Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)AM
Posts
5
Comments
1,908
Joined
2 yr. ago

  • I had a double NAT setup like that. Run a firewall like OPNSense as a Proxmox VM, and give it a WAN interface on the ISP router’s IP range; then run everything else on a different subnet, using OPNSense as the gateway. On the ISP router, put OPNSense’s WAN IP in the DMZ. Then, do all your hardening using OPNSense’s firewall rules. Bonus points for setting up a VLAN on a physical switch to isolate the connection.

    The ISP router will send everything to OPNSense’s WAN IP, and it will basically bypass the whole double NAT situation.

  • That is absolutely not the reason ANYONE recommends it, unless you are a complete noob and entirely unfamiliar with computer security at all, and are just pulling assumptions out of your ass. Don’t fucking do that, don’t post with confidence when you’re just making shit up because you think you know better. Because you don’t.

    If there is a vulnerability in SSH (and it’s happened before), attackers could use that to get into root directly, quickly, and easily. It’s an instant own.

    If root login is disabled, it’s way less likely that whatever bug it is ALSO allows them to bypass root login being disabled. Now they have to yeah, find a user account, compromise that, try to key log or session hijack or whatever they set up, be successful, and elevate to root. That’s WAY more work, way more time to detect, to install patches.

    If the effort is higher, then this kind of attack isn’t going to be used to own small fry servers; it’s only be worth it for bigger targets, even if they’re more well protected.

    If you leave root enabled, you’re already burnt. You’re already a bot in the DDoS network.

    And why? You couldn’t be bothered to type one extra command in your terminal? One extra word at the start of each command?

    Sorry bitch, eat your fucking vegetables

  • Then you can’t gain root privileges on your server. Are you really arguing for less security because it’s inconvenient?

    This is end-user behavior and it’s honestly embarrassing. You should realize your security posture is much more important than “I left my phone on the other room”

  • He literally said “American culture is different from its EU origins and therefore we call it out differently”

    And then you said “nah since you’re American it’s all fake as fuck you’re just once large homogenous group”

    Yeah ok and you chain-smoking bullfighters need to get your Lederhosen fitted at…wait, that doesn’t make sense? EU is different places with different cultures? No wayyyyyy 🤡

  • No, I don’t think they meant the kids should have known better, but rather the adults should have known to keep them away from social media because it’s the ultimate cyber predator.

    God knows what a hyper-specific ML model is going to do for them

  • You are supposed to have the same rights regardless of the authoritative agency.

    However when it comes down to it, it’s guys with guns vs normal people.

    If this ever ends we should send all these ICE agents to El Salvador.

  • I think a lot of us, when we were be where, set our clients to “New, 6 hours” and forgot it.

    It makes sense that Hot would reflect that, since that might be how a large portion of the user base is finding content to interact with.