Oh no, you!

  • 1 Post
  • 277 Comments
Joined 2 years ago
cake
Cake day: November 3rd, 2024

help-circle




  • Not working on anything particular, but I’m going on a road trip on Tuesday to this regional airport that is giving away two racks perfect for my use case. Deep enough for my larger machines, sound proofed and 42U tall.

    Finally my hardware can have a proper rack instead of being in a stack/pile in this harrypotteresque locker under my stairs.




  • My home servers have generally a lot smaller attack surface, as only a few ports are actually routed to them, so in theoey I could get away with a more relaxed approach. But I’m also a big believer in defense-in-depth, so I follow the same rules of thumb:

    • iptables (or equivalent) that drops anything incoming that isn’t wanted. It also rejects anything going out that isn’t planned for.
    • any public facing service (except ssh) gets its own user
    • disable root login via ssh
    • ssh login with key only on any user in sudoers


  • Well, there’s a footnote on my end: Me taking the drives home is a bit of a grey area, as the procedures say that the drives are to be mechanically destroyed when no longer needed. It doesn’t specify needed by whom. And I do attack them with my angle grinder, so it’s in accordance with company policy.

    And yes, my employer knows and is OK with it. We go through a ridiculous amount of drives due to large storage needs, so pragmatism tends to trump bureaucracy.






  • A few days ago I aked a dev at our subcontractor if this proprietary software would in theory run on windows. Not only “yes”, but me running mint on my worklaptop was perfect, because his dev and test environment was debian, so even though the software was built to run on windows, he could easily build a version specifically for me.