S.S.Octopus VS farside

2. An identity aware SSO proxy by Buzzfeed[0]

I really like Buzzfeed's SSO implementation, but it hasn't received updates in a while and doesn't seem to be maintained to me. I could absolutely see OpenZiti replacing this for me.

I really like Wireguard and have absolutely no complaints with it -- but if OpenZiti could replace this as well and match the performance I get on Wireguard I would consider implementing it at home (and would probably be a happy enough customer to push for it at work).

One non-typical use-case I use Wireguard for is being able to do remote game streaming to my Windows hosts via Moonlight+Nvidia Gamestream. Would anyone be able to (anecdotally or scientifically), share how well a use-case like this would work with OpenZiti?

[0] https://github.com/buzzfeed/sso

In addition to this suggestion, another viable route is to self-host those applications you rely on and don't expose them to the world (so as to reduce load/attack surface). Using a VPN can allow you to access the applications privately/remotely.

e.g. I self-host the applications I rely on such as Teddit, Nitter, Bibliogram and Cloudtube and then use Wireguard to always remain connected to the network they are accessible on. I have also implemented identity-aware SSO[1] so I can expose those applications remotely to specific individuals.

[1] https://github.com/buzzfeed/sso

If oauth2-proxy doesn't suit your needs, there are some projects that have spun-off from oauth2-proxy like pomerium and BuzzFeed's sso. In addition to the open source library, Pomerium offers a paid service with a GUI to help IT staff more easily manage user permissions. BuzzFeed's sso builds upon oauth2-proxy by separating the domain used for auth from the domain used for the proxy (among several other changes).

SSO to the rescue!

https://github.com/buzzfeed/sso - Google only

6353 out of 7265 (87.447%) - Subreddits that have gone dark: r/anime (5+ million) femboysaremylife3: AYAYA PikaNone: No more Anime TheInstantis: It takes a single programming subreddit joining the protest to get a better alternative from scratch howlsterth: THIS IS IT Prime Gamingpankakes1112: AYAYA Weebs OUT a_real_turtle: f anime the_real_jude: anime is over. Finally blazonparadox: Amazing frozenpandaman: WOOOOO /r/anime garbagepost: ANIME IS GONE icehunter83: Is the countdown broken again? TheInstantis: LETS GOOO lightingnerd: Are, Are... frozenpandaman: lol why did anime use hawaiʻi time???? ModeratorNyaaori: btw if anyone is looking for alternative frontends to access major websites like twitch in a way that reduces how much data they can gather from you, check out https://farside.link/ jaysharp018: Holy shit. mag_solaegis: By the power of anime! Hört nur zujustagirldrownedzombie: Didint ypu cnagw your mind /r/cartalkuk??? ModeratorNyaaori: er like reddit* devnull9090: 6354 out of 7265 (87.460%) - Subreddits that have gone dark: r/NewJeans (5k+) ModeratorNyaaori: well twitch too Prime Gamingilluminist: AYAYA wtf this_is_a_poodle: ripperoni anime boombl4_wife: RainTime AYAYA Antwort an @devnull9090: 6354 out of 7265 (87.460%) - Subreddits that have gone dark: r/NewJeans (5k+)

then there is one awesome thing, that allows you to make video play through any of the online Invidious instances. https://farside.link/ where video URL looks like this: https://farside.link/invidious/watch?v=dQw4w9WgXcQ opening this link will not point you to the same instance each time, it will select from the list of instances and choose one. Farside also does other frontends, not just Invidious.

Farside.link / Invidious so that I do not send people into a datamining JavaScript hellhole.

Libredirect, the extension, needs access to my data but it remains in the extension.

Farside, as I understand it, sends clicks to https://farside.link, which will redirect to the appropriate proxy with the full URL including the path. I can't really tell because the source code of the extension isn't linked. This behaviour can only be acceptable if I set the extension to query an instance I trust (my own, for example), but at this point it's just easier to do everything in the extension itself.

If ur paran0id, self host your own instance on a VPS. Ask yourself what is worse - google knowing what you are doing, or some other individual perv knowing what you are doing? Use farside.link to distribute ur use across multiple instances...i'd say that's the best option.

I see your Nitter, and I raise you farside.link: https://farside.link/nitter/TimSweeneyEpic/status/1594135214829498368

which is a privacy redirect alternative frontend thing called farside.link that pics one of the listed Invidious instances in order to let you watch the video that BBC posted to Youtube: https://www.youtube.com/watch?v=C78RFvnrRi0

You can run your own farside instance as well. https://github.com/benbusby/farside