I think a lot of companies view their free plan as recruiting/advertising — if you use TailScale personally and have a great experience then you’ll bring in business by advocating for it at work.

Of course it could go either way, and I don’t rely on TailScale (it’s my “backup” VPN to my home network)… we’ll see, I guess.

Can you explain the Ethernet requirement more? Was that just that the computer didn’t have WiFi, or was it set up such that only the wired interface worked with their VPN, or…?

Can you explain your travel router situation? Did you use the travel router to access WiFi and provide an Ethernet port for the computer (I think this is called “WISP mode”)? Or was this an 4G/5G router?

In any event, at least on Android you can connect to WiFi and tether to a computer over USB. It’s very useful for setting up a computer without WiFi drivers, as Linux will almost always recognize the shared Internet (so, it’s functionally a USB wifi dongle with very good driver support).

Hopefully you can publish in an open-access journal — if not it would be great if you could share an arXiv preprint :)

Bonus points: use non-qwerty keyboard for added obfuscation (but keep the qwerty key caps of course).

Physics is like sex: sure, it may give some practical results, but that’s not why we do it.

— Richard P. Feynman

I think the same is true for a lot of folks and self hosting. Sure, having data in our own hands is great, and yes avoiding vendor lock-in is nice. But at the end of the day, it’s nice to have computers seem “fun” again.

At least, that’s my perspective.

Whatever you decide for your laptop, I’m a proponent of a barebones off-site setup if you’re trying for 3-2-1 backup or similar.

I use a raspberry pi 3 with a single HD (ZFS) retaining some number of daily/weekly/monthly snapshots. Daily rsync, everything over WireGuard+VPS (TailScale would work too).

Same — rsync to a pi 3 with a (single) ZFS drive at family’s house. Retain some daily/weekly/monthly snapshots.

I have a (free) VPS with static IPv4 which is how I connect everything.

Both the VPS and the remote site have limited network speed (I think 50Mbps for VPS), so the initial sync was done sneakernet (well…“airplane net”). Nightly rsync is no problem bandwidth-wise, and is mostly just any new videos I’ve uploaded to my local Immich instance.

To each their own though? I can’t imagine why anyone would want something other than i3 (or similar), because almost by definition the DE is not the program I fired up my computer to interact with, and i3 “gets out of the way better” than most others in my experience.

But…that’s just my use case. It’s a horrible UX for most people, just happens to work well for me.

I feel old…when I was learning how to run Linux I started with an old 386 (maybe 486?) my dad wasn’t using. I think it had 32MB RAM, which was fancy for those machines.

We had dial up at the time, so only one machine could be on the Internet. So, I set up a modem on the x86, plugged into an Ethernet hub (switch?), and learned enough ipchains (this was before iptables) to share a connection. It also ran Samba, an AFP server, and probably FTP and HTTP (just for local access) — but it worked for filesharing.

It could also run MP3 streaming software which amused me because the machine itself was too slow to decode MP3 (but that’s not necessary to stream).

I just wish we’d have neither inflation nor deflation.

Some tech has followed this pattern. For example: entry level Mac laptop in ~2000 was the iBook, priced at $1599 ($3k+ in today’s dollars). The current entry level Mac laptop (M4 Air) starts at $999 — cheaper in absolute dollars, and way cheaper in relative dollars.

(Macs are just an example since Apple doesn’t have a very extensive product list, so there’s only one “entry level” laptop to choose from. And yes it’s fair to ask if the relative specs have just gotten worse, but I think this is also the opposite — the iBook was iirc criticized as being underpowered, whereas the M4 Air is afaik well regarded.)

D’oh, I’m a doofus — it’s search that I was thinking of (apt-cache search, not apt-get search).

Can apt-get refresh package list?

Edit: yes…yes it can. I was confused.

Sounds like you’ve only ever used desktops and/or laptops…

Fail2ban config can get fairly involved in my experience. I’m probably not doing it the right way, as I wrote a bunch of web server ban rules — anyone trying to access wpadmin gets banned, for instance (I don’t use WordPress, and if I did, it wouldn’t be accessible from my public facing reverse proxy).

I just skimmed my nginx logs and looked for anything funky and put that in a ban rule, basically.

Windows is just as hard as linux, harder even with all the layers of obscurity.

With Windows, there is 1 current version of Windows (11), 1 “almost current” (10), 1 “outdated but you’ll maybe see it” (8.x) and only a few “you’ll probably only see this in obscure situations” versions. Linux has as many “parent” distros/package management systems (apt, rpm, pacman, etc.). This definitely complicates things, as each distro family does things slightly differently.

And we haven’t even touched the window manager/DE choices, of which there are a ton (as opposed to Windows). “Combinatorical explosion” maybe isn’t the right phrase, but you get the idea — Debian with i3wm is wildly different from Fedora Plasma.

This is all a good thing though, as Linux users tend to like the choice and flexibility — but it does mean that the “right way” to do something on Linux is very dependent on your particular setup, which isn’t the case with Windows.

(I have used Linux for the last 20+ years, and it’s definitely my preferred setup, and am lucky enough that I rarely use Windows for work, and never for personal use.)

And many folks have headless setups — raspberry pis, home servers, VPSs, etc. It’s kinda overkill to install a desktop environment on a headless box if the only reason you need it is so you can VNC into it for a simple task that could be done over ssh.

For some (most?) of us, we don’t have ssh access open to the world, so everything is over a VPN. So I can just use NFS over WireGuard which afaik is fairly secure, if you trust your endpoints, and works great over the Internet.