Heh, I opened port 22 on my home network once. There wasn’t anything on it to connect to, but the firewall recorded thousands of SSH connection attempts within hours. Within a day it had over a million hits.
Yeah, you never really know how sheltered you are until you step out.
I wonder what you are securing against?
OK, you’re familiar with vulnerability scanners and port scanners right?
The threat model here isn’t really attackers specifically targeting your home network for any particular reason (unless you’re a LastPass engineer working remotely while running an exposed Plex server). They’re not looking for you, they’re looking for anything useful.
The threat model is attackers using scanning tools to discover vulnerable systems connected to the Internet. All they need from you is an active connection and a system that can store data, from which they can host malware files for distribution to other targets or conduct attacks or just run a cryptominer (if you’re lucky and they’re not very ambitious). They can find this by scanning for open ports and then running a vulernability scanner to figure out if there’s some exposed hardware that can be exploited.
An unsecured system is a hazard that could land you in jail when someone else starts using your device and network connection to commit crimes.
Now, as long as you’re behind a standard residential network service, and your ISP is in control of your gateway device, you’re relatively safe from this. Most ISPs will block any traffic like that very strictly. If your ISP is in control of your gateway device then they’re responsible for its behavior (demarcation matters).
But, most self-hosters run into limitations with their ISP blocking a lot of ports by default, because they want to access their personal server from outside their home, and so they take control by running their own gateway device or paying for a business connection which gives them complete control over which ports are open. This is where the risk comes in. You are assuming the responsibility for properly securing your connection to the public Internet, taking it off your ISP’s hands.
If you’re going to do this, you should know exactly which ports you have open to the outside and why, and a general idea of what traffic you expect to see on them when and how much. Monitor that traffic at your firewall. Every other port should be closed and your firewall (on your router, gateway device, or better yet a dedicated OPNSense firewall) should be configured to drop packets received by closed ports (“stealth” mode). You don’t want it to respond that those ports are blocked, you want it to appear to not be there at all.
Every other security implementation is a secondary concern for a home network. Yes you should patch your software regularly and you should practice deny-by-default and least-privilege as a matter of course, but you’re going to mitigate 90% of your risk by just not accepting incoming connections for anything you don’t need. Most vulnerable systems are discovered by automated scanning, so the less your system responds to external connections the better. If you’re going to worry about configuring, securing and patching one device, make it that front line firewall. And be very selective about which internally hosted services you expose externally.
I am certainly tired of it.
Sort of?
Script kiddies have been around since the first code languages. Machine learning is just script kiddies with a high-powered search tool.
I think it has more to do with representation of the character in visual media (comic books, television, movies). Showing the character from the side is better than showing just their feet. Also, flying sideways is visually distinct from simply jumping upward, which is important when you’re trying to show the action in the context of two or three comic frames.
Also, that’s how Superman took off, so that’s how a lot of superheroes designed after him took off.
This is wasp propaganda.
wtf is that supposed to be
The Tyranny of the Rocket Equation
And, if your curiosity goes beyond that basic explanation, check out this NASA page on rocket launches:
If a spacecraft is launched from a site near Earth’s equator, it can take optimum advantage of the Earth’s substantial rotational speed. Sitting on the launch pad near the equator, it is already moving at a speed of over 1650 km per hour relative to Earth’s center. This can be applied to the speed required to orbit the Earth (approximately 28,000 km per hour).
Getting into orbit doesn’t just require overcoming the force of gravity pulling down. In order to stay up, you basically have to put yourself on a path that allows you to go around the Earth faster (or as fast as) you fall back towards it. When your movement around the Earth is balanced with the rate that you’re falling, you are in orbit. This means you have to go really fucking fast, not just up but sideways.
Yes.
Came into the comments to ask the same thing, you already found it. You are awesome.
Star Trekkin’ - The Firm
Two Vics
I see a red rose and I want to paint it black…
It could be really useful for various social or psychological research
The only application I can see for such research would be to extend and refine the distopian use cases. What else would such research be used for? It will only feed back into the cycle of privacy invasion and the surveillance state.
… or monitoring patient status.
Impersonal patient status monitoring (beyond vital statistics like heartbeat monitoring which we can already accomplish much more easily) will not have any practical benefit. The most likely outcome is that it will be used to justify reduced nurse staffing.
… the double slit experiment [makes] me angry.
I think if the conclusion of the double slit experiment doesn’t make you a little upset, you’re not really paying attention to the implications.
I think Wheeler’s delayed-choice experiment, with all its variations, shows a particular obsession with trying to get a definite answer from the universe.
The fact that it is possible to decide whether a wave or particle feature manifests itself long after—and even space-like separated from—the measurement teaches us that we should not have any naive realistic picture for interpreting quantum phenomena. Any explanation of what goes on in a specific individual observation of one photon has to take into account the whole experimental apparatus of the complete quantum state consisting of both photons, and it can only make sense after all information concerning complementary variables has been recorded. Our results demonstrate that the viewpoint that the system photon behaves either definitely as a wave or definitely as a particle would require faster-than-light communication. Because this would be in strong tension with the special theory of relativity, we believe that such a viewpoint should be given up entirely.
The universe we inhabit is a goofy, nonsensical place that frustrates our attempts to comprehend it.
If you’re faced with the tradeoff between security and another priority, your answer is clear: Do security.
~Satya Nadella, Microsoft Chairman and CEO, May 3, 2024
https://blogs.microsoft.com/blog/2024/05/03/prioritizing-security-above-all-else/
So much for that I guess.
I can’t think of any beneficial uses for such a product.
We come in peace!
shoot to kill shoot to kill shoot to kill
We come in peace!
shoot to kill shoot to kill men!