a possibility then let’s do it
(DIR) Post #A5BPM8AQCi4chSdvYu by thegibson@hackers.town
2021-03-13T15:47:59Z
0 likes, 0 repeats
@Orwelldonesteak @z @requiem @djsundog @nomad @Killab33z_OG Wirehub?
(DIR) Post #A5BPM8W2uJN3mWlCGe by djsundog@toot-lab.reclaim.technology
2021-03-13T15:54:41Z
0 likes, 0 repeats
@TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG sure. lemme wedge docker onto my pi.
(DIR) Post #A5BPM8urQ3Dj1UN0wi by thegibson@hackers.town
2021-03-13T15:55:43Z
0 likes, 0 repeats
@djsundog @Orwelldonesteak @z @requiem @nomad @Killab33z_OG disregard... that is some overhead for a pi.
(DIR) Post #A5BPM9IbzkDeD9Tyy0 by djsundog@toot-lab.reclaim.technology
2021-03-13T15:56:42Z
0 likes, 0 repeats
@TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG eh, it's not so bad on the 4, and I can always switch over to an x86 vm if it sucks too hard
(DIR) Post #A5BPM9dsifEVH7Qy7U by thegibson@hackers.town
2021-03-13T16:00:53Z
0 likes, 0 repeats
@djsundog @Orwelldonesteak @z @requiem @nomad @Killab33z_OG Alright, so I gotta ask the question.How would we utilize such a beast?What is the use case?
(DIR) Post #A5BPMA0vKzfGQaDN2G by djsundog@toot-lab.reclaim.technology
2021-03-13T16:02:58Z
0 likes, 0 repeats
@TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG services on unofficial TLDs that are only accessible over the vpn but where additional obfuscation (onion routing, etc) is not necessary
(DIR) Post #A5BPMAOfugfBcFKL3Y by ajroach42@retro.social
2021-03-13T16:06:14Z
0 likes, 0 repeats
@djsundog @thegibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG >Services on unofficial TLDs that are only accessible over the vpn but where additional obfuscation (onion routing, etc) is not necessary! This would enable us to bypass NAT bullshit, too. An alternative DNS system would do some of the same stuff, but this gives us the benefits of home grown DNS for free, with other stuff .
(DIR) Post #A5BPMAkIcHxchJRblI by djsundog@toot-lab.reclaim.technology
2021-03-13T16:10:10Z
0 likes, 0 repeats
@ajroach42 @TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG absolutely - little pocket fediverses, little pocket tracker communities, all kinds of possibilities!
(DIR) Post #A5BPMB6HIZXdnTjA1I by djsundog@toot-lab.reclaim.technology
2021-03-13T17:50:17Z
0 likes, 0 repeats
@ajroach42 @TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG aight, I got wg-portal mostly running on a pi4 running ubuntu on a public ip address behind a caddy reverse proxyguess I should see if I can connect a client or two to it before I go much farther, but Imma need more coffee
(DIR) Post #A5BPMBW9kMF35jppM8 by thegibson@hackers.town
2021-03-13T17:51:04Z
0 likes, 0 repeats
@djsundog @ajroach42 @Orwelldonesteak @z @requiem @nomad @Killab33z_OG Deeds not words
(DIR) Post #A5BPMBqiVugk7VSFP6 by kingannoy@octodon.social
2021-03-13T20:05:28Z
0 likes, 0 repeats
@TheGibson @djsundog @ajroach42 @Orwelldonesteak @z @requiem @nomad @Killab33z_OG This sounds really cool! What would be the use case? File sharing? Hidden websites?
(DIR) Post #A5BPMCFX1eXPMT445A by ajroach42@retro.social
2021-03-13T20:10:36Z
0 likes, 0 repeats
@kingannoy @thegibson @djsundog @Orwelldonesteak @z @requiem @nomad @Killab33z_OG Yeah. Pocket universe internet. Anything you can do on the big internet, but only for folks in the web of trust.
(DIR) Post #A5BPMCcDfIgaUpgBRg by compl4xx@chaos.social
2021-03-13T23:04:54Z
0 likes, 0 repeats
@ajroach42 @kingannoy @TheGibson @djsundog @Orwelldonesteak @z @requiem @nomad @Killab33z_OG I don't want to kill the mood, but have you heard of network effects? A smaller network is a lot less valuable than the bigger Internet.You need to provide a qualitative advantage to counter that. What reason do people have to put their content in your network, if less people listen - and what reason do people have to listen to your network, if there is less content?https://en.wikipedia.org/wiki/Network_effect
(DIR) Post #A5BPMCzGHd7LeISaMS by thegibson@hackers.town
2021-03-13T23:49:09Z
0 likes, 1 repeats
@compl4xx @ajroach42 @kingannoy @djsundog @Orwelldonesteak @z @requiem @nomad @Killab33z_OG I guess that depends on how you measure value.for certain uses, a small network is very, VERY valuable.
(DIR) Post #A5BWUFGYOT7CiFKNDk by alrs@lsngl.us
2021-03-14T01:10:13Z
0 likes, 0 repeats
@requiem @thegibson @nomad exists, as DN42
(DIR) Post #A5BWa7CvGgUdSOQc64 by djsundog@toot-lab.reclaim.technology
2021-03-13T21:14:18Z
0 likes, 0 repeats
@ajroach42 @kingannoy @TheGibson @Orwelldonesteak @z @requiem @nomad @Killab33z_OG okay, my hoopy froods, here's my first pass at a very sparse walkthrough document that should lead one to a setup pretty close to what I'm playing with.questions, comments, changes, or additions welcome.https://reclaim.technology/git/djsundog/tube-sandbox-docs/src/branch/main/wg-portal_notes.md
(DIR) Post #A5BWa7hPRKsaywgxcG by thegibson@hackers.town
2021-03-13T21:15:11Z
0 likes, 0 repeats
@djsundog @ajroach42 @kingannoy @Orwelldonesteak @z @requiem @nomad @Killab33z_OG Synchronicity is a helluva drug... I literally just sat down to start.
(DIR) Post #A5BWa84S3fJM8PTMX2 by requiem@hackers.town
2021-03-13T22:56:47Z
0 likes, 0 repeats
@thegibson @djsundog @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG Show me where this puts us on the map...
(DIR) Post #A5BWa8PMnu2dBHG48G by djsundog@toot-lab.reclaim.technology
2021-03-13T23:05:02Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG we're drawing a new, smaller map. or probably more like a few new smaller maps that we'll eventually figure out how they connect into one slightly larger but still small map
(DIR) Post #A5BWa8kzVVL4GLNKq0 by djsundog@toot-lab.reclaim.technology
2021-03-13T23:28:41Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG so I'm about halfway through getting a powerdns authoritative dns server with web based admin interface set up and listening on my vpn interface so I can start setting up the dot sundogistan TLDdocs will hit the same repo as soon as I'm done working my way through this process
(DIR) Post #A5BWa9DLo41XgIdz2e by djsundog@toot-lab.reclaim.technology
2021-03-13T23:30:58Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG and not to commence and yak shaving but adding even this one additional service has already made me wish I had ldap and sso set up, since both wg-portal and pdns-admin can apparently use it, so I might end up doing this all over again tomorrow on another pi but starting with a yunohost install to get the sweet sweet server bootstrap and sso goodness.
(DIR) Post #A5BWa9a2RiAiofG6PA by djsundog@toot-lab.reclaim.technology
2021-03-13T23:33:48Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG ideally, having an account on, say, my gateway into The Tubes vpn should also allow users to set up domains and services - if I trust them to connect through me, I should trust them enough to publish through me, at least that's my vibe at this stage
(DIR) Post #A5BWa9zYuoaY5pCUBk by djsundog@toot-lab.reclaim.technology
2021-03-13T23:42:10Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG anyway, getting close on the web-manageable dns server thing now so another doc drop is virtually eminent
(DIR) Post #A5BWaARvDNH1VmT8OO by djsundog@toot-lab.reclaim.technology
2021-03-13T23:48:49Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG committed the progress to a document here before I start wiring the web ui to the actual pdns backend and setting up a more "production" oriented config
(DIR) Post #A5BWaAnXuyZSaqaP68 by djsundog@toot-lab.reclaim.technology
2021-03-13T23:51:35Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG taking a break before I do any more though because I just realized I've pretty much put in an eight hour day on this rn.
(DIR) Post #A5BWaBAwVzHnlPX5ZA by requiem@hackers.town
2021-03-14T00:12:25Z
0 likes, 0 repeats
@djsundog @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG thanks for kicking ass on this, looking forward to participating soon 😁
(DIR) Post #A5BWaBZl1j8T0N8uFE by djsundog@toot-lab.reclaim.technology
2021-03-14T00:14:12Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG 🙇 it's been fun! a day sculpting void is always a good time!imma leave it up to someone else to bootstrap a certificate authority or two with acme protocol support so we can start distributing some trust roots to make our browsers happy with our new TLDs :blobthinksmart:
(DIR) Post #A5BWaByvW9GiGQv0TY by djsundog@toot-lab.reclaim.technology
2021-03-14T00:18:04Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG oooh no reason not to crank up some ip multicast services either, y'all - lots of green field wheels to reinvent here, and private streaming services done right might as well be some of em
(DIR) Post #A5BWaCO60ZOxWUh6hs by djsundog@toot-lab.reclaim.technology
2021-03-14T00:19:20Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG if Mbone is so good how come there's no Mbtwo
(DIR) Post #A5BWaCoKR2Nwpqy3ay by djsundog@toot-lab.reclaim.technology
2021-03-14T00:34:09Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG fwiw I just added freeweight (my pinebook pro) to my new vpn server via the web interface, downloaded the config, dropped it in /etc/wireguard, and ran wg-quick up wg0 and that was it, freeweight's now in the tubes.
(DIR) Post #A5BWaD9x8dgNuv5KIi by requiem@hackers.town
2021-03-14T00:36:25Z
0 likes, 0 repeats
@djsundog @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG I'm coming up to speed on wireguard now, and was just about to try and do the same thing (pbp and all 😀 )
(DIR) Post #A5BWaDUrssPexms1tw by djsundog@toot-lab.reclaim.technology
2021-03-14T00:37:24Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG 👍
(DIR) Post #A5BWaDq8bnQW1kp13Q by requiem@hackers.town
2021-03-14T00:43:29Z
0 likes, 0 repeats
@djsundog @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG One thing that isn't clear (assuming I understand this at all 😂 ) is how peering works between sites.If I follow, you setup a VPN server, you connect clients, and these machines live in a shared address space. So if I want to add machines to this space, do they have to connect to your VPN server as additional clients, or can I setup my own server and peer with yours? If so, and if we connect multiple peer sites, does wireguard's routing do things like figure out "shortest open path", or route traffic through hosts if two peers are not directly connected, etc?
(DIR) Post #A5BWaEEb8qzbFcGYBE by djsundog@toot-lab.reclaim.technology
2021-03-14T00:52:26Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG so, that's part of what I'm looking forward to seeing, but I assume that once one or more of y'all have a similar thing going that yeah, we can set up a peer connection and figure out how much of the routing just works and how much of it needs a helping hand with some interface up/down script trickery type crap
(DIR) Post #A5BWaEchhEH6SNXnkm by djsundog@toot-lab.reclaim.technology
2021-03-14T00:58:23Z
0 likes, 0 repeats
@requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG if you're going through my setup docs, everywhere I use 10.42.1.x/24 addresses, if you use 10.42.2.x/24 addresses and leave allowed-ips at 10.42.0.0/16 I'm hoping once we add peer configs for each other with the proper addresses that routing will kind of just go between clients connected to my hub and clients connected to yours. that's my hope anyway, otherwise we'll need the aforementioned trickery.
(DIR) Post #A5BWaEzOKsQHak9v7I by alrs@lsngl.us
2021-03-14T01:11:15Z
0 likes, 0 repeats
@djsundog @requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG DN42 https://en.m.wikipedia.org/wiki/Decentralized_network_42
(DIR) Post #A5BX7r57jJHhI0rvNo by djsundog@toot-lab.reclaim.technology
2021-03-14T01:17:21Z
0 likes, 0 repeats
@alrs @requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG I'm hoping we don't have to have that level of complexity yet, but if we do, we're totally ripping off a bunch of their stuff and probably peering in at some point for at least some traffic segment
(DIR) Post #A5BXQwX1gtWPh81PcG by alrs@lsngl.us
2021-03-14T01:20:50Z
0 likes, 0 repeats
@djsundog @requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG get dn42 assignments, peer with each other, drop all other dn42 peers, if you want, or don't drop, if you want.
(DIR) Post #A5BXbhFiq303Uc3VkO by msh@coales.co
2021-03-14T01:22:43Z
0 likes, 0 repeats
@djsundog (bursts into the room)IPv6?(runs away)@requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG
(DIR) Post #A5BXeWrLw65C800XCK by alrs@lsngl.us
2021-03-14T01:23:17Z
0 likes, 0 repeats
@djsundog @requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG and if you want to set up a municipal wan, have your neighbors get dn42 assignments and peer over p2p links, lora, 802.11g, whatevs
(DIR) Post #A5BYESzBocBqXUoFjk by thegibson@hackers.town
2021-03-14T01:29:47Z
0 likes, 0 repeats
@msh @djsundog @requiem @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG Hold on... prepping my poo flinger.
(DIR) Post #A5BYHnq8jkwm5NARs0 by djsundog@toot-lab.reclaim.technology
2021-03-14T01:30:21Z
0 likes, 0 repeats
@alrs @requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG but I'm moving soonish!
(DIR) Post #A5BeBFz6IV6N4XcXYW by alrs@lsngl.us
2021-03-14T02:36:24Z
0 likes, 0 repeats
@djsundog @requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG if your neighbors are peering with each other they won't miss you.
(DIR) Post #A5BeJEnWaqxjhz0mjg by djsundog@toot-lab.reclaim.technology
2021-03-14T02:37:50Z
0 likes, 0 repeats
@alrs @requiem @TheGibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG I am not sure any of my neighbors would get past "want to join an experimental distributed network" before their eyes glazed over and they started thinking of how to get rid of me.
(DIR) Post #A5BfnhWkRUzVS8Fq1g by msh@coales.co
2021-03-14T02:54:25Z
0 likes, 0 repeats
@djsundog the guy across the street from me with the license plate starting with "VE6" and a 10 metre tower in his back yard would be interested but the other neighbours are thinking of ways to get rid of him so...@alrs @requiem @thegibson @ajroach42 @kingannoy @Orwelldonesteak @z @nomad @Killab33z_OG
(DIR) Post #A5Bi4yFZighO9KaIoS by alrs@lsngl.us
2021-03-14T03:20:08Z
0 likes, 0 repeats
@msh you're psyched! peer with him on an easy p2p link across the street, have your friends from all over peer with him over p2p links to his tower