towerful

joined 1 year ago
[–] towerful@programming.dev 3 points 6 months ago

I haven't had any issues, but maybe I'm too mainstream

[–] towerful@programming.dev 2 points 6 months ago

I have no idea. Everyone else I know is on Spotify

[–] towerful@programming.dev 85 points 6 months ago (30 children)

I have finally stopped using Spotify.
Now using TIDAL and absolutely loving it. It's like what Spotify used to be, loads of great recommendations, much better audio quality, a bit cheaper, and I believe the artists get a better cut.
It's too good to last, but I'm going to enjoy it while it does

[–] towerful@programming.dev 1 points 7 months ago (1 children)

Having multiple machines can protect against hardware failures.
If hardware fails, you have dono machines.
It's good learning, both for provisioning and for the physical (cleaning, customising, wiring, networking with multiple nics), and for multi-node clusters.

Virt is convenient, but doesn't teach you everything

[–] towerful@programming.dev 2 points 7 months ago (1 children)

Yes, because a password is security

[–] towerful@programming.dev 2 points 7 months ago (3 children)

It defends against the lowest level of automation. And if that is a legit threat in your model, you are going to have a bad time.
It's just going to trip you up at some point

[–] towerful@programming.dev 3 points 7 months ago

Just have 2 ipv4 assigned to your server. Have 1 for all your services, and run ssh on the other allowing root login with the password "admin".
A random ipv6 in the same subnet as your server is just obscurity.

The XZ exploit would be functionally similar to allowing root login using the password "admin".
Would doing that on a different port be secure? No? Then a different port is not security, it's obscurity.

Obscurity is just going to trip you up at some point and reduce log chatter.

And yes, running LTSB/stable is a sensible choice for servers.

[–] towerful@programming.dev 9 points 7 months ago (7 children)

But scriptkiddies and automated scans are not a security threat. If they were a legitimate threat to your server, you have bigger problems.
All it does is reduce log chatter.

Anyone actually wanting in would port scan, then try and connect to each port, and quickly identify an SSH port

[–] towerful@programming.dev 16 points 7 months ago (16 children)

Changing ports does nothing except reduced log chatter.
Security through obscurity is not security

[–] towerful@programming.dev 47 points 7 months ago

I guess the options are:
Put them out and fix them.
Leave them alone.
Kill them more quickly.

Nobody is going to stand and watch (or even speed up) something like that without suffering massive trauma themselves.
Right or wrong, they were doing what they thought best and what I imagine most think is best.
Anything else is academical

[–] towerful@programming.dev 3 points 7 months ago

I mean, even desktop excel isn't great for that. Doubley so if you have to use dates/times and timezones

[–] towerful@programming.dev 1 points 7 months ago (2 children)

But then it would just be a footrest

view more: ‹ prev next ›