1
[-] starkzarn@infosec.pub 8 points 1 week ago

I write a tech and radio blog, if that's your schtick. If not, no worries. Post your rss feed when you're done!

https://roguesecurity.dev/

10
54

This one is less focused on self-hosting a homelab service, but I thought might be interesting for the homelabbers here. I got into this hobby through my career in cybersecurity, and decided to write up a little post about a tool I frequently use, mitmproxy!

[-] starkzarn@infosec.pub 14 points 3 weeks ago

I love avocados, but can't say I've ever liquified them then drizzle on toast...

87

If you've followed any of my self-hosted headscale with Podman series, I wrote up another "bonus" post talking about OIDC configuration with Authelia. Took some trial and error, so I figured I'd document it in the public notebook.

95

Another post in the records for the tech blog, this time all about opensource network monitoring with LibreNMS!

28

For those that were interested in my PART 1 post of the Grafana Loki OPNSense firewall log monitoring, I present you: PART 2! This one is the good one (albeit less technical) where we get the eye candy after getting the log ingestion pipeline already setup in part 1.

5

My first blog series on headscale with traefik through podman quadlets was pretty well received on here. I'm just getting started with this blog, and thought the second topic I recently worked on might be popular in this crowd too: a lower resource method of centralizing logs for OPNSense with Grafana Loki (and Alloy) including geoIP!

30

Part 1 of my Headscale and Traefik blog post seems to have gotten some good traction, so I just wanted to share with the community that I just published part 2!

51

Shameless self-plug here. I wrote a blog post to document my methodology after having some issues with publicly available examples of using Podman and traefik in a best-practices config. Hopefully this finds the one other person that was in my shoes and helps them out. Super happy for feedback if others care to share.

[-] starkzarn@infosec.pub 12 points 2 months ago

I thought this was gonna be some animorphs shenanigans from the thumbnail

[-] starkzarn@infosec.pub 110 points 1 year ago

It's just an NTP pool. The device is trying to update it's time. Likely it made many other requests to other servers when this one didn't work.

Maintaining up to date lists of anything is a game of whack a mole, so you're always going to get weird results.

If you're actually unsure, pcap the traffic on your pfsense box and see for yourself. NTP is an unencrypted protocol, so tshark or Wireshark will have no problem telling you all about it.

That said, I'd still agree with the other poster about local integration with home assistant and just block that sucker from the Internet.

[-] starkzarn@infosec.pub 8 points 1 year ago

I don't know how you got a picture of me, but I demand it is removed!

[-] starkzarn@infosec.pub 7 points 1 year ago

This is absolutely not what DNSSEC is. DNSSEC provides authenticity of the response, not privacy. You're describing a means of encrypted name resolution, like dns-over-tls, dns-over-https, etc.

[-] starkzarn@infosec.pub 16 points 1 year ago

If you have any question on truth worthiness, you can flash stock openwrt on them. You just lose out on their proprietary webUI and pre installed plugins. I believe their firmware is public on GitHub though.

[-] starkzarn@infosec.pub 6 points 2 years ago

Yeah, put that trash in prison!

[-] starkzarn@infosec.pub 13 points 2 years ago

That all sounds correct to me. The random port you're seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there.

[-] starkzarn@infosec.pub 8 points 2 years ago

Agreed. SMD components fail silently.

[-] starkzarn@infosec.pub 34 points 2 years ago

This is pedantic, but there are indeed capacitors there. They're all surface mount components, so they don't look like the caps that people typically talk about replacing, and they likely aren't what caused it to fail. Anything labeled on the board with a C## is likely a SMD capacitor.

[-] starkzarn@infosec.pub 12 points 2 years ago

😆 God the judiciary is fucked up...

view more: next ›

starkzarn

joined 2 years ago