Cyber

joined 1 year ago
[–] [email protected] 2 points 1 month ago (1 children)

Just a +1 for Open Camera - it's a great bit of software.

[–] [email protected] 16 points 1 month ago (1 children)

Not sure if it's the devs to blame when there's statements like:

Kurtz therefore has the possibly unique and almost-certainly-unwanted distinction of having presided over two major global outage events caused by bad software updates.

So, I'm guessing it's the business that's not supporting good dev->test->release practices.

But, I agree with your point; their overall software quality is terrible.

[–] [email protected] 11 points 1 month ago

I think they should consider the word "wages" instead.

Let's be honest, this is compensation for skilled labour.

[–] [email protected] 5 points 2 months ago

I would add that a lot of attacks are done after a fix has been released - ie compare the previous release with the patch and bingo - there's the vulnerability.

But agree, patching should happen regularly, just with a few days delay after the supplier release it.

[–] [email protected] 25 points 2 months ago (2 children)

No it's Crowdstrike... we're just seeing an issue with their Windows software, not their Linux software.

[–] [email protected] 10 points 2 months ago (7 children)

Uncheck the box labeled Allow websites to perform privacy-preserving ad measurement.

And, we're back to normal?

[–] [email protected] 2 points 2 months ago

What kinda thing are you thinking of? An actual photobooth kinda box?

You could usr an Android tablet, install Open Camera (from F-Droid) and that has the ability to take (for example) 4 photos with a 10 sec delay... videos too...

Then use syncthing to copy those photos to something else (your phone, a NAS, etc) before it gets trashed / accidentally wiped, etc...

[–] [email protected] 5 points 2 months ago

I tried using Enlightenment years ago - it looked amazing, and then... I found all the bugs, incompatibilities, etc... and it's lackof progress was disappointing.

I tried Bodhi Linux and even they gave up, creating their own Moksha desktop environment too...

[–] [email protected] 3 points 2 months ago (1 children)

Whatever you do. Full backup first 👍🏻😉

Personally, I'd go with the clean Fedora install on the new drive and copy your data over as someone else mentioned, then expand Windows once you 100% happy with it.

(I did something similar with WinXP years ago... eventually dropping Windows, so that harddrive just became a data drive)

[–] [email protected] 1 points 2 months ago

Follow the videos, the original developer shows what it can do, but it's basically running keylogger software.

[–] [email protected] 2 points 2 months ago

This is the way.

There's nothing worse than finding your DNS/DHCP has gone down and it's a VM / container running inside a server that can't start because it doesn't have an IP address and you can't resolve names to get the thing started.

Break things down into chunks that make sense - to you.

I have dedicated (low power) hardware for the interweb firewall / DHCP / core network stuff.

I have a NAS for storage with all the backups / reinstall images on (so I can rebuild the firewall if there's no internet, for example)

Then I have everything else in a single server.

Sources: a house fire, water leak & many hardware failures & borked upgrades over many decades.

[–] [email protected] 36 points 2 months ago (2 children)

It's come quite a way... O.MG Cable

Just a cable... complete with wifi man-in-the-middle abilities

45
submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]
 

As a long-term MythTV user, I read all the discussion about Plex vs Jellyfin, but I'm still here... recording Live TV, watching films, listening to "me choonz" all on free, open-source software. What am I missing? Any other MythTV users out there?

39
NAS vulnerabilities (www.theregister.com)
submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]
 

Just stumbled across this (overly dramatic?) article and thought I'd just post it here...

It's more to act as a reminder that if you've got a NAS that is serving content to the interwebs, then make sure it's behind a proxy of some kind to prevent weaknesses (ie in the management Web UI) being exposed.

Obvz, this article is pointing to Zyxel, but it could be your DIY home-built NAS with Cockpit: CVE-2024-2947 - just an example, not bashing that project at all.

I've used Squid and HAProxy over the years (mostly on my pfSense box) - but I'd be interested to know if there's other options that I've not heard of

 

pfSense... Anyone have much experience with the new Kea DHCP server?

I'm using 2.7.2 (Community Edition) on a fairly good Celeron based system that's not heavily loaded, but I have 7 network segments (VLANs and physical interfaces), so I have 7 DHCP pools / configs.

Just adding 1 more static reservation can cause a significant delay when reloading the service and because I register static reservations in DNS, the network loses DNS so I "break the internet" for a short while.

Would Kea fix this?

 

Well, as the title says, I've had a few notifications that alerted over night and I'm wanting to sleep instead

These are ntfy alerts, but driven by Uptime Kuma... and I can't find a programmatic / config option that says "don't notify between 11pm and 7am" (but willing to admit I've just not found it... yet...)

I need my (Android, ofc) phone to be on in case of family calls / messages, so I can't use "Do Not Disturb", and remembering to manually mute the ntfy app each night just doesn't make sense to me - computers are quite capable of automating my requirements for me.

So... any pointers? I'm sure you're not all getting alerts at 2am because your ISP dropped a few packets...

 

I secure systems for my day job. That means installing AV software, ensuring Windows Firewall is ON, etc. (Plus many other things...)

I've seen discussions around disk encryption here, but I don't recall much about a malware protection. Maybe a little about personal (desktop) firewalls.

I'm aware of Clam, etc, but is anyone actually using these tools much?

Or are we just presuming we're all immune from the bad guys targeting Windows?

 

So, I've had it up to here (^^^) with the family using WhatsApp, etc and I'm heading off into the land of XMPP to find a better solution.

I've got a Pi3 hanging off my pfSense firewall acting as a kinda DMZ box, so thought I could setup an XMPP server on it (Prosody?)

Any advice? Will the Pi crumble (see what I did there) under the pressure of 4 people using it?

Issues with proxying outside with a Lets Encrypt cert on the pfSense box, but maybe not inside the network?

"Better" server software?

Thanks

view more: next ›