troed @ troed @fedia.io

HW/FW security researcher & Demoscene elder.

---

Read more

Posts

1

Comments

428

Joined

2 yr. ago

No that's not it. With the two upvotes I have on the post above that number is now shown as 4118.

This is what my Mbin instance profile view shows me:

Reputation points: 4116 Moderated: 0

I'm under the impression the reputation points are either the combined number of upvotes or that minus downvotes, but I don't know. Also, this is an Mbin instance but it's fully federated with Lemmy instances so usually no one separates "Lemmy" and "Mbin" ...

Just start up your own instance at a suitable domain name. "computerexcellencetrainingcourses.com" or something.

https://www.government.se/statements/2025/02/joint-statement-from-the-nordic-baltic-leaders/

https://bsky.app/profile/kajakallas.bsky.social/post/3lhz75bjbms2l

Trump believes, wrongly, that without US support Ukraine is lost.

The EU now takes over as the leader of the free world.

Nice exploit chain!

It has the added bonus on being exactly the thing Russia invaded Ukraine over.

Isn't this Zelenskyy's original plan that he pitched even before Trump got elected then?

The fourth point of the peace plan is economic: Zelenskyy calls on allied countries to implement “joint investment” plans to exploit Ukraine’s natural resources: “Ukraine has natural resources and critical metals worth trillions of dollars,” he notes. “These include uranium, titanium, lithium, graphite, and other strategic resources, which will either strengthen Russia or Ukraine and the democratic world.”

https://www.cfr.org/expert-brief/zelenskyys-victory-plan-ukraine-makes-sense-it-has-little-chance-being-implemented

Why is your VPN jump box better than an SSH jump box?

There's no difference to the work I need to do to secure an open SSHd vs an open WireGuard server. None.

Yes I harden, and penetrate, systems for a living. If your systems need remote access there is no standard (neither in fintech or military) that classifies SSHd as being "worse" than a VPN.

Nuclear is cheaper than your average electricity cost.

I know because I'm Swedish and you use us as your cheap electricity.

Yeah I don't do security via obscurity :D I agree you need to keep your Internet facing services up to date.

(No need to educate me on Wireguard, I use it. My day job is slightly relevant to the discussion)

Why would a Swedish ISP care? I've run servers from home since I first connected up in ... 1996. I've had a lot of different ISPs during that time, although nowadays I always choose Bahnhof because of them fighting the good fights.

That attack vector is exactly the same towards a VPN.

It's perfectly safe to run SSH on port 22 towards the open Internet with public key authentication only.

Which distro allows root to login via SSH?

A lot of what I do (hw/fw hacking) involves running Ghidra on code by others so it's just a tool I know well. As I mentioned I seldomly step through my own code while debugging high level languages.

Depends on language and platform ;) Ghidra, strace, printouts gets you quite far. The only language I regularly step would be assembler.

Sublime Text.

The only thing I need from my editor is syntax highlighting and not be slow.

(Assembler, C, Python, Java and Bash are the languages I mostly work with)