• 2 Posts
  • 76 Comments
Joined 2 years ago
cake
Cake day: June 15th, 2023

help-circle




  • The backpedaling on the WSJ’s lie has begun:

    On September 11, 2025, The Wall Street Journal issued a caution regarding its earlier report on an internal law-enforcement bulletin concerning the fatal shooting of Charlie Kirk. The bulletin had mentioned ammunition found near the scene with “transgender and anti-fascist ideology” engravings, but the Justice Department indicated the report might not accurately reflect the messages on the ammunition as the probe was in its early stages.


  • Every wifi device we own that’s connected to wifi and the Internet can be precisely located by the companies involved even when using a VPN.

    If you have an Android phone you’ve probably noticed a prompt at some point asking for your permission to transmit precise location information and enable wifi scanning. Those wifi SSIDs and MAC addresses along with its GPS location is sent back to Google. The combination of all that information is almost as unique as a fingerprint. They can use that along with signal strength of each AP in the area to determine your device’s location with precision. (Google used to allow apps like Maps to be used with wifi scanning turned off, but no more.)

    Your Google stick can’t tell it’s on a VPN directly, but even without GPS Google can still pinpoint its physical location using their database of SSIDs and MAC addresses, and if they want to they can determine you’re using a VPN by comparing that to the expected location of your IP address. There probably aren’t enough people doing this right now to make it worth the trouble to detect your VPN, but IMO it’s just a matter of time before they decide it is.

    I also expect that Google sells that information to every company willing to pay for it, so almost every single wifi enabled device can be precisely located if it can transmit data to the Internet.

    We live in a scary time.




  • OpenWRT is amazingly flexible and would be a great place to start.

    I switched from DD-WRT last year and have been amazed how good OpenWRT is. There are thousands of software packages that allow you to do pretty much anything you can think of on inexpensive hardware. Used Netgear R7800s are available for less than $50 on ebay or there are plenty of newer hardware options if you want to spend more. Those thousands of downloadable software packages include Wireguard and Adguard Home, plus there are OpenWRT integrations for Home Assistant. The forum is full of people who are happy to help newcomers.

    I started by running OpenWRT in a virtual machine to get familiar with the UI and moved on to a live installation. Highly recommended, especially if you enjoy learning.




  • Sounds like my laptop will be plenty fast for some time to come.

    This platform doesn’t use much power to begin with, but I do run TLP using a battery profile despite the fact it’s always plugged in. My intent is to lower the power consumption a bit further and extend battery run time if the AC fails. There’s no noticeable impact on application performance. If you’re running Linux maybe it will work on your hardware.



  • If I’m understanding what you want to do, I have this set up on an OpenWRT router with multiple remote endpoints used for different devices. Our phones go to a hosted Wireguard server in one city, PCs to an OpenWRT router in a different location, and IOT devices that aren’t blocked and guest devices exit access the Internet locally. With some additional work you should also be able to have remote devices connected via WG exit wherever you like.

    Policy Based Routing on OpenWRT makes this possible and it should be doable as long as the devices you want to allow to exit the remote server are included in that server’s “Allowed IPs” setting. (Maybe there’s a way around that, but I haven’t had to deal with it.)







  • I self-host various applications and have been really happy with Wireguard. After watching just how hard my firewall gets hammered when I have any detectable open ports I finally shut down everything else. The WG protocol is designed to be as silent as possible and doesn’t respond to remote traffic unless it receives the correct key, and the open WG port is difficult to detect when the firewall is configured correctly.

    Everything - SSH, HTTP, VNC and any other protocol it must first go through my WG tunnel and running it on an OpenWRT router instead of a server means if the router is working, WG is working. Using Tasker on Android automatically brings the tunnel up whenever I leave my house and makes everything in my home instantly accessible no matter what I’m doing.

    Another thing to consider is there’s no corporation involved with WG use. So many companies have suddenly decided to start charging for “free for personal use” products and services, IMO it has made anything requiring an account worth avoiding.