• 7 Posts
  • 817 Comments
Joined 2 years ago
cake
Cake day: April 30th, 2024

help-circle


  • 5 years the last one.

    The hardware, including battery, worked great. But it has been lacking updates for some years and I’m worried about vulnerabilities. LineageOS was also not available for this phone.

    I bought a phone with 7 years updates and my initial intention is keeping it for 7 years. More if an stable and secure version of LineageOS is available down the line.



  • I’m a little paranoid, so this is my security set up.

    SSH, blocked at firewall level, only allowing specific local IP to access port 22. Also authentication is done by key, with password disabled.

    Most services are local only and I access them through wireguard VPN when I’m outside my home.

    For services that need a domain name and be public facing, I use a reverse proxy, with the following protections:

    • Very restrictive geoIP block, only my country can access.
    • Restrictive rate limiting.
    • Crodwsec, with community lists, a pluging for open lists, community rules and my own very restrictive set of rules for banning attackers. (For instance as soon as the requested path contains “.env” that’s an instant ban, no second chances).
    • Monitoring through grafana.
    • Some complex services that need a valid tls handshake but I only want to use them myself have a setup when they are technically open to the net, to get let’s encrypt, but the server rejects every IP request but mine.

    Recently I also reduced some noise, surface attack, deleting the A register from my second level domain and using an obscured target for the CNAME records. I also want to delete the www subdomain as it gets a lot of uneeded noise.









  • It might be very country specific. But gambling houses.

    They started to proliferate in my country around 10 years ago, and they said they were going to be the end of our youth. I, myself, went to a lot of actions to stop them.

    We failed to stop them.

    And 10 years after… Nothing happened. There are no mesurable increase in social problems due to the massive increase in gambling I was told it was going to happen. Also the houses themselves are always empty, people gamble mostly online anyway. But they put so much pressure on us to stop the opening of the physical buildings and cause rhe closure of the ones already opened.

    I’m in principle against them still. Just because I don’t like people making money out of people addicted to gambling. But I’m also kind of mad that I spent to much time, effort, and even got sued for what we tried to do to stop them, just for them not really being as much as a threat as I was told they were. And my efforts would have been much better spent elsewhere.

    At least I learned a very valuable lesson.