• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: July 18th, 2023

help-circle





  • Locking a company out of their systems isn’t the most lucrative part of ransomware anymore. Data exfiltration and threatening to release the data to the highest bidder is now the norm.

    Ransomware also typically sits on a system doing nothing for ~6 weeks before ever starting to encrypt and upload data. Even if companies have backups to restore from, they need to choose whether they’re going to restore entire machines quickly and risk still having the ransomware on the restored machine. Or they can take the long a painful route of spinning up new machines, then restoring just the data itself to individual apps/services to ensure you don’t still have ransomware after the restore.








  • The Oracle Cloud VPS only has SSH key authentication enabled by default. You can also set it to only allow SSH from your home IP in the virtual firewall before the machine is ever spun up.

    Their current free ARM offering is 1 machine with 4-cores and 24gb RAM for life. You can also add another 2 AMD machines with 1-core and 1gb RAM and still be in their free-tier.

    If you’re going to set it up and take advantage of the ARM machine, make sure you pick a home location for your account that has multiple availability zones. San Fran right now only has 1 zone, so if the shared ARM instances are all used up, you’ll have to wait a few days and try again. Phoenix I think has 3, so you can try with another zone right away.


  • Edge/IE run some underlying services for built-in windows features, so uninstalling them can cause issues with completely different parts of the OS.

    Ran into an issue with a client still running Office 2016 where uninstalling IE11 prevented them from opening any links within those apps. Office was harcoded to look at IE for link handling and didn’t respect the setting for your default browser.




  • Using a Pi3b to run AdGuard Home and a TailScale subnet router.

    I’ve got another Pi3b running Octoprint/Klipper for a 3d printer, but I’m currently migrating that to Mainsail running on an old SFF PC so I can run multiple printers with Klipper off the same PC.

    The rest of my stack is on an actual server running UnRaid with like 50tb raw storage.

    I will say that TailScale has been annoying asf with their subnet router setup not actually forcing the correct DNS for AdGuard Home so I can have ad-blocking while away from home. I had to move back to a pure Wireguard setup directly on my router for DNS to work properly.