StarkZarn @ starkzarn @infosec.pub

Posts

10

Comments

74

Joined

2 yr. ago

It's not about user-led synergy. The personal data market is slurped up by those that already have and are building correlations. Just because a user didn't report anything to their insurer doesn't mean an insurer sure as shit isn't going to want the data if they can link it to the user whatsoever, so long as it will make them more money.

This is hypothetical, of course, but it's the way the market of data brokers works.

You joke, but I guarantee there's a market. Consider health insurance companies that see an opportunity to charge everyone more unless they can prove their good brushing habits via app data.

A fatalist take like this doesn't help anyone. Do you lock your doors at night even though you're not be continuously robbed? It's always worth it to try and protect yourself.

Love me some graylog

LibreNMS, which is a modern fork of observium.

https://roguesecurity.dev/blog/librenms

✋

False positive what? I didn't give any specific examples of alerts, just simply monitoring metrics. Are you referring to the note on the Dnsmasq memory leak?

For any hams here, maybe this blog post will be up your alley. 73!

I write a tech and radio blog, if that's your schtick. If not, no worries. Post your rss feed when you're done!

https://roguesecurity.dev/

They misspelled "backdoors."

I love avocados, but can't say I've ever liquified them then drizzle on toast...

I rely heavily on grafana and Prometheus for metrics, but am not familiar with suzie-q, so I'll have to check that out. Agreed though, LibreNMS is great, even if a bit old school.

Hey good for you, that's awesome! My home network is also dual stacked.

You're right about the apples to oranges comparison, but it's not so wildly off, because the commentary is on adoption of new standards, regardless of bolt-on "fixes." Unauthenticated SNMP went through three revisions prior to adding authentication and encryption support.

And IPv6 was codified in RFCs and first addresses issued in 1999 but look where we are now. I'd bet your corporate network doesn't use IPv6 still. It's unfortunate, but sometimes the wheels of change are slow.

Nagios is a premium offering. They have some open source components, but the software model is absolutely not built around the spirit of GPL.

Zabbix is the obvious alternative in my mind, and it is AGPLv3, so absolutely in the same spirit as the LibreNMS license. It's a slightly different tool though, and less network-specific. Having used both, I prefer LibreNMS for specifically network monitoring, it's laid out to cater more to an ISP-type entity running it, and I like that. Zabbix still gets my wholehearted stamp of approval though.

Updated the post to reflect your feedback here. Thank you!

You are absolutely correct, thank you. Sadly a bunch of devices still don't support it, even in 2025 (like my microtik switch) for example. I will absolutely add a note about that though, thank you!

I absolutely have and used it for a while before landing on opensuse microos primarily. I absolutely see the benefit and enjoyed the git-centric nature, keeping flakes in repos with a flavor for each machine. What I didn't enjoy, however, was the seemingly poor documentation. Quite frankly too, the drama surrounding the community doesn't inspire confidence either. I decided I ought to try out guix but haven't gotten to it yet. I do actually still have one nixos VM that hosts some services for me and is built entirely on the concept of the impermanence flake. That was pretty cool.

Excellent! Let me know if there are specific things you'd like to hear about.

Absolutely! I'd happily take any comments you have from running it in an enterprise setting, if you care to share.