The Tor Project has announed that a new release of Tor browser is out 9.0.1

On the Fediverse earlier this week I asked about starting a YouTube channel for the podcast. Just to look for exposure to the apps and Fediverse that I am trying to evangelize. How easy it is to actually use them, host them, blah, blah. You know the speil from me by now. Now I'm not talking about abandoning PeerTube. I love me some PeerTube. But this YouTube content will be centered towards the average everyday "I got my coffee and I'm sitting in the break room watching YouTube on my phone at work" person. Again I want to show these people that if a guy like me can do this so can they. I am anything but an educated indvidual. I tried to go to tech college for electonics, I hated it. Ya know, I think I'm gonna have to let you all in on a little secret right here, right now. I've never told anybody this. And most people outside of my immeadiate family dont know this. I dont think I've even told one of my best freinds of 20+ years.

I dont have a high school dipolma! Hell, I dont even have a GED. Thats right you are listening to a high school reject. Not to toot my own horn but I think I've done pretty good for myself over the years with out a little peice of paper that says I know how to do things. For you older people my age dont ever think you ar to old to learn something. You have an advantage that these young kids dont. You already know how to learn. And for you young kids, and by kids I mean anybody from the age of 49 all the way down to just starting to go to school. Dont ever let anybody tell you that you cant learn something. You first steps, just like when you were a baby was to crawl before you learned how to walk. So keep trying and dont ever stop learning because somebody told you to. And that really goes for anybody. Never stop learning, never stop trying and never, ever give up!

Just as a disclaimer

I do plan on implementing ads on this channel and will start live streaming the recording of this podcast (which is usually Sunday mornings) plus random streams from my phone through out the week. The main reasons for the ads are..

Yunohost 3.7 Testing asking for feedback

Major changes are:

Tor - New campaign, Take back the internet

Pine64 announces round 2 of pre orders for the Pinebook Pro on 2019-11-05 if anybody is interested in buying me one I would graciously accept it! The original $99 Pinebook will take orders in early 2020.

Want some free swag? November is LibreOffice month!

Null Byte - Finding passwords in log files with Google Dorks

Redhat - 3 ways to reduce your attack surface on Linux

Hacker News - New Chrome 0-day Bug is under active attacks-update now!!!

Hacker News - Leading web domain name registrars disclose data breach

Hacker News - Chinese hackers compromise telecom servers to spy on sms

I ran search for Open Source password managers and came up with theses.

I'm gonna try KeePass and use KeeWeb on my Yunohost! Will report on this in a month.

Does anybody know any good sites to get news about the Fediverse and privacy/security that relates to it? Please let me know!

https://reclaimthenet.org/facebook-page-owners-reveal-private-information/

https://reclaimthenet.org/mailchimp-freedom-press/

https://reclaimthenet.org/anti-meme-bill-blocked/

Pubcast - Pubcast is an open-source, experimental replacement for RSS built on ActivityPub.

WriteFreely - WriteFreely is free and open source software for starting a minimalist, federated blog — or an entire community

Plume - A federated blogging application

Why I love Unfa even though I dont listen to EDM.

Advert - This episode is brought to you by The  Fediverse. The Fediverse is a collection of nearly 40 decentralized apps  that can connect with each other. You can join or even host an instance  yourself on your own server. More than just social networks they cover  just about everything from blogging to cloud storage. PeerTube, Plume,  FunkWhale  Visit Fediverse Party to learn more today!

It’s episode number 13 of TSHP I’ve got more news, some consideration  to do and whole lot to talk about starting right here, right now!

Theme Music - “Plastik” by Unfa

Hello and welcome back to another exciting episode of The Self Hosted Podcast! As I said we got some news and a couple of considerations I want to talk about.

10/19/2019 at 7am est - Eugen the developer of Mastodon tooted that just this week there has been 2400 new user signups on Mastodon.social this week.

Funkwhale releases .20.1

Mobilizon is now beta

Debian released sudo v1.8.28 that fixes CVE 14287, the vulnerability that allows users to run  applications as root without permission. It really only affects you if  you’ve configured sudo improperly but I still recommend upgrading as  soon as the update hits your mirror. - H/T Amolith

Whch is going to segway into the other links section.

Nixnet

He also has an awesome blog! Follow him on Mastodon or through ActivityPub at the link in the H/T.

I’m considering joining the Federated Networks Association or at least supporting it.

What they do

I started doing some blogging and one of the first posts was asking if I should start another podcast. Well after asking on Hubzilla a couple of you actually responded stating that I should just use this podcast.

There is a video that I recorded for this to show Hubzilla. I will post it tomarrow in it’s own post.

Quick bit of news and then we play with Hubzilla. Right here on episode 12 of The Self Hosted Podcast!

Yunohost has been upgraded to 3.6.5.2 along with Yunohost Admin  panel. It is now at 3.6.5. Nextcloud-ynh has also been updated to 15.0.11. I ran into an issue just after upgrading. I was getting an “api not  responding” error and ended up logging out and doing something else for  about 10 minutes. When I logged back in everything was working so it  seems to have fixed itself and all is right in the world of the  bonehead. It turns out that this is normal. Some apps will need to  restart nginx which during this time the admin panel cannot access it.  So just be patient and it will fix itself.

Yunohost is looking for help in translations.If you can help by doing some translations please go here.I got an email from one of the devs and they say that they need the most  help with >When running YunoHost in any locale, (even English) it still remains  the case that the stringbase is lacking, or flat out erroneous.

Dont know if I should let this cat out of the bag yet but I’m going  to. Yunohost is going to start a blog for news and updates. You can help  with this if you like by folowing the repo on github.

Critcial Know ErrorIf you subscribe to the feed in the upper right corner of the site https://boneheadmedia.com/index.xml in Nextcloud News you will get an error. I can not reproduce this on a  desktop or mobile app but I know what the problem is. That file is  generated by hugo and it prints out lacking a closeing tag. I will try  to solve this issue but since the site is generated by netlify and  github using hugo everytime I fix it on github it regenerates the  screwed up file and I go in a vicious circle.

Yunohost package

Hubzilla main page

Hubzilla code on Framagit

Hubzilla addons on Framagit

Hubzilla is a social networking platform built with control of your  privacy at center stage. Your online communications can be as public as  you wish or as private as you require. Private conversations, private  photos, private videos. Your media isn’t hidden behind an obscure URL  which can be guessed, it is protected by state-of-the-art cross-domain  authentication. What this all means for youis less drama.

It does require a dedicated domain so if you are using a domain from  Yunohost you wont be able to install it. If you have your own domain  such as boneheadmedia.com you can intstall it in a subdomain such as  hub.boneheadmedia.com. It also requires that you have an ssl cert.

I’m back! Now with a redneck, tricked out Frankenputer latop. But its  powered by KDENeon and backedup by Yunohost. It’s episode 11 and I got  some news, opinions and updates for you right here, right now on The  Self Hosted Podcast.

My laptop broke. Thats why I’ve been silent. But I was able to jerry  rig it enough that its usable. I’ll post pics or you can go see them on  Mastodon. I’m using KDENeon and I am loving how easy it is on the ram. It really  quick and light. Plus I’m on a newer kernel instead of using a low  latency 4.xx on Ubuntu Studio. I may just keep this and be rid of US  forever. But I do want to try Manjaro really bad. I used Arch once  before but I borked it and decided it was not for me. But I hear nothing  but good reviews for Manjaro for the last couple of years now. Plus its  what Unfa uses. And if its good enough for Unfa to create the beautiful  music he does with it why wouldn’t it be good for a podcaster? Some quick stats about you from Anchor. As you know these are only  tracked if you are using an app on your mobile or listening to it on  Anchors website. If you manually download from the show notes I have no  idea who you are or where you are from. As of this recording 603 plays. And there is estimated to be at least 50  of you that listen to me every time I put out an episode. Thank you and  I hope you are getting something out of this. 59% of you use Android while only 17% of you use iphone. 24% of you are  listed as other so I am guessing that is on the web. I also know that 51% of you are in the US with UK, Germany, Australia  and Canda rounding out the top 10. In total this podcast is being  listened to in 26 countries around the world. I sincerly thank you and hope that I am inspireing you to get into  hosting your own data and taking back control.

FreshRss A free, self hostable aggregator I have fallen in love with it. Its clean and easy to read and use. Looks and works good enough on mobile that you dont really need an app. Has two different api’s. Greader and Fever

Go here for full show notes and links

Support me on Ko-fi

Suport me on Librepay

Just a few quick things to go over before we get started.

- I've updated the front page of [Bonehead Media](https://boneheadmedia.com). It's now just a static html landing page. The show notes for (eventually) all of the podcasts will be on the [posts](https://posts.boneheadmedia.com). 

- I started a [Ko-fi](https://ko-fi.com/unklebonehead) and [Librepay](https://liberapay.com/UnkleBonehead/donate) pages to get some funding for a vps.

- I'm trying to get [NTROradio](https://ntroradio.com) back up and running. I want it to be a 24/7 station that I can go live with anytime I want to. I would eventually like to have it so that other people from other staions can either jump on live or syndicate their shows on. I already have the site up but it only streams when I am live. I cant seem to get any player to work but you can at least listen to the link in VLC, Rhythmbox, Clementine or any app that supports a stream link. The link will also play in a seperate tab. It's going to have a podcast to go with it.

Full show notes here

More achievements unlocked, Searx, Grav Flat File CMS, new podcasts emerging and how to get help with your Yunohost install the proper way. Plus as a bonus I play two of my original songs. Work it Out and Hammer On Down. This will be the only time I play them until I redo them completely in Linux. (I used windows for the drums on them). Download for free if you like them. Feel free to play them in your podcast if you have one! 

Download Mp3

Work It Out 

Hammer On Down

At the time of this posting Fediverse.blog (where I post the full show notes) is down. I will edit this on Anchor when I get a solution.

Housekeeping

It seems that this podcasts goal has already been achieved. It has inspired 2 people to start self hosting. I got a couple of notifications on Mastodon that one is researching on how to self host on bsd and the other actually installed Yunohost! Thats frickin AWESOME! 

CONGRATS TO BOTH OF YOU! And I sincerely hope it works out for each your situations. Especially the one doing it on bsd. I want to know how you end up doing it!

Keep in mind If you aint root, you dont own it.

Own your shit!

Additional Security points from a Yunohost Dev

Alek, one of the main dev/contributor on Yunohost's core and project managment team sent me some additional points to remember about security. The emphasis is mine.

>- **One of the key point of security is to limit the attack surface**. Don't install apps just for fun or give access to the user "because it's convenient and might be useful later"

>- Don't get too crazy about using the top-notch security ciphers with 4096bit keys or whatever. It doesn't matter. Usually the weak link of the security is elsewhere - either human or technical.

>- Last but not least, there is no such thing as "being secure".** Security is a process, and is always a tradeoff with usability**. 

>

>For ex, in the context of Yunohost, we have fail2ban configured to ban after 5 failed auth attempt. We see that it triggers a lot of false positive (legitimate users trying to login and getting banned for misc reasons). 

>

>**But point is, even if you get to some perfect "technical" security, the human part of security is not to be neglected **

I know that this is'nt something new. Framasoft and other people have already launched a similar campaign a year or so ago. So I admit that I am riding the coat tails of some big peeps. But since I've joined the Fediverse and really embraced it and the whole "control your data" movement I've noticed that there are an awful lot of, I dont know what you call them, bot accounts? It looks like its a bot that is just reposting crap from Twitter accounts on Mastodon. Somebody is prolly just being lazy and wrote a script that will copy/paste something to Mastodon. But I ask why? Why stay on Twitter and bitch about Twitter? Why stay of Facebook and bitch about Facebook? 

So far I have deleted all Instagram, Twitter, Apple, Amazon and Microsoft accounts. I have 1 google and 1 facebook remaining.

Housekeeping

I just recorded episode 4 of The Self Hosted Vidcast. I uninstalled Wordpress and showed how to install a static html site on Yunohost.

Bonehead Media is back to being a simple static html site. It's only got 2 pages that I built in Bootstrap Studio. I'll flesh it out more in the future. 

I would like to turn it into a theme for Pelican or Hugo and post the shownotes to the front page. But that will require more effort on an ongoing basis for me. Plus I already have my stuff posted to the Fediverse. The reason behind that is three fold.

1. It has the coolness factor that you can subscribe through Mastodon (and the rest of the Fediverse) or the RSS feed.

2. Just in case something catestrophic happens to my home server you will still be able to get updates. 

3. It will drasticaly reduce the traffic to my home server. 

I'm looking for a better Markdown editor for Ubuntu. I'm currently using Remarkable and it works good but I would like to try something new. 

Does anybody have any suggestions? I definatly need something with a preview since I am using it write shownotes.

I'm testing out recording a bit differetn today.

Zrythm - Is an awesome looking new DAW that looks very promising! It's written by a small dude I'm following on Mastodon named AlexTee

Security

YunoHost has been developed to provide the best security without too much complication. Every protocol used in YunoHost are encrypted, only password's hashs are stored and by default each user is able to access to his personal directory only.

If you need advice, do not hesitate to ask for help! 

Go to The Fediverse for the full shownotes.