myliltoehurts

The above is still true for the upstream regardless, pihole provides filtering - it doesn't replace the privacy provided by using a trusted upstream server and you should still configure pihole to use DoH to the upstream.

Your isp can most likely tell which VPN you're using (unless you also use tor, and even then there's the theories that a lot of it is ran by law enforcement.. depends on how paranoid you are), they will still see the quantity of traffic coming from your home to the VPN and vice versa. All they need to do is to check the IP and they'll likely find it's in use by ... VPN service.

As long as using a VPN is not illegal in your country you can pay for it however you want really (in some places paying with crypto may make it more suspicious than if you just paid for it through PayPal), if law enforcement really wanted to find out the VPN service you use they probably could, the payment would only make it a tiny bit easier.

The key point as mentioned multiple times is to use one you trust, there's no objectively best one, but you'll find a lot of objectively bad ones (for privacy) if you research them. As a start just never use any which are sponsoring YouTube videos or blog articles, pretty much all of those are crap.

VPNs usually route your DNS through them as well, sometimes to other DNS servers but sometimes they just send them to your original DNS server but through the VPN, kinda up to your VPN config - all of the vpn services I've used to date did this, although they were all reputable ones. I'd not recommend to use a questionable VPN though.

Dnssec only verifies authenticity of the server and the integrity of the data, so it helps to prevent man-in-the-middle of DNS, it doesn't provide privacy. Look into DNS over Https (DoH) instead. It provides e2e encryption for your DNS traffic which achieves what dnssec does, but also gives you privacy. DNS over TLS (DoT) also does this, but it runs on a different port so it's easier to block (e.g. if your isp decided they don't like private DNS), while with DoH your DNS traffic looks the same as other web traffic - and afaik it can't be blocked. As above, it's likely this is not needed for use with a VPN, but I'd recommend looking into in general for use even when not on the VPN. Things like controld or nextdns can give you even more peace of mind (although read up on their policies for yourself)

If they forced the maintainer of some FOSS software to merge in some code, even if the maintainer isn't even allowed to speak about it eventually someone would notice (since open source), fork the project and just cherry pick out their crap. Then it's whack-a-mole of trying to keep people from multiplying it.

Or they could claim the software is illegal and have no way to enforce that either.

So basically as long as said software is useful for more than a handful of people, it's infeasible to try to enforce it (e.g. see how it goes every time some software gets a cease and desist, they end up even more popular than before)

Thank you for this, very useful!

Thank you! This is great information.

I use unraid (currently without parity since it's all just stuff I've been okay to lose) with drives I've collected over the years: 2x3TB WD red (one of which is almost 10y old, the other ~7 since it had died once in warranty and got replaced), 1x 12 TB WD red (which is ~3y old).

I was going to add something between another 16-20TB drive depending on the price/TB whenever the next expansion comes up. I've mentioned it in another comment, but I've never used not-new drives and have been fairly shy about them, hence the larger price tag for expansion than expected.

Even if I cut down on my usenet providers/indexers since I've shot a bit overboard with coverage, the cost of realdebrid/alldebrid is still very similar to just the cost of those/year, entirely excluding the cost of disks - hence my interest in feasibility.

This is likely very true, good point. I imagine there is some resilience with there being multiple debrid providers available so worst comes to worst you'd have to pay up for another membership and swap (and I guess hope that the other one still fulfills the purpose).

Findroid is not available for android TV as far as I know so couldn't try it, my other option there would be to use Kodi with a plugin but I've never really been a Kodi user so it's less appealing to me.

It's a bit nitpicky to be fair but:

• chapter API (skip intro/credits), I know it's in the works and there is a plugin but I've found it work much better in Plex (actually emby has this and it's alright)
• the android apps, particularly on TV. I find the jellyfin one somewhat meh for UX. Not huge gripes but just things like how in a list you have to press a button at the top of the screen to display the alphabet shortcut (i.e. jump to all moves starting with a letter). On a TV this is pretty awkward IMO. I know there a bunch of different screens around this, e.g. the one you get with smart screen to go "by letter", or setting the list direction to horizontal allows getting to the button on top easier but it feels clunky to me, so many screens which could be replaced with 1 better designed one.

I do think eventually I'll end up on jellyfin, probably once the chapter API arrives and skipping credits and intro has first party support tho.

Thank you, those are pretty good prices! Have you used recertified drives? I've been fairly scared of used drives so curious if you have and their failure rate compared to new?

You joke but I do actually drink my rum with a few drops of water