Depending on your location, you would have to balance storage amount to last between rains, and as the storage gets bigger it gets extremely heavy. (A 50 gal drum of water is over 400 lbs, or ~190kg) A pump you have to service/replace every few years is way easier to deal with than trying to set up a structure to safely hold hundreds of kilos/pounds over your head in a place where leaks could mean heavy water damage to the house.

There are small 50 liter hot water tanks that hang on the wall. There are just two bolts going into brick. When I first saw that, I was suprised that it was safe to do but it is in fact how they are meant to be installed. I think these are even bigger than 50L:

If someone is uncomfortable with the factory design, there is this aftermarket mounting system that uses 4 bolts:

People throw away hot water tanks like this all the time, which I thought could be repurposed for rain harvesting. All my cisterns have two inputs, left and right, depending on where the pipework is. And they are already connected to tap water with a valve. So I could easily pipe rain water to the unused cistern input and turn off the tap valve, and turn the tap valve on if the reservoir is empty. I guess gravity fed water would be slow to fill, but probably fast enough if there aren’t many users.

I was thinking I could cut a hole in the top of an old tank for the input then on the top side have an overflow hole near the top that feeds the downspout.

Indeed I do the same. Clean acid to descale kitchen appliances, usually muliple times. Then that gets recycled for dirty (bathroom) jobs. Though the kettle cleaning acids tend to be weak, I think. Vinegar is not potent enough for tough jobs. And I probably would not try hydrochloric acid in metal kettles.

I wonder if it makes sense to mix recycled vinegar with hydrochloric acid in a toilet – or whether that’s playing with fire.

Citric acid is less commonly available, but since you say it can work in metal kettles and also the toilet, it piques my interest… I’ll have to consider tracking some down.

This sounds interesting. It makes me wonder why no cisterns already have built-in softeners.

OTOH, if I am willing to accept the extra home improvement effort and complexity anyway, I wonder if I am better off harvesting rainwater, which I presume is soft water. A friend does this. After flushing, we hear a pump turn on to pump water from the rain reservoir to the cistern. A pump does not appeal to me, but I wonder if I could do a ceiling mounted reservoir on the top floor and then rely on gravity to feed the cisterns.

well, not sure how that helps. When the showerpan flexes, the drain still moves. And if the drain is an elbow fitting, I would think it’s harder to manage the movement when it’s a horizontal pipe moving vertically. The accordian pipe should work with that, but if the drain is vertical then I think i have a choice between accordian piping or rigid.

Nonetheless, thanks for the suggestion.

(update) someone mentioned that the drain is probably not moving only vertically… it would be moving outward, both vertically and horizontally. So apparently a hack would need to use an accordian style pipe.

I have seen those blocks of something that go either in the cistern or hang under the rim. I was never quite sure if they were for aroma, disinfecting, or if they did something to control limescale.

I don’t suppose they would all be created equal. Guess I need to look into it.

That was one of my questions. I am looking for min effort. If a quick brushing simply prevents the limescale, that would be less time and effort. But if limescale would still build up anyway, then I would not be interested as it would just add to the big effort every few yrs.

That’s good to know. I would hope a metal anchor to reshape when temp causes expansion. It’s a shame to hear it’s the brick that’s forced to expand. In my case it’s a solid metal rod, so it sounds like the metal is guaranteed to split the brick in a temp change.

It sounds like I have to pull out the shank, bore the hole to 10mm, and either use chemical anchor or fasten it using a sheet metal w/2 nuts.

I could not pull it out with my hands after tapping it in. But to be clear, there’s only a sheer force to deal with, and it’s light.

I cut a bicycle axle bolt in half, and embedded it in the brick so there is a bicycle sprocket on the wall. Then a chain wraps another sprocket, which turns a shaft that goes all the way though the wall to the other side, where it connects to a right-angle gearbox, which attaches to a water valve. It’s lightweight overall… just the weight of a sprocket, chain, and a small decorative wood thing out of wood to serve as a handle.

This might come a bit too late but why didn’t you just get threaded rod and use one of these instead?

I did not know anchors like that existed for machine bolts. That’s good to know! However, it would not have helped in this situation. The bicycle axle has non-standard threading (~9mm bolt with a thread pitch that’s 2 steps away from the norm). Since it had a special nut that interfaced to ball bearings, I could not bring in a standard bolt or threaded rod. And the threaded portion of the axle was short enough that no threads could have gone into the wall. I could have added threads to the bare portion, but my die set skips the ø=9mm size.

I was asking more for future reference – whether or not I should ever repeat this. And I think you answered that. Even if I get lucky in the future on getting a perfect fit at that moment, temp changes could blow it. I guess I’ll assume anchors (chemical and mechanical) are designed to handle the temp changes.

So I have to ask why was this post which asked what is a decent client for Debian removed (per rule #3):

https://lemmy.dbzer0.com/post/1681507

while at the same time this “What’s the best Android/iPhone app for Lemmy?” is not removed? Is it because the moderator created this thread & thus /above the law/, in effect?

It’s not a matter of quick learning. If that were the case, GUI is a clear winner. It takes more time to learn a text-driven UI. But the learning curve pays off. You invest more time learning but the reward is reaching a point where you’re much faster than a mouse allows. I started off using gnusocial from a browser then transitioned to #bitlbee, after which I could search, read, and react faster than in the GUI. Same for Mastdon. Sometimes I’m forced into the Mastodon GUI because of something being unimplemented, in which case the loss of speed is apparent. Just like in the 90s, the keyboard is still faster than the mouse.

BTW, I used a DVORAK keyboard for years. I never measured my speed difference but I think it slowed me down overall because there were moments where the brain would drift into QWERTY mode (and vice versa on a QWERTY keyboard), and the speed difference w/out drifting seemed negligible so I ultimately settled back on a QWERTY keyboard.

Servitor indeed looks like a good option. Thanks for the list!

To be clear, both of them are funny.

I have had no choice but to try Firefox because (for years) #Lemmy has been wholly broken on Ungoogled Chromium. And for me the FF-Lemmy UX is terrible.

Younger generations have no baseline for comparison because they were raised in GUI browsers. My baseline is IRC, gopher, usenet, emacs, lynx, mutt, bitlbee, toot (TUI + CLI), gnu screen, & piles of scripts on 15+ y.o. hardware, etc. So all you young whipper-snappers chained to your GUIs with JavaScript, mice, labor-intensive clicking around have a very different reality and baseline of what’s good. Us older folks struggle to find tools that don’t rely on a mouse & which avoid all the #darkPatterns of the modern day web.

(edit) and wtf there are apparently several phone apps for the fedi. I just don’t get how people can like the small screens, small keyboards, and speech-to-text that causes embarrassments.

Im glad we agree. Because its the entire point. You are nitpicking where it suits you and thats not really honest conversation.Tor browser isnt the only way to access tor

TLS is useful very specifically in the case of banking via Tor Browser, which is the most likely configuration the normal general public would use given the advice to access their bank over Tor.

There are entire swaths of the world, billions of people, where phones are basically the only gateways to the inter.

I do not recommend using a smartphone for banking. You’re asking for a huge attack surface & it’s reckless. People will do it anyway but to suggest that people should avoid Tor for banking on the basis that you’re assuming they are using a phone is terrible advice based on a poor assumption. Use Tor Browser from a PC for banking. That is the best advice for normies.

The point is, again, that Tor and specifically exit nodes are more hostile than normal ISP relays.

And again, those hostile nodes get less info than ISPs. They have to work harder to reach the level of exposure that your ISP has both technical and legal privilege to exploit.

Saying selling metatdata that is unencrypted is the same level of malicious as a nation state going after you (life and death) or having your identity or bank account stolen is clearly pretty naive.

Wow did you ever get twisted. You forgot that I excluded targeting by nation states from the threat model as you should. If someone has that in their threat model, they will know some guy in a forum saying “don’t use Tor for banking” is not on the same page, not aligned with their scenario, and not advising them. You don’t have to worry about Snowden blindly taking advice from you.

It’s naive to assume your ISP is not collecting data on you and using it against you. It’s sensible to realize the risk of a honeypot tapping your bank account and getting away with it and regulation E protections failing is unlikely enough to be negligible.

You still have to deal with getting your funds back and paying for stuff to live in the interim.

If you’re in the US, you have ~2-3 bank accounts on avg, and 20 credit cards (US averages). Not to mention the unlikeliness of an account getting MitM compromised despite TLS in the 1st place. Cyber criminals choose the easier paths, just as 3 letter agencies do: they compromise the endpoint. Attacking the middle of a tunnel is very high effort & when it’s achieved they aren’t going to waste it on some avg joe’s small-time bank acct. At best you might have some low-tech attempts that result in no padlock on the user side. But I’ve never seen that in all my years of exclusively banking over Tor.

Thats a bad assumption.

Not in the slightest. Everyone is subject to mass surveillance & surveillance capitalism.

MOST people arent really concerned with it in the western world.

Most people don’t even have a threat model, or know what it is. But if you ask them how they would like it if their ISP told their debt collector where they bank so the debt collector can go do an unannounced legal money grab, you’ll quickly realize what would be in their threat model if they knew to build one. A lot of Corona Virus economic stimulus checks were grabbed faster than debtors even noticed the money arriving on their account.

And thats not a Trump thing. its existed WAY before trump. Snowden showed that and it was Obama, not trump, that went after whistleblowers harder than any predecessor before them.

You missed the source I gave. Obama banned the practice of ISPs selling customer data without their consent. Trump reversed that. That is wholly 100% on Trump. Biden did not overturn Trump, so if you want, you can put some of the fault on Biden.

W.r.t history, echelon predates Snowden’s revelations and it was exposed to many by Nicky Hagar in the 80s or 90s. But this all a red herring because in the case at hand (banking customers accessing their acct), it’s the particular ISP role of mass surveillance that’s relevant, which Trump enabled. Or course there is plenty of other mass surveillance going on with banking, but all that is orthogonal to whether they use Tor or not. The role of Tor merely mitigates the ISP from tracking where they bank, and prevents banks from tracking where you physically are, both of which are useful protections.

Further trying to make this about “party” sides is a bad idea. Its something all parties

You can’t “both sides” this when it’s verifiable that Obama banned the practice and Trump overturned it. While Obama’s hands are dirty on a lot of things (e.g. Patriot Act continuity), it’s specifically Trump who flipped the switch to ISP overcollection. Citation needed if you don’t accept this.

And there are some areas where straight access TOR is illegal and can get you in trouble.

The general public knows your general advice to use/not use Tor is technical advice not legal advice, and also not specific to their particular jurisdiction.

That’s not a magic bullet for secuirty.

It wasn’t presented as such. Good security comes in layers (“security in depth”). TLS serves users well but it’s not the only tool in the box.

There are so many ways to exploit connections. Look at what happened here on lemmy with vulns leading to takeovers of instances with xss of session cookies.

Tor Browser includes noscript which blocks XSS.

The primary difference is your ISP is not generally actively hostile. They may want to sell metadata but they aren’t actively trying to exploit you.

Selling your metadata is exploiting you. And this exploit happens lawfully under a still-existing Trump policy, so you have zero legal protections. Contrast that with crooks stealing money from your bank account, where, if it’s a US account, you have regulation E legal protections.

If your ISP (or in some cases a nation state is your isp) is actively tracking you, then there are other alternatives that may be better.

Different tools for different threat models. If you are actually targeted by a nation state, Tor alone is insufficient but it’s still in play in conjunction with other tech. But from context, you were giving general advice to the general public telling them not to use Tor for banking, thus targeting is not in the threat model. But mass surveillance IS (i.e. that of your ISP).

But to answer my your question my thesis is tor is not necessarily a privacy panacea.

Tor is an indispensable tool to streetwise users. Of course it is a tool among other tools & techniques.

The threat model an American or European has is much different than someone from Vietnam or turkey or China, which is also much different than someone from the Nordic countries.

Those threat models all have a common denominator: mass surveillance. It is safe to assume mass surveillance is in everyone’s threat model as a baseline. Of course there are a variety of other threats in each individual threat model for which you couldn’t necessarily anticipate.

Also. Those running an exit node can and do sniff traffic.

Sure, but if you stop there with that statement you’re just FUD-scaring people from using the service that does more for their privacy than conventional direct clearnet usage. Every connection that matters uses TLS so the exit node honeypot only sees where the traffic is going, not what’s in the traffic and not where it comes from. IOW, the exit node knows much less than your ISP.

It’s bad practice to login to stuff that’s important (like banking) over tor.

It’s the other way around. You should insist on using Tor for banking. It’s a bad practice to let your ISP track where you do all your banking.

Also, nation states can track you using a variety of techniques from fingerprinting to straight up working together to associate connection streams.

And your thesis is what, that we should make snooping easier for them by not practicing sensible self-defense?

A large number of tor nodes are run by alphabet agencies.

Let them work for it - and let them give the Tor network more bandwidth in the process.

I don’t know if it’s even possible, but it would be cool if I could use the fediverse over TOR just for the sake of supporting TOR.

Here are two #Mastodon onion nodes:

• iejideks5zu2v3zuthaxu5zz6m5o2j7vmbd24wh6dnuiyl7c6rfkcryd.onion
• 7jaxqg6lfcdtosooxhv5drpettiwnt6ytdywfgefppk2ol4dzlddblyd.onion