serious business :heart_cyber:

always hopeful, rarely optimistic

pronouns: he/him
lang: eng
founding organizer: [#BSidesCambridgeMa](https://infosec.exchange/tags/BSidesCambridgeMa )

Last Notes

2025-03-29 21:10:16 CET

- reply

And what, set a VPS as my exit node or the like?

2025-03-29 21:03:30 CET

> program stops working
> check that the API key is still active
> keys are allowlisted to an IP
> check my WAN IP
> it's different than it was a month ago
> fucking comcast
> update allowlist
> program works again
sell me a static IP you cowards!
#python #programming #infosec

2025-03-21 14:30:13 CET

- reply

hooray speed bumps!

2025-01-18 01:13:31 CET

- reply

alright, fair enough

2025-01-12 03:40:42 CET

tldr; How common is it to find the software provided by the default Debian apt repo is out of date (maybe dangerously so) and you need to seek out a more secure version by setting apt to grab a different repo?
Long version:
OK, I have a sysadmin situation that I suspect may be fairly common, but it's the first time that I've encountered it because I'm new to all this:
* Host I'm operating is running Debian 12 Bookworm stable
* I updated my apt repo
* I installed nginx web server software from the default Debian apt repo
* Installed version of nginx is 1.22.1
* Shodan monitoring flags nginx 1.22.1 as end of life - (thank you @npub1l5l…hq7p)
* On investigation, nginx website shows a few known medium and low vulns in that version, and the latest mainline version of nginx is all the way up to 1.27.3 - so my current install is in fact five versions behind and very EOL
* obviously this is concerning because I don't want my server to get pwned
* nginx offers a way to update apt to point to their repo and pull the latest version (great service, thank you)
#sysadmin #homelab #nginx #debian #linux #infosec #cybersecurity #shodan

2024-09-23 18:16:05 CEST

- reply

I mean, listen, not to defend the NIMBYs but like, I don't want glue factories or aluminum smelters or coal-fired power plants operating next to where my kids go to school either

2024-09-09 22:36:40 CEST

@npub1avm…dsfh are you running a single user instance?

2024-09-09 22:23:48 CEST

- reply

some Amazon product manager is feeling very pleased rn

2024-08-25 17:02:48 CEST

Freezing my credit with the big 3 agencies. (USian)
Experian was creepy but functional.
Equifax worked.
TransUnion is complete fucking clown shoes.
They should all be destroyed.
#credit #surveillance #finance #infosec #usa

2024-08-24 17:56:01 CEST

I realize this may start a border war, but -
I've been using XFCE on Debian because it's straightforward and comes packaged with the distro. I like it for the most part, I just haven't had much incentive to try anything else. I have GNOME on my Ubuntu machine, again, because it's there and it seems fine (though I like it less than xfce).
I keep hearing about other desktop environments tho and clearly folks have strong opinions.
Would love to hear - is there an easy summary of what each major desktop environment is good for? i.e., if I was thinking about trying something new, what should I be thinking about or looking into?
I'm specifically interested in:
* FOSS
* well-maintained
* compatible with Debian and Ubuntu distros
#kde #gnome #xfce #ubuntu #debian #linux #desktop

2024-08-22 13:13:37 CEST

Alright fedi I need help:
I WANT
* an RSS reader that
* syncs between mobile and desktop (app, firefox extension, or website is fine)
SO THAT I can read my favorite blogs without having to do a bunch of manual syncing / updating across my devices.
Acceptance critera:
* must be FOSS
* reasonably stable / maintained
* can be self-hosted
Does anything like this exist? There's a million RSS readers out there, but they either seem to be paid or don't offer any kind of sync functionality. Or is there a workaround that accomplishes the same thing, e.g., RSS to email service?
I have a nextcloud server - should I just use the News app?
#rss #foss #selfhosting #thunderbird #firefox #opensource #nextcloud

2024-08-21 20:52:27 CEST

- reply

yo dawg, we heard you like Linux, so we put Linux in your Windows, so you can
*kernel panic* while you *blue screen of death*