• 1 Post
  • 99 Comments
Joined 1 year ago
cake
Cake day: September 1st, 2024

help-circle


  • It’s the never ending battle between what’s secure and what’s practical. In order to have widespread adoption, it has to be easy. In order to be secure it requires layers of complication.

    It’s a yin/yang battle.

    A bank vault with walls 2 feet thick, 24/7 surveillance and requiring a two key unlock mechanism is secure compared to a house door lock on a regular suburban bungalow, but is it very practical?

    The level of digital security generally attainable is limited by how likely someone is to use it.

    2FA using keys is the closest I’ve seen to a happy medium, but it has to be implemented correctly. If the private keys are sitting on a cloud server somewhere and it gets hacked, is it more secure? Maybe not.

    Just like real defence, the walls are only as good as the foundation or weakest point.










  • That sounds a bit ambiguous, though I should have prefaced my previous comment with the fact that I am still very much learning about this stuff myself.

    More recently, I am trying to wrap my head around containerized VPN connections through WireGuard using gluetun. The idea sounds great, in theory. Figuring out how to make it work will probably be less so.

    If you mean just accessing a service through VPN from the outside world, then I might be able to help.

    I’ve done it successfully a few times. Most of the issues I have ever had were usually with misconfigured firewall rules around NAT.




  • I’ve been noticing weird stuff with Microsoft online products since they have been leaning into ai.

    I don’t really know how to describe it. My old windows pc had a virus back in the early 2000s that slowly ate away at .dll and .exe files. It basically caused very random errors and noticeable weirdness for a few days until core system services eventually started dying. That’s what Microsoft online products feel like to use for me now. Random loops of confirmations and links that go nowhere. Even the payment system rarely seems to work.

    His concern seems valid to me.



  • reluctant_squidd@lemmy.catoLinux@lemmy.mlLinux security
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 months ago

    I would argue that Linux is inherently much more secure than windoze, simply because of how it handles user space vs. System (root access vs. User access). Also by how transparent its configuration is and how much information is readily accessible detailing how it works and how to adjust things.

    However, when talking security for anything above the average user’s browsing needs, it can get very complicated depending on what you are trying to achieve.

    Think of it like building something to keep out honest people vs. to keep out hardened, knowledgeable, clever thieves. Obviously the latter is going to take more time and resources to achieve, while the need to keep out more sophisticated bad actors would probably only be needed if you have something they might want.

    Here are some suggestions for searching if actual security is your goal. Others can chime in with more things if they want. This is just some topics/programs you can read about to dip your toes in.

    • nftables/Firewalld (common firewalls)
    • wireguard/openvpn (vpn protocols)
    • rootless containers (podman)

    Best of luck!



  • I’m glad you have the opportunity to hit the reset button like that. It sounds like you have a positive look ahead for the change, which is half the battle in my opinion.

    It might take some time to feel like you fit in better with your new group, but the extra effort is worth it ten fold if you do find your close friend group there.

    Most of the best friendships I ever had started off a bit Rocky. And usually were not at all what I expected. Come to think of it, things are rarely what I expect.

    Best of luck!