Taasz/Woof

That could be made illegal as well if the FCC felt inclined to. Radio direction finding would make tracking down mesh nodes fairly trivial for them.

The article says it’s people giving their login info to their AI agent, so nothing to do with the bank security or being hacked in that sense.

I’m re-thinking a few things, mostly moving exposed services onto a VM or two that are on their own VLAN, and don’t contain any important data (it would be my website, gameservers like Minecraft, etc…). I might move to podman as well so nothing has a possibility of running as root, docker can run rootless but that setup seems more confusing to me.

I already use a VPN via Wireguard on my router for access to my private services when out of the house, so my changes are just separating the public from the private as much as possible on the server side of things…

Essentially if someone manages to drop a crypto miner or something on my website that’s fine, I’ll get an alert pretty quickly through Beszel that the server load is high and I can go roll back a backup or whatever. I just want to make sure there’s no access to anything else for them.

I generally stick with the main TLDs. Like com or net.

.com is fairly cheap and won’t be on any blocklists, where some other TLDs can be.

But if you’re in the EU then .eu probably makes sense to use.

There have been a few major ones this year, I’m sure they are fixed at this point though. https://app.opencve.io/cve/?vendor=jellyfin

Plex uses a code signin system where you open the app on your phone or just a browser, and enter the code there.

So there’s no typing/entering anything on the TV at all.

Jellyfin has plenty of issues with public instances too. It’s just the reality of exposing to the public internet, unless it’s something that has a lot of dedicated work going into security it’s going to have problems.

If it breaks I either fix it (often it’s just an issue where the new version needs extra config added), or roll back to a backup and pin the old version temporarily if it really went wrong and I can’t recover otherwise.

Backups run early AM before any auto updates start, and no one is using services and changing data then, so nothing should really ever be lost by rolling back.

It’s easier to setup and use for less technical people, also just more widely known.

I run Jellyfin but logging in is definitely a pain, have to manually enter the URL (including https:// for some crazy reason, why doesn’t it just default to it??) and username and password using a crappy TV remote.

Wildcard SSL does help a lot, since every subdomain isn’t broadcast publicly in the issuer logs.

4.2x more people though, not much point in comparing only 1 figure like that without more context.

I can understand a lightweight IoT network to monitor temperatures and get alarms automatically. But why on earth would it allow controlling the fridge remotely?

Timer on my phone also does that!

I think it’s worth it, but you could move to one of the VPS deals on racknerd (or another lowendbox.com deal), for like $10-20 a year and save a bunch.

Why not just reduce resources all the time? Why does it need to be a bloated mess only when I’m not gaming if they can just turn a switch on to make it less bloated?

I don’t believe there are any logs being transferred, just the abusive IPs are shared with the central DB.

So if an IP starts hitting a ton of rules (like .env access, repeated 403s, 404s, 429s, etc… Or specific AppSec rules) then that IP is blocked and sent to their central DB where it’s pushed out to everyone running crowdsec.

On my setup crowdsec has been more effective than cloudflare at stopping scanners and bots from overloading things, cloudflare just lets basically everything through so I stopped using it.

That said I’m curious if you remember the source of the real world tests, because I’d love to see what’s actually better.

What are they gonna do, close your accounts and make you sign up for 10 more? lol