I use Tailscale with an exit node in my home country and another in Switzerland. Most my traffic goes to Switzerland, but some of it exits locally as websites block other countries. I’d rather it still pass through a VPN rather than my home IP address.

It’s mostly painless, the only website outright blocking VPNs is Reddit (which I don’t care about), but I block most other social media companies and Google properties so I’m not concerned about them.

I personally use a double-hop VPN to avoid this but I don’t think that’s necessarily scalable to all users or a valid suggestion for the non-technical among us.

This is what keeps me from rolling my own instance for personal use. I would need to buy a domain (linked to me) to communicate with anyone else.

It would be nice to be able to spin up an instance on i2p or Tor without still needing access to the “normal” web, but I don’t think everyone’s going to hop onto pure i2p unless it comes built in to apps.

looks at community I hope so?

I used to keep my voice and tone professional with the fake smiling and shit, but my facial expressions never lied.

I’ve seen this a lot in fast food. Their order (for the exact same thing) would be impossible to make that fast fresh, so they lose their shit if you use your brain and give them the existing one that was made minutes (seconds?) ago.

Such simple-minded thinking.

We had another customer come in for like three days in a row ordering fries without salt, thinking they’re soooo smart (always during rush too when fries were super fresh). I watched them add salt to them after sitting down every time. On day four I got sick of them so I made fries without salt at the very start of rush and put them aside for an hour or two just so that when they did it again they got the shittiest, oldest fries.

Definitely not a professional move but I got my revenge.

Another McDonald’s drive-thru story but probably the guy that wouldn’t pull forward for 30 fucking seconds for fresh fries.

I was a shift manager at the time and had my staff all hyped up during a busy lunch rush. We were kicking ass — no mistakes, drive-thru times were insanely low and everything was moving. I told some guy “could you please pull forward for just 30 seconds, I have the next five cars’ orders right here and we’re just waiting for fresh fries.”

The guy lost it, started screaming “I won’t fucking pull forward,” “this is bullshit,” all the typical douchebag stuff.

I closed the window and told my staff not to hand him anything. I ran outside with five bags, walked around his car and handed them all to the next cars. I told them “he didn’t want to pull forward” and made sure to point so the guy could see me ratting him out. They all took off fast and right as I walked inside the damn fries were ready so I bagged them up, opened that window and told him to have a “wonderful day.”I loved seeing his stupid face turn beet red with embarrassment.

My second worst Karen was the woman who complained that we were too fast and called corporate to complain.

I’d almost go through the trouble of getting the content out of Wordpress. The nice thing about static site generators is you can completely switch out the framework, runtime, base Docker image and/or OS at any time.

Your router probably does have one, but your end devices should too. If your router is some piece of trash ISP-supplied one, it might not even have a firewall for IPv6 (if it even supports IPv6 at all).

I mean, it’s still good to know if you’re vulnerable right (for sake of discussion)?

Pierre, South Dakota. I’m actually from Iowa (I live in Los Angeles now) and my family went on vacation to South Dakota one time. I remember driving to the capital and realizing it was smaller than my hometown in Iowa!

I get that feeling you’re talking about with Des Moines. I used to go on tons of long road trips around the Midwest around age 18, looking for something new. Coming back to visit, Des Moines always feels comically small — I find myself wondering how businesses stay in business with such few customers.

I would add from an end-user privacy perspective, they might want HTTPS. If I hit a website not using HTTPS, I pretty much immediately back out. Bad actors like hostile governments and hackers can use seemingly meaningless data against you.

I can’t remember exactly what happened but I remember back when WebMD was fighting against rolling out TLS hackers were able to find medical weaknesses against people.

Yes I have a DNS service listening on both UDP and TCP to respond to DNS queries from clients using the standard DNS port; crazy me. 🤪

DNS

You can’t have UDP and TCP on the same port? I don’t think that makes sense, I have DNS listening on UDP and TCP both on port 53.

I’ve never heard of flashing to pass, the only thing I’ve seen it used for is to let a car in the right lane trying to get into the left lane know it’s safe to do so (as a driver in the left lane). I’ve only ever seen it used by truckers.

As far as Minneapolis goes, I’m quite the opposite. Having lived on the west coast I dread going to Minneapolis — everyone seems to be in a bad mood whenever I go there.

I hate to say it, but when traveling in Tucson the Canadian drivers make me absolutely crazy. It’ll be 100°F out and they’re driving as if there’s ice all over the roads.

I definitely think it’s cultural/regional. I was highly sarcastic with everyone in real life growing up, but moving across the country I came off as extremely rude and have met people from all different parts of the world that only appreciate certain nuances/layers of sarcasm and have adjusted myself accordingly.

I killed off ads in the News app by blocking doh.apple.com. I find it kind of funny that it looks up its DoH server IP using the existing DNS server and that simply returning NXDOMAIN cuts it off.

Not sure if they use it for much more than that though (doesn’t seem like it).

One thing I want to bring up just so you’re conscious of it is WiFi calling.

I currently use Tailscale and a sophisticated setup to route traffic via commercial VPNs. I also do a ton of DNS ad/tracking blocking which Tailscale wasn’t really designed for (and requires a rat’s nest of routing, iptables and the like).

I’ve noticed I never receive incoming calls now even while attempting to send traffic to my carrier’s WiFi calling server (it’s just another traditional VPN server at a technical level) through the nearest Tailscale exit node.

All this is to say, if you want WiFi calling to work you should consider this. I believe it’s the same for Android and iPhone.

As for the traditional VPN bit I kind of discovered this a few years ago when using one of those mobile cellular gateways you can plug into your LAN (I lived in a dead zone). When looking up my current carrier’s WiFi calling server (a different carrier) I realized the port matches the same VPN thing they were doing on the cellular gateway, so I think it’s fairly common for wireless carriers to just use a VPN to get you into their backend.

If you’re from the Midwest, anywhere in the Midwest. It’s all exactly the same.

Source: Went on crazy long road trips as a young adult looking for something new; ended up moving somewhere completely outside the region later.