• 0 Posts
  • 23 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle
  • I’ve been happy with the tp link TV-IP324PI, it’s a Poe bullet cam with a simple web interface (I don’t think it requires JS, but at any rate you just need to log in once to set a password, make sure upnp is off, and adjust camera/encoding/fps/text overlay settings to your liking). There’s also the amcrest IP5M-B1186EW-28MM, another similar Poe bullet cam with night vision that works local only. I’ve used both for several years and I think they support onvif but I had no issues using the rtmp url with zoneminder


  • Haha I’m glad you found it inspiring - I only ever intended for it to be a temporary exercise in overkill networks but I love squeezing ISPs for what they’re worth and I just kept getting lucky.

    Beware that getting multi gig wan is a very good excuse to overkill your network with 10gig firewalls, switches, and the latest bleeding edge draft-standard-based wifi gear, on the plus side you will always have a retort when someone online says you could never need mgig home gear because surely your wan can’t be more than a gig anyway.


  • I think a better comparison re: cars would be if inspections could only be performed by Ford or GM and the inspection rules were made by them instead of the government. They could say: we’re no longer passing inspections on models older than 5 years old, or if you used non-approved oil or filters the toll roads are gonna block you. They could put ads on your infotainment system and say you won’t get an inspection pass if you block them or replace the infotainment system with something else. Did you bypass the subscription lock on your heated seat? No more highway driving for you.


  • Ok so strap in…

    It started with splurging on gigabit pro, the obscure fiber service they will only sell if you call a special number, have a back and forth with a small property manager, and wait for them to check your proximity to fiber and get approval from their finance department on top of a $1000 install fee (discountable to $500). Once I had gigabit pro (6 months and several approvals later), things got started as a result of repeatedly humoring the comcast salespeople every time they called to try to upsell me to cable TV. Since none of the residential salespeople were familiar with gigabit pro, which is installed and managed by the business side “metro-e” division of comcast, they were always shocked to see I was being billed $150/mo and assured me they could get me TV bundled and reduce my price (gigabit pro is often discounted so I was getting 2 years at 50% off the standard $300/mo price, I was actually planning on cancelling as soon as that ran out because there would also be an early cancellation fee). They would spend like an hour trying and failing to get the billing system to bundle in TV because I assume the residential billing system is probably only set up to bundle TV with residential high frequency cable internet packages. Eventually they would give up and tell me they would reach back out. Sometime later, I would get another sales call from someone else offering a TV bundle and the whole thing would repeat again.

    I think I spent a total of 6 hours on the phone across several occasions spanning a month or more (multitasking of course) just being entertained that they couldn’t figure it out when one day the salesperson got their manager to override the billing system and they re-entered my plan from scratch. Every step of the way I told them I was happy with my speed (I was hoping that way they wouldn’t notice I was managed by the metro-e team) and would only agree to bundle if they also dropped the 2 year contract I was in, and they agreed. So when they re-entered my plan, they erroneously entered in regular gigabit service. Since there would be no speed change I guess they didn’t even look at the modem provisioning let alone notice that my “modem” was listed as the Juniper fiber switch that is normally rented out for fiber service.

    Later I cancelled the TV part of the plan and was just left with the gig pro fiber service while my internet bill went down to the normal gig price. Not being completely satisfied I later called a few more times trying to negotiate my bill even lower. When I finally succeeded at negotiating my bill a few more dollars lower over live chat support, they made the mistake of sending me an xfinity combo modem/router self install kit - maybe because I didn’t have a modem attached to my account that the system understood. I decided to just try to activate it and see what would happen, surprisingly I was able to activate it on my account while the fiber service was still active. I took advantage of having an actual returnable modem and swapped it out with a purchased modem to get rid of the modem rental fee which I was originally made to pay for the fiber switch, which further lowered my bill. So to this day I have 2gig symmetric SFP+ with an additional 1gig symmetric rj45 powered by fiber as well as the standard cable modem with an additional 1gig non-symmetric connection for a total of 4 gigabit download and 3.035gig upload.

    To top that all off for several years I gave 1 gig out of the 4 that I now have combined to our neighbors through a moca adapter so for a large portion of my time here I have only paid $40/mo split with 4 total roommates, so my monthly portion would be $10/mo

    TL;DR: I splurged like a $500 install fee to get gigabit pro which is super obscure and took 6 months to get all the approvals, then I kept interacting with customer support and salespeople while taking advantage of their confusion and the fact that the residential folks don’t interface with the business fiber / metro-e folks to reduce my bill by tricking them into billing me standard residential price with a TV bundle that the salespeople REALLY want to sell you on, then I continued haggling for a few more dollars off resulting in them sending me a normal modem, which I set up and immediately swapped out with my own modem for even more money off. I also ended up splitting this extremely haggled bill with our neighbors (in addition to roommates) so my monthly portion has ended up being $10 since these 4 gigabits are split among 9 people who combined rarely even exceed 1 gig.


  • I’m about to move away but currently I cheat Comcast out of gig pro in the Boston area for the price of regular gig service, $90/mo for fiber to the basement, 2gig symmetric sfp+ and a separate 1gig symmetric rj45. Highly recommend if you can avoid paying the full $300/mo price (not sure if the full price has changed in 5 years but that’s what it would have been if I didn’t confuse the fuck out of customer support to get them to incorrectly bill me). I’ve tested both lines simultaneously and was able to max out both at a combined 3gig up/down using 2 simultaneous speed tests.




  • I would recommend getting a separate client radio device for several reasons:

    • You can position it better for reception
    • Get a device with directional antenna so you can point it at the best AP
    • You won’t use up 1 band of a dual-band router
    • You won’t be limited in your main router firmware choice to only those that support client mode on a radio

    Personally I would get a nanostation loco 5ac (non-loco is bigger and probably isnt needed) and flash openwrt on it (that will free any airmax radio from the proprietary airmax limitation), configure the 5GHz radio to client mode with the apartment wifi details, and put in the desired mac into the mac field if you need a specific mac besides the device default. Make sure the radio is set to wan zone so that forwarding works and plug the lan cable from the radio to the WAN of whatever nice router you have.

    I used to carry around a nanostation with this config set to xfinity access points with a small script that would pick a random MAC from a list I gathered from wardriving client MACs that I saw authenticated with xfinity hotspots. That way if I ever needed an ethernet connection for a non-wifi device I could just power up the radio and run the script to pick a new mac until I got one that was “remembered” in someone’s xfinity account.

    Edit: to clarify, I think the way I set it up was to run dhcp client on the radio’s uplink and then hand out IPs via dhcp server on the lan port, so I think you’d be triple natted, but since you would need to double nat anyway to get around the MAC authorization it probably isn’t hurting speeds any more than it already would be.




  • If you use the older Chromecast dongle that doesn’t have android TV and no remote (the circular ones) you should be able to use castblock to auto mute ads and automatically press the skip button as soon as it shows up. It also has sponsorblock support so it will auto skip sponsor segments too. You just have to run the program on the same network with flags specifying you want it to mute ads, skip ads, and give it the list of sponsorblock segment types to skip and it’ll auto detect any Chromecasts and do it’s auto skipping and muting magic


  • I think the best solution right now for older Chromecast (ones without a dedicated remote) is running castblock on a raspberry pi or something else attached to your network. It doesn’t block ads but it can automatically mute the chromecast volume when ads are playing, as well as automatically hit the skip button when it shows up (maybe like 5% of the time it misses both but still better than nothing). It also looks up sponsor segments from sponsorblock and detects when a sponsor is about to play and can skip those too. It auto detects all Chromecast on the network so all you have to do is run the program with the flags for what features you want enabled / what sponsorblock segments it should skip.

    If you have a Chromecast with Google TV (with like a remote control and apps) I’ve heard smarttube-next is a good alternative app with ad blocking.

    I’m not sure what works with TVs that have Chromecast built in, might also be smarttube-next. I only have the Chromecast ultra and the older standard Chromecast and castblock works great running on my pihole box





  • This is the solution. I reverse proxy from a digitalocean droplet running haproxy which sends traffic via send-proxy-v2, then I set the tunnel subnet as a trusted proxy ip range on traefik which is what haproxy hits through the tunnel, which causes traefik to substitute in the reverse proxied original ip so all my apps behind traefik see the correct public IP (very important for things like nextcloud brute force protection to work)



  • The only realistic thing that the NDA could have contained was stipulations around leaking details about Threads. Who cares. Some admins probably wanted an inside look so they agreed to not leak any details. That does nothing to put their instances under the control of Meta. Yeah sure the admins are “controlled by the contract”… to not share any secrets about Threads. Again who cares.

    People dreaming up scenarios about the NDAs including clauses that let Meta control instances or their admins are delusional. As someone working in tech I sign NDAs all the time when I visit my friend’s companies. It doesn’t mean they have any control over me besides stopping me from leaking stuff that I see inside the company.