linearchaos

joined 1 year ago
[–] [email protected] 1 points 2 days ago

Minimum open services is indeed best practice but be careful about making statements that the attack surface is relegated to open inbound ports.

Even Enterprise gear gets hit every now and then with a vulnerability that's able to bypass closed port blocking from the outside. Cisco had some nasty ones where you could DDOS a firewall to the point the rules engine would let things through. It's rare but things like that do happen.

You can also have vulnerabilities with clients/services inside your network. Somebody gets someone in your family to click on something or someone slips a mickey inside one of your container updates, all of a sudden you have a rat on the inside. Hell even baby monitors are a liability these days.

I wish all the home hardware was better at zero trust. Keeping crap in isolation networks and setting up firewalls between your garden and your clients can either be prudent or overkill depending on your situation. Personally I think it's best for stuff that touches the web to only be allowed a minimum amount of network access to internal devices. Keep that Plex server isolated from your document store if you can.

[–] [email protected] 13 points 2 days ago* (last edited 2 days ago)

If by not linked you mean wholly owned by...

https://www.mozilla.org/en-US/about/governance/organizations/

The Mozilla Corporation, a wholly owned subsidiary of the Mozilla Foundation, works with the community to develop software that advances Mozilla’s principles. This includes the Firefox browser, which is well recognized as a market leader in security, privacy and language localization. These features make the Internet safer and more accessible.

[–] [email protected] 109 points 2 days ago (4 children)

I suspect their financial position has changed. Perhaps Google's being found as a monopoly has made them decide not to help fund Mozilla's efforts as substantially.

Ashley Boyd lead the advocacy team, here's the kind of stuff they were doing:

https://blog.mozilla.org/en/mozilla/mozilla-welcomes-ashley-boyd-vp-of-advocacy/

In fall of 2016, Mozilla fought for common-sense copyright reform in the EU, creating public education media that engaged over one million citizens and sending hundreds of rebellious selfies to EU Parliament. Earlier in 2016, Mozilla launched a public education campaign around encryption and emerged as a staunch ally of Apple in the company’s clash with the FBI. Mozilla has also fought for mass surveillance reform, net neutrality and data retention reform.

https://techcrunch.com/2024/11/05/mozilla-foundation-lays-off-30-staff-drops-advocacy-division/

“The Mozilla Foundation is reorganizing teams to increase agility and impact as we accelerate our work to ensure a more open and equitable technical future for us all. That unfortunately means ending some of the work we have historically pursued and eliminating associated roles to bring more focus going forward,” read the statement shared with TechCrunch.

Reading between the lines, I'd keep an eye on them collecting your data and consider one of the privacy-focused forks.

[–] [email protected] 5 points 3 days ago (2 children)

Yeah, a company got toasted because one of their admins was running Plex and had tautulli installed and opened to the outside figuring it was read-only and safe.

Zero day bug in tat exposed his Plex token. They then used another vulnerability in Plex to remote code execute. He was self-hosting a GitHub copy of all the company's code.

[–] [email protected] 1 points 4 days ago

Yeah, you still need the CPU to move all the data to the video card and to and from the memory. The stuff I play doesn't mind 30 frames per second, I'm not really much of a stickler for high settings. But even the shitty unity games are starting to struggle

[–] [email protected] 5 points 4 days ago (1 children)

We have high standards for American Chinese food. There was this place where we used to live in the food was great. Not everything they made came out of a bag, and even the things that did come out of a bag had absolutely superior sauces. I don't know exactly what they did but whatever it was it was better heads and tails than anything else around here.

We ordered our regular dishes one day. A few hours later we were exploding out of both ends. Was it them? was lunch? Who knows? We went about our regular business and two weeks later ordered the same regiment. A few hours later we again were exploding out of both ends.

The puking wasn't all that bad but the raw acid diarrhea and the massive cramps were just insane.

This was a pretty bad scenario because of the time we lived in a house with one bathroom.

We never ordered from there again. They had this really great iced tea It took me ages to figure out how to replicate it. It ended up being like 14 to 1 regular sweetened black tea to Earl Gray, plus a splash of lemon.

[–] [email protected] 3 points 4 days ago

He wants in on the new authoritarian regime. Slowing down or stopping electric cars is on their to do list.

[–] [email protected] 3 points 4 days ago (1 children)

Searx is fancy about it though, It queries everybody and gives you the results that came back from multiple places. This effectively eliminates ads, AI, and unless they all missed it, spam.

[–] [email protected] 1 points 4 days ago

Using duck duck go is pretty good for me, if I go to bing.com, My results are horrible. Of course it's the same result set, but I expect I'm getting less algorithmic shuffling on DuckDuckGo.

[–] [email protected] 14 points 4 days ago

Oh give us a couple of decades to screw up the environment enough we can't grow outside.

[–] [email protected] 3 points 4 days ago (1 children)

Unless he thinks he's going to serve all that from the die in the next 5 years.

[–] [email protected] 1 points 5 days ago

Back before streaming I was using the Netflix DVD plan ripping and dropping them on 4.7g blanks. I had a few binders of just my favorite stuff. I owned all the originals for all the Disney that I could get my hands on and all of my favorite cult classics. But what I was really missing was TV shows. TV shows are just expensive as hell in DVD format.

When streaming hit I finally got around to testing Netflix out. My child got fixated Chuggington. He was halfway through when they pulled it from the streaming service. I started digging around, but at the time it was really hard to find TV content. I eventually managed to get the rest of chuggington. I bought a lifetime subscription to playon, and from then on anytime he started to show a strong interest in a show I would just go ahead and record the whole thing I put it locally on tversity at the time. But Netflix just kept having the same patterns of dropping stuff off. The websites started with these are the things you should watch before they disappear from Netflix. I was just done with trusting them.

Years later the same kind of things happened with Amazon. I remember Sheriff Callie being a real pain in the rump. It went from free streaming to purchase seasons only overnight.

Eventually, Playon abandoned their lifetime client and I just went straight to newsgroup/torrent.

view more: next ›