A software developer and Linux nerd, living in Germany. I’m usually a chill dude but my online persona doesn’t always reflect my true personality. Take what I say with a grain of salt, I usually try to be nice and give good advice, though.

I’m into Free Software, selfhosting, microcontrollers and electronics, freedom, privacy and the usual stuff. And a few select other random things as well.

  • 3 Posts
  • 1.67K Comments
Joined 4 年前
cake
Cake day: 2021年8月21日

help-circle

  • Well, for once you need a commissioned data processing contract with Microsoft to let Microsoft (a third party) process your users private data. And probably a case-by-case study as Office365/Teams/… consists of a wide variety of different services and products and has lots of configurable options as well. And then we had the Datenschutzkonferenz come to the conclusion Office365 is not allowed in 2022. And it got messy after that. A big debate. The EU and several German states and different institutions doing reviews over the years and coming to different (sometimes opposing) conclusions. And the law concerning data safe harbour / EU data boundary got updated. And we have 2025 now and the situation in the US changes daily. On the upside I believe they’ve all renewed the Data Privacy Framework certifications so it’s legally possible to use the services. But I don’t think the debate is solved or over yet. And you’ll get some 50+ pages PDF instructions on how to configure your company/organization’s cloud office to be in line.

    I suppose it’s similar for Google? But I see less professional use of their cloud services, I believe it’s more popular with smaller organizations and individuals. Honestly I don’t know much about that one, I’ve never considered Google for data that need protection, as that company is one of the largest data leeches on earth.

    In any case OP needs to qualify for their NGO programs, as both Google and Microsoft cost about $1,000 a year for like 15 people and that’s well above their weight. And GDPR compliance for group members and commissioned data processing is a business feature, that’s not in your average private (free) Google account.

    Other than that, you can google “office365 gdpr” (or dsgvo) if you haven’t heard of it yet and see all the different opinions out there.









  • Good luck, though. I believe first-hand experience with living a self-determined life - including online services - aligns nicely with scout ideals. And trying to convey the media-literacy that allows people to make informed choices.

    And I can see some benefits with having documents available to everyone, templates, and collaborate on the paperwork…

    Glad to hear other groups in the area have success with Nextcloud… Another idea would be to somehow unite and share the hosting bill for a slightly bigger Nextcloud… But I still think the old laptop idea might be promising to get started… depending on the network situation in the building and whether you can configure port forwards and all the things that need to be done. Just make sure to have some kind of backup strategy if you put documents there. Can’t be too hard, as Nextcloud is made for syncing data… And I wouldn’t put personal information about kids there unless the admin knows what they’re doing. But there’s plenty other stuff to put there.


  • Given someone already pays for electricity and internet at the location, I’d say the cheapest option would be to ask all the members if someone has an old laptop to donate, maybe even with a broken display or whatever, main thing is it still somehow runs. Rip out the battery, Install Linux, Nextcloud (maybe Yunohost), and put it somewhere without public access. That’d be entirely for free, minus the work to set it up and maintain it.

    My smaller VPS costs somewhere around 70€ a year, guess that could be worth it as well as long as it contributes something meaningful.

    And be prepared to be disappointed, 99% of my scout group never used the selfhosted services I tried. I guess that’s somehow okay. They were focused on the real life activities and no one had any interest to do office work or remember logins… Was always the same 2 people who did paperwork and they didn’t need a cloud, so I scrapped it. Your story could be different, I’m not saying it needs to turn out that way.








  • I think you’ll want to factor in the exact use case at that scale. Does speed matter? Is “a ton” really a ton? Last regular computer mainboard I bought has 6 SATA ports. And I think that’s a fairly common amount. If I look at current harddrives, best price per gigabyte should be somewhere around 14TB drives. So given a RAID5, that’s 70TB of storage, or 80TB if you go for 16TB hdds.

    I think once you go considerably beyond that, and you don’t want to lose your data, you should think about buying proper hardware. I mean people do all kinds of crazy stuff, and at some point I extended my storage by simply plugging in 2 large external USB disks. And that worked surprisingly well… But these solutions aren’t super reliable. And neither are the cheap port expanders from Amazon.


  • I know. Guess I mainly wanted to say your given solution isn’t the entire story and the potential tool should decode the parameters as well, they might or might not be important. I’m often at the computer and I regularly do one-off tasks this way… But I’m aware it might not be an one-off task to you and you might not have a Linux terminal open 24/7 either 😉 Hope some of the other people have what you need. And btw… since I clicked on a few of the suggestions: I think the thing called URL encoding is a something different, that’s with all the percent signs and not base64 like here.


  • Well, the URL is a bit weird.

    echo "aHR0cHM6Ly93d3cuaG90ZG9nYmlsbHMuY29tL2hhbWJ1cmdlci1tb2xkcy9idXJnZXItZG9nLW1vbGQ" | base64 -d

    gives me “https://www.hotdogbills.com/hamburger-molds/burger-dog-mold”. (Without the ‘s’.) And then there are about 176 characters left. I suppose the underscore is some delimiter. The rest is:

    echo "c2lkPTY4MTNkMTljYzM0ZWJjZTE4NDA1ZGVjYSZzcz1QJnN0X3JpZD1udWxsJnV0bV9zb3VyY2U9bmV3c2xldHRlciZ1dG1fbWVkaXVtPWVtYWlsJnV0bV90ZXJtPWJyaWVmaW5nJnV0bV9jYW1wYWlnbj1zZmNfYml0ZWN1cmlvdXM" | base64 -d

    “sid=6813d19cc34ebce18405deca&ss=P&st_rid=null&utm_source=newsletter&utm_medium=email&utm_term=briefing&utm_campaign=sfc_bitecurious”

    And I suppose the stuff after the last slash is there for some other reason, tracking or some hash or whatever. But the things before that are the URL and the parameters.

    But the question remains whether we have some kind of tool to do this automatically and make it a bit easier…