Meanwhile the EU probably pushes for the 100th time to backdoor all communication encryption backed by fascists and Spain trying to put down the Catalans…
And the UK doing the same thing and also a big surveillance state…
Sadly nowhere is great right now.
Dropping instead of blocking might technically be better because it wastes a bit more bot time and they see it as “it doesn’t exist” rather than an obsticle to try exploits on. Not sure if that is true though.
For me:
ssh server only with keys
absolutely no ssh forwarding, only available to local network via firewall rules
docker socket proxy for everything that needs socket access
drop non-used ports, limit IPs for local-only services (e.g. paperless)
crowdsec on traefik for the rest (sadly it blocks my VPN IPs also)
Authelia over everything that doesn’t break the native apps (jellyfin and home assistant are the two that it breaks so far, and HA was very intermittent so I made a separate authelia rule and mobile DNS entry for slightly reduced rules)
proper umask rules on all docker directories (or as much as possible)
main drive FDE with a separate boot drive with FDE keyfile on a dongle that is removed except for updates and booting to make snatch-and-grabs useless and compromising bootloader impractical
full disk encryption with passworded data drives, so even if a smash and grab happens when I leave the dongle in, the sensitive data is still encrypted and the keys aren’t in memory (makes a startup script with a password needed, so no automated startups for me)
For more info, I followed a lot of stuff on: https://github.com/imthenachoman/How-To-Secure-A-Linux-Server
Isn’t that sources available, not open source since they aren’t allowing community contributions, or am I misunderstanding that?
Kind of like how greyjay is source available but not open source?
Ah the solution to climate change: have 5-10 children in the next 10 years!! Then our emissions per capita will drop way down and the world will be saved!!
That is the lack of regulation’s fault. Companies will increase prices even when costs go down because they can only see money.
Sadly, a ton of countries in the EU have very bad regulations on energy companies.
Hell, here in Belgium you pretty much have to get a 3rd party smart meter because energy companies literally try to scam you.
During the start of the Russian war with the gas crisis there. Our old energy company, Mega (www.mega.be so everyone knows which company it is), tried to charge us >3000€ extra because “increased costs that weren’t factored into our monthly bill”.
They lied and said that we used 99.9% of our total energy from November to December (oh just happens to be the most expensive period) that year. They literally said we used not even enough gas for a single hot shower the entire rest of the year.
When we proved to them with our smart meter records that they were straight up lying to us, they said “ooopsie poopsie, we have no way of knowing how much you use per month, it’s not our fault” and still made us pay 1000€ for the increased costs from October to december even though we just caught them red handed in an illegal scam.
HealthyPi will be a too option too. Much more fitness focused than pinetime or banglejs
Belgium is moving more and more to a much better place just because of regulations anyeay
Solar panels and batteries in a shit ton of homes because of energy prices and older government incentives
10000L rain water tanks because government regulations now require rainwater hookups for future toilers and washing machines plus water is expensive here
Induction stoves to not have to put extraction fans in the kitchen to the outside to boost energy EPC ratings (resale value)
We always have a bunch of potatoes and cans of tomatoes and pasta for fries, mashed potatoes, or different pastas (but maybe that is just my family)
A ton of people would be quite OK for a while here I think.
So then it comes down to whether enough military personnel will have the morals to stand up to fascist orders from the executive branch and disobey them, displaying that they are at odds, or if they will simply obey unlawful, fascist orders to not get prosecuted under the UCMJ.
Also, I would be extremely hesitant to believe that the host of pilots, mechanics, MPs, and logistics did not notice at all women and children being dragged in chains, likely crying, and if on-video behavior is anything to go by, also likely being harassed by ICE handlers and thought there was nothing wrong enough to bring it up to their COs. Cargo is quickly inspected at the very least. And the fact that they didn’t have any prior clearance to land at the airport they were going to… They aren’t complete idiots…
Sorry, but these things do not happen quietly. That is like saying the train drivers and the people loading them into the cars carrying the Jews only knew they were carrying “personnel, material” and happened to be going to “a labor camp”.
Sorry, but it doesn’t matter one. single. bit. that the US military “isn’t a monolithic entity” if, when it comes down to it, they act like a monolithic entity and follow corrupt, unlawful, and treasonous orders like how the USAF has been wordlessly transporting kidnapped legal residents and greencard holders to foreign countries without any semblance of legal process or even a criminal act done.
US military personnel love saying “we don’t follow unlawful orders” who have never had to make that decision until they are given an illegal order and they follow it. Just see every war that the US (and most other nations to be honest) had ever fought and what is currently going on.
It is the exact same as the argument of ACAB. If there are 50 “good” people who actively shield, enable, and do nothing about 50 “bad” people doing horrible, illegal, and/or immoral things, you have 100 bad people.
Or who’s eyesight it gives.
Each blind person gets horrifying deep sea fish eyesight or the eyesight of someone committing murder and now they all are thought to be hallucinating.
When is the last time that a non-poor has ever gotten tried and convicted for perjury?
It is the silent threat to keep poor people honest in court while allowing rich people and lawyers to lie their hearts out and use it for publicity because “they wouldn’t lie under oath”
https://daily.jstor.org/why-is-perjury-so-rarely-prosecuted/
I have been happy with PrivateVPN, but I can’t get a read on them.
They say no-log, but many VPNs probably lie about that. Small, based in Sweden.
I just saw on the kumo app literally just now that they got bought out by Miss Group and are no longer independent like when I started with them in 2019.
They have no strikes against them besides the not-disclosed buyout. No idea if I should switch, but they have good prices and port forwarding.
Our fucking corporate HP printer requires every single employee to make a separate fucking HP account in order to scan anything on the stupid piece of shit.
Not to mention in CONSTANTLY freezes and crashes.
We are replacing it. Fuck HP.
They are a massive megacorp though. It always leaves me to wonder “how much”.
Tons of capitalist companies do stock options where “technically” the employees own a share of the company, though that percentage is usually extremely small, even collectively such that they have no decision power. I can’t help but think that it is similar with huawei, but with better marketing.
That is very fair!!
But on the other hand, 99.9% of users don’t read all of the change notes for their packages and don’t have notifications for CVEs. In that case, in my opinion just doing updates as they come would be easier and safer.
Doesn’t ucore also have to restart to apply updates?
Not super ideal for a server as far as maintenance and uptime to have unexpected, frequent restarts as opposed to in-place updates, unless one’s startup is completely automated and drives are on-device keyfile decrypted, but that probably fits some threat models for security.
The desktop versions are great!
This just makes me think that CEOs will just stick an LLM on a vibrator and call it a “sex robot” 😂
Well, I didn’t think anyone would be dumb enough to do that, but you might be right…
I am also very low. I just pretty much let someone else take credit for it so that it would actually be taken to management.
I got my company to start using bitwarden. That was a huge step and 1/4 of the company forgot their password in the first 60 days. I sent a big email detailing how to make a mnemonic device with a passphrase that bitwarden generates 😂 complete with photoshop drawings on one i generated. no forgotten passwords since
We also have a game called Anti-Monopoly