Readit News logoReadit News
juriansluiman commented on Ask HN: How do small personal website/blog owners comply with GDPR?    · Posted by u/eminent101
juriansluiman · 3 years ago
My personal website [0] is -afaik- GDPR compliant. I have access logs disabled, as I don't care about them. It's a static site (Hugo) deployed as container with an nginx server behind Traefik.

I don't use comment forms, as they are a headache to maintain over the years. I used to have comments but removed them and discussions move to other media (HN, Twitter, Reddit). For analytics I use Plausible [1], self-hosted, and that's fully GDPR compliant.

I live in the EU (NL) and the server is located in AMS3 for DO. This setup runs perfectly fine for me for several years now.

  [0] https://jurian.slui.mn/
  [1] https://plausible.io/

juriansluiman commented on I received a patent infringement email for my weekend project (2010)   royvanrijn.com/blog/2010/... · Posted by u/federicoterzi
juriansluiman · 3 years ago
Part 2: https://www.royvanrijn.com/blog/2010/11/patent-infrigement-p... TL;DR:

> I’m sorry, but I can’t comply.

> Good luck.

The follow up around 2016: https://twitter.com/royvanrijn/status/788436253532426241

> Nothing happened, never heard from them again...

I couldn't find the code anywhere on his Github profile, so not sure if he actually took the step to publish the code.

juriansluiman commented on Podman can transfer container images without a registry   redhat.com/sysadmin/podma... · Posted by u/kukx
candiddevmike · 3 years ago
I wish containers hadn't created the abstractions of a registry and an image instead of exposing it all as tar files (which is what it kind of is under the covers) served over a glorified file server. This leads to people assuming there's some kind of magic happening and that the entire process is very arcane, when in reality it's just unpacking tar files.

If you want to DIY a container with unix tools, this should help: https://containers.gitbook.io/build-containers-the-hard-way/

juriansluiman · 3 years ago
Actually it's the process how I (DIY) deploy several static sites from my local machine. I build the Docker image (hugo sites with nginx, expose a single port for HTTP traffic) and save it as tar. Ironically the base images do come from a registry, but I can't deploy to a public registry and don't want to host my own.

On the server where I need to run that site, I just transfer the tar, load the image and run the docker image. It's so straightforward I much more prefer this way than being dependant on external registry sites for deployments.

juriansluiman commented on You can now send replies from your Duck Addresses   duckduckgo.com/email/faq... · Posted by u/donutshop
pmoriarty · 4 years ago
Fastmail has a "masked email" feature, which will forward emails sent to (potentially temporary) email addresses to your regular email account.

So will SpamGourmet[2].

Of course the problem with all these services is that you're giving yet another third party access to your communication and giving up your privacy to them.

They are all, as far as I know, completely unaccountable regarding what they do with the information they get from your private communication.

No matter what they say in their privacy policies, press releases, or PR, there's no way (as far as I know) to reliably verify any of their claims.

That said, I'd still rather deal with a company which at least claims to respect privacy rather than one that (like Facebook or Google) either spit on it or make money off tracking me and datamining everything they can about me.

[1] - https://www.fastmail.help/hc/en-us/articles/4406536368911

[2] - https://www.spamgourmet.com/

juriansluiman · 4 years ago
The biggest missing feature on Masked Email by Fastmail is they don't remove trackers, as far as I know.

Masked Email gives you more privacy (the identity behind the receiver is unknown) and with data breaches, there's is no login data leaked.

Duck's Email Protection does also remove trackers from the forwarded mails. So senders can't trace back whether you have opened the mail. I hope they also remove click trackers, but I am unsure how they would implement that technology with the referral codes in the URL.

juriansluiman commented on Issue with TLS-ALPN-01 Validation Method   community.letsencrypt.org... · Posted by u/kpetermeni
juriansluiman · 4 years ago
As my Traefik setup is affected, I cleared the `acme.json` and let Traefik get new certificates for all services.

Seems LE is pretty busy right now, got time outs flying around every where.

juriansluiman commented on Ask HN: Good open source alternatives to Google Analytics?    · Posted by u/TekMol
juriansluiman · 4 years ago
As stated by others already, there's Plausible (plausible.io) and Matomo (matomo.org).

I have used both and stuck at Plausible. A few reasons (subjective):

1. Plausible is GDPR compliant by default, it has an effective way to measure analytics throughout the day without cookies

2. It is simple and that's key. I don't need to know much, Plausible just gives me that

3. It's fairly lightweight. Matomo is quite heavy and as my VPS'es are pretty much scaled down, less is just more

4. The Plausible self-hosting doc is centered around Docker, which is the architecture I use myself and is set up in literally a few minutes

juriansluiman commented on Bitwarden Send - A trusted way to securely share information with anyone   bitwarden.com/products/se... · Posted by u/0x54MUR41
nindalf · 4 years ago
I'm probably going to have to leave LastPass later this month. Bitwarden seems like it ticks all my boxes, especially around self hosting. There's a Rust server implementation made by the community that doesn't require much resources so I could stuff it on an existing crowded server I rent.
juriansluiman · 4 years ago
I have done exactly the same more than a year ago. Couldn't be happier. The bitwardenrs server is extremely lightweight so it runs with almost no resources.

Please consider bitwardenrs is a 3rd party implementation, indeed community led, so it lags several features which have been introduced by Bitwarden itself.

See the full list of feature requests in the Rust implementation here [1], but the two things I'll miss most are Emergency Access and now this feature called Bitwarden Send.

[1]: https://github.com/dani-garcia/bitwarden_rs/issues/246

juriansluiman commented on LastPass Android app has got 7 trackers in it   reports.exodus-privacy.eu... · Posted by u/aquir
pizza234 · 5 years ago
Bitwarden is a reasonable alternative, but it's important to be aware of the weak points compared to Lastpass (which IMO, makes it a good-enough-but-no-great-choice).

Autofill is relatively poor (it fails even on HN!). Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed).

All in all though, I do support the recommendation, in particular, because Lastpass works extremely poorly on Firefox (at least, that's what caused my switch some time ago).

juriansluiman · 5 years ago
> Autofill is relatively poor (it fails even on HN!).

Autofill is much more customizable than LastPass afaik. You can both define how (domain)name matching should occur as you can have multiple entries to match.

This means you can have instagram.com (as website) and androidapp://com.instagram.android (as app) which will use the same autofill entry.

If you configure name matching correctly, any site should be able to provide autofill. My HN entry does match with news.ycombinator.com with default matching settings. But matching settings include hostname / domain name / starts with and even regex!

> Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed).

You can specify BW timeout settings. Even further, you can define if BW should lock the session (only a password is required to unlock) or if a sign-out is required. With a sign-out, you also need to provide your MFA if applicable.

Time outs can happen directly (after autofill), after an amount of time (1/5/15/30 minutes or 1/4 hours) or upon closing the browser.

So tbh, there is plenty to configure Bitwarden to suit your needs.

juriansluiman commented on Blog with Markdown and Git, and degrade gracefully through time   brandur.org/fragments/gra... · Posted by u/craigkerstiens
intrepidhero · 5 years ago
For all the (deserved) complaints people have about wordpress, it's been around since before git or markdown was even a thing. For all its faults, its been pretty resilient to time.

The real reason most websites disappear is a much more human one.

juriansluiman · 5 years ago
> The real reason most websites disappear is a much more human one.

So true.

I have had a blog running since 2006, all was php based back then with (html) posts inside a database. The tooling shouldn't be a problem, I switched systems several times (once every few years).

Currently on Hugo with markdown posts. As long as you treat your migration carefully and take some time to migrate, every tool should suffice. It's mostly about human effort and human error when things get lost.

u/juriansluiman

KarmaCake day170January 3, 2013
About
Dutch entrepreneur and occasional blogger at juriansluiman.nl

[ my public key: https://keybase.io/jurian; my proof: https://keybase.io/jurian/sigs/2jlFRm8JMzToO0V9-LL2AfUUrPfN85ZZP49Nt1gwljE ]

View Original