@Obsolesce said in Miscellaneous Tech News:
Wyze
The next company to add to your blacklist due to poor security incident handling and response.
Wyze says camera breach let 13,000 customers briefly see into other people’s homes
I used to have a couple of their Wyze Pan cameras, but I've switched to cameras I'm able to run locally only. I've lost trust in most large companies keeping things properly secured.
It's now 2/15/2024 with Fedora 39, and this is still working.
Just setup a new reverse proxy.
@DustinB3403 If you can access the shell, you should be able to find those in the log files. Been to long since I had to do that myself, I don't remember which logfile to check off the top of my head.
@DustinB3403 said in Define Air Gapped Networks:
When using terminology like "Air Gapped" what is your first impression of it?
When I see someone say they have an air gapped network, I think it to mean that the network is separate from the rest of the organization (through a physical disconnect), and that Air Gapped, does not imply the lack of internet.
Air Gapped != Without InternetWhat's your opinion?
That's a common assumption for sure. I agree that just because a network is "Air Gapped" doesn't mean lack of internet.
@DustinB3403 said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@DustinB3403 said in What Are You Doing Right Now:
@GUIn00b said in What Are You Doing Right Now:
Contemplating how to leverage 2 ISP's for supplemental bandwidth when needed using 2 separate routers that are both servicing the same LAN.
......So I'm gonna go post a new topic!
Get a DUAL Wan capable firewall, set it up either as Active/Active or Active/Backup.
You'll be banging your head sorting out getting a fault tolerant static IP address, though it can be done.
BGP..... that could be a whole series of topics itself.
Yup... and getting two different ISP's to play together is the fun part...
Getting 2 ISPs to play together is the easiest part, they don't even need to know. With BGP, it's finding someone to route the public connection. At work, we own routers we do the public routing end of the BGP if you purchase an internet connection through us. It works really well, plug as many of any type of internet connection into our SD-WAN box and the BGP routing makes the next hop our head-end routers.
@DustinB3403 said in What Are You Doing Right Now:
@GUIn00b said in What Are You Doing Right Now:
Contemplating how to leverage 2 ISP's for supplemental bandwidth when needed using 2 separate routers that are both servicing the same LAN.
......So I'm gonna go post a new topic!
Get a DUAL Wan capable firewall, set it up either as Active/Active or Active/Backup.
You'll be banging your head sorting out getting a fault tolerant static IP address, though it can be done.
BGP..... that could be a whole series of topics itself.
@GUIn00b Where to start? I setup and support this sort of thing professionally now. I also had this same headache at home until recently (fiber is so much better, so sorry it's so tantalizingly close.)
I'd highly recommend using a single router with dual WAN setup. I'm not sure about the particulars with that on OpenWRT, but there are some things to consider.
Do you know what the throughput rating is for your OpenWRT routers for QoS? Just about any router/computer will be able to forward packets at gigabit speed, but if they don't have an ASIC accelerator for QoS they can cause speed to tank when turning on QoS.
For example, my personal ER-POE will only forward ~140mbps with QoS turned on while the VMWare Edge or FortiGate devices we use for work start at ~300mbps, and our Juniper's will do full gigabit.
Setting up the firewall and/or NAT for your public IP addresses shouldn't change much if at all.
You can do true internet connection HA, but that tends to be so human-error prone that it ends up being less reliable than using a single router.
@JasGot said in Options to securely deliver electronic documents?:
We have a customer that is asking about delivering documents to their customers; securely.
Much like a bank would do it. They send you an email with instructions to visit their site, login, and download your file.
Anyone aware of a service that does this?
I'd first review one of our previous discussions here. https://mangolassi.it/topic/9231/o365-and-encrypted-mail-to-other-email-systems
I don't trust those systems at all. I've personally been given other people's house and car titles through those. Yes, someone messed up in sending them to me, but those BBS systems exist to make people feel better, not to improve security.
Obviously look for stored procedures in the database.
SHOW PROCEDURE STATUS;
You also might want to check for a php-cron somewhere in WordPress itself. It's been long enough since I've touched WordPress that I forget where to look for that.
@gjacobse said in TMUX: hype or function:
Scanning through my recent feed, I found mention of using TMUX in Linux. Has anyone been using this, is there benefit to using it?
tmux is a terminal multiplexer for Unix-based operating systems. Simply put, it acts as an add-on to an existing terminal.
Off the top of my head, tmux is like screen. It's a way to manage multiple terminal sessions.
I used to use them often, but today I ask myself why I feel it's necessary? What's failed that I need multiple terminal sessions at one time. Every time it's either "this should be a VM" or "this should be a container".
I'll add another note for future reference here.
For Fedora 39 Server, apcupsd has another package apcupsd-cgi that can be used with a web server to display UPS status. However, you have to move the files it installs by default because they're not in the /var/www/cgi-bin directory.
sudo dnf install -y apcupsd apcupsd-cgi httpd
sudo mv /var/www/apcupsd /var/www/cgi-bin/
sudo chown apache:apache /var/www/cgi-bin/apcupsd/*
sudo systemctl enable --now httpd
Should get it up and running.
I found 3 useful tools with it.
http://YOURIP/cgi-bin/apcupsd/uspstats.cgi
http://YOURIP/cgi-bin/apcupsd/multimon.cgi
http://YOURIP/cgi-bin/apcupsd/upsfstats.cgi
2023, and this thread is still the best resource for getting nut/apcupsd running.
@gjacobse said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
Installer for my fiber internet is here, hooray!
Whole new experience today. Goodbye DSL and cable!
Thanks
Another thing for me to run in Powershell.
Yep choco install speedtest. So much faster than loading an add laden website.
@travisdh1 said in What Are You Doing Right Now:
Installer for my fiber internet is here, hooray!
Whole new experience today. Goodbye DSL and cable!
Installer for my fiber internet is here, hooray!
@siringo said in What Are You Doing Right Now:
@nadnerB said in What Are You Doing Right Now:
@siringo that's pretty funny.
Going to cause all sorts of fun and games for them.Over here, all the public schools have a fibre connectionstandard. Not sure about the speed these days but they were all pretty well the same across the entire state.
No room for interesting alternative options like star link.I would expect that some of them or at least the private schools out in the sticksbare now on NBN Skymuster.
Sorry, I wasn't very clear. It's home accounts with Star Link, all schools have fibre straight into Telstra corporate connection or whatever it's called now.
I'm thinking of getting Star Link, just wondering if it causes a problem accessing ABC iVew and SBS On Demand etc???? I wouldn't think it does, or if it did, I reckon it'd be fixed by now.
Sounds like the normal fun and games with GeoIP databases. I'm in Ohio, but my GeoIP resolutions regularly show up in Canada and Mexico. I've even had a couple notable instances where it was showing up in India or China.
@siringo said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@siringo said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@siringo said in What Are You Doing Right Now:
@scottalanmiller said in What Are You Doing Right Now:
Just realized that 2024 will be TWENTY YEARS since IBM shed its Intel server and end point business (sold it to Lenovo.) It's been a full two decades and people still regularly mistake laptops as being IBM devices today. That's like 4-5 IT generations later.
Ha. Was thinking about this the other day. Wasn't one of the big things with that was that Lenovo were a Chinese company?
Oh, I'll never buy one of those.
Being a Chinese company has nothing to do with why I'd never touch Lenovo and recommend any company that has them immediately replace Lenovo gear.
Why is that my good man?
20 years ago it was because they were Chinese and nothing good ever comes out of China, well 20 years ago that was general mood.
They're still loading spyware via drivers. I'll grant that it's been around a year since I was forced to do a factory install to see it for myself, but at this point they've been so bad for so long they can't be trusted.
How do 'we' they're loading spyware in their drivers?
Do we know what the spyware does?
Superfish is still a thing.
https://mangolassi.it/topic/14538/lenovo-if-it-s-on-your-network-you-are-breached
@siringo said in What Are You Doing Right Now:
@travisdh1 said in What Are You Doing Right Now:
@siringo said in What Are You Doing Right Now:
@scottalanmiller said in What Are You Doing Right Now:
Just realized that 2024 will be TWENTY YEARS since IBM shed its Intel server and end point business (sold it to Lenovo.) It's been a full two decades and people still regularly mistake laptops as being IBM devices today. That's like 4-5 IT generations later.
Ha. Was thinking about this the other day. Wasn't one of the big things with that was that Lenovo were a Chinese company?
Oh, I'll never buy one of those.
Being a Chinese company has nothing to do with why I'd never touch Lenovo and recommend any company that has them immediately replace Lenovo gear.
Why is that my good man?
20 years ago it was because they were Chinese and nothing good ever comes out of China, well 20 years ago that was general mood.
They're still loading spyware via drivers. I'll grant that it's been around a year since I was forced to do a factory install to see it for myself, but at this point they've been so bad for so long they can't be trusted.
@siringo said in What Are You Doing Right Now:
@scottalanmiller said in What Are You Doing Right Now:
Just realized that 2024 will be TWENTY YEARS since IBM shed its Intel server and end point business (sold it to Lenovo.) It's been a full two decades and people still regularly mistake laptops as being IBM devices today. That's like 4-5 IT generations later.
Ha. Was thinking about this the other day. Wasn't one of the big things with that was that Lenovo were a Chinese company?
Oh, I'll never buy one of those.
Being a Chinese company has nothing to do with why I'd never touch Lenovo and recommend any company that has them immediately replace Lenovo gear.
@gjacobse said in ChromeOS vs Linux:
The topic of ChromeOS and Linux has come up once or twice I believe.
I'm trying to help my brother deal with his 'wants' and 'needs' with using and older laptop for what he wants to do with his streaming provider (some cable company that rarely gets positive comments).
So, I have ChromeOS running on a older HP laptop.. no big deal and easy to have setup. No different than starting with any other Linux based system.
And now I am sitting here at the terminal window and all the commands I would expect to work in Linux are not the same in ChromeOS.
Have I managed to mislead myself in believing that the two - while different - are in a basic manner, the same?
Seems I need to know a different command base to perform things I already do in Linux on the x86 and ARM platforms...
That's why I picked up an Intel based Chromebook when I got one. I can load Ubuntu on it and work the way I normally would.
I've got no useful experience with with the ChromeOS shell.
