Monkey With A Shell

There was an event the next day where he gave a speech to a friendly crowd and by comparison he sounded like a spry well organized guy half his age. Hardly a mention of that out there though. I’m not a big fan of his miliqtost, half steps on a lot of things but it’s playing the game with what cards are available and having decades in political office gives you the experience to do it. I’m largely willing to write off the debate as being so flustered with the torrent of bullshit coming from Trump that it put him off balance.

They’re a part of the mix. Firewalls, Proxies, WAF (often built into a proxy), IPS, AV, and whatever intelligence systems one may like work together to do their tasks. Visibility of traffic is important as well as the management burden being low enough. I used to have to manually log into several boxes on a regular basis to update software, certs, and configs, now a majority of that is automated and I just get an email to schedule a restart if needed.

A reverse proxy can be a lot more than just host based routing though. Take something like a Bluecoat or F5 and look at the options on it. Now you might say it’s not a proxy then because it does X/Y/Z but at the heart of things creating that bridged intercept for the traffic is still the core functionality.

It depends on what your level of confidence and paranoia is. Things on the Internet get scanned constantly, I actually get routine reports from one of them that I noticed in the logs and hit them up via an associated website. Just take it as an expected that someone out there is going to try and see if admin/password gets into some login screen if it’s facing the web.

For the most part, so long as you keep things updated and use reputable and maintained software for your system the larger risk is going to come from someone clicking a link in the wrong email than from someone haxxoring in from the public internet.

I have a dozen services running on a myriad of ports. My reverse proxy setup allows me to map hostnames to those services and expose only 80/443 to the web, plus the fact that an entity needs to know a hostname now instead of just an exposed port. IPS signatures can help identify abstract hostname scans and the proxy can be configured to permit only designated sources. Reverse proxies also commonly get used to allow for SSL offloading to permit clear text observation of traffic between the proxy and the backing host. Plenty of other use cases for them out there too, don’t think of it as some one trick off/on access gateway tool

How long do we have to put up with this charade of her being an impartial judge? Hardly a day goes by that she doesn’t entertain some absurd request to impede the case in whatever way possible.

A deadline set by a government agency for government workers, NOT a ‘Google Pixel Deadline’. Stop writing alarmist headlines to make it sound like Google is gonna shut off your phone if you don’t comply. You should update, but knock this writing style off people.

Zabbix or Cacti are nice ways to draw maps that also serve a functional role in keeping track of the activity and alerting.

Looks like was just updated today pending transfer, so either the owner transferring registrars or someone took it over.

https://www.whois.com/whois/funkwhale.audio

Domain expired on the 19th, so it’s validly offline. Has always seemed to be a low-adoptiom platform, will have to see the status in the next few days.

Exactly, the term has been pretty well claimed by people who host things like, oh say, their own Lemmy service or such.

Self hosted in this context is pretty well aimed at the ‘I do a service on my own time and usually own gear’ crowd. IT for a company is an entirely separate thing. Professional self-hosting would be more on a community like ‘serveradmin’.

It depends on the load on the disk. My main docker host pretty well has to be on the SSD to not complain about access times, but there are a dozen other services on the same VM. There’s some advisory out there that things with constant IO should avoid SSDs to not wear out the read/write too fast, but I haven’t seen anything specific on just how much is too much.

Personally I split the difference and run the system on SSD and host the bulk data on a separate NAS with a pile of spinning disks.

I know some VPN providers have their own DNS service that you can use similar to other filtered public DNS. If you mean an in house DNS/VPN gateway then what you want is probably best served by something like a firewall distro (opnsense/pfsense) to handle both of them.

I might just be too cynical at this point. It’d be fun to see, but at this point I suspect that any attempt to keep Trump, and I won’t pretend to think it’s about anyone but him really given the history, in check will be brushed off as ‘the biased,unfair moderators are just trying to silence him’ rather than convincing any of his followers he might be a bit too volatile for public office.

Been a while since I used proxmox but that’s the nature of a lot of those free/corporate type softwares. The free ‘community’ edition is pretty well a public beta that you can get forum level support for, or sometimes you can get paid support at some limited level.

Anyone who thinks muting a mic is going to keep things civil and with any level of decorum hasn’t been paying attention.

How convenient, make sure to wheel him out in a chair with an O2 tank to really get them sympathy points.

Lots of them, if you want something large and powerful you could set up security onion, mirror a port and it’ll capture everything plus graph and slice up things all over. Needs a fairly hefty box not to choke if it gets fed a lot though.

https://www.gamingonlinux.com/2024/06/energetic-boss-rush-big-boy-boxing-gets-a-new-trailer-check-out-the-demo/

Just saw on another post

My thoughts exactly. Things have gotten so absurd ‘OMG Turnip sed WHAT?’ that it makes it all the more difficult to sort out and find the actually bad things. With all the noise it just makes it easier for his followers to claim whatever is the latest was ‘out of context/misinterpreted’.