[-] UselesslyBrisk@infosec.pub 6 points 6 months ago

Not free as in foss. But free as in beer.

You can use xpenology or just a synology disk station with active backup for business. It does quite well with windows and just runs in the background.

Before using that I use urbackup ,which is FOSS. It also worked quite well.

[-] UselesslyBrisk@infosec.pub 8 points 6 months ago

I tried to use their UX. Its bad. And the worst is I fell asleep watching something like Project Bluebook once. And the Prime Reccomendations streamed a SHITLOAD of alien conspiracy content while i slept. It ruined the recs etc. And you cant delete the primary account profile....only the sub-profiles.

Frankly i only go on it to see what I should maybe load into Sonarr/Radarr at this point. fuck em.

[-] UselesslyBrisk@infosec.pub 28 points 6 months ago

Frankly i find it inconsiderate to the social contract to go out on holidays, and sometimes around them.

Its frankly why i always found Black Friday and the "scope creep" of this festival of consumerism partially so repulsive. I mean its repulsive on its own just in the way people act, but doubly so in that it runs right through a national holiday.

5
1
16
Reddit hackers threaten to leak data. (www.bleepingcomputer.com)
8
8
[-] UselesslyBrisk@infosec.pub 5 points 1 year ago

And a single place to find communities.

[-] UselesslyBrisk@infosec.pub 5 points 1 year ago

Kbins build docs are a nightmare. I have experience with Linux and docker. Can’t get them to work at all. Closest I get are 500 errors and one can’t find a log tossing errors to explain it to save my life.

Maybe I’m not as well familiarized with the parts and pieces as I thought, though I’ve built plenty of Drupal stacks and the like, even using docker and Ansible etc.

Then I look at PRs showing sql injection fixes and XSS fixes and I’m like…oh

[-] UselesslyBrisk@infosec.pub 5 points 1 year ago

mmm. thats debateable.

If theres vulnerabilities in the software, like RCE's or SQL Injections that can lead to access...Cloudflare wont do much for you. For example Kbin has already have PRs for SQL injections and even XSS vulns.

These will get flushed out with time and more people maintaining them of course. But I dont know if I would want that on my personal network even if on a DMZ. If for no other reason than if your instance starts spamming outbound traffic and you get flagged by your ISP.

Heck I had one of my domains flagged by my works Cisco Umbrella instance and the dang thing wasnt even in prod yet.

2

What am I doing wrong. I know that community exists. Just cant sub to it through my account.

[-] UselesslyBrisk@infosec.pub 10 points 1 year ago

I stopped running my own a while ago. Its no longer really decentralized and the big players (google/microsoft) will often just blacklist you for little reason.

That said I DO maintain my own domain and backups. So i can take my email to whatever hosting provider I want.

I also noticed, during the migration, that if you simply register your domain with one of the big players (ie: Google Workspace or M365) you will often get whitelisted and email will flow easier. This was easier when they had a free tier though.

[-] UselesslyBrisk@infosec.pub 12 points 1 year ago

It may be worth passing that rule/config over to @Ernest@kbin.social

The captcha bot detector thing seems to be making it wonkier.

[-] UselesslyBrisk@infosec.pub 4 points 1 year ago

The last kingdom. Based on the post title.

[-] UselesslyBrisk@infosec.pub 9 points 1 year ago

Second this. Especially community information. What community a post is in, a user is in, subscribe to the community etc.

Also allowing local filter on the post lists. Currently it’s subscribed or all.

[-] UselesslyBrisk@infosec.pub 7 points 1 year ago

Yeah definately a "water is wet" kinda revelation.

Also, given that I am not Chinese, I dont really see much of a risk for foriegn citizens. I would be more concerned with my own governments spying (and most all of them do in the western world).

13

A former executive at TikTok’s parent company ByteDance has claimed in court documents that the Chinese Communist Party (CCP) had access to TikTok data, despite the data being stored in the US. The allegations were made in a wrongful dismissal lawsuit which was filed in May in the San Francisco Superior Court.

6

Paragon Solutions is yet another Israeli spyware company. Their product is called “Graphite,” and is a lot like NSO Group’s Pegasus. And Paragon is working with what seems to be US approval :

American approval, even if indirect, has been at the heart of Paragon’s strategy. The company sought a list of allied nations that the US wouldn’t object to seeing deploy Graphite. People with knowledge of the matter suggested 35 countries are on that list, though the exact nations involved could not be determined. Most were in the EU and some in Asia, the people said.

Remember when NSO Group was banned in the US a year and a half ago? The Drug Enforcement Agency [uses] (https://www.nytimes.com/2022/12/08/us/politics/spyware-nso-pegasus-paragon.htm ) Graphite.

We’re never going to reduce the power of these cyberweapons arms merchants by going after them one by one. We need to deal with the whole industry. And we’re not going to do it as long as the democracies of the world use their products as well.

13
submitted 1 year ago* (last edited 1 year ago) by UselesslyBrisk@infosec.pub to c/privacy@lemmy.ml

Also a good conversation here: https://news.ycombinator.com/item?id=36227166

EDIT: Changed the link to an archive.org version.

4

One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to constantly create large numbers of new throwaway email accounts. Now a new service offers to help dramatically cut costs associated with large-scale spam and account creation campaigns, by paying people to sell their email account credentials and letting customers temporarily rent access to a vast pool of established accounts at major providers.

Full details on link.

7
view more: next ›

UselesslyBrisk

joined 1 year ago