The nostalgia is strong in this one, I love these discoveries.

Sweet, maybe I can roll back all the way to windows XP now /s

I used to use ansible and helm, but it is overkill for my case. Today I basically use a combo of markdown and bash scripts, the combination of them allows me to run the scripts straight from my IDE.

Really good writeup of a very interesting exploit.

I had the same idea a couple years back and even though I would love something that you download and just run and it would work, I realized that in order to get a decent adoption rate, you would need a whole ecosystem, similar to apple in order for it to work.

I still think you can develop something like a hub where you install services like apps, but I doubt it would attract anyone outside selfhosting circles.

There are several things you can and should do to harden your server, many of them can be found here.

Would it not be possible to block this using firewall rules?

When you buy something you should have the right to repair it and modify it.

Currently, everything is basically a renters agreement, where you pay for something you have zero rights to modify or opt out of.

There’s no such thing as US specific on the Internet. Every law made concerning online presence anywhere will have at least a limited impact on the Internet as a whole.

You could look into apps like authelia, keycloak, authentic, etc.

I run my self hosted stuff on a k3s cluster at home on bare metal, then use cloudflare to protect the IP and access only by VPN.

My personal favorite was when we were having issues with an ssh connection and discovered using the -P flag, which will allow you to resume transfers that disconnects and -z that enables compression.

So, for instance to get an ssh file transfer with resume support, using compression, you would use:

rsync -avPz -e ssh user@remote-ssh-server:/source destination

Personally I just put my bank card inside my phone cover. Maybe not as fancy as NFC payment, but does the job.

Can confirm it’s still there for the ignore me community.

Good suggestion. I am a bit averse to bitnami unfortunately but it might beat writing all the charts myself.

Good suggestion, but I find it hard to find the source of those charts (might be a mobile thing though). I will be sure to check it out more closely on my desktop.

Really good post!

Usually Debian as base, then ansible to setup openssh for accessandd for the longest time, I just ran docker-compose straight on bare metal, these days though, I prefer k3s.

Off the top of my head, here are a few things to check.

• is your ssh server configured to only use a specific network interface? If it is, is that network interface reachable from the internet?
• is the correct port open in your firewall?
• is it possible you are doing port redirect in your firewall? Meaning the wan port redirects to a different land port.

I absolutely agree, but what’s stopping them from accepting your money and grab all your data at the same time?