I am running the latest version of PIA on macOS. I enabled split tunneling and have set Parallels to use only the VPN and all other apps to bypass. The network settings in Parallels is set to "shared network". When checking ipleak dot net, from inside Parallels, it shows my clear IP with the VPN's DNS server. This worked correctly on PIA client 3.5.1. All other versions after that have this issue. I think it has something to do with the way the split tunneling is routing traffic through the transparent proxy.
I see the following in the console log when browsing from inside Parallels with the above settings enabled:
(641771685): New flow: NEFlow type = stream, app = com.parallels.naptd, name = , 192.168.1.100:0 <-> 95.85.16.212:443, filter_id = , interface = en0
[Extension com.privateinternetaccess.vpn.splittunnel.cli]: Calling handleNewFlow with TCP com.parallels.naptd[{length = 20, bytes = 0x3ece4534a9ebefb126389d89e1abfae329d602a4}] remote: 95.85.16.212:443 interface en0
[Extension com.privateinternetaccess.vpn.splittunnel.cli]: provider rejected new flow TCP com.parallels.naptd[{length = 20, bytes = 0x3ece4534a9ebefb126389d89e1abfae329d602a4}] remote: 95.85.16.212:443 interface en0
The shared network IP subnet from Parallels is 10.211.55.0/24
u/PIAJohnM are you able to replicate the same issue on your end?

Hey everyone!
I recently dove deep into the fascinating world of web unblockers and thought I'd share some insights that might just change how you see internet restrictions and web scraping. You might already know that web unblockers are like secret passageways that let you sneak past internet censorship or geofencing. Think of them as VPNs on steroids, allowing not just encrypted data transfer for privacy but also unrestricted browsing freedom.
But here's where it gets really interesting, especially for folks in the web scraping arena. Web unblockers serve as these powerful APIs designed to outsmart anti-bot protections. They’re like the ninjas of the internet, using tactics such as IP rotation, browser fingerprinting, CAPTCHA solving, and even Javascript rendering to access the data we need.
Now, you might think a proxy does the job by changing your IP address. But web unblockers? They're the whole package, offering a bunch more than just a disguise. Yet, it's not all smooth sailing. No single web unblocker can claim victory over every anti-bot mechanism out there. Tech giants like Cloudflare are in constant evolution, crafting more complex defenses to keep bots at bay.
This is exactly why I conducted the Great Web Unblocker Benchmark. It's a showdown to see how different web unblockers stack up against the toughest anti-bot solutions in the wild. Sure, there's a price tag attached to these unblockers, but picking the right one isn't just about spending money—it's about investing in seamless data access for our projects.
In the end, the key takeaway is weighing the cost against the potential to maintain an uninterrupted data flow for our customers. Let's keep pushing the envelope and finding the best tools to navigate these challenges together.
Cheers to an open and accessible web for all our scraping needs!
Linkt to the full article: https://substack.thewebscraping.club/p/what-is-a-web-unblocker

If for example you play a game that does not allow VPNs at all you can use split tunneling, but that will disable the kill switch so you can't have any sensitive pages open in a browser while you are playing the game.
Some other VPNs have a socks proxy you can bind your browser to that acts as a second kill switch (among other benefits like less captchas). Proton has said they will never implement this because they believe it's insecure https://protonvpn.com/support/socks5/. I don't know all the technical details of the implementations on other services, but my understanding is that the proxy is connected to through the regular VPN connection so there is no unencrypted data like they claim in the article. In fact it adds another layer kind of like multi-hop.
I also think some other services have a kill switch that works with split tunneling.
I hope they consider some solution. At this point I'm thinking of subscribing to another VPN only for browsing and keep proton for torrenting.

Updated to v 1.65.133
DNS_PROBE_POSSIBLE is the error that keeps coming up.
Solutions I've tried:

• Turning off secure DNS or switching DNS provider (tried them all) - some results in "ERR_CONNECTION_RESET" some result in same error
• Switching WiFis
• Removed from firewall list and added back again
• No proxy server
• Used VPN, turned off VPN
• Used private browser to make sure extensions weren't the problem
• Cleared browsing data

I feel like I've done all the solutions I could think of and the ones I googled. Any help would be great but I guess I have to re-do all my sign-ins on Firefox for now :/

• Lesson video

INTRO

Today you'll install a common server application - the Apache2 web server - also known as httpd - the "Hyper Text Transport Protocol Daemon"!
If you’re a website professional then you might do things slightly differently, but our focus with this is not on Apache itself, or the website content, but to get a better understanding of:

• application installation
• configuration files
• services
• logs

YOUR TASKS TODAY

• Install and run apache, transforming your server into a web server

INSTRUCTIONS

• Refresh your list of available packages (apps) by: sudo apt update - this takes a moment or two, but ensures that you'll be getting the latest versions.
• Install Apache from the repository with a simple: sudo apt install apache2
• Confirm that it’s running by browsing to http://[external IP of your server] - where you should see a confirmation page.
• Apache is installed as a "service" - a program that starts automatically when the server starts and keeps running whether anyone is logged in or not. Try stopping it with the command: sudo systemctl stop apache2 - check that the webpage goes dead - then re-start it with sudo systemctl start apache2 - and check its status with: systemctl status apache2.
• As with the vast majority of Linux software, configuration is controlled by files under the /etc directory - check the configuration files under /etc/apache2 especially /etc/apache2/apache2.conf - you can use less to simply view them, or the vim editor to view and edit as you wish.
• In /etc/apache2/apache2.conf there's the line with the text: "IncludeOptional conf-enabled/*.conf". This tells Apache that the *.conf files in the subdirectory conf-enabled should be merged in with those from /etc/apache2/apache2.conf at load. This approach of lots of small specific config files is common.
• If you're familiar with configuring web servers, then go crazy, setup some virtual hosts, or add in some mods etc.
• The location of the default webpage is defined by the DocumentRoot parameter in the file /etc/apache2/sites-enabled/000-default.conf.
• Use less or vim to view the code of the default page - normally at /vawww/html/index.html. This uses fairly complex modern web design - so you might like to browse to http://165.227.92.20/sample where you'll see a much simpler page. Use View Source in your browser to see the code of this, copy it, and then, in your ssh session sudo vim /vawww/html/index.html to first delete the existing content, then paste in this simple example - and then edit to your own taste. View the result with your workstation browser by again going to http://[external IP of your server]
• As with most Linux services, Apache keeps its logs under the /valog directory - look at the logs in /valog/apache2 - in the access.log file you should be able to see your session from when you browsed to the test page. Notice that there's an overwhelming amount of detail - this is typical, but in a later lesson you'll learn how to filter out just what you want. Notice the error.log file too - hopefully this one will be empty!

Note for AWS/Azure/GCP users

Don't forget to add port 80 to your instance security group to allow inbound traffic to your server.

• AWS
• Azure
• GCP

POSTING YOUR PROGRESS

Practice your text-editing skills, and allow your "classmates" to judge your progress by editing /vawww/html/index.html with vim and posting the URL to access it to the forum. (It doesn’t have to be pretty!)

SECURITY

• As the sysadmin of this server, responsible for its security, you need to be very aware that you've now increased the "attack surface" of your server. In addition to ssh on port 22, you are now also exposing the apache2 code on port 80. Over time the logs may reveal access from a wide range of visiting search engines, and attackers - and that’s perfectly normal.
• If you run the commands: sudo apt update, then sudo apt upgrade, and accept the suggested upgrades, then you'll have all the latest security updates, and be secure enough for a test environment - but you should re-run this regularly.

EXTENSION

Read up on:

• Using systemctl to manage services

RESOURCES

• HTTPD - Apache2 Web Server
• The Apache HTTP Server

TROUBLESHOOT AND MAKE A SAD SERVER HAPPY!

Practice what you've learned with some challenges at SadServers.com:

• "Cape Town": Borked Nginx

PREVIOUS DAY'S LESSON

• Day 6 - Editing with "vim"

Some rights reserved. Check the license terms here

Hi, I'm experiencing issues with the above QVPN package on my TS-653D running QTS 5.1.6.2722. I've set up the Qnap to be a wireguard VPN client to my commercial VPN provider, using the VPN as the standard gateway. It's also running proxy server.
Up until recently, I could set up my browsers to use that proxy on the Qnap, which in turn would route the traffic through the VPN, all fine.
This doesn't work anymore now, no data getting through and I've had to disable the VPN gateway to be able to browse again, so the Proxy server is working fine, while the QVPN service doesn't seem to be. I tested 3 different Slots for Wireguard and one for OVPN, all with the same issue.
I then noticed that I can't download any more qnap packages via App center whenever the VPN is the gateway - it just wouldn't be able to download the file.
I tested the very same VPN slot on my phone, whithout issues, so the VPN provider is also good.
Anyone else having trouble with the latest QVPN Service release? Does anyone still have a previous package, for 3.2.983 for instance? Thanks..

In recent years, the issue of environmental sustainability has become increasingly important as the world grapples with the impacts of climate change and the depletion of natural resources. As individuals and businesses alike strive to reduce their carbon footprint and minimize their impact on the planet, innovative solutions are crucial. One such solution is the use of socks proxies, particularly those offered by IPRockets.
IPRockets is a premium IP proxy service that offers a range of socks proxies designed to enhance online security and privacy. But beyond their immediate benefits, socks proxies can also play a role in promoting environmental sustainability. This article will explore how socks proxies can contribute to a greener future and why IPRockets is the leading provider in this regard.
One of the key ways in which socks proxies can help promote environmental sustainability is by reducing the need for physical server infrastructure. Traditional proxies require the use of physical servers to relay data, which consume significant amounts of energy and contribute to carbon emissions. In contrast, socks proxies operate through a peer-to-peer network, eliminating the need for centralized servers and reducing energy consumption. By using socks proxies, individuals and businesses can significantly lower their carbon footprint and contribute to the fight against climate change.
IPRockets takes this commitment to environmental sustainability one step further by ensuring that their socks proxies are powered by renewable energy sources. By partnering with sustainable energy providers, IPRockets can guarantee that their proxies operate in an environmentally friendly manner. This means that clients can enjoy the benefits of socks proxies without worrying about their impact on the planet.
In addition to their environmental benefits, socks proxies offered by IPRockets also provide enhanced security and privacy for users. By encrypting data and masking IP addresses, socks proxies ensure that online activities remain anonymous and secure. This is essential in an age where cyber threats are increasingly common, and personal information is constantly at risk. With IPRockets socks proxies, users can browse the web with peace of mind, knowing that their data is protected.
Furthermore, IPRockets socks proxies are easy to use and compatible with a wide range of devices and platforms. Whether you are accessing the internet on a desktop computer, laptop, tablet, or smartphone, IPRockets has a solution for you. Their user-friendly interface makes it simple to set up and configure socks proxies, allowing you to enjoy the benefits of enhanced privacy and security with minimal effort.
In conclusion, environmental sustainability and socks proxies go hand in hand. By opting for socks proxies offered by IPRockets, individuals and businesses can reduce their carbon footprint, enhance online security and privacy, and contribute to a greener future for all. With their commitment to sustainability and cutting-edge technology, IPRockets is leading the way in providing solutions that benefit both the planet and its inhabitants. Join the movement towards a more sustainable future with IPRockets socks proxies today.

Introduction
E-commerce has become increasingly popular in recent years, with more and more consumers opting to purchase goods and services online. However, with this increased popularity comes an increased risk of cyber threats. Hackers and cybercriminals are constantly looking for ways to exploit vulnerabilities in e-commerce websites and steal sensitive information such as credit card details and personal data. In order to combat these threats and protect both consumers and businesses, it is essential to implement robust security measures, one of which is the use of socks proxies with IPRockets.
What are Socks Proxies?
Socks proxies act as intermediaries between a user's device and the internet, routing all internet traffic through an intermediary server. This helps to mask the user's IP address and encrypt their internet traffic, making it much harder for hackers to intercept and steal sensitive information. Socks proxies are particularly popular for e-commerce transactions as they provide an extra layer of security and anonymity, helping to protect both consumers and businesses from cyber threats.
What is IPRockets?
IPRockets is a premium IP proxy service that offers high-quality socks proxies to businesses and consumers. With a vast network of servers located around the world, IPRockets provides fast and secure internet connections, helping users to browse the web anonymously and securely. IPRockets' socks proxies are specifically designed for e-commerce transactions, offering enhanced security and protection against cyber threats.
Benefits of Using Socks Proxies with IPRockets for E-commerce Security

1. Enhanced Security: Socks proxies with IPRockets help to encrypt internet traffic and mask users' IP addresses, making it much harder for hackers to intercept sensitive information. This added layer of security helps to protect both consumers and businesses from cyber threats.
   
2. Anonymity: By using socks proxies with IPRockets, users can browse the web anonymously, protecting their privacy and identity online. This is particularly important for e-commerce transactions, where sensitive information such as credit card details and personal data is often shared.
   
3. Geographic Flexibility: IPRockets offers a vast network of servers located around the world, allowing users to choose their IP location and access region-specific content. This can be particularly useful for e-commerce businesses looking to expand their reach globally.
   
4. Fast and Reliable Connections: IPRockets' socks proxies are known for their fast and reliable internet connections, ensuring that users can browse the web seamlessly without any lag or interruptions.
   
5. Cost-Effective Solution: Compared to other e-commerce security measures, such as VPNs and encryption software, socks proxies with IPRockets offer a cost-effective solution for businesses and consumers looking to enhance their online security.
   

Conclusion
In conclusion, e-commerce security is of paramount importance in today's digital age, where cyber threats are on the rise. By using socks proxies with IPRockets, businesses and consumers can enhance their online security, protect sensitive information, and browse the web anonymously. With its fast and reliable connections, geographic flexibility, and cost-effective pricing, IPRockets is a premium IP proxy service that is well-suited for e-commerce transactions. By implementing robust security measures such as socks proxies with IPRockets, businesses and consumers can enjoy peace of mind while shopping online.

Hi, I'm looking for a cheap laptop that can handle video editing reasonably well. Most of the usage will be browsing the internet and watching videos, nothing very demanding, but I do need something portable that I can use to edit videos on a few times a week. I like Thinkpads. I was previously able to make the T480 work-- no, it's not super powerful, but I usually edit with proxies, and the T480 was fine for that. Until it suddenly started crashing whenever I used Premiere. Turns out that Adobe stopped supporting the integrated graphics unit that comes with it!
So now I'm looking for something a bit more powerful and, while I'm at it, why not get a bigger screen as part of the deal? The P50 line is looking good (specifically the P52) but I'm seeing concerns about the weight (annoying but not a deal breaker) the fan (ditto) the heating (could be an issue if it hurts performance) and even some stuff about the BIOS crashing and being glitchy. I know Lenovo is a trusted brand for a good reason, but it seems like people have had some real issues with the P52. Is this exaggerated? Is it a reliable computer? I'm seeing some people say that the Dell Precision is a good alternative, with the 7530 looking pretty good for my needs. But... I do like that Lenovo build quality. It does matter to me. I'm not sure exactly how much, but unless there's a huge performance difference between the two, build quality could be a dealbreaker.
Any thoughts? Sorry this is kind of rambly. I'm also open to non-workstation style computers, but I'm leaning towards those because of the larger screen. Feel free to put out any recommendations though, I'm open to hearing other arguments.
Thanks!
Edit: I'm looking to spend $300-400 ideally

⟳ apt.izzysoft.de from Sat, 11 May 2024 17:38:35 GMT updated on Sun, 12 May 2024 17:36:09 GMT contains 1123 apps.

Added (1)

• Kenko: A simple workout journal

Updated (6)

• husi (version 212): Husi is a proxy configurations manager.
• PipePipe (version 105004): A FLOSS Android app to let you browse YouTube, NicoNico and BiliBili freely.
• Nova Video Player (version 2596040): Video player for local/network content with subtitle/metadata download support
• Raven (version 2122): This app uses APIs and web scraping to fetch news articles. RSS feeds are not su
• OwnDroid (version 27): Manage your device with Device owner privilege
• Twine (version 448): A Compose multiplatform (Android & iOS) RSS reader app

^{2024-05-12T17:40:29Z}

Hello Everyone,
After two years of dealing with the shit-show that is constant breaking changes across all of my TrueCharts apps in TrueNAS SCALE, I decided I should probably learn how Docker worked so I could stand up my own things.
I'm in the beginning stages, and after solving many road-blocks with Google, I've hit one that has me stumped. Here's where I'm at so far:
Spun up a VM running Ubuntu 24.04, and installed Docker Engine/Compose. Stood up Nginx Proxy Manager in a Docker container. Stood up PiHole in a Docker container.
What I'm struggling with right now is my Proxied connections. Most of them aren't working right. By way of example:
In PiHole, I have defined unifi.mydomain.com to point to my server running all this stuff. That takes it to Nginx. In Nginx I've configured that domain to point to my unifi router (192.168.1.1:443). I've already created a wildcard SSL certificate (*.mydomain.com) and have it selected.
Trying to browse to unifi.mydomain.com DOES get me to the UniFi login screen, but once I log in, it just sits there with a loading bar at the top but won't actually load IN.
Another one of my reverse proxies just results in Chrome "thinking" forever. I'm not getting a straight 404 as though it isn't working at all, but something seems to be... blocking... things from working completely? If I let it go long enough I get a 504 Gateway Timeout. Not sure where I went wrong, and I know this is all somewhat vague, but I'm hoping someone might know what questions to ask me that might help me provide the info y'all need to help me solve my problem!
Thanks in advance!

While browsing Instagram, I happened upon an account with 54k followers. It's been posting since COVID lockdowns, and although anti-lockdown messaging was the primary focus, the account seems to have morphed into a general anti-Liberal/NDP, pro-Pierre P account, with topics also ranging to general Culture War stuff.
This account posts political content weekly, sometimes multiple times in a day, with content getting 100's to tens of thousands of Like engagements. The account links to a website that sells merch, but gives no information regarding the identity of the account or website owner, with WHOIS search showing that the domain is registered to a company out of Arizona called Domains By Proxy.
It seems a bit odd to me to find such an active and popular Instagram account, acting highly partisan and without any sort of identifiers of who the owner is. It got me thinking about the Canadaland episode about a fake Trudeau scandal, and now I'm curious as to who might be behind this. Does anyone in the community recommend a way to investigate this further, or know of anyone who is interested in this sort of thing?

MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-048
DATE(S) ISSUED: 05/09/2024
SUBJECT: A Vulnerability in F5 BIG-IP Next Central Manager Could Allow for Remote Code Execution
OVERVIEW: A vulnerability has been discovered in F5 BIG-IP Next Central Manager that could allow for remote code execution. BIG-IP Next Central Manager is the management and application orchestration platform used to control BIG-IP Next instances. It can be installed on dedicated hardware or virtualized through VMware ESXi. Successful exploitation of this vulnerability could allow for Remote Code Execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services accounts that are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are currently no reports of this vulnerability being exploited in the wild.
SYSTEMS AFFECTED:

• F5 BIG-IP Next Central Manger versions prior to 20.2.0

RISK: Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium business entities: High
• Small business entities: Medium

Home users: Low
TECHNICAL SUMMARY: A vulnerability has been discovered in F5 BIG-IP Next Central Manager that could allow for remote code execution. Due to the lack of input validation, an unauthenticated adversary can inject malicious SQL statements using the Central Manager’s API. Details of this vulnerability is as follows:
Tactic: Initial Access (TA0001):
Technique: Exploit Public-Facing Application (T1190):

• An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI). (CVE-2024-26026)

Successful exploitation of this vulnerability could allow for remote code execution in the context of the service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services accounts that are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
RECOMMENDATIONS: We recommend the following actions be taken:

• Apply appropriate updates provided by F5 to vulnerable systems immediately after appropriate testing. (M1051: Update Software)
  • Safeguard 7.1: Establish and Maintain a Vulnerability Management Process: Establish and maintain a documented vulnerability management process for enterprise assets. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
  • Safeguard 7.4: Perform Automated Application Patch Management: Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
  • Safeguard 7.7: Remediate Detected Vulnerabilities: Remediate detected vulnerabilities in software through processes and tooling on a monthly, or more frequent, basis, based on the remediation process.
  • Safeguard 9.1: Ensure Use of Only Fully Supported Browsers and Email Clients: Ensure only fully supported browsers and email clients are allowed to execute in the enterprise, only using the latest version of browsers and email clients provided through the vendor.
• Apply the Principle of Least Privilege to all systems and services. Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack. (M1026: Privileged Account Management)
  • Safeguard 4.7: Manage Default Accounts on Enterprise Assets and Software: Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
  • Safeguard 5.4: Restrict Administrator Privileges to Dedicated Administrator Accounts: Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user’s primary, non-privileged account.
  • Safeguard 5.5: Establish and Maintain an Inventory of Service Accounts: Establish and maintain an inventory of service accounts. The inventory, at a minimum, must contain department owner, review date, and purpose. Perform service account reviews to validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently.
• Architect sections of the network to isolate critical systems, functions, or resources. Use physical and logical segmentation to prevent access to potentially sensitive systems and information. Use a DMZ to contain any internet-facing services that should not be exposed from the internal network. Configure separate virtual private cloud (VPC) instances to isolate critical cloud systems. (M1030: Network Segmentation)
  • Safeguard 12.2 : Establish and Maintain a Secure Network Architecture: Establish and maintain a secure network architecture. A secure network architecture must address segmentation, least privilege, and availability, at a minimum.
  • Safeguard 12.8: Establish and Maintain Dedicated Computing Resources for All Administrative Work: Establish and maintain dedicated computing resources, either physically or logically separated, for all administrative tasks or tasks requiring administrative access. The computing resources should be segmented from the enterprise's primary network and not be allowed internet access.
• Use capabilities to detect and block conditions that may lead to or be indicative of a software exploit occurring (M1050 : Exploit Protection)
  • Safeguard 13.10: Perform Application Layer Filtering: Perform application layer filtering. Example implementations include a filtering proxy, application layer firewall, or gateway.

REFERENCES:

F5: https://my.f5.com/manage/s/article/K000138733

CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-26026MS-ISAC CYBERSECURITY ADVISORY
MS-ISAC ADVISORY NUMBER: 2024-048
DATE(S) ISSUED: 05/09/2024
SUBJECT: A Vulnerability in F5 BIG-IP Next Central Manager Could Allow for Remote Code Execution
OVERVIEW: A vulnerability has been discovered in F5 BIG-IP Next Central Manager that could allow for remote code execution. BIG-IP Next Central Manager is the management and application orchestration platform used to control BIG-IP Next instances. It can be installed on dedicated hardware or virtualized through VMware ESXi. Successful exploitation of this vulnerability could allow for Remote Code Execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services accounts that are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE: There are currently no reports of this vulnerability being exploited in the wild.

DO NOT POST CARDS UNTIL YOU UNDERSTAND WHAT A BLEED EDGE IS. SEE THE FAQ SECTION FOR INFO
IF YOU HAVE AN IDEA FOR A CARD AND WANT TO MAKE A REQUEST, PLEASE DO SO IN THE COMMENT SECTION OF THIS POST.

WELCOME TO MPCPROXIES!

We are a community dedicated to the creation and sharing of playtest cards (often called proxies) for Magic the Gathering. Have a look around and be sure to read the FAQ. If you just want to look at cards consider checking out MPCfill.com as it is a database containing most of the cards you'll find here and much more!

USEFUL LINKS

• MPCfill.com

'Originally created by ChilliAxe and now rebuilt and remastered by u/mrteferi, mpcfill is a website for generating orders for use with card printing sites (we suggest makeplayingcards.com). Simply enter a list of cards and then select your art from a database of community works.

• The Wiki

While it is in need of minor updates the core info is still excellent for those wanting to know how to make and print proxies. The info on *bleed edges** is particularly useful*

• Proxyshop

Love making cards in photoshop but hate the grindy repetition? Proxyshop will automate the boring parts so you can focus on the card. It is highly versatile and contains nearly every template there is (if you just want the templates they are available as a separate download)

• Cardconjurer.com

A simple web-based tool to create cards. Many of the frames found there were made right here on this sub!
UPDATE: The tool has undergone an overhaul after a bit of a kerfuffle with wotc. So you will need some templates to replicate the old functionality. There are not a lot available at the moment so for now your best bet is to install this offline version of the tool. Below is a quick install guide courtesy of Investigamer from the Discord:

1. Clone or download (Code > Download Zip) the Card Conjurer repo
2. Extract the zip somewhere on your PC.
3. In the new cardconjurer directory, run launcher.exe (or launcher-macos, launcher-linux for other operating systems). Card conjurer should open in your browser and you're good to go 👍

The site will be served at localhost:8080 until you hit CTRL+C in the command window that popped up. ALSO: If you've ever visited Card Conjurer before (on the live site or locally) you may need to hit CTRL + F5 to reload the cache for the site to work correctly."

• Discord
• Alt Discord

The discord chats associated with this sub and our sister sub magicproxies

FAQ

What is a playtest card?
First and foremost a playtest card is a card that is NOT designed for use in an official capacity. It is usually made to test something, such as a new mechanic or card type. In our community, we test new styles, artwork, and frames with existing cards. For example, we might make a playtest card exploring what a card from the alpha set would look like in a Kaldheim frame. Playtest cards are often confused with proxy cards, though the names have become more or less interchangeable it is important to note that actual proxy cards have an official use (to temporarily replace a damaged card during a competitive match) while playtest cards do not.
What the heck is a bleed edge?
MPC requires that images you send them for printing include an extra 1/8th of an inch on each edge. This accounts for the print bleed edge, and it’ll be cut off as part of the manufacturing process. More info on how to apply a bleed edge can be found in the wiki.
Can I use playtest cards when I play in MTG competitions?
No. It could potentially get you banned from future events. Some local stores may have different rules, however, that is something to discuss with them.
Can I use playtest cards when I play MTG with friends?
Yes! It is comparable to printing cards on paper and sleeving them over top of real cards. As with all things you should discuss this with your group first.
Do I need to buy playtest cards?
No. The WOTC fan content policy and our own rules are very clear on this. The cards we make here must, by their nature, be available for free. Anyone trying to sell you playtest or proxy cards, especially if they try to point you towards a proxy store, is trying to scam you./
It should be noted that some people make their own completely custom playtest cards and host them behind a paywall. This is different from a proxy store which often just lifts work from people on subs like this. Work from these individuals can't be found here unless it's been made avaliable for free.
How do I print playtest cards?
You can either use a printing service or print at home with the help of some basic supplies. Most of the guides and tools here are geared towards the printing service makeplayingcards.com.
There are dotted red lines on my card preview in MPC. Is this normal?
Yes! The red dotted line is completely normal. It only indicates areas that might get cut off in the event of a catastrophic printing error (you'd need a earthquake to cut that much off)
Here are some images showing what your MPC card preview SHOULD look like: Example 1, Example 2, Example 3.
I've followed the wiki, but which card stock should I choose?
There are more than a few options to choose from. Fortunately, u/VorstTank has your back with their excellent Card Stock Review. Don't want to read more? jump to the tl;dr. Don't even want to do that?.. but... fine... S33 or S27. There. Happy? Good.
Is there an easy way to put together a printing set?
Yes! MPCfill.com is a tool for generating orders. Simply enter a card list and mpcfill will show you a list of available playtest options for said cards, options found on mpcfill are indexed from community members' google drives. In this way, mpcfill also acts as the most comprehensive and up-to-date database of community cards. (Despite this, not everyone has their cards available on mpcfill so it is also recommended you browse the subreddit and discords)
Can I make a playtest card?
Absolutely! We are always happy to see new creators join the fold. Thanks to the efforts of various community members the tools to us have expanded greatly and it is now possible to create fantastic-looking cards in seconds! Check out the guides and templates sections for more information.[As the guides section is under construction I will start by pointing you towards the templates section if you know photoshop and towards cardconjurer.com if you do not]

GUIDES

CONTRIBUTING TO MPCfill

So you made some cards and you'd like to get them hosted on MPCfill? Well here's what you gotta know:

1. Your drive must meet the following standards:
   
   • All cards must be named as follows "Card Name (additional info)" \ \
   Example:\ \
   

   Hornet Queen (synth version) * All proxy images must be MPC formatted (have the 1/8th bleed edge) * None of your proxy images can contain a copyright line * Have at least 20 proxy images in the google drive you wish to share * Have no proxy images over 30mb (the site can't index these) * Have proxy images with an average DPI above 600, the recommended is 800+ * Token images ONLY in a folder called "Tokens" * Card back images ONLY in a folder called "Cardbacks" * Any folders on your drive that DON'T contain proxies must be prefixed with "!", for example: "!Templates" * Don't rip proxy images from other creators and put them on your drive\ \
   

2. With that done you must now join the Discord\ \
   
3. Navigate to the 'contribute' channel in the MPCFILL.COM section\ \
   
4. Submit your drive in the following format:\ \
   

   • Your Creator Name
   • A description of the proxies you create
   • A link to the google drive folder containing your proxies
   • A statement as to whether your want your drive accessible through the contributions page of the website (either "Make my drive public" or "Keep my drive private")\ \ Example: Creator Name: Smyris

   Description: Mix of styles with a focus on using new art or remastered frames
   Google Drive: https://drive.google.com/drive2/folders/1-zKMu1EvOMWiu9o3BmiEie7kS-2X1Bjn
   Make my drive public\ \
   

5. Once you've submitted your drive, simply wait and make any adjustments asked of you.
   

TEMPLATES

TO USE THESE TEMPLATES YOU MUST:

1. Download the fonts
2. Own a program capable of reading and editing Photoshop files
3. Have a basic to intermediate understanding of photo editing programs

Resources
Silvan's Templates
VittorioMasia's Templates
WarpDandy's Templates and other resources
The Fonts
(More Fonts for some non-core templates are available here and here)
Core Templates (Updated Feb 2022)
[Note: All core templates make use of Layer Comps to simplify usage]

Template	Notes	Creator
Standard Modern Card	Can also be used to create Nyx cards.	u/SilvanMTG
Extended and Full Art Cards	Can also be used to create Nyx cards	u/SilvanMTG
Planeswalker	n/a	u/SilvanMTG

Set specific templates (Updated Feb 2022)

Template	Notes	Creator
Innistrad Fang	n/a	u/MichaYggdrasil
EN Mystical Archive	This template has been improved to allow for creatures. If you wish to change the size of the textbox it is recommended that you have at least an intermediate understanding of photoshop.	u/MaxieManDanceParty
JP Mystical Archive	This template has been improved to allow for creatures.	u/VittorioMasia
Amonkhet Extended Invocation	This template alters the visual of the original Invocations to be more 'readable'. It is unrefined and not recommended for those without an intermediate understanding of photoshop.	u/Smyris
Kaladesh (Re)Inventions	An improvement on the original Kaladesh Inventions, this template allows the gold filagree to reach the edge of the card.	u/VittorioMasia
ZNR Expeditions	n/a	u/VittorioMasia

Unique Community Frames (Updated Feb 2022)

Template	Notes	Creator
Full Art Shrine Frame	Full art frame with a Shrine Aesthetic. Includes unique crown.	u/VittorioMasia, u/bazuki
Full Art Ninja + Brawl Crown	Full art frame with some unique crowns.	u/VittorioMasia, u/bazuki
Neon Frame	Basically the Full Art frame but given a nifty glow up. Ha! Puns.	u/SilvanMTG
Eldrazi Dust Frame	A custom frame with an Eldrazi Aesthetic. The bone-like structures are based on the Eldrazi Titans.	u/kasuMTG
True Dnd Frame	A frame made in response to the DnD set. It is designed around the DnD source books.	u/FeuerAmeise + u/MCMan6482

Hallo guys,
I installed nginx as a service on my win 10 home NUC for being able to reverse proxy navidrome streaming from my phone when on-the-go. I have a static public IP address and am using a dyndns address.
If I open port 80 in my home router and forward it to my NUC, I can view nginx homepage when browsing the dyndns address from the internet.
Now I would like to get and install an SSL certificate for my .dydnds subdomain, install it into nginx and revers proxy https://dyndns/navidrome to http://dydns:4533. I tried to use certbot here but seems it is not maintained anymore for windows.
Any help please ?
Thanks 🙏

I've been using commercial proxy services for quite some time to manage my internet privacy and security, but after seeing some videos (and this sub!), I wonder if setting up my own self-hosted proxy would come with better privacy controls. I'm hoping some of you here might help or explain this to me properly.
From what I understand, using a self-hosted proxy means you manage the server yourself, so you'd get more control over your data. What I'm really curious about is how much of a privacy improvement I can expect if I switch from a commercial service to a self-hosted setup and whether it's really worth it for me. Specifically, how does self-hosting give you better control over data logs and personal information?
With the commercial proxies I've used from speedproxies.net, even though they have all sorts of privacy policies in place, there's always that lingering doubt about whether they are logging my data and how they might be using it. So, if I were concerned about who might have access to my browsing history or if my data could be sold to third parties, I'd like to know more about it.
So, do self-hosted proxies really offer a higher level of privacy compared to the ones you pay for? And is it worth the cost/time for a small office setup of 4 computers? Is it even possible for someone with "amateur-level" technical skills to set one up correctly? I would really appreciate your advice!

This is a work in progress, I’d love to add to it! Feel free to ask questions or suggest things to add.
GENERAL MERCH - SECONDHAND
If you’ve been wondering where to buy TWST merch, you may have heard of Mercari Japan. Mercari is a secondhand site that’s commonly used in Japan to sell merch and collectibles. There is an American branch of Mercari, but it seems to be run completely separately - recently Mercari US has done some shady stuff with returns and charging the buyers fees, I’ve never seen anything to do with that on Mercari JP. The ‘culture’ is also pretty different than any NA based secondhand site I’ve been on. People sell clothes, things cluttering up their house, handmade items, high value collector’s items and more all on the same site. It’s like a combination of poshmark, original etsy, and eBay. It’s also the best place to get TWST stuff, unless you happen to catch an Aniplex pre order. You need a shopping service to help you buy because you don’t live in Japan, but it’s really no big deal!
If you don’t want to deal with a shopping service, or aren’t as much of a ‘sport shopper’ who enjoys hunting down deals, Suruga-ya is trustworthy and a little easier to use. The prices will be generally higher than you find on Mercari, as to be expected with any reseller of used goods, but they seem reasonable. You can buy directly from them, but you’ll still be paying the international shipping cost from Japan. However, they often have promotions on shipping, which can be a good enough deal to even offset item markup!
What’s a shopping service?
A shopping service (also called a proxy) is a company that purchases the things you want for you. You select items, send the money to the shopping service, and they purchase them. Items are shipped to the shopping service, and when they receive everything; you pay for international shipping. Then you get a big box of items, yay!
So how much is shipping?
The international ‘light packet’ shipping is about 30$ CAD or 22$ USD. I can only speak for North America, if anyone has approximate costs for other countries I’d love to add that. You can get quite a bit in a box before the shipping goes up, in my experience - I’ve paid 30 for shipping and recieved a box full of items approximately the size of a large shoebox (like that you might buy boots in). If you’re looking at small items like nuis, zipper pouches and buttons you can buy quite a bit and make that shipping worth your while. I’ve gone up to about 70$ CAD before in shipping, usually buying quite a lot (ordering stuff for friends and/or bulkier items like in box nendoroids or the large plushies).
How much are items?
Your best value will be in ‘lots’ of items people are selling - for TWST this is usually grouped by character or just by dorm. It really depends on how popular the dorm/characters you are interested in is, for how good the deals will be! Also if you’re looking for event/birthday items, those tend to be pricier or require more hunting around to find a good price. You can often find a lot of items with a handful of keychains, an acrylic standee or two, some pins, a couple of cards and maybe a nui or two for around 10$. Many of the common items are often in these lots, so I never go out of my way to buy them on their own. If I buy something on its own, it’s usually because it’s rare or special (lately this has been birthday pins for me).
These items are secondhand. Are they clean?
Anyone who’s bought secondhand items, especially online, knows that sometimes the condition is misrepresented. There can be undisclosed damage, dirt/pet hair, things stinking of smoke etc. I’ve literally never had this problem on the Japanese market - sometimes there’s photos of ‘damage’ I can’t even see, and often things are heavily discounted for reasons like ‘I own a cat’. Things still wrapped in original plastic will have ‘this is stored by an amateur, purchase with caution’ in their description. Everything is nicely packaged and all clothing items I’ve bought have been washed (sometimes with a laundry detergent I don’t like the smell of, but I’m washing it myself anyways!).
On Poshmark/Depop you often have to talk to the seller. Is Mercari JP like that?
Not at all. If there is any messaging the seller involved, the shopping service takes care of it for you.
How do I buy?
I use the shopping service Buyee. You can search directly through them and even save your fave searches on your profile to check them easily, which I love. Buyee also lets you buy directly from a number of other sites big like Rakuten and Yahoo JP, and combine it all together into one order they ship for you. I haven’t found anywhere near as much TWST stuff on those sites as on Mercari, but it is convenient! Once you find something you like, you can put it in your cart to think about it or buy it right away. The purchase screen shows you the purchase price plus the 300 yen shipping service price. Some services take a percentage instead, but the flat fee is great for those lots of items and higher priced items. It is not so great for things like single buttons which may be priced around 300 yen themselves. There’s also a dropdown menu with ‘purchase protection package’ which has 0, 300 and 500 yen options. It will be automatically set to the highest option. This may be worthwhile for a very high value collectible or something fragile, but I have always happily set it to 0. Everything is always well packed and I have no reservations about doing this! You can pay with a credit card that you have the option to save on the account. Then it’ll show up in your ‘orders’ tab (you can see it if you click on your cart!) and you’ll be able to see when buyee completes the order, when the item ships and when they recieve it. Occasionally an item will be sold out, or the seller will cancel, and in that case buyee refunds you immediately. Once an item arrives at buyee, they’ll keep it for 30 days (I believe you can extend for a fee? I haven’t personally done it).
How do I ship my items?
Once they all arrive (you’ll get an email when each one comes in) click on ‘package information’ on the top bar and then ‘in storage’. You’ll see that they have a shipping estimate for each individual item, but we’re going to put them all together. Click select all, and then consolidate package. You’ll be asked about additional protective packaging - again, their default packaging is quite secure, I only got additional packaging once when I bought a ceramic item. Confirm that you want to consolidate. This takes about a day, and then you’ll be able to see shipping costs for your complete package. Simply choose what shipping company you want (availability and price will vary depending on where you are and what you’ve bought), pay the shipping fee and they’ll send out your package! Now you just have to wait for it to arrive.
So… how do I find items?
One of the best ways to find specific types of merch is to just search ツイステッドワンダーランド (Twisted Wonderland) by category. ツイステッ seems to be used the same way we say TWST, so you can experiment with that too! My favourite category search is fashion -> women, which works as a pretty good catch all for things like bags, shirts, PJs etc. If you’re looking for stuff that doesn’t fall into plushies/keychains/buttons/standees, it’s a good one. Books, magazines & manga -> manga is good for doujinshi. Games, toys & goods -> toys -> plush doll will get you all of the plushies. Most other types of stuff you might want will be in the ‘character goods’ category under Games, toys & goods. You’ll see pin badges, acrylic stands and key rings all under there as separate categories!
Generally the other keywords I find useful are the dorms and character names. I’ll include those in a comment below - most of them you can straight run through google translate, but a few of them don’t come out quite right.
You can sort things a few ways, I find price low->high or newly added to be the most useful! The price search is good for deals, but you usually have to scroll through tons of pages of just bundles of the cards to get there, that’s pretty much always what’s priced the lowest.
DOUJINSHI
You can buy used doujin on Mercari, and this can be good for getting a bundle of one pairing. However… buyee strictly doesn’t allow any 18+ content to show in searches, and they won’t purchase it. Even if you don’t want 18+ doujin, what about new stuff?
The answer is Toronoana, a marketplace just for doujinshi where they appear to be listed by the artists themselves. If you follow an artist on Twitter, they usually announce when they’re releasing a doujin - however, you can feel free to just browse a pairing. Search a character’s name (translated, of course) and when you find a listing with the pairing you want, you can click it there to see everything filed under that pairing. Keep in mind that doujin still very strictly follow the TopxBottom format, so if you want to see all content for a pairing you’ll have to make sure you check both versions. If you don’t want to see 18+ content, don’t worry - it’s listed under two completely different tabs. Each listing has a short description as well as a few sample pages, so you can see what the art and vibe is like.
If I can’t use buyee, what do I use?
Anime Otaku Carry Service. This one is actually a little weird compared to other shopping services, but once it’s set up it’s surprisingly easy to use! You’ll need an account on both Toronoana and AOCS. When you make your AOCS account, it’ll prompt you to link your Toronoana account. This is pretty easy and well explained on the AOCS site while you’re doing it. Once you’ve done that, you can pretty much shop right on Toronoana! If you see a book you like that’s out of stock, there’s also a spot to click to email you if it gets reprinted. The thing that confused me a little is that when you submit the books you want purchased, you don’t pay for them. AOCS orders them for you and once they all arrive you pay for the books and the shipping at the same time. Super convenient for stuff like preorders, but I definitely felt like I’d done something wrong the first time I ordered!
FANMADE ITEMS
Let me know your fave artists and makers, I only know a few and I’d love to have more.
Booth.pm - Japanese site for art and fan merch, requires a shopping service
TyrentArt on Etsy - charms, photo card holders, photo cards
Birdcrumb on Etsy - charms, prints, etc
MarkeTaico on Etsy - charms
MOmePeach on Etsy - Charms, stickers, prints
Dangerous Ladies - cosplay kits and files