• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle












  • Yes, because vast majority of orgs both in private and public sectors suck at securing their systems. Either:
    -The admins lack the knowledge and skills to properly configure their stuff.
    -The admins are not given the resources they need to update and secure the systems.
    -The in-house parts of the system rely on some deprecated functionality of an old version of some underlying service. Updating in-house parts to make it work with new versions is not made possible because “Phil knew how but Phil was laid off 10 years ago” or “the company who made it is out of business” or “we don’t have the money to do it” or “it works now, so why bother?”
    -The servers are fine, up-to-date and secure, but the in-house service itself has glaring security issues that go unfixed due to above reasons.

    And thus came along little Bobby Tables and was able to completely incapacitate his school district…

    Generally a Linux installation is very good at keeping itself up-to-date and installing security patches automagically. Updating Docker containers is somewhat more involved, but can be easily automated with Watchtower.


  • Shurimal@kbin.socialtoAsklemmy@lemmy.ml*Permanently Deleted*
    link
    fedilink
    arrow-up
    25
    arrow-down
    1
    ·
    8 months ago

    Most of the services you use every day run on Linux servers. Even Microsoft uses Linux on their servers. And these services, not an average laptop, are the main targets of malicious actors.

    The vast majority of behind-the-scenes infra that the end user never sees are open-source, even if the end-user part is proprietary. Eg. Facebook and Xwitter are proprietary, but run on open-source infrastructure like Docker, Kubernetes, Nginx etc.

    Proprietary OS-s are workstation/office/home PC land. They have way more security issues due to crap coding whereas security problems with open-source server stuff are as a rule the fault of the admins misconfiguring services and not keeping their software up to date.



  • family is everything, child need them

    My favourite part is when the conservatives start talking about all children absolutely needing mother and father. Not just parents, not a parent, not a family; mother and father specifically. Yeah, sure, now what about the millions of single parents? Shall we start forcefully assigning a new spouse of opposite sex to them the day after their current spouse dies, divorces (if we keep that as an option, that is), runs away or whatever? All pregnant people who are not in a relationship are immediately married off to a random person of opposite sex? No opt-out. Because think of the children!



  • I actually bought just one new 6TB HDD and repurposed an older 3TB one as a redundancy drive for mirroring most critical data using a simple rsync cron job (no need for realtime mirroring of media files that are write-once), plus another old 1 TB drive just because. I haven’t run out of storage yet and I have automated download/sharing for OpenStreetMap and some Linux distros which takes up half a TB or so, but I plan on expanding the array using MergerFS and SnapRAID when the need arises.

    The rest is just SMB shares, Navidrome, Jellyfin, DLNA and FTP. Remote access from outside my local network is done via Tailscale VPN.



  • Probably it doesn’t quite count as a gadget, but repurposing my old PC as a home server. Firstly it makes a great mass storage solution making all my media accessible from any device, no matter what architecture it is and what apps it can run. I also self-host Home Assistant, Syncthing, Radicale, Navidrome, Jellyfin and UrBackup. The ten years old 2 core Pentium with 8GB of RAM can do it all, it’s much cheaper to run than half a dozen subscription services and I have total control over my data and privacy.