drain bamage (broken ai)

On the internet, not everyone knows you’re an idiot.

But goddamnit, I’m trying to get the word out.

Please feel free to downvote every comment I’ve ever posted, if it will bring you joy.

  • 0 Posts
  • 30 Comments
Joined 1 year ago
cake
Cake day: July 5th, 2023

help-circle










  • +1 for nginx, although there has been some concern because nginx is developed by a group of russians though it is open source and appears to still be widely used. If this worries you, look into traefik.

    Otherwise does your ProxMox setup run docker containers? If so you can use NginxProxyManager which has a web gui for configuring your virtual hosts.

    At a high level what you need is this:

    • all domains routed to your host (or home if self hosting) IP.
    • that IP needs to have a reverse proxy server like traefik or nginx listening on port 80 and port 443 if you want ssl/tls.
    • your app servers which run lemmy, nextcloud, etc can be anywhere on your network where your reverse proxy can access. You’ll need to create vhosts for each. The server uses the Host header to determine which IP to reverse proxy to, eithe lemmy.moorefam.net or nextcloud.moorefam.net
    • the reverse proxy will get the content from lemmy or nextcloud and serve it via that IP and port.
    • ensure your home router is port forwarded on 80 (and 443 if you want ssl/tls) if you want to access these instances from the public internet but beware, you might want to add a firewall in-between if you aren’t confident in your router’s firewall.

  • The browser stores the cookies, so if it is a system browser then the system browser stores the cookies even if embedded in the app. It also means that the app isn’t likely aware of those cookies as it’s part of a separate app.

    Also, generally speaking, few developers want to build their own browser. It is far easier to just ask the OS to put a browser in a space provided by the app, than to build a browser that works well to be used on the greater internet and the actual app itself. I say this because “the browser stores the cookies” so if app xyz doesn’t use a system browser then app xyz is the browser. Like, any app can ask you for your reddit username and password, store that, make HTTP calls that login with your username and password, parse the HTML it gets from reddit, and report it back to you. This is essentially how lemmy apps work at a high level with one big difference: these apps and the server are both aware of each other, which is the same sort of situation where a company like google or reddit gives API access as a sort of contract between how the apps and servers with better security and full consent of all involved.

    Basically if you see reddit apps pop up which don’t use the official API, you should be wary. Doubtful they would make it onto the app stores but it’s always possible. It doesn’t mean they are nefarious, just that they could be.

    The good news is it’s pretty easy to tell what you are using.

    Logged into example.com somewhere on your device, then you open a freshly installed app, click a link to example.com and you are already logged in? System browser.

    Logged into example.com somewhere on your device, then you open a freshly installed app, click a link to example.com and you aren’t logged in? This could be another browser if you have more than one installed on your device. So the ask… does it look and function like shit? This isn’t a great test but again, building a browser that actually renders html css and js is difficult, so it’s likely to not work or look very well if it’s something built with the purpose of stealing data specifically.


  • Ok so if application xyz has a browser, assuming that browser isn’t just an embedded copy of a system browser (something that I am not sure is possible with android or ios development, i am just a web dev), it won’t know your reddit cookies unless you gave it. Or, more correctly, it may save your cookies for every site you visit, but that’s just normal browser behavior. If you visit reddit, your cookies are saved but if you didn’t login the cookies just identify you as a unique but otherwise unknown user. If you login, then your cookies are saved if you load up the in-app browser again and find that you are still logged into reddit.

    The only time where you could expect to be logged into reddit already via an in-app browser which you didn’t log in with previously is if that in-app browser is just an embedded system web browser where you are logged in.