What does HackerNews think of algo?

Set up a personal VPN in the cloud

Language: Jinja

#1 in Ansible
#20 in Security
Isn't the problem that the exit IPs will be flagged / blocked, meaning at best you'll get a ton of captchas etc.? I have set up personal Wireguard VPNs with Algo[1] before on DO, and while they work fine, they cause a lot of friction for that reason.

1: https://github.com/trailofbits/algo

Algo project still works well. Very quickly launch a WireGuard VPN to several popular cloud providers, or any Linux instance you already have access to, including your rPi.

https://github.com/trailofbits/algo

I set up my own VPN with https://github.com/trailofbits/algo

Hosted on DigitalOcean and the setup was completely automatic, it deletes its own access after its done.

Note you're still beholden to ToS of your host, but tbh they don't seem to care no matter what I do with it.

I know it from here.

If I were to do it myself I would have a look at Algo from Trail of Bits: https://github.com/trailofbits/algo
"We have to throw away the entire business and product and rebuild it in a model where our old thing is impossible" is a tough sell to a boardroom, obviously.

I mean, there is a model that works, it's Discord. Small self-associating groups from various parts of our lives. TBH that's so far ahead of facebook - humans draw meaning from being in groups where there groups are small enough to know and have repeat interactions with people. You all know bigger discords you're in (gpu drop discord lol) where you're just a face in the sea and it's much harder to maintain meaningful relationships in a place like that, fediverse would be like that too. Humans evolved for smaller group sizes and a group of like 30 or 50 active users is EXCELLENT for social media, Discord nails this perfectly, personal communication breaks down at like 75-100 active users tops.

Facebook is an ocean and it's unstructured (Google Plus or whatever had user grouping, which was an advancement imo - you can say "that's a work person" and interact with them in certain ways) unless you go out of your way to set it up like that. Discord really just works amazingly well for that, I have tons of hobby groups and game groups where I've known people for a super long time and friend groups from whatever community. Kids have the "school chat discords" and if I was in college we'd have had study groups on it I'm sure, we had FB groups then. No reason you can't have a "family discord" too (so uncool, mom!).

Mastodon basically is (or could be) that as a protocol, if you want to treat it like that. Dress it up in a discord-like client and get it onto phones/etc and make the user-story good. People already show they'll pay to self-host discord servers etc, so come up with a cool "Algo" style ansible deployment thingy that makes it super simple, just fires up a server on an AWS account for you and gives you a link you can send to your friends etc. Congrats, you are now the Underwater Basketweaving Enthusiasts Discord Server, here's a random (or generated human-meaningful) link. Not everybody needs to run a server, but, make it easy enough that people can do it. And as a user, just join the discords you like and let the server op run it/mod it, just like now.

https://github.com/trailofbits/algo

What exactly does Twitter do in this business model, though, lol? And how do you get there? Twitter's "broadcast" model is nothing at all like that. I guess they're gonna... throw it all away and start fresh? Seems like that's what's happening I guess.

But I guess I just don't see the value in federation generally, to the end user. Pods aren't authoritative, they're decentralized and human-meaningful (in Zooko's Triangle), so oauth type stuff doesn't really matter, I would never want to "auth against UnderwaterBasketweaving" or whatever, because it's trivial to spin up another instance and make fake users etc. And why would I want to "cross the streams" between my home and work pods, or let Wendys marketing come and mine/advertise my server, etc, if I'm the one running it? Am I paying for wendys to scrape my content? Consistent cross-discord-instance identity is all I really want from social media, at most and that doesn't need to be tied to this at all, you can do that via google auth or some other idp(s) that solves that problem. Where is the revenue stream in this at all?

I don't want "community moderation service" in my decentralized communities... there are places where "work moderation" would pitch a fit and some places where work protocol would be incredibly uncool. But with small communities, O(1) moderation works fine, you don't need it, just let the discord server op do discord mod shit and delegate roles/etc to other mods too. Yes, godmode is fine in self-organizing communities because if moderation drifts sufficiently far from group norms the community will reorganize without you. Crossing the streams also ruins that, it means you have to moderate the firehose or punt it to an authority who will, and it's all just a big "why" when discord mods are fine.

Similarly, want a feed of interesting content? We had an app for that, it was called "mee6 bot", and the server admin asks what twitters/youtubes/etc people want for certain channels. You want a new channel? Ask for it, or make it. I am on a server with 30-ish active members and everyone has basic "add channel/rename/reorder/etc" and "warn" punishments etc, it's fine. If you're constantly being a dick you'd get kicked out but it's never been a problem. Family discord, or work discord, or some other close-knit irl community? just let people do things. social ostracism will keep people in line with the norms, people mostly don't like losing friends.

(maybe disk quotas though, because that is one that will add up faster than users realize. Nobody has solved "free content service" without it being tethered to another business, like youtube or imgur or discord. no, I am not interested in your IPFS childporncoin either. give me a sustainable, "local" method for hosting content... like requiring users to host content themselves on an instance or server hosts providing user-quotas for hosting etc. Define how important you consider your content (indefinite, 30 days, etc) and refuse new uploads if they're past quota.)

And if you just want a service where you click it and it runs in a hosted instance by a cloud provider... well, discord exists, and dropbox remains popular even in a world of NASs, etc.

But none of that has anything to do with Twitter or will have anything to do with Twitter, lol.

I used Algo to make my own, it builds a VPN server on your host. If you choose to host on digitalocean the script sets everything up via API and you're done in minutes.

https://github.com/trailofbits/algo

I think something that relates to the pain of onboarding with unique configurations for core tools used by developers would be useful.

To be specific I wish I didn't have to forward a developer to an already obsolete wiki page then nod and smile as they complain/tussle with the experience/vernacular/context of a document that has no owner.

I think this is a bigger problem (which could be mine and mine alone as everyone seems to really like wikis) but I think being able to seed the developer environment with all the tooling config could help stave off (some of) this pain.

So my thoughts: a simple cli related flow gen tool which could generate this interactively. (And could also verify correctness)

Tools that I can think of from the top of my head that need to be configured to handle user config and private repo location(s) are git, docker and mvn/gradle/npm (etc, I figure all package management tools usually need this).

I like the way https://github.com/trailofbits/algo Works to collect configuration in this respect (Using ansible) as well as how eslint does it (I think using https://github.com/gkz/optionator) For setting up base config in the cli.

Anyway hope this helps seed an idea or at least might identify a problem (not sure how lucrative it would be though)

Just curious: Any practical difference between Algo [0] and PiVPN [1] from someone that has tested them? Both seem to support Wireguard.

[0]: https://github.com/trailofbits/algo

[1]: https://pivpn.io/

I just learned about Algo but have been a long time user of PiVPN (from when they only supported OpenVPN!) on my Raspberry Pi, so in the case that I wanted to reinstall the server, I wonder if the change would bring something new to the table.