Skip Navigation
Jump
Suggestions for Improving Linux Server Security: Beyond User Permissions and Groups?
  • I would reconsider docker because if a specific application leaks some sort of shell access or system file access you'll be protected out side of container host escalation.

    Unrelated to security, I prefer docker because it leaves the server very clean if you remove different apps. Can also save time configuring more complex applications or applications that conflict with system libraries.

    Add fail2ban on your list of applications it watches logs for invalid logins and puts them on firewall block rules after so many failed attempts.

    6
  • Jump
    I'm at a loss on what server to buy
  • I made the jump to a full server a few years ago and there's some pretty high limits but you can get them spec'ed pretty low. Something like a dell r730 Single 8 core xenon 32gb ram and a couple tb of storage running 4-500$. They can be upgraded over time to be dual 16 core xenon 1tb ram and petabyte of storage.

    4
  • Jump
    What is the better game...The Legend of Zelda: Ocarina of Time or Final Fantasy VII?
  • It's really gameplay vs story. Ott heavy on game play where ff7 can be like reading a book. nothing really revolutionary about its game play some beautiful backgrounds and a deep storyline. Ott has some seriously revolutionary 3d interactions.

    14
  • Jump
    Reddit is now blocking major search engines and AI bots — except the ones that pay
    1. Run Lemmy instance
    2. Gain userbase
    3. Intercept data users are reading and posting from your instance and others
    4. Feed to AI
    5. Profit?

    Lemmy is way less privacy oriented than reddit and that's by design.

    17
  • Jump
    dnscrypt-proxy2 routed through tor
  • Is this whatismyip address on the dns server that should have all its traffic going through tor or just DNS? what is my ip address works by responding with the ip address that is connecting to it. If you are only trying to have dns go over tor what is my ip would respond with a non tor ip address but if all traffic is going through tor then yes something is not working.

    Edit: Reading more in depth of your post 100% whatismyipaddress will not return your tor ip. You've just offloaded name resultion ie. www.google.com is 123.123.123.123 ip address. You are still connecting to websites with your ISP ip.

    2
  • Jump
    Nearly half of cancer patients have more than $5,000 in medical debt, even though most are insured
  • Been on high deductible for 9 years moved to a medium level traditional plan. I feel like I'm spending the same amount of money just less bills to deal with. Only time I can see it being cheaper is if you have something chronic.

    10
  • Jump
    STOP DOING DEPENDENCY INJECTION
  • When we implemented it significantly improved our ability to write unit tests. It also allowed us to make more modular code due to the default of every class having an interface. So I'm all for it.

    12
  • Jump
    What's a good budget home server?
  • I guess some perspective on some other comments here. I have a dell r720xd dual xenon's 16 total cores 128gb ram it uses roughly 200watts per hour with the 11000w power supplies. it can get fairly loud when using lots processing power. I bought a 12u rack to mount it nicely in my office. It is also my guest bedroom, while everyone we have had doesn't mind the noise not all guests would appreciate the white noise even with many of the cpu intensive stuff turned off and it as quiet as it goes. Fans full tilt would be obnoxious and hard to concentrate.

    5
  • Jump
    Web development
  • But why do either of those companies need an app is beyond me. Website does everything you could need anyways

    10
  • Jump
    Smart devices are turning out to be a poor investment
  • I've been eyeing one of those Intel HDMI sticks for this. I have been using my steam deck for stuff lately and KDE connect is really good, or leverage something like Kodi.

    0