• 0 Posts
  • 24 Comments
Joined 8 months ago
cake
Cake day: November 2nd, 2024

help-circle
  • On and off over the last 15 years or so.

    Only recently have I become much more comfortable & able to resolve things without resorting to search, stackoverflow etc.

    The turnover point was the day I finally learned vi & cron so I could fiddle with an old Buffalo NAS, that was long out of support, riddled with security holes, and offered only very limited tooling.

    Was a great learning experience, but it didn’t pan out the way I wanted. So it runs Debian now, supports modern protocols, and continues to serve. Amazing what you can keep in service when you try.






  • It’s convenience over security, something that creeps in anywhere there is popularity. For those who just want x or y to work without needing to spend their day in the terminal - they’re great.

    You’d expect these kinds of script to be well tested against their targets and for the user to have/identify the correct target. Their sources should at least point out the security issue and advise to grab and inspect before straight up piping it though. Some I have seen do this.

    Running them like this means you put 100% trust in the author, the source and your DNS. Not a big ask for some. Unthinkable for others.



  • I run a split environment. Main router is set up ‘normally’ with what other people in the house and visitors would expect.

    Attached to that is a Pi running an OpenVPN client and a hostapd server that broadcasts a separate WiFi network. Iptables on the Pi are set to only ever allow Internet traffic through the VPN as a killswitch (except for OpenVPN, to prevent a chicken-egg situation), and any wifi clients connected via hostapd are routed through it.

    A script occasionally changes the VPN endpoint to keep it interesting. This Pi also acts as a qbitorrent client that stores downloads to a local NAS.

    It’s a best of both setup that has been stable for over 5 years now.












  • I just treat their letters as scrap paper or kindling. They are very carefully worded to give the illusion of power where there is practically none. Capita are masters in mismanagement, so I’m not surprised your declarations have been ignored in the past. Just don’t bother.

    If you’re truly not doing anything required to have a licence, then they can’t prove you do. Licence dodgers are usually clever enough to not give it away too.

    Don’t answer the door to them on the rare off chance they come prospectively calling. If you do, just close it on the scum without a word, and go about your day. No warrant = no entry.


  • Downsizing from an ex biz full fat tower server to a few Pis, a mini PC and a Synology NAS was the best decision ever here.

    The new hardware was paid for quickly in the power savings alone. The setup is also much quieter.

    You don’t think about power consumption a lot when working with someone else’s supply (unless it’s your actual job to), but it becomes very visible when you see a server gobbling up power on a meter at home.

    You’re right about the impressiveness of working creatively within constraints. We got to the moon in '69 with a fraction of the computing power available to the average consumer today. Look at the history of the original Elite videogame for another great example of working creatively and efficiently within a rather small box.