LG very much tries to connect to random Wifi networks to leak your data, Gamers Nexus talks about it in their recent video.

Here’s an arstechnica article if you don’t got 2 hrs to spare 😅

Excerpt:

YouTube channel Gamers Nexus worked with Level1Techs, a technology-focused YouTube channel, and security researchers to analyze LG TVs’ tracking capabilities. They shared packet captures that pointed to the TVs, including LG’s pricey G5 OLED TV, scanning the LAN for other devices.

“The [G5] crawled our entire network and found dozens of unrelated devices, including smartwatches and phones of our staff who didn’t even know we were working on this,” Steve Burke, Gamers Nexus’ editor-in-chief, said.

LG’s ad business, LG Ad Solutions, has said in recent marketing materials that it can reach 363 million “addressable secondary devices” in the US.

Idk if Wholphin will fully fit your needs, but that’s what I use on my FireTV and we love it. It looks sleek as hell and has sone plugins like Serr requests. Weirdly though, it takes longer to load an ep on there compared to my laptop or phone.

Yeah , I love this guy. I learned how creepy precise location is because of him and I basically turn it off for every app on my phone.

After reading Mozilla’s reports on cars a few years back I already felt dread about the day I get a new car, and this will certainly kill me even more.

Here’s hoping Slate cars are reported as reliable/ have good fuel economy in the next few years. Cause I really love how minimalist they are + electric.

I’m not too worried about lack of tls/https for my websites rn, I just want to get working concept lol.

But thanks for the caddyfile, although I’m not sure I can use it since OPNsense seems to like to auto generate the config based on the settings in the UI.

I’ve narrowed down my issue a little more with the help of frongt@lemmy.zip, and I’ve established that:

Pinging immich.homelab.internal gets a response from the correct IP. When typing http://immich.homelab.internal/ or http://immich.homelab.internal:2283/ in browser I get an ERR_NAME_NOT_RESOLVED page.

If I curl http://immich.homelab.internal/, I get: curl: (7) Failed to connect to immich.homelab.internal port 80 after 6 ms: Could not connect to server

If I curl http://immich.homelab.internal:2283/, I do get the html of the site at least.

Through some digging through other people’s forum posts, I made sure to turn off https redirects (auto_https disable_redirects).

I definitely know that it’s failing because Caddy isn’t redirecting my services from port 80 to their upstream port (2283, 8006, etc.), but I don’t know why it won’t redirect, even when looking at logs…

Sorry, I didn’t specify in my original post but I did plan to use .internal for my domains. And I never planned to open my ports on my firewall either so that’s good to know. But I’m still having issues despite this…

Here’s my Caddyfile:

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
	log {
		output net unixgram//var/run/caddy/log.sock {
		}
		format json {
			time_format rfc3339
		}
	}

	servers {
		protocols h1 h2
	}

	email [redacted]
	grace_period 10s
	skip_install_trust
	import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


immich.homelab.internal {
	handle {
		reverse_proxy 192.168.10.247:2283 {
		}
	}
}

import /usr/local/etc/caddy/caddy.d/*.conf

Here’s my firewall config (I allowed any source IP to Destination “This Firewall” & port 443/80 on my LAN/VLANs):

Here’s my Caddy configs:

And I did make a wildcard domain override (*.homelab.internal) in Unbound with this config:

Host = *
Domain = homelab.internal
Type = IPv4
IP = 192.168.10.247

I can ping my server’s IP, nslookup the homelab.internal domain, and ping homelab.internal. So the regular DNS entry is working, I just can’t get my reverse proxy to work…

ONE IMPORTANT THING!!!

Make sure you do it on a chromium browser. I did it on FF a few years ago and was confused as to why it was failing, but when I switched to Chromium it worked. Idk if they fixed that by now, it’s been two years. Not that it bricked my phone or anything, it just took more time.

But yeah the guide is awesome literally just read it.

But I think I have to add, that I use the openwrt machine just as dumb access point behind a opnsense box.

Ooh, can you go more into that? i have Opnsense as my router and this AP is just supposed to act as a WAP. I was struggling to figure out how to have it pull dhcp from the router and not to configure it on the WAP itself. That and DNS too, if the DNS isn’t configured on the interface then I get no internet access.

What hardware do you recommend?

Tbh I just picked something that was in their list of supported hardware that also operated with the Wifi bands I needed and had a good amount of Flash and RAM. Try to take the time to research what wifi drivers suck, such as Broadcomm. Mine is a Qualcomm, I got the Linksys MX5300 Velop Mesh, and now that I got my 3 wifi VLANs set it seems pretty nice. Haven’t gotten to use it much though so we’ll see, but I’m excited.

I do recommend checking how many radios it has because I was maybe considering having my Smart TV on it’s own VLAN but I don’t have enough radios for that. Maybe I’ll put it on the IoT VLAN.

Are there any that are smart enough for a SMB setting where the APs all scan other networks and then talk to each other and set their own channels and power levels to optimize WiFi traffic with minimal channel or power overlap?

Sorry, I don’t know anything about this 😅 You’d have to research this.

I went to AirVPN a few months ago after my Proton was expiring because I needed a VPN with port forwarding. They do a sale every anniversary (somewhre in Spring) and maybe one or two during winter holiday times.

It works like a dream in my homelab (gluetun + qbittorrent) and the Linux GUI client works, although i think you have to keep the app open while using it…

On Android, it’s been jank. Like at first, it worked without issue and was great. But within the past few weeks, sites won’t load, I’ll have to refresh it often, and just general issues. This is happening both on my Graphene Pixel and my stock Galaxy Tablet. I think the Fire TV works well enough.

I did a speed test when I first got it, and for my laptop it only seemed to decrease by a little.

I was considering IP Vanish before I picked Air for the price.