[flagged]
Please don’t do this here. From the guidelines:
> Please don't use Hacker News for political or ideological battle. That tramples curiosity.
Build your own private WireGuard VPN with PiVPN
201–210 of 235 posts
Re: Build your own private WireGuard VPN with PiVPN
#202Earlier quoted context omitted.
If you don't do business in the EU why accept traffic from there and possibly have to deal with GDPR issues.
Traffic source does not equal the geographical position of a person issuing the request. Geographical position of a person does not equal their legal status. Blocking users on a two-level-deep assumption is wrong.
GDPR says it applies to companies outside the EU who are offering goods and services to people in the Union. One of the recitals explains that there is an intent component to this. The company had to envisage such offerings.
Even though blocking by traffic source is not always accurate, I’d expect that it would still greatly help show that the site did not envisage offering goods and services to people in the EU.
Re: Build your own private WireGuard VPN with PiVPN
#203I moved to Tailscale, until I find something simpler, I'm not moving back.
Use Tailscale on an iOS device and you’ll move away within a day. It’sa major battery hogger on iOS.
They are working on it.
I still run Wireguard proper on my iOS device... it switches automatically when I am off my home SSID.
But I run Tailscale everywhere else.
Re: Build your own private WireGuard VPN with PiVPN
#204Earlier quoted context omitted.
No, it isn't. see article 3, section 2 of the regulation. You need to offer goods or services to EU citizens for the law to be in effect. If home Depot doesn't operate in Europe, doesn't market to Europeans, doesn't ship to Europe, and doesn't offer any services to Europeans, then they are not impacted by gdpr.
> You need to offer goods or services to EU citizens for the law to be in effect. You need to not sell goods and services to EU citizens for the law to not be in effect. Even if said citizens are in the US. You don't cease being a EU citizen when you're traveling.
The first part of section 2 says the data subjects need to be in the Union. A European moving to America and shopping at home Depot doesn't (alone) require them to be GDPR compliant.
Re: Build your own private WireGuard VPN with PiVPN
#205I moved to Tailscale, until I find something simpler, I'm not moving back.
Have you tried Nebula ( https://nebula.defined.net )? I set up a personal Nebula network a few months ago and have been very happy with it thus far. It has the ability to do mesh-style direct routing so you don't necessarily have to pay the out-and-back latency cost if you're connecting to a location that is closer.
Nebula works great. I don’t need some of the emergent bells and whistles of Tailscale, and Nebula works on devices which don’t yet have WireGuard.
Re: Build your own private WireGuard VPN with PiVPN
#206Earlier quoted context omitted.
Wow thanks for sharing. That’s a pretty amazing box, curious what it’s TDP and noise characteristics are
Wattage for the whole thing is as mentioned, TDP of just the CPU is 4 to 6 watt (configurable). This particular one has a fan which will kick in if you run it hard for long periods, for truefanless I'd suggest the B1 instead. Or if you go for the splurge you can knock cTDP down and still run circles around the pi in performance.
Any recommended without Windows around that price?
Re: Build your own private WireGuard VPN with PiVPN
#207Earlier quoted context omitted.
Wattage for the whole thing is as mentioned, TDP of just the CPU is 4 to 6 watt (configurable). This particular one has a fan which will kick in if you run it hard for long periods, for truefanless I'd suggest the B1 instead. Or if you go for the splurge you can knock cTDP down and still run circles around the pi in performance.
Any recommended without Windows around that price?
I've been using a few mini PCs for things where I needed a headless system, but wanted x86_64 and a little more performance and reliability than a Pi, I settled on N3350 devices like the N4 by TrigKey or the Beelink T4.
Everything I need is supported by Ubuntu server. Excellent little machines.
Re: Build your own private WireGuard VPN with PiVPN
#208Earlier quoted context omitted.
It's below the fold on rosenpass.eu but: > Rosenpass is a key-exchange protocol using techniques that are secure against attacks from quantum computers. It achieves the same security guarantees as WireGuard, using two strong post-quantum key exchange methods – Classic McEliece and Kyber. > To use Rosenpass, you don't have to get rid of WireGuard; Rosenpass handles post-quantum security, WireGuard handles pre-quantum…
I saw some references to post-quantum security, but I also saw references to something called "Post-Quantum Wireguard" so it seemed like that was handled by some other project, or at best some sub-component of Rosenpass.
Wireguard has a pre-shared key that can essentially get 'added to' the base key, making it more secure. Rosenpass effectively just makes these PSKs and trades them in a way that makes it quantum secure.
Basically it should be a part of base wireguard, but for now it's a good addition.
Re: Build your own private WireGuard VPN with PiVPN
#209Earlier quoted context omitted.
What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people…
I love these things: https://www.aliexpress.us/item/3256804116114245.html There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic. I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.
[dead]
Re: Build your own private WireGuard VPN with PiVPN
#210Earlier quoted context omitted.
What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people…
I love these things: https://www.aliexpress.us/item/3256804116114245.html There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic. I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.
I have a couple of N5105 boxes I got off of Amazon on sale, but I haven't put them into use, yet.
I've never bought off of AliExpress. I'm in the U.S. Do people take precautions when ordering from them? I'm not so worried about the products, themselves. I'm worried about the use and security of my financial data.
Worried as in, I just don't know whether they are safe stewards. No experience, no one to ask. Except maybe you guys. Give them my credit card #? Generate a one time #? PayPal?
Sorry to go a bit OT, but this is yet again where I've been tempted to order from them.