“Stop pulling! You have to press in to release the trap.”
- 0 Posts
- 14 Comments
An exquisite typo.
derek@infosec.pubto
Selfhosted@lemmy.world•Do bots/scrapers check uncommon ports?English
1·4 months agoAbsolutely. VMs and Containers are the wise sysadmin’s friends. Instead of rolling my own ip blocker I use Fail2Ban on public-facing machines. It’s invaluable.
derek@infosec.pubto
Selfhosted@lemmy.world•Do bots/scrapers check uncommon ports?English
2·4 months agoThat sounds pretty good to me for self-hosted services you’re running just for you and yours. The only addition I have on the DR front is implementing an off-site backup as well. I prefer restic for file-level backups, Proxmox Backup Server for image backups (clonezilla works in a pinch), and Backblaze B2 for off-site storage. They’re reliable and reasonably priced. If a third party service isn’t in the cards then get a second SSD and put it in a safety deposit box or bury it on the other side of town or something. Swap the two backup disks once a month.
The point is to make sure you’re following the 3-2-1 principal. Three copies of your data. Two different storage mediums. One remote location (at least). If disaster strikes and your home disappears you want something to restore from rather than losing absolutely everything.
Extending your current set up to ship the external SSD’s contents out to B2 would likely just be pointing rsync at your B2 bucket and scheduling a cron or systemd timer to run it.
After that if you’re itching for more I’d suggest reading/watching some Red Team content like the stuff at hacker101 dot com and sans dot org. OWASP dot org is also building some neat educational tools. Getting a better understanding of the what and why around internet background noise and threat actor patterns is powerful.
You could also play around with Wazuh if you want to launch straight into the Blue Team weeds. Education of the attacking side is essential for us to be effective as defenders but deeper learning anywhere across the spectrum is always a good thing. Standing up a full blown SIEM XDR, for free, offers a lot of education.
P. S. I realize this is all tangential to your OP. I don’t care for the grizzled killjoys who chime in with “that’s dumb don’t do that” or similar, offer little helpful insight, and trot off arrogantly over the horizon on their high horse. I wanted to be sure I offered actionable suggestions for improvement and was tangibly helpful.
derek@infosec.pubto
Selfhosted@lemmy.world•Do bots/scrapers check uncommon ports?English
5·4 months agoYou can meaningfully portscan the entire internet in a trivial amount of time. Security by obscurity doesn’t work. You just get blindsided. Switching to a non-standard port cleans the logs up because most of the background noise targets standard ports.
It sounds like you’re doing alright so far. Trying not to get got is only part of the puzzle though. You also ought to have a backup and recovery strategy (one tactic is not a strategy). Figuring out how to turn worst-case scenarios into solvable annoyances instead of apocalypse is another (and almost equally as important). If you’re trying to increase your resiliency, and if your Disaster Recovery isn’t fully baked yet, then I’d toss effort that way.
That makes more sense. Thanks for the response! I’m not sure if can agree with your conclusions. It may be that I’m still missing context you’re working within. My best guess is you’re assuming some axioms that I am not. That doesn’t necessarily mean I think you’re incorrect. We might just be operating with different frameworks.
I agree that strong emergence and weak emergence seem different by your definitions. I’m not convinced strong emergence is a thing. Is there a compelling argument that the perception of strong emergence is actually a more complex weak emergence that the observers have not fully understood?
Something something Occam’s Razor / god of the gaps something. I find these sorts of discussions quite compelling. Thanks again for engaging. :)
I don’t see how either sentence follows. Rephrasing your comment and supplementing it with context to explain your reasoning may better communicate your point.
derek@infosec.pubto
Selfhosted@lemmy.world•A collection of 150+ self-hosted alternatives to popular softwareEnglish
4·1 year agoNear as I understand it: years ago some dumb engineering decisions were made, acknowledged, and corrected. Is there some recent scandal I’m out of the loop on?
derek@infosec.pubto
Selfhosted@lemmy.world•Email with own domain service but local?English
10·1 year agoSure! That’s an SMTP Relay. A lot of folks jumped on the poopoo wagon. It’s common wisdom in IT that you don’t do your own email. There are good reasons for that, and you should know why that sentiment exists, however; if you’re interested in running your own email: try it! Just don’t put all of your eggs in one basket. Keep your third party service until you’re quite sure you want to move it all in-house (after due diligence is satisfied and you’ve successfully completed at least a few months of testing and smtp reputation warming).
Email isn’t complex. It’s tough to get right at scale, a pain in the ass if it breaks, and not running afoul of spam filtering can be a challenge. It rarely makes sense for even a small business to roll their own email solution. For an individual approaching this investigatively it can make sense so long as you’re (a.) interested in learning about it, (b.) find the benefits outweigh the risks, and (c.) that the result is worth the ongoing investment (time and labor to set up, secure, update, maintain, etc).
What’ll get you in trouble regardless is being dependent on that in-house email but not making your solution robust enough to always fill its role. Say you host at home and your house burns down. How inconvenient is it that your self-hosted services burned with it? Can you recover quickly enough, while dealing with tragedy, that the loss of common utility doesn’t make navigating your new reality much more difficult?
That’s why it rarely makes sense for businesses. Email has become an essential gateway to other tooling and processes. It facilitates an incredible amount of our professional interactions. How many of your bills and bank statements and other important communication are delivered primarily by email? An unreliable email service is intolerable.
If you’re going to do it make sure you’re doing it right, respecting your future self’s reliance on what present-you builds, and taking it slow while you learn (and document!) how all the pieces fit together. If you can check all of those boxes with a smile then good luck and godspeed says I.
derek@infosec.pubto
ADHD@lemmy.world•last week i took a creyos adhd assessment and it came back positive, but i’m not so sureEnglish
4·1 year agoHey. ADHD diagnosed person here. Only diagnosed this year after a lifetime of feeling like a lazy former gifted kid. This looks a lot like my over-analysis spiral from a few years ago. My psychiatrist broke it down like this:
ADHD, like most things, is a spectrum. If your brain and body have trouble regulating norepinephrine then you’re probably on that spectrum. There’s no stolen valor here… Only treatment options based on diagnostics (educated guesswork). You meet the diagnostic criteria and I am confident that treatment is your best path forward to mitigate and control the reasons you scheduled time here in the first place.
</paraphrased_dr_words>
Some days my symptoms do not get in the way and I could easily pass for neurotypical. On “bad brain” days I feel like I’m losing my mind. Neuro-divergence is complex and life is weird. A diagnosis isn’t about having direct answers: it’s about narrowing down which mitigations, meditations, and medications we want to trial to increase our control over and quality of our lives.
If you accept that ADHD diagnosis, start treating it, and the treatment improves your life, that’s a huge win. If it doesn’t? Also a win. You’ve eliminated an option via experimentation and you know more about yourself. Time to try the next option. The important bit is being receptive to the attempt at making your life better.
derek@infosec.pubto
Selfhosted@lemmy.world•How to get local SSL and use your public domain for local internal subdomains?English
2·1 year agoWould you elaborate on this concern? I’m not sure I understand but I’d like to.
deleted by creator
derek@infosec.pubto
Free and Open Source Software@beehaw.org•What is your favourite FOSS notes application?
3·2 years agoI’m excited to see they’re going fully open source. Looks like the last steps to making the sync server self-hostable are in the works. Do you use their paid service? If so: any complaints or caveats?
derek@infosec.pubto
Asklemmy@lemmy.ml•If there's one thing you want people to learn, what would it be and why?
3·2 years agoStart here: https://nesslabs.com/how-to-think-better This isn’t an endorsement (though I do like ness labs). That article offers practical evidence-based starting points and additional resources at the end.
There are many people/systems/schools that will offer strategies and solutions. Some are practical and effective. None of them are a replacement for learning what it means to think well, learning how to think well, or actually thinking well.
The next step is learning the jargon of philosophy so you can ask meaningful questions and parse the answers (this is true for any new discipline). I recommend reading anything on the topics of epistemology, ethics, and aesthetics, which resonate with you. Then find others to discuss what you’ve read. You do not have to be right or knowledgeable to earn a voice in the conversation: only an interest in discovering how you might be wrong and helping others discern the same for themselves.
If you haven’t read any classical philosophy but are interested I recommend Euthyphro. It’s brief, poignant, and entertaining.
I hope this helps! Happy to discuss further as well.


They seem to be in bed with livekit.io and OpenAI. They’re also still using Telegram and X. That means Huly isn’t a fit replacement for anything.