SteveTech

also allow responses from any established connection

You shouldn't need to as iptables is stateful, you would need to for stateless firewalls though.

You'd also need to open UDP 123 for NTP, I see that mistake a lot.

Some image formats will ignore junk data after the image. So you can probably run cat image.png message.txt to embed text in image files, although I haven't tried this myself.

You can still have that script, but put it on the releases page. Git works best with actual source code and it doesn't belong there. You should also add an extra script that generates one of those 'compiled' scripts to the git repo, so that people can do it themselves.

I can find the official Pi Pico for $3.50, I'm sure clones are cheaper than that.

But that means that someone else's server is used whenever you leave your home network.

I'm pretty sure syncthing does NAT hole punching, so someone else's server is only used for initial connection, after that, your data goes directly to your devices.

Maybe it was used as some sort of privilege escalation? E.g. NP++ downloads an XML file to %TEMP%, some already present malware modifies it, then GUP downloads a payload and executes it with administrator permissions.

It's easy enough to add your own secure boot keys, you can even remove the Microsoft keys so that only your OS will boot.

windows server edition which not possible to get if u are not business client and it cost 800$

It probably depends on your uni, but students can get Windows Server licenses for free on Azure Education.

It does DNS already, so why do I need an external DNS server?

You need an external DNS server to access it externally. If you're happy with internal access only, you can probably set some sort of DNS override in UniFi.

There are things I don't understand about the machine that also make me think AI, but Google Translate seems to understand so maybe it isn't?

Edit: Actually I think AI is better than I thought it would be.

This isn't about Firefox, and there are zero mentions of Firefox in the article. This is about Mozilla screwing over their volunteers by replacing their human written translations, with inaccurate machine translations written by a closed source LLM.

It doesn't really matter how you setup dynamic DNS and SSL. I prefer to handle dynamic DNS on the router, incase it's smart enough to refresh the IP after DHCP renews it. I do SSL on a seperate nginx instance, but I run a few other sites; it might be easier to configure it directly on home assistant, but I haven't tried.

If you want some extra security, I'd look into mTLS, as that establishes some cert based authentication at the TLS layer before HTTP, but it can be complicated to configure.