If they don’t use reddit how do they know is a repost?

Why would they care? If it’s useful stuff getting posted that’s okay. If it’s just a spammer flooding everything with low quality stuff treat them accordingly. The fact that the same posts exist on reddit is entirely irrelevant.

For those who want… to look at the details of the wallpaper some more:

https://upload.wikimedia.org/wikipedia/commons/d/df/Chimmie_-_Xenia_the_Linux_Vixen_-_Fediverse_wallpaper.png

Just pick a blocklist (usually via curl, coming in a “0.0.0.0 <host>” format), reformat it to “local-zone: <host> always_refuse” (sed is your friend) then add an include-line to the unbound config.

And yes, you would need to set some timer to update it from time to time.

PS: I stopped using unbound and went with dnsproxy (see my other comment here) because it was less cumbersome (just a few command line parameters instead of an extensive config) to serve at the same time as my local dns while also providing it via DoQ (and DoH for those stupidly restrictive networks) for me when I’m not at home. Also proper parallel querying is -iirc; I didn’t look at it for quite a while- still missing from unbound and it can work with DoQ upstream but not serve it yet.

I never understood the point in setting up unbound and pi-hole. Unbound is perfectly able to use all the filter lists you use with pi-hole, so at this point it’s nothing but an additional layer for some fancy webui with stats you never actually look at.

4. AdGuard

Adguard’s dnsproxy also works well on its own. And it can very well spare you much of the overhead. Just pick a few dns providers you trust, query them in parallel and add whatever ad-blocking list you want to use locally. All with such on not that complicated command…

Example: dnsproxy --listen=127.0.0.1 --port=53 --bootstrap=9.9.9.9 \

–hosts-file-enabled --hosts-files=/etc/dnsproxy/blocklist \

–upstream=https://unfiltered.joindns4.eu/dns-query --http3 \

–upstream tls://dot.libredns.gr \

–upstream tls://dns3.digitalcourage.de \

–upstream tls://dns.digitale-gesellschaft.ch \

–upstream tls://anycast.uncensoreddns.org \

–upstream=quic://dns10.quad9.net \

–upstream=h3://cloudflare-dns.com/dns-query \

–upstream-mode=parallel \

–cache

Yes, that’s an unreasonable amount of dns’ queried but I just wanted to get a few useful ones listed, also a wide spread from https (http2 and 3), tls and quic.

which under an authoritarian regime can be torture in prison or being summarily executed or dissapeared

The finer point is that you are still thinking in terms of authoritarian regimes ruling by force or intimidation. You don’t need to if you can direct the opinion of 90%+ of the population via methods totally unfit to do what they claim they are employed for.

For some very strange reason you seem to be under the impression that I downplay this massive insane censorship measure they try to enact with this bill. I’m not. Quite the contrary I am telling you very plainly that it’s inefficient FOR WHAT THEY CLAIM THE GOAL IS. Because they are lying.

Internet censorship is very easy to do, I don’t know why some people tunnel-vision on the fact it’s not perfect. It doesn’t have to be perfect to still be very effective.

That was my actual point. It’s effective for censorship and targeting the broader population. It’s ineffective for preventing piracy as a lot of people there are indeed tech-affine and belonging to the <1% that will go the extra mile to circumvent it.

So implementing provider and dns blocks against piracy is either stupid or an intentional lie. I assume the latter.

especially if you use the AUR

Which you do by default even without knowing it as Manjaro comes with an AUR helper pre-installed and also skips all the “this is user generated content; use at own risk”-warnings an Arch user would find in the wiki when trying to install something from the AUR.

And who’s going to block all the freely available DNS servers, proxies and also TOR? 😆

That’s just another piece of bullshit legislature to enact censorship measures in the name of some seemingly legit reason. You will never actually get rid of piracy sites with local ISP and DNS blocks. But the moment there is a procedure to easily make them happen, they can indeed be used to block the not tech-affine majority of people from news and information they should not see.

Those are to different groups, the investors into nuclear spending some money (but neglectable amounts compared to their primary investments) on desinformation campaign so idiots stay on the train, and the idiot cult created as part of those campaigns. That’s what makes such investment so efficient. Once you reached a criritcal mass the bunch of morons is self-replicating in their own echo chambers, so it doesn’t need maintenance anymore. (Also the reason nuclear is so well received in far-right circles… there isn’t actually a direct connection, but a massive overlap in how these groups are created.)

Don’t let the nuclear cult hear such blasphemic facts.

And square imply cm². Both are equally stupid to measure a length. Or are you arguing that cubes a one dimension more stupid?

Wait… IT isn’t informations technology?

Does it really matter if you write down a length in squares or in cubes? 😂

Not OP, but it’s two-way TLS. It’s not only your server providing a certificate to prove it’s the real thing and not just some men-in-the-middle device or your connection for redirected, but the other side of the connection using a certificate, too, to show they are actually the devices allowed to communicate.

So this basically reverts the security. You are no longer trying to filter out access attempts when they show questionable behavior, but completely reject anything unless it’s explicitly authorized. Which of course only works when you or (a small number you can manually manage of) others access that stuff from fixed devices that you can set up properly.

PS: For me fail2ban does basically something similiar. I have several web interfaces exposed via reverse proxy. But I barely ever use those interfaces manually; normally it’s via apps that access the services via that web interface. So things like failed authentifications or misstyped passwords don’t happen (unless when setting up something new maybe and then I’m there to unban a device manually if I screwed up). So fail2ban is set up to aggressively bans IPs for hours just for a single failed attempt.

That’s keeping all those spammy bots looking for easy targets away very effectively, yet completely invisible for my legitimate use. After all that’s always the core issue: security vs. convenience. You build the best possible security that also doesn’t overly interfere with your normal use. Also the reason there is no on-size-fits-all solution because it’s about your use-case.

"UK.gov begins killing off passwords for 23 million users

vs.

“The NCSC is encouraging users to switch, although passwords aren’t disappearing just yet. Passkeys remain optional, and anyone who would rather continue signing in the old-fashioned way can do so.”

Clickbait bullshit.

It’s doable with a swap file instead. But some filesystems are more supportive than others.

For example BTRFS doesn’t support swapfiles over multiple devices (so my raid1c3 spanning 3 differently sized disks for example) and also swapfiles must be completely pre-allocated.

And no matter the filesystem you need to manually tell the kernel device and physical offset for the file via kernel parameters. Which can again be easier on some than on others (also causing the no-multiple-device filesystem problem mentioned above.

For some reason companies always call it by a different term when I free software.

The fairy tale German politicians and the media tell 24/7 of how high energy costs for the industry and much too high wages are the problem. And this is after all about a German CEO calling for lower wages “to safeguard Germany’s prosperity and welfare state”.

When in reality Germany, so the other 99,999999% but him, are struggling because of low wages that in no way represent their economic output, high and rising energy costs –exactly so the industry gets lower costs– and with the pension, social and health system not looking sustainable, but again not because of the delusions this guy and his other rich friends are spreading, but because they are linked to stagnating wages. Suggesting more less and lower pay so his profit margins go up and the country is more fucked is simply insane… or just shameless. Yeah, probably the latter.

Wasn’t meant personally in any way. As I said, it sounds logical without a closer look. So I told how it looks from the inside.

Yeah, that’s the fairy tale they try to tell us because it sounds logical if you don’t look closer.

In reality those high energy prices are just a narrative (at least for Germany). Heavy industry pays average amounts in European comparison. It’s the private end consumer who’s getting poor from all the taxes and fees to subsidize cheap energy for the industry. Those are the same people whose real wages increased by ~25% in the last few decades while their real economic output in the same time frame increased by ~250%. And all that money is funneled off to a few ultra rich while pensions, social benefits and health care are linked to the stagnating wages.

The actual problem of Germany’s economy is that they systematically fucked over Germans for decades to optimise their trade output. So now when global demand is shifting there is no domestic demand to compensate because they are all fucking poor (compare: average wealth with median wealth) and squeezed by constantly increasing costs that in many cases just increase the profit margins of the very same companies they already subsidize with their taxes.

Added some charts for comparison (data from 2024-2025):