[-] Cyber@feddit.uk 1 points 2 days ago

Companies should tie CISO contracts to ransomware payouts.

We'd instantly have better protection AND make it financially unviable for future attacks as the CISO's would have to pay out from their own wages.

[-] Cyber@feddit.uk 4 points 2 days ago

We had a guy at work that was emailed some personal data by accident from HR.

He questioned what it was about and HR asked him to send the data back to them.

People in important roles just don't understand techology.

(Yes, of course we cracked the password and opened it)

[-] Cyber@feddit.uk 7 points 5 days ago

Thanks for posting @SocialistVibes01@lemmy.ml, that aeticle was more interesting & thought invoking than I thought it would be.

I'm using XFCE with a theme that feels like it's from the 90's and thinking about it, it does feel better to use than all the modern craziness that Microsoft has been doing in the last few years. I hated the Metro era...

[-] Cyber@feddit.uk 51 points 1 week ago

You know... with the state of cybersecurity at the moment, I am not surprised at all.

7
submitted 1 month ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

I'm running a <cough, cough> years old instance of Volumio 2 on a Raspberry Pi 3

The security of this is terrible, but it sits in my bedroom with a local USB drive full of music and works absolutely fine with a Nanosound DAC audio preamp hat / board which makes it sound lovely... which I don't want to change (it handles a remote control with power on / off)

When Volumio 3 came along, I wasn't impressed, didn't see the software improving much... it was starting to be more of a pull towards their subscriptions

So, I've left it alone and feel like it might be worth a revisit.

So, how's Volumio 4? Or... should I consider another FOSS product ( has to work with the same hardware).

9
submitted 1 month ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

TL:DR; Has anyone here successfully migrated their data & workflow from Logseq to Silverbullet?

... wall of text follows ...

I've been using Logseq for a few years and it has been a life saver at work, trying to track the stuff going on - honestly, I'd have burned out if I hadn't found it.

However, I still haven't quite got all the things organised and I feel Logseq's development is taking a different track that I don't want to go down (db, collab, etc)

SilverBullet.md appears to be developing into the solution I'm looking for... although I don't want a server-client architecture, so I'm running it standalone at the moment.

But, the learning curve feels so steep it's tending to curve back on itself... or... I'm just too busy to focus on learning it.

I see how the file structure works, but I don't understand how the templates, journals, etc work (really simple.in Logseq)

It appears to be 1 person developing this with lots of helpers who all seem happy to chip in with some AI generated code in the forum, but no meaty documentation, examples, etc.

If you've read this far... is it worth sticking with? Is there an FAQ I've missed? Any pointers or encouragement...?

[-] Cyber@feddit.uk 36 points 1 month ago

Just think of all those Azure and AWS VMs needing age verification as they're spooled up, destroyed and receated every few minutes...

[-] Cyber@feddit.uk 63 points 2 months ago

Just add a "Not To Be Used In California" note.

If - yep, a VERY big If - that happened it would at least trigger a larger discussion. At the moment, no-one in the general public knows about this erosion of privacy.

[-] Cyber@feddit.uk 56 points 2 months ago

Define "Operating System"...

I guess my washing machine & car are also going to be "not for use in California."

Those Cisco switches & Broadcom DSLAMs would be tricky too ... I guess the internet's "not for use in California."

And the air-gapped power station control system? "not for use in California."

It is annoying that these laws come in (I'm also including magical thinking about encryprion backdoors for "the good guys") without any form of real-world, practical assessment. Complete waste of tax payers money and undue stress for everyone.

FFS.

6
submitted 3 months ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

After being home for weeks, I went away for business, the 1st night away there was a brief powercut and the firewall (on a UPS) seemed to get stuck.

So, that's no DNS, DHCP, or connectivity between wifi and LAN... All due to (admittedly aging) hardware issue.

Since then my entire home system has had issues whilst it all settles down.

It made me think about getting some redundancy into the system to handle a single failure.

So,.can you give me any insights into High Availability like CARP (for pfSense), VM failover (on Incus?), mesh wifi, Home Assistant, etc?

Of course there are going to be single points, like ISP line, etc, but seems like something to test out.

7
submitted 4 months ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

So, just a light post, I upgraded my Pi4 last night and found the Linux firmware breaks a 32bit install.

I've been meaning to change to 64bit for months, but as it's my DMZ box for torrents, radicale, etc, then it's just finding the right time to convert an adhoc setup into my ansible scripts.

Luckily I had a SD backup from September to get it running again

So, what have you broken over the holidays?

3
submitted 4 months ago by Cyber@feddit.uk to c/linux@lemmy.world

I've been generally running various different ways of backing up files to my NAS (which then backs up to other locations...) - mostly syncthing for photos and large collections of files, but I tend to use rsync to push out config backups to the NAS once something's working.

But, the NAS is only powered up a few times a day (to save on electricity costs), which is fine for manual pushes, but makes scheduling backups a bit tricky.

It dawned on me that it might be better for the NAS to pull the files via rsync instead of pushing them.

Anyone tried this route and have any advice?

6
submitted 5 months ago by Cyber@feddit.uk to c/linux@lemmy.world

Just been supporting someone remotely and was waiting for them to turn on their laptop...

Whilst troubleshooting I ran uptime to see how long we'd been working on the problem and saw it was up for ~2 weeks...

Which made me think ... how do you tell how long a device (laptop) has been running, but since it's last suspend / hibernation?

I can find it from other clues such as journalctl -b -fu systemd-logind and look for Lid opened, but I was really looking for an smarter way...

Just a nice little challenge for anyone bored at this time of year :)

37
submitted 5 months ago by Cyber@feddit.uk to c/selfhosted@lemmy.world
2
submitted 6 months ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

I stumbled across Diode whilst looking for ways to do secure off-site backups (to my own equipment at another house) and it feels like a paid-for TOR (Ok, there is a free option)

I'm looking for any real experience as the site has too much marketing lingo in it:

Every Client is secured with a public/private key self-custody identity

And this doesn't seem very dynamic if I want to change something:

Diode’s Blockchain Name System can be used for Client friendly names

And somewhere on the site it infers unlimited storage...!

So, is the free option worth me looking into, or is it a waste of time?

14
submitted 6 months ago by Cyber@feddit.uk to c/homeassistant@lemmy.world

The internet is down... well, if you use AWS services it would appear to be true.

Things such as Alexa (now working again?), Ring, etc are either slow or not responding whilst they try to get things running again

1
submitted 10 months ago by Cyber@feddit.uk to c/cybersecurity@infosec.pub

A colleague was discussing an option to use different vendors either side of a DMZ and suggested StormShield... I'd not heard of them before.

Looks interesting, albeit an old Gartner "magic quadrant" showed their firewalls as being in the bottom left corner... so I thought I'd ask here for real-life opinions on them... if any?

18
Solar PV vulnerabilities (www.redhotcyber.com)
submitted 11 months ago by Cyber@feddit.uk to c/cybersecurity@infosec.pub

Interesting article where ~35k devices from 45 manufacturers have vulnerabilities

Advice is probably not as easy to implement as this in real life:

Forescout recommends that you immediately stop the direct connection of devices to the Internet, to use VPNs or segmented networks, and to ensure prompt firmware updates. Otherwise, tens of thousands of systems around the world will remain a potential entry point for attackers.

7
submitted 11 months ago by Cyber@feddit.uk to c/selfhosted@lemmy.world

I have a few VMs and PMs around the house that I'd setup over time and I'd now like to rebuild some, not to mention just simplify the whole lot.

How the hell do I get from a working system to an equivalent ansible playbook without many (MANY) iterations of trial & error - and potentially destroying the running system??

Ducking around didn't really show much so I'm either missing a concept / keyword, or, no-one does this.

Pointers?

TIA

[-] Cyber@feddit.uk 39 points 1 year ago

Thanks for the TL;DW, I can go about my Arch updates without fear now...

[-] Cyber@feddit.uk 36 points 2 years ago

It's come quite a way... O.MG Cable

Just a cable... complete with wifi man-in-the-middle abilities

[-] Cyber@feddit.uk 56 points 2 years ago

I think others have generally caught this, but I wanted to simplify the point: the apps on your phone are not controlling your home, a computer is. If you don't use Google's, then you'll need to provide one.

[-] Cyber@feddit.uk 44 points 2 years ago

So, Microsoft saved everyone from the bad Linux then?

/s

[-] Cyber@feddit.uk 55 points 2 years ago

Er. Am I the only one to comment that this is a refreshing change to all the displays in shops, airports, etc that show the many ways that Windows errors and BSODs?

Linux on the desktop? Hell no, it's on 80' billboards.

(It's not Arch btw)

view more: next ›

Cyber

joined 2 years ago