Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)FI
Posts
1
Comments
36
Joined
3 days ago
  • In your own comment you mentioned making it harder for the general public. If you think your comments might have had any value for anyone looking for answers, well now they can't read any of your material, through no fault of their own. All the while Meta, OpenAI and Google strike back-handed deals with Reddit to steal your data.

    In the end, you're hurting the innocent internet user whilst not doing anything against the big giants. Do you truly not see the problem?

    Case in point, you assumed anyone's only possible threat would be Reddit, without considering it could be random jackasses.

    I don't understand. Unless someone posts private information on Reddit, how is Reddit part of their threat model? And posting such information on a capital-hungry platform means they have already given up their privacy to data brokers willingly. Sure maybe the script kiddie won't be able to scrape your SSN from the internet but is that really the solace you're looking for?

    As to your final line: yes, a lack of content on Reddit will move people to alternate platforms. But there's still A LOT OF CONTENT that is not present on Lemmy, Kbin, Mastodon etc and if everybody starts acting like you then all of that knowledge will be lost. At this point, if your comments held any value for the general public, all you've done is deprive the average lurker. Is that what you want?

  • Your blog is awesome. I have always wanted someone to break down RF homelabbing for me and I think as your blog progresses I will find such content.

    I'm also looking for blogs/material on OS hardening (Linux/*nix), do you plan to write on that (and any recommendations)?

  • Coming back to this thread, I do think some of your comments were inflammatory. If you were to receive a ban, it should have been for trying to bring fights in the comments (but even that is ambiguous at best). I agree that the ban for a comment was too much. An admin shouldn't be conflating one such action with overall behaviour. As for "repeated bad-faith behaviour", it is not so far out to ban you I think. People should be responsible for their own actions.

  • I went through the list. Google and FairPhone should definitely be moved to "Safe for now" whilst OnePlus should be moved to "Requires an online account/sacrifice" as they limited their unbrick utility which means no more custom ROMs for new OnePlus phones.

    I honestly don't understand why Chinese companies do this. They would fare much better against their American counterparts (including Samsung) if they allowed for more open hardware. Goes to show that MBAs at the top of these companies have utter dung between their ears

  • cybersecurity @infosec.pub
    fishynoob @infosec.pub

    What are your methods to harden *nix servers?

    I have been looking at hardening *nix servers for my lab and maybe carry some of that over to work. CIS benchmarks are something I like doing but that's barely scratching the surface. What do you do for your servers?

    I have Lynis, systemd-analyze, Kernel self protection in mind but I'd love to hear your thoughts. Bonus points for the most paranoid setups!

  • Thank you for the comment. Definitely looks like there's some interest in hardening Void, with that said most of the kernel protections that I see from your checksec output exist on my Debian system too. I will try it out in a VM then.

  • Yes, just thought if you could check that the correct ports are opened. I.e. is port 443 open for NGINX on Unraid? Is NGINX forwarding traffic to the correct port to your backend? Is the backend configured to allow traffic on a certain domain/all domains if it is handling HTTPS?

  • Has anybody here actually worked for a company that uses Qubes OS as their corporate OS? I think Qubes is awesome and with some work can definitely be used for corporate work but most people don't know, don't care and are scared of security

  • Don't know why people care about overwriting their comments. It's not like Reddit and Discord lose your content anyway. Having my content sold by Reddit is just as bad as OpenAI or Discord, so I just don't say private stuff on those platforms