• 11 Posts
  • 3.32K Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle


  • I’m looking for advice to maximize security.

    The most important answers to this all live outside your server. What is your home network like? Do you control the gateway? Do you have a dedicated firewall? Do you have devices segregated into VLANs so they can’t observe each other (especially IoT devices)? Do you have SNMP disabled?

    1. Containers are not a security barrier. They cannot be, they never will be.
    2. If you are defending against intrusion at your local file server, it is already too late. The call is coming from inside the house.

    If you want security, you block all inbound and outbound traffic by default at your network firewall (not the server OS firewall), and then you open only the ports that you actually need, one by one. You set all the closed external ports to do not respond (“stealth” mode), so that anybody trying to reach your network from outside just gets nothing back except on the ports you specifically need to use. You segregate your internal network into logical areas, and you put things that need to talk to each other on their own VLAN, which may or may not have access to the upstream WLAN trunk depending on what they’re doing. You don’t allow crosstalk between VLANs except in very specific cases. You set static IPs and document them, so that you never have to ping or traceroute internally to find something, so you don’t need SNMP. Anybody trying to use SNMP is conducting surveillance on your network and should stick out from other traffic (some “smart”/IoT devices do this automatically - they are bad and should be treated as malicious and should not be allowed to phone home). And then you monitor your traffic at the firewall, and you deal with anything unexpected as it comes up (like once a week review the logs until you have a sense of what normal looks like on different days at various times, then maybe set a few automatic alerts for things that exceed normal-ish boundaries, then go to reviewing like once a month or so - you don’t need to be checking your logs hourly unless you have some reason to be actively paranoid).

    If you handle everything correctly at the router/firewall level, you’re way way beyond the security of most residential and small business networks. You’re not, you know, impenetrable, but you’re at the point where somebody with experience and resources will have to be trying to break into your network specifically on purpose. If you’re that kind of target then nothing short of an actual SOC is going to help you, and running self-managed servers on your home network is a bad idea.


  • The important thing is that the terms are clearly defined up front, prior to the sale, not in fine print buried in some terms of service document, and not subject to change after the sale. Then I will decide if the advertised price is worth it for me in that moment.

    The specifics of whether the game is for rent or for sale is not really important, nor is the price. What matters is that shady business practices end in legal consequences.






  • Exactly correct.

    Right now China is supplying military hardware to the Houthis, Iran and Russia (at least). We know they aren’t charging much for the war material. The PRC doesn’t care about the outcome of any of those conflicts, but the impact they’re having on the US, the US’s relationship with its allies, the stability of NATO, the security of Europe… all of that benefits China.

    Even if there is no drastic collapse anywhere, even if the end result is that Western nations pull together and develop stronger relationships, China has forced its international rivals to expend extra resources and effort on military assets (as non-US NATO countries and the EU are currently doing), and to react defensively, while appearing to not be directly involved in any of the conflicts themselves. It’s very intentional, it’s a proven effective strategy, it will probably work out well for them.


  • China isn’t giving shit away for free, and the Houthis are funded by Iran…

    True, but China may not be asking for money or anything else in return. The Houthis are acting as a proxy army against the US, and that’s probably all that the PRC really needs or cares about getting from them.

    This is nothing new, the US did the same thing in Afghanistan against the USSR in the 1980s, and tried to do it in Somalia in the 1990s.

    The UK did it everywhere.

    China is just playing the same big-boy international power politics that every other imperialist nation has done in the Middle East since the Romans.

    Nothing will change for the Middle East until everyone there starts rejecting foreign influence as a matter of course.







  • I complained to the landlord they said that only the maytag mechanics can clean the machiens and machine’s filters

    The maytag mechanics move at their own schedule and they dont come inside often.

    OK, sounds like your landlord has a service contract for the machines. That is both good and bad, as you already know. Definitely talk to the service guy if you can.

    Don’t go looking for any panels to open or filters to remove like I said before. You might void the terms of the service contract, which you’d be potentially liable for.

    Also about cleaning the innards of the machine with a washing machine cleaner, I was told that bleach or oxy clean does the same thing , is this true or false?

    Well, bleach and OxiClean do different things. Bleach (sodium hypochlorite) will kill most microbes, but it’s not a detergent so it won’t remove any buildup. OxiClean is a line of various cleaning products, but the main ingredient is an oxidizer (per the name) which will kill some microbes and break down some types of chemicals, but won’t actually remove dirt. To really clean the inside of the washer, you want to do one or both of those things, plus run an actual detergent through it (which is what the washing machine cleaners do).

    Standard warning: don’t mix cleaning products that contain ammonia and bleach. Read the ingredient labels to confirm if you’re using multiple products together.

    Don’t overlook the usefulness of white vinegar as a cleaner. It’s cheap and very effective, especially if you have hard water.




  • Ugh, I thought we were getting over this already.

    The interior is fine, I can appreciate the clean lines and overall minimal ornamentation. White is probably a bad choice for a car that any real human is going to use.

    But a touchscreen for the interior controls? Really? Is it 2015 again? Physical buttons are better. I would even go so far as to say they’re necessary for any controls that a driver might operate while driving - they should be findable by feel only, in the dark, while your eyes are on the road. A luxury vehicle design should certainly have physical controls, even if they’re tucked behind one of these panels to preserve the look of the interior:

    It wouldn’t be ideal, but it would be much better than that thing that looks like a phone bolted onto the center spine, which is just ugly. It sticks out from the rest of the interior design like a flashing neon sign of cost-cutting. It looks like a POS terminal, like I’m about to pay for my coffee:

    What a bad decision, or probably chain of bad decisions made through several committee meetings.