Unterschätze nicht, wie vielen Leuten die mentale Schwungmasse fehlt, um den rechten Mob tatsächlich als Gefahr einzustufen. Das sieht man auch an der Auswertung der Wahllokal-Umfragen: Je weniger Bildung, desdo mehr AfD. Und wenn Du Dir dann vor Augen führst, dass die Hälfte aller Menschen um Dich herum in der Stadt oder im Bus einen IQ von unter 100 haben, dann wird da schnell ein Schuh draus.

Ich habe aber auch kein “Instant-Rezept”, dieses Problem zu lösen. Jahrzehntelange Fehler von vielen Seiten lassen sich eben nicht schnell beheben.

Die letzten, die den Faschismus selber miterlebt haben, sterben aus. Und die anderen kennen es nur aus Erzählungen und dem Geschichtsunterricht - wenn überhaupt. Ich habe das alles erst später wirklich gelernt, meine Geschichts-Lehrerin war eine Katastrophe.

Wie sollen normale Menschen solche Gefahren erkennen und einzuordnen lernen? Die sehen nur die vermeindlich einfachen “Lösungen”, die ihnen von rechts vorgelogen werden, und machen halt ihr Kreuz da, wo ein schnelles und schmerzfreies Ergebnis versprochen wird: “Ausländer raus, und alles wird gut!”

Dazu kommt, dass die Leute mittlerweile begreifen, dass sie von den Etablierten Parteien egal welcher Coleur jahrzehntelang beschissen wurden. Geld kennt hier nur einen Weg: Weg von denen, die arbeiten, hin zu denen, die eh schon zu viel haben.

Julian, das sind deine Leser. Die sind so, weil du die so geformt hast.

You don’t own anything that is not on your own system and/or without any DRM.

Well, I think it is necessary if you have mobile devices. Anything nailed down should be connected by wire, but if it is mobile, it should get the connection. Especially if the cell phone link is not that good inside the house.

MAC whitelist.

I know that this would be the most secure way. But I seriously doubt that this level is necessary in a normal home network.

That’s what MAC whitelists are for. Your DHCP server should be able to handle this.

Identify your friendly devices and give them one setting with everything (full subnet and correct default GW). Identfy your IoT devices, and give them another (full, or specially limited subnet mask, and fake default GW, maybe a different nameserver, too). Anything else is guest and gets a very limited subnet mask and a working default GW.

I’m pretty sure I don’t do this ;-) I know how routing works.

Then why don’t you ask the people who do this?

But you don’t need several LANs for this. This can easily done with proper routing. A can access internet and internal network addresses. B can only access internet, and C can only reach internal addresses.

Why would you want to do this, anyway? Or, as I as a developer regularly have to ask our sales people: what do you actually want to achieve that led you to this question?

Keep in mind that AD, Office, and Exchange is he holy trinity of getting hacked in the last years.

There are companies that sell parts from used servers, e.g. SAS controllers for PCI.

I’ve got systems that can detect suspicious activities in the net, which result in a shutdown of the router. And not like “could you please shut down” but a hard power off type of shutdown.

Indeed. Whatever you put in a cloud needs backups. Not only at the cloud provider, but also “at home”.

There has been a case of a cloud provider shutting down a few months ago. The provider informed their customers, but only the accounting departments that were responsible for the payments. And several of those companies’ accounting departments did not really understand the message except for “needs no longer be paid”.

So for the rest of the company, the service went down hard after a grace period, when the provider deleted all customer files, including the backups…

When you are working locally, why don’t you use Samba for storing and sharing of documents?

I found a service that syncs our calendars self-hosted. That was the only thing that was missing. Can’t remember the name, works flawlessly and without any problems for a number of years now. If you are interested, I’ll look it up next weekend.

The very same reason why I gave up on Nextcloud. Too many nasty surprises.

Well, it always depends on the use case. And if you think over the use case, maybe other solutions might even be better.