Yeah absolutely if he’s downloading Linux ISOs, just use a VPN and you’ll be fine 99% of the time. TOR if he is doing anything else surrupticiaous. 😬

Not sure why you deleted, you’re right OP did say they had already played it, I just didn’t read that far 🤣 Grounded is my other suggestion. Or maybe Factorio or Across the Obelisk.

Absolutely! Wireguard (for example) uses UDP 51820 (normally) which will mlre than likely be blocked, but that won’t stop you from using something like cntlm to proxy it over an allowed port like 443/80. DPI or some intercepting proxies would likely still filter it.

Client seperation is implemented by the AP. There’s lots of info, it’s called client isolation normally. check this out

Good explanation, a note that most public WiFi will use client separation. Macca’s, starbucks, airplanes etc you will only ever see your device and the gateway. (More for other people that are reading, I assume you know this 😄)

It depends on his threat model and what he’s trying to hide really. Public WiFi is fine, as long as you validate/check the SSL cert it’s using is from your bank and is legitimate. Using public WiFi with a VPN is more secure as long as you trust your VPN provider. If he’s asking these questions, then he’s probably not doing banking though, and should ideally be using VPN+TOR or something similar.

Yes a VPN will hide your IP address from the server you’re connecting to. The VPN service will still see your IP and may log/record it. You also have to watch out for things like DNS leaks.

Wow, you’re from my city! Interesting idea, I was expecting it to be US-based. I see there’s a $3/user subscription. Wouldn’t it make more sense to license it at a school level? Are you already selling g this to WA schools?

I mean, it’s pretty well known 🤣

Can’t believe I hadn’t seen anyone mention “it takes two” great game, was free on Gamepass when I last played it.

LMAO they really are inept 🤦‍♂️

I’ve moved a couple of domains to dnssec and it’s great, simple DNS.

Yeah the whole app is really responsive, works great on minimal resources. Excellent for sharing hikes and trails!

Have you seen owntracks? They have client apps too.

It’s all teapots all the way down.

If you use DuckDuckGo, that’s another easy bypass :d

Yeah it’s getting worse too. It’s still far better than google, for now anyway.

Same! Two zpools on one Debian VM, shares NFS etc for everything else. I pass through PCIe sata cards to the VM, too.

Still does nothing when scanning the entire ipv4 address space achievable so quickly. You can also use services like shodan to find vulnerable services on any ports.

Use SSH keys, stay upgraded. Make management services (SSH, RDP, admin services) accessible only via VPN (WireGuard). Only expose 80 and 443 to the internet, if necessary.

Yeah we can’t stop traffic, it’s in production so we just can’t stop the cars!