SayCyberOnceMore

  • 0 Posts
  • 194 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle

  • Get an SSH tunnel working first.

    That’ll find all the problems poking holes through home routers, dynamic public IPs, etc.

    Once you’ve got that part running, then you can look at VNC or… and hear me out… I just run the X11 apps remotely. So I’m opening their apps on my laptop, changing the config for their session and it’s done.

    I reconfigured Thunderbird that way when we moved email providers foe the family’s email.

    No need for VNC to transmit all their screen when just the app is needed 😉




  • It’s not about AV. It’s about vulnerabilities.

    AV just uses (often multiple) vulns to do something, and with closed-source systems you can’t fix it yourself, so you need an application to do it for you.

    AV is a block-list approach… always needs updating, even for things you don’t have. Linux can operate with allow-lists, so only the apps you have can execute.

    Plus firewalls (outbound as well as inbound), SSH, secure package repos, etc.

    You don’t need AV, but, you can have it if you want it (maybe file-less memoey resident stuff)

    But, yeah, that other post was just mayhem.






  • Yeah, after reading the other comments in here, you should be able to re-read that page and see it’s not the best advice.

    Top Tip: if you’re testing things, you’d modify PATH in the current session first, check that fixes the problem and only then modify any environmental files like .bashrc, etc. so if something got borked you could just logout and in again…

    That page reminds me of Windows self-help pages that ask readers to defrag the harddrive in order to get a printer working.








  • For a NAS, like, storage on the network, keep it as simple and as reliable as possible, so avoid Ubuntu and go to the core underlying OS: Debian.

    Then just build up the functionality you need, is SMB, NFS, etc.

    Personally, I went from OMV to a home built NAS, but went with Arch as that’s what I use elsewhere (btw), so am comfortable with it, but it’s bleeding edge which isn’t always the best if some functionality changes when you’re not ready for it.

    If you’re going for a server running lots of containers, etc, then find whatever the container handler (docker?) is best on… I just put everything on bare metal, so can’t advise what’s best for containers… probably Debian again…

    But, keep it simple.