If you can’t find time to getting Pi-hole going, check out NextDNS, which is only $1.99 a month and very configurable (if you want. It also has sensible defaults.)

https://nextdns.io

I believe the fellow who runs NextDNS is on HN.

You don’t even need to pay. I’ve been using the free version on 3 devices and I’ve never gotten to max out the number of requests

> The least tech-saavy amongst my family either get Chromebooks (which I despise because Google), or they get a Windows machine that I lock down pretty hard

Sounds reasonable, Installing alternate OS on Chromebooks is also an option[1]. This is especially useful since Chromebooks are often subsidized and portable laptops capable of running Linux (or even Windows) often cost at least 2x more.

Note: Alternate OS on Chromebooks doesn't guarantee bypassing hardware level data collection if any.

> I'd like to install PiHole

Add NETDATA[1] to the same device you're installing PiHole in and set up alerts on Netdata. This way you can get an notification when there's weird activity on the network(not just silent blocking), e.g. You'll see apps from your phone, tablet calling out their analytics mama during midnight to push out data.

[1] https://mrchromebox.tech/

[2] https://learn.netdata.cloud/guides/monitor/pi-hole-raspberry...

Interesting! Now I have extra reason to set-up that Pi-Hole :) Thanks!

Also go here https://identitytheft.gov and make sure to follow the steps they have.

The problem with Twilio numbers (or any other VoIP) is that most websites don't accept them for account creation.

If you're really going to go down this rabbit hole (and this is HN, after all) you should consider creating and maintaining a "2FA Mule":

https://news.ycombinator.com/item?id=28251107

Interesting! This honestly does not seem that awful to set up at all.

This is pretty cool, but it adds flexibility rather than security.

I seem to be on a continual quest for better backup/storage. I'd love to hear more about your NAS setup.

I doubt it's the perfect backup set-up, but I've been able to do regular restore tests.

I have a Synology NAS which has a Borg community package. I use BorgBase for remote backups, and have another local backup on one of the volumes in the NAS. I keep dailies for a week, monthlies for a year and three yearlies, with automatic pruning.

Once a year, I do my best to back-up my most important stuff on DVDs, but I'm not a very disciplined person. I keep them on a spindle, which is also probably bad practice.

Yes, me too. I've got a unraid nas at home and I've really struggled to figure out a no hassle backup solution.

Not very familiar with self hosted emails, could you explain how the subscription emails work? How does putting the website before the @ work? Does your email server then forward those emails to the corresponding family member since I’m guessing the email address doesn’t exist before subscribing.

i use mailinabox on a cheap vps. 10-20 minutes install no problem. what the poster meant was [email protected] here 12 is family member code and hackernews is the actual website where that person is trying to get registered.

this is pretty awesome setup because if you get spams from anyone, you can simply see which family member signed up for which website and which one is leaking data. the next step, if required would be to delete that account/email and be done with it. no more spam, no more going back. If you do need that email in future, recreating it would be trivial, like if you need to get back into an old account or the like

Each family member has a subdomain all to themselves. The website before the @ allows them to know where the sender got the email address from. You can have catch-all addresses on emails, so anything without a mailbox is sent to the default mailbox that's configured.

It need not be self hosted to do this. Most email providers provide this functionality.

That's exactly right. I don't self-host the email (you can use any service that takes catch-alls like mailbox.org).

anything '@subdomain' gets forwarded to its respective family member's email.

your tutorial for locking down windows is super useful, thanks! Any recommendations for remote administration? I would like to set this up for my parents but need to be able to address any issues they might have w/o a transatlantic flight ;-)

My parents have different levels of technical skills but I help both. My Dad is a nerd - I didn’t see it coming but I’m planning on stealing his lunch money the next time I get to see him. My Mom really hates computers and though I know this isn’t technically possible, they seem to hate her back.

Despite their differences, I can use Quick Assist with both. And between my Dad’s sudden turn towards becoming me in high school and my Mom’s innocent transgressions, I’ve never run into anything I couldn’t fix with it.

Worst case scenario, my Dad and I have talked about a volunteer based group of people who help other cats around his age. If your parents are on the same side of the ocean as we are, we can help in a closer timezone. My Dad is a retired police officer (you can trust him) turned nerd (you maybe shouldn’t trust him) and I’ve been drafted into the odd role of his nerd supervisor. If you’re worried about your folks, he’ll give them his phone number.

You should blog about this. Super relevant now w booming boomer demo.

Glad you liked the tutorial :)

I don't have a lot of experience with remote administration, but I use Tailscale with RDP/VNC/SSH to access my own machines when I'm away from them.

I like to avoid TeamViewer/AnyDesk/etc... because the GUI makes it too easy for folk to get scammed (watching Kitboga all these years makes me want to avoid them like the plague).

AnyDesk is free for personal use, as long as you're not for some reason domain joined.

>I check master passwords against HaveIBeenPwned

How?

I'm just imagining the wallet inspector from that episode of the Simpsons

haha, yah there's a deal of trust in managing systems like this. Luckily they can also check the passwords themselves, but I try to teach them not to input their master password into websites that aren't on the bitwarden domain.

I use the website directly https://haveibeenpwned.com/Passwords

Has no one wrapped up the above into a business?