• 0 Posts
  • 28 Comments
Joined 2 months ago
cake
Cake day: July 18th, 2026

help-circle
  • Could you have a residential static VPN as one of the wireguard profiles and have it be somewhat local to you so you could use banking apps etc on specific devices? Trying to get this to pass the wife test but if streaming or banking is affected I will have to roll back to no vpn.

    Absolutely, my setup I have a catchall rule that captures the entire 10.6.0.0/24 range however I can specify the IP’s individually so if I want to put a remote device behind WAN I can absolutely do that.



  • Picked myself up an Asus WRT router (AX86U) flashed it with Merlin firmware - the custom firmware includes a feature called “VPN Director” which lets me connect up to 5 different WireGuard clients and route my devices through whichever one I choose, given that the Asus WRT router is also capable of hosting its own WireGuard server I created a VPN director rule that routes that server through one of these clients.

    The VPN director has a priority ruleset, so if for example WireGuard client 5 dies it will either kill all outbound connections and wait until it’s back online or fallback to WireGuard client 4, WireGuard client 1 being the lowest priority right before WAN.

    I like this setup because it’s my router doing the routing, not a secondary server hosting WireGuard like Tailscale.

    Edit; It also works with oVPN if you prefer that protocol over WireGuard.



  • CyberGhost currently has alway an excellent review in IT publications and independent benchmarks

    In that very same article…

    It’s Not Just Mid VPNs

    Kape doesn’t just own multiple VPN companies, they also own several media outlets and other ‘cybersecurity’ software. Let’s start by looking at one of their most egregiously misleading ‘cybersecurity’ software offerings: ReImage.

    ReImage is/(was?) marketed as a PC scan and repair tool. It’s actually something called scareware and it’s specifically designed to ping you with alarming messages about your computer containing multiple vulnerabilities, and prompting you to purchase a license to have their software perform the critical fixes necessary. I say ‘was’ marketed because when you go to their website, it doesn’t work. I was only able to look at their website through the web archive tool. Their crunchbase page gives the appearance that they’re still in operation, and you can still download their software off third-party websites. I wouldn’t though.

    Kape Owns VPN Review Sites Too

    You know what’s better than gobbling up market share of the VPN space? Gobbling up the websites that review them too, and creating your own vertical integration.

    So not only does Kape own some of the biggest VPNs in terms of market share, but they also have complete control over the affiliate ecosystem that shills their subpar products onto unwitting consumers. Oh and that’s not all, they also own a middle-man company that specializes “in monetizing high-quality traffic by connecting them with the brands they need.” In other words, they own the VPNs, the VPN affiliate marketing platforms, and the VPN review websites. They’ve created an entire ecosystem that they control, all explicitly designed to go after your data and your wallet.

    Here are some of the Kape Controlled entities that you may or may not have heard of before:

    • Webselence
      • Affiliate monetization platform.
    • VPN Mentor
      • VPN “review” site peppered with affiliate links from Kape VPNs and other owned software like Intego antivirus.
    • Safety Detectives
      • Another VPN “review” website, loaded up with affiliate links from Kape-owned businesses.

    Whether or not you trust a company with the initial intention of distributing malware is on you, and by using their Proxy you’re still pushing your traffic to their servers, and to believe they don’t retain your data is merely laughable as they’re obliged by the Five Eyes Alliance and are required to retain personal information you provide them.

    I don’t use Windscribe myself because they’re a Canadian company and obliged by FVEY, but at least they’re independent from Kape Technologies.




  • I have been laughed out every time I’ve mentioned it for years.

    I got approval from my managers and IT to install a Linux based OS on my work desktop, then a half-wit Windows-fanboy dev chimed in claiming our insurance would not cover the operating system if there were ever a security breach, data loss, etc. to say I was infuriated was an understatement.

    All we use is a Web-App to accomplish our tasks, no in-house proprietary executables or anything along those lines, hell they claimed their Web-App wouldn’t work on Firefox browsers, which of course was a lie.


  • iPhone > Safari webkit > WireGuard tunnel home network > PiHole DNS (Quad9 upstream) > WireGuard tunnel ProtonVPN endpoint

    That is the flow of my current network.

    Edit: I ran curl from my server

    ┌─[user@debian] - [~/compose] - [Thu Aug 13, 12:26]
    └─[$]> curl -v https://angieguardian.org/
    * Host angieguardian.org:443 was resolved.
    * IPv6: (none)
    * IPv4: 77.61.56.117
    *   Trying 77.61.56.117:443...
    * ALPN: curl offers h2,http/1.1
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):
    *  CAfile: /etc/ssl/certs/ca-certificates.crt
    *  CApath: /etc/ssl/certs
    * Recv failure: Connection reset by peer
    * TLS connect error: error:00000000:lib(0)::reason(0)
    * OpenSSL SSL_connect: Connection reset by peer in connection to angieguardian.org:443 
    * closing connection #0
    curl: (35) Recv failure: Connection reset by peer
    
    ┌─[user@debian] - [~/compose] - [Thu Aug 13, 12:27]
    └─[$]> curl -v angieguardian.org 
    * Host angieguardian.org:80 was resolved.
    * IPv6: (none)
    * IPv4: 77.61.56.117
    *   Trying 77.61.56.117:80...
    * Connected to angieguardian.org (77.61.56.117) port 80
    * using HTTP/1.x
    > GET / HTTP/1.1
    > Host: angieguardian.org
    > User-Agent: curl/8.14.1
    > Accept: */*
    > 
    * Request completely sent off
    * Recv failure: Connection reset by peer
    * closing connection #0
    curl: (56) Recv failure: Connection reset by peer
    

    Can confirm my PiHole is resolving the requests and forwarding the requests to Quad9.








  • I’m not home to verify my Freetube however, I just checked my invidious instance and can confirm that the first video I attempted to play errored.

    I am updating my Invidious instance to see if it still persists, perhaps the instances you’re using are out of date, I know invidious updates quite frequently to stay on-top of YouTube changes.

    Edit; Updating invidious appeared to resolve my errors, I can only assume the instances you’re using are out of date. I’ll check Freetube when I get home.