Findmysec @ Findmysec @infosec.pub

Posts

12

Comments

222

Joined

1 yr. ago

Please tell me you're using Oracle /s

I need to try this, thanks

Setting SELinux to permissive is not a good security practice

Such a beautiful distribution. Very happy that it keeps going!

Why not port knocking over TOR?

Hmm, not bad. I care more about WLB than money so this is fine.

Thanks for the tips

Exactly

We really need to push IPFS and TOR/I2P to keep these websites alive. Fuck the low barrier to entry if it means the website can just be subpoenaed

What's the pay like for system admins in Europe on an average? Asking for mid-level (5-7 years of experience)

I have definitely read this answer before. I think we've probably already spoken on the matter. Indeed, Lemmy has a serious dearth of users interested and using secure distros over the averages. Thanks for your efforts; I do not know how to follow users on Lemmy but if I did I'd follow you. Do you have a blog/any other forum you're more active on?

Personally, I find it difficult to justify the time to learn Secureblue (especially the immutable part) or NixOS on Qubes because custom DispVMs with curated salt states work so well already. I'm interested in use-cases that will improve my security but I haven't found any dialogue on this yet. If you do have opinions on this and know where I can look, I would greatly appreciate it!

I would be really interested in a comparison of Kicksecure and secureblue. I'm interested in running one of them myself

Well the Star64 from Pine is pretty good, just doesn't have enough processing power and IO for my liking.

Framework has a laptop in progress if you're interested

Where is this

How would they do DPI on DNS packets routed using DoH? It looks like HTTPS traffic, it's encrypted, and other than size and frequency I don't see how they can gey anything out of it. Yeah they'll get the SNI with eCH but that's supported by FF and by a lot of providers using DoH

Yeah that's your situation. Some people are fine with it

Ah, you mean they put the cert in a transparent proxy which logs all traffic? Neat idea, I should try it at home

Private CA is the only way for domains which cannot be resolved on the Internet

Isn't feeling like that a good thing though? If you're sufficiently miserable there's a good chance you'll actually get the work done. This also works if you feel embarrassed or feel that others depend on you, but in my case I'm going to have to depend on the former.