• 0 Posts
  • 26 Comments
Joined 2 years ago
cake
Cake day: June 15th, 2023

help-circle















  • “bigger piece of garbage” is a strong word. However I do think that Lemmy is too homogenous politically, making it an echo chamber, which is objectively a bad thing.

    You can see how eager the vegans brigade you when you say anything bad about PETA.

    The same goes to the militant atheists (an irony by itself) commenting all the news of Pope’s death with insults.

    To these people, there’s no nuance. Capitalism is nothing but greed. All religions are a bunch of pedophile rings. Meat industry should be abolished. Everything is black and white, there’s no in-between.

    Honestly, I’m sick of this myself. Everything has to align with their political view as if that political view defines their whole identity and they’d be nobody without it.

    To the cowards who are about to downvote this, I dare you to actually comment. Come on, throw shit at me and get it out of your system.




  • That narrows it down a lot. To be honest, I’m not familiar with that. However, with that specific of a topic, it shouldn’t be that hard to look up for articles to follow and come up with a course of action.

    The reason why OSes aren’t ‘hardened’ by default is because it would be a real pain for users trying to set things up or use it for daily operation. If you take it to an extreme, they wouldn’t be able to access anything they want. If you’re a sysadmin, you’d be faced with your whole office pissed off because they wouldn’t be able to do their work.

    Last but not least, what does ‘hardened’ mean anyway? You can have something as ‘hardened’ as an airgapped workstation in a faraday cage with an off-grid power supply. Are you running away from a government agency? I wouldn’t think so. So a firewall blocking unused ports and mindful practice should suffice.


  • What does that even mean? What kind of exploitation are you talking about?

    Every use case comes with its own risk, and every risk needs to be handled differently. People jokingly said that if you wanna be sure, don’t connect your computer to the network at all; and if you wanna be surer, don’t use a computer. While that was a joke, there’s truth in that.

    If you’re just going to use it as a workstation, then firewall to make sure some randos don’t ping you should suffice. If you’re sharing this workstation with your tech illiterate mates, then perhaps something to prevent executing random stuff like SELinux or AppArmor would do. If executing random stuff is just what you do, then set up VMs or some other ways to isolate that execution environment.

    If you’re sharing files directly from your computer to the internet (e.g. with SMB or NFS), then you’d need to make sure only the right people have the access, and the auth can’t be brute-forced (i.e. with rate-limiting and lock-out policy). Same goes if you allow remote login (i.e. thru SSH). Some people use custom port number to obscure their stuff, and you can do it too, but do keep in mind it could make your life (or your mates’ lives) harder.

    If you’re running other outward facing services like SQL database or HTTP, that would require different ways to address. If you’re on such level, you’d want do some serious readings.