• 0 Posts
  • 643 Comments
Joined 3 years ago
Cake day: June 18th, 2023
  • NaibofTabr@infosec.pubtoLemmy Shitpost@lemmy.world•Remember, Kids:English
    3·
    23 hours ago

    Oh, I disagree.

    You regret the inactions that you think about, because you think about them, specifically as instances where you failed to act and that led to unfortunate consequences.

    Disregarding the good outcomes of inaction is very relevant, because when you are mired in that regret it is the inaction that you are thinking of as being the failure, rather than the circumstances surrounding that situation. This leads you to the mistaken conclusion that inaction itself is the problem.

    As it’s been said, “It is possible to commit no mistakes, and still lose. That is not a weakness, that is life.”

  • NaibofTabr@infosec.pubtoSelfhosted@lemmy.world•Self Hosting- Security recommendationsEnglish
    3·
    1 day ago

    Your first concern should be your boundary firewall. You should have all ports closed except the ones that you are definitely using for external services. You should know which ports you have open and why, and what traffic, how much and how often you expect to see on those ports (8080 will have regular Internet use traffic, but your reverse proxy port should only have traffic when you’re away from home and actively using it), and you should monitor that traffic at the firewall every so often, and especially when you make changes to your network. Closed ports should be configured to drop packets rather than respond that the port is closed (stealth mode). On a home network, preventing unwanted incoming connections will protect you from the majority of malicious activity. It’s the most effective single thing you can focus on.

    The next thing would be to separate untrusted devices onto dedicated VLANs. This would be for IoT devices, gaming consoles, “smart” appliances, anything that connects to the Internet whose software you don’t have control over. They get isolated on a VLAN that only connects to the Internet and doesn’t allow local connections to devices on other VLANs, so the rest of your network doesn’t exist as far as they’re concerned. This should cut down on things like “smart” appliances taking inventory of your home network and reporting it back to the manufacturer’s servers.

    If you do these two things, and you’ve got your reverse proxy configured properly so that other people can’t break into it, you should minimize unwanted connections to your network and your server/containers should be fine with default internal firewall policies. The only reason you would need to do more is if you expect a direct/intentional attack by a motivated hacker, but in that case there’s not much you can do unless you’re an expert.

    If you want to go further, try implementing the community version of runZero:

    https://www.runzero.com/platform/community-edition/

    https://help.runzero.com/docs/self-hosting/

    https://www.cisa.gov/resources-tools/services/runzero-community-edition

    This is a network visibility tool that will discover and identify devices. To get a really complete look, you would run it from inside your network and deal with anything that you don’t think should be accessible, then run it again from outside your network to see what a potential attacker would see.

  • NaibofTabr@infosec.pubtoMemes@sopuli.xyz•But whhhhyyyyy?English
    9·
    2 days ago

    It’s usually behind the glovebox. In most vehicles that have cabin air filters, you can open the glovebox and then squeeze the sides of it to allow it to drop down further, and you should see the blower fan for the climate control system right there. Not all vehicles have a filter, but if yours does you can typically access it here.

    https://www.wikihow.com/Replace-Cabin-Air-Filter

    I wouldn’t pay someone else to replace it, they’re cheap and its easy to do yourself in about 5 minutes.

    On a related note, engine air filters are also not a myth and definitely need to be cleaned or replaced regularly, otherwise your engine won’t get proper air intake and you can have performance issues or stalls. BUT, some shops may tell you it needs to be replaced when it doesn’t to make extra money.

    In most cars the engine air filter is also easy to access, check and replace yourself. If you do, then you know what the condition of your filters is. If you end up at a shop that trys to charge you for replacing it when you know you just did 3 months ago and it’s fine, then you know not to trust that shop ever again.